Lucene search
+L

6103 matches found

Kitploit
Kitploit
added 2026/09/08 9:57 p.m.6 views

CVE-2023-38545-libcurl-SOCKS5-heap-buffer-overflow

Disclaimer This article is intended solely for technical discussion and learning. Any direct or indirect consequences or losses caused by the use of the information provided herein shall be borne solely by the user. The author assumes no responsibility for such consequences or losses...

9.8CVSS7.2AI score0.78483EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/08 8:45 p.m.5 views

CVE-2025-32462-

CVE-2025-32462 – Sudo Hostname Bypass Privilege Escalation Table of Contents 1. Overview 2. Vulnerability Details 3. Impact 4. Lab Environment 5. Verification of Vulnerable Version 6. User & sudoers Configuration 7. Exploitation Walkthrough 8. Proof of Concept Summary 9. Why Ubuntu Is Not...

8.8CVSS7AI score0.0428EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/08 6:38 p.m.4 views

Zoho_CVE-2022-23779

ZohoCVE-2022-23779 Internal Hostname Disclosure Vulnerability Proof-of-Concept Exploit Step 1: curl -ILk https://IP:port/themes Step 2: Read the HTTP redirect response and anaylze the Location HTTP response header. PoC Follow us Vulnmachines Platform YouTube Twitter Facebook LinkedIn...

5.3CVSS6AI score0.1514EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/08 6:32 p.m.25 views

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

5.7AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/09/08 6:13 p.m.4 views

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

9.6CVSS5.8AI score0.00692EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/08 4:50 p.m.6 views

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts es un scraper web de Bing.com para descubrir nombres de host por dirección IP. Descripción Bing-ip2hosts es un scraper web de Bing.com que descubre nombres de host por dirección IP. Bing es el motor de búsqueda insignia de Microsoft, anteriormente conocido como MSN...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/08 4:30 p.m.9 views

CVE-2024-29671-POC

NEXTU FLETA Wifi6 Router RCE Exploit POC This document describes how the CVE-2024-29671 vulnerability was exploited in the NEXTU FLATA AX1500 Router firmware. Execution Environment This router is based on the MIPS architecture using the Realtek chipset with Little-Endian. The target router firmwa...

9.8CVSS6.2AI score0.2091EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2026/09/08 12:18 p.m.3 views

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

9.6CVSS5.8AI score0.00692EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/08 12:08 p.m.5 views

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

9.6CVSS5.8AI score0.00692EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/08 10:29 a.m.6 views

CVE-2026-34207

CVE-2026-34207 The SSRF filter checked hostname text, but the actual destination was decided later by DNS. That gap let attacker-controlled Webhook URLs reach loopback, metadata, and private network targets. Intro I found this issue while reviewing Typebot , an open-source chatbot builder, with a...

7.6CVSS5.9AI score0.00239EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/08 6:05 a.m.7 views

CVE-2018-19518

CVE-2018-19518 último informe aquí: https://gitlab.com/ensimag-security/CVE-2018-19518/-/jobs/artifacts/master/raw/rapport.pdf?job=PDF Uso ejecutar la aplicación root@kitploit: docker-compose up -d ejemplo de uso normal para la aplicación web. imap : webmail.grenoble-inp.org user :...

8.5CVSS6.9AI score0.9523EPSS
SaveExploits5References1
NVD
NVD
added 2026/09/07 11:17 a.m.4 views

CVE-2026-86295

A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...

8.3CVSS0.01722EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/07 10:15 a.m.32 views

CVE-2026-86295 D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection

A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...

8.3CVSS0.01722EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/07 10:15 a.m.18 views

CVE-2026-86295

A command injection vulnerability in D-Link DIR-895L (firmware A1_102b07) affects the sendACK function in the udhcpcd/serverpacket.c component. Manipulation of the Hostname argument allows remote, unauthenticated attackers to inject commands, with a CVSS 3.1 base score of 8.3 (HIGH) . A proof-of-...

8.3CVSS0.01722EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/07 10:15 a.m.6 views

EUVD-2026-72334

A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...

8.3CVSS0.01722EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/06 10:54 p.m.2 views

CVE-2026-78850

Matomo Authenticated SiteContentDetector Blind SSRF Reporter Name: CYBER-SEC Contact: [email protected] Summary Matomo allows an authenticated site administrator to configure a site's mainurl with an internal address. Any authenticated user with view access can later trigger...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/06 2:18 a.m.4 views

cve-2026-54316-lab

CVE-2026-54316 — Claude Code WebFetch HuggingFace exfiltration lab A self-contained, disposable lab that reproduces GHSA-fg94-h982-f3mm / CVE-2026-54316: Claude Code pre-approved huggingface.co as a bare hostname for the WebFetch tool, so any path on that domain — including attacker-controlled...

9.1CVSS6.2AI score0.00466EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/05 9:44 a.m.6 views

CVE-2025-46408

CVE-2025-46408 Improper Hostname Verification in EagleEyes Lite Android Application 1. Overview Name : EagleEyesLite Version : 2.0.0 Vendor : AVTECH CWE : CWE-297: Improper Validation of Certificate with Host Mismatch CVSS : 9.8 CRITICAL Vector String : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...

9.8CVSS6AI score0.00655EPSS
SaveExploits3References3
Kitploit
Kitploit
added 2026/09/04 5:00 p.m.5 views

TP-Link-Archer-CR-700-XSS-Exploit

TP-Link-Archer-CR-700-XSS-Exploit Exploiting TP-Link Archer CR-700 Router. Responsibly Disclosed to TP-Link Step 1- On you linux machine Kali or Ubuntu type the following command gedit /etc/dhcp/dhclient.conf Comment out the line below send host-name = gethostname; Copy it to the line below it an...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 12:47 a.m.6 views

hide-me

Mac and hostname random changer hide-me Every time I was trying to do an Network Penetration Testing, I needed to do some steps to make sure I was hidden, put my interface down, change my mac address, change my hostname, putting interface back up, and restarting network-manager service, and when...

6AI score
SaveExploits0
Rows per page
Query Builder