Lucene search
+L

7833 matches found

Kitploit
Kitploit
added 2026/09/13 10:30 a.m.4 views

exploit-CVE-2021-22204

Exploit for CVE-2021-22204 ExifTool - Arbitrary Code Execution Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description Improper neutralization of user data in the DjVu file format in...

7.8CVSS7.6AI score0.99981EPSS
SaveExploits38References2
Kitploit
Kitploit
added 2026/09/13 8:58 a.m.7 views

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

7.8CVSS7.6AI score0.0146EPSS
SaveExploits17References1
Kitploit
Kitploit
added 2026/09/13 5:57 a.m.8 views

CVE-2022-24086

CVE-2022-24086 CVE-2022-24086 acerca de Magento RCE Descripción Las versiones 2.4.3-p1 y anteriores y 2.3.7-p2 y anteriores de Adobe Commerce están afectadas por una vulnerabilidad de validación de entrada incorrecta durante el proceso de pago. La explotación de este problema no requiere...

10CVSS8.4AI score0.99199EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 12:16 a.m.11 views

cve-2022-44268

CVE-2022-44268 ImageMagick es un paquete de software multiplataforma gratuito y de código abierto para visualizar, convertir y editar imágenes rasterizadas y vectoriales. Puede leer y escribir más de 200 formatos de archivo de imagen. ImageMagick está bajo la licencia Apache 2.0. Está disponible...

6.5CVSS7.5AI score0.89855EPSS
SaveExploits31
Kitploit
Kitploit
added 2026/09/12 11:41 p.m.8 views

CVE-2025-34157

Stored XSS in Coolify delete flow CVE-2025-34157 Affects: Coolify ≤ v4.0.0-beta.420.6 Fixed in: v4.0.0-beta.420.7 Severity: Critical 9.4 CVSS 4.0 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE: CWE-79 Cross-Site Scripting, CWE-20 Improper Input Validation Summary A...

9.4CVSS5.8AI score0.00451EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 8:33 p.m.7 views

CVE-2025-47812

CVE-2025-47812 Improper input validation led to Remote Code Execution to full system compromise 📘 Introduction: Julien Ahrens from RCE Security discovered a critical security vulnerability impacting WingFTP. Tracked as CVE-2025-47812, the vulnerability has a CVSS score of 10. Successful...

10CVSS8.6AI score0.92862EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/09/12 2:04 p.m.9 views

CVE-2020-11890

Hecho por HK CVE-2020-11890: Las validaciones de entrada inadecuadas en la clase de la tabla de grupos de usuarios podrían provocar una configuración de ACL rota que conduzca a RCE Enlace...

5.3CVSS6AI score0.02761EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 12:57 p.m.6 views

zimbramail-CVE-2025-68645-poc

zimbramail-CVE-2025-68645-poc Una prueba de concepto que explota una vulnerabilidad de inclusión de archivos locales LFI existente en la interfaz de usuario clásica de Webmail de Zimbra Collaboration ZCS 10.0 y 10.1 debido al manejo inadecuado de los parámetros de solicitud proporcionados por el...

8.8CVSS8.1AI score0.49374EPSS
SaveExploits6References2
Kitploit
Kitploit
added 2026/09/12 12:44 p.m.10 views

CVE-2025-24963

CVE-2025-24963 - Modo Navegador de Vitest - Lectura de Archivos Locales CVE-2025-24963 es una vulnerabilidad de severidad media puntuación CVSS 3.1: 5.9 que afecta al paquete @vitest/browser, un componente del marco de pruebas Vitest impulsado por Vite. Esta vulnerabilidad surge de una validación...

7.5CVSS6.7AI score0.02403EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 11:10 a.m.10 views

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

7.8CVSS7.6AI score0.0146EPSS
SaveExploits17References1
Kitploit
Kitploit
added 2026/09/12 11:01 a.m.7 views

CVE-2022-24086-RCE-PoC

CVE-2022-24086 RCE POC About CVE-2022-24086 which Adobe saw being “exploited in the wild in very limited attacks” received a severity score of 9.8 out of 10, and adversaries exploiting it can achieve remote code execution on affected systems without the need to authenticate. Issue that is now...

10CVSS8.7AI score0.99199EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/12 10:57 a.m.4 views

CVE-2025-20281-Cisco

CVE-2025-20281 - Cisco ISE RCE Vulnerability Checker This script checks for the presence of the CVE-2025-20281 vulnerability in Cisco Identity Services Engine ISE and ISE-PIC, which allows unauthenticated remote code execution RCE as root due to insufficient input validation in a specific API. Th...

10CVSS8.4AI score0.97093EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/12 7:10 a.m.4 views

CVE-2024-46635

CVE-2024-46635 Antecedentes El sistema GongZhiDao es una plataforma desarrollada por GongZhiDao. Proporciona soluciones empresariales que incluyen gestión de usuarios, análisis de datos y funcionalidades operativas. Sin embargo, se descubrió una vulnerabilidad de seguridad en uno de los endpoints...

5.9CVSS5.9AI score0.00256EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 6:36 a.m.7 views

boa-cve-2009-4496-analysis

CVE-2009-4496 — Defensive Vulnerability Analysis Overview This repository documents a defensive analysis of CVE-2009-4496 , a historical vulnerability associated with the Boa web server. The objective of this project is to examine the vulnerability from a defensive security perspective through:...

5CVSS8.2AI score0.12078EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/11 10:58 p.m.5 views

nate158g-m-w-n-l-p-d-a-o-e

nate158g-m-w-n-l-p-d-a-o-e Este módulo requiere Metasploit: https://metasploit.com/download Código fuente actual: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Wordpress Popular Posts Authenticated RCE', 'Description' = %q Este exploit requiere que Metasploit tenga un FQD...

8.8CVSS7.8AI score0.79823EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/11 5:50 p.m.5 views

CVE-2026-65891

CVE-2026-65891 — Joomla JCE Rename PoC Proof-of-concept scanner for CVE-2026-65891 in the Joomla Content Editor JCE extension. Improper input validation in the JCE file manager rename function allows an authenticated user with file-management permissions to: create hidden files dot-prefixed names...

6.5CVSS6.7AI score0.00254EPSS
SaveExploits1
EUVD
EUVD
added 2026/09/11 2:29 a.m.7 views

EUVD-2026-75923

Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulnerability in Brainzcompany Zenius EMS 8.0 allows Remote Code Inclusion. This issue affects Zenius EMS 8.0: through OAM Build 109...

8.7CVSS0.002EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/09/10 11:22 p.m.6 views

org.apache.activemq/activemq: org.apache.activemq/activemq-all: org.apache.activemq/activemq-stomp: Apache ActiveMQ: Denial of Service via improper input validation in STOMP connector

A flaw was found in Apache ActiveMQ. A remote, unauthenticated attacker can exploit an improper input validation vulnerability by sending a specially crafted message with a negative content-length to an exposed STOMP connector. This can lead to a denial of service DoS condition, either by consumi...

7.5CVSS0.00785EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/10 7:56 p.m.7 views

CVE-2026-0848

CVE-2026-0848 — NLTK StanfordSegmenter: Arbitrary Code Execution via Untrusted JAR Loading -red?style=for-the-badge -brightgreen?style=for-the-badge Overview...

10CVSS8.7AI score0.00809EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/10 3:03 p.m.8 views

CVE-2025-60012-POC

Solo para fines educativos y de investigación en seguridad. No lo utilice contra sistemas que no posea o para los que no tenga permiso explícito por escrito. →Descargo de responsabilidad completo CVE-2025-60012 — Acceso no autorizado a archivos en Apache Livy -yellow Resumen...

6.3CVSS5.8AI score0.00488EPSS
SaveExploits1
Rows per page
Query Builder