Lucene search
+L

479399 matches found

EUVD
EUVD
added 2026/08/29 12:30 a.m.7 views

EUVD-2026-66220

Kimai versions before 2.56.0 fail to restrict the config Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind...

8.7CVSS5.6AI score0.00335EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/29 12:21 a.m.3 views

CVE-2026-36356

CVE-2026-36356: MeiG Smart FORGESLT711 GoAhead — Iniezione di comandi del sistema operativo non autenticata /action/SetRemoteAccessCfg CVE : CVE-2026-36356 CWE : CWE-78, CWE-306 Scopritore : Daniil Gordeev Divulgato : 2026-05-03 Riepilogo Il server web GoAhead incluso nei dispositivi CPE 4G LTE...

9.1CVSS6.1AI score0.13549EPSS
SaveExploits3
OPENSUSE Linux
OPENSUSE Linux
added 2026/08/29 12:00 a.m.5 views

Security update for broot (moderate)

openSUSE security update: security update for broot ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21675-1 Rating: moderate References: bsc1275994 Cross-References: CVE-2026-72847 CVSS scores: CVE-2026-72847 SUSE : 4.6...

4.6CVSS6AI score0.00103EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/29 12:00 a.m.7 views

PT-2026-83499

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A security flaw allows remote attackers to perform SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. The issue exists in the...

6.5CVSS6.7AI score
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/08/29 12:00 a.m.6 views

PT-2026-83498

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A SQL injection issue exists due to improper processing of the /pages/emp edit.php endpoint. A remote attacker can exploit this by manipulating the ID argument to execute...

6.5CVSS6.8AI score
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/08/29 12:00 a.m.8 views

PT-2026-83501

Name of the Vulnerable Software and Affected Versions PHPGurukul Student Information System version 1.0 Description An issue exists in the /student edit1.php file where manipulating the ID argument allows for remote SQL injection. SQL injection is a technique where malicious SQL statements are...

6.5CVSS6.7AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/08/28 11:47 p.m.3 views

socgholish_finder

SocGholish Finder Semplice script per scansionare siti web alla ricerca di inject SocGholish. Controlla e mostra l'inject se trovato, e deoffusca e mostra i domini URL shadow. root@kitploit: usage: finder.py -h -url URL -ua USERAGENT -f FILENAME -p PROXY -s SocGholish finder options: -h, --help...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 11:44 p.m.29 views

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/28 11:39 p.m.40 views

frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...

6.7AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/28 11:36 p.m.2 views

lab-cve-2025-57819

Lavori in corso FreePBX CVE-2025-57819 Lab - SQLi non autenticata → Catena RCE Nuclei POC Avvia un laboratorio FreePBX 15 riproducibile Docker per validare CVE-2025-57819 — una critica SQL injection non autenticata negli endpoint AJAX di userman che può essere concatenata per ottenere RCE. Includ...

10CVSS7.4AI score0.88269EPSS
SaveExploits28
OSV
OSV
added 2026/08/28 11:13 p.m.4 views

MAL-2026-15524 Malicious code in tabbables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc629ecaf81d15034bbba33363e63776d106e6f58932e889baa4cb748b689eb package.json at line 11 declares a dependency whose key equals the package's own name tabbables and whose value is the raw HTTPS URL...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/28 11:04 p.m.3 views

CVE-2023-27372

Exploit CVE-2023-27372 Exploit per CVE-2023-27372 , una vulnerabilità di esecuzione remota di codice non autenticata nel CMS SPIP che interessa le versioni precedenti alla 4.2.1. ⚠️ Solo a scopo educativo. Utilizzare esclusivamente su sistemi di propria proprietà o per i quali si dispone di...

9.8CVSS7.2AI score0.99682EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/08/28 10:59 p.m.4 views

Metabase-Setup-Endpoint-SQLi-Fix

CVE-2026-72898: SQLi-Patch für den Metabase-Setup-Endpunkt Dieses Repository enthält den Hotfix für CVE-2026-72898 , eine nicht authentifizierte SQL-Injection-Schwachstelle im Setup-Endpunkt von selbst gehosteten Metabase-Instanzen. Ohne den Patch können Angreifer die Validierung des Setup-Tokens...

10CVSS7.4AI score0.79215EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/28 10:57 p.m.3 views

CVE-2025-50881

CVE-2025-50881: Esecuzione di Codice Remoto in API Use it Flow tramite moniteur.php Identificativo: CVE-2025-50881 Prodotto Affetto: API Use it Flow Versione 8.2.0 Rev 15851, Versione 9.2.0 Rev 18093 Editore: https://www.tenorsolutions.com precedentemente https://api-sas.fr/ Componentei Affettoi:...

8.8CVSS5.9AI score0.0061EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 10:51 p.m.4 views

PoC-CVE-2025-62222

PoC: CVE-2025-62222 - GitHub Copilot Chat RCE Dieses Repository enthält einen Proof of Concept PoC für die Schwachstelle CVE-2025-62222. Es zeigt, wie eine Remote Code Execution RCE auf dem Rechner eines Entwicklers erreicht werden kann, indem der Kontext von GitHub Copilot Chat in VS Code durch...

8.8CVSS6.7AI score0.00749EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 10:50 p.m.2 views

CVE-2022-36804-Bitbucket-RCE-Analysis

CVE-2022-36804: Bitbucket Remote Command Execution RCE Analisi Tecnica & Sfruttamento in Laboratorio dell'Argument Injection tramite Null-Byte Riepilogo della Vulnerabilità CVE-2022-36804 è una vulnerabilità di Argument Injection ad alta gravità/critica all'interno dell'API REST di Atlassian...

8.8CVSS7.4AI score0.99077EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/08/28 10:49 p.m.4 views

CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC

ZoneMinder Time-Based SQL Injection CVE-2024-51482 📌 Panoramica della vulnerabilità CVE ID: CVE-2024-51482 Avviso di sicurezza: GHSA-qm8h-3xvf-m7j3 Versioni interessate: ZoneMinder 1.37. fino alla 1.37.64 inclusa Versione corretta: 1.37.65 📖 Descrizione Questo repository contiene un exploit...

9.9CVSS7.3AI score0.34979EPSS
SaveExploits8References1
Kitploit
Kitploit
added 2026/08/28 10:49 p.m.3 views

CVE-2024-11003-POC

CVE-2024-11003-POC Beschreibung Qualys entdeckte, dass needrestart vor Version 3.8 unsanitisierte Daten an eine Bibliothek Modules::ScanDeps übergibt, die sichere Eingaben erwartet. Dies könnte es einem lokalen Angreifer ermöglichen, beliebige Shell-Befehle auszuführen. Siehe auch die zugehörige...

7.8CVSS7.3AI score0.11468EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/28 10:48 p.m.3 views

CVE-2025-66034

CVE-2025-66034 — fontTools varLib Scrittura Arbitraria di File → RCE PoC exploit per una vulnerabilità di Scrittura Arbitraria di File + Iniezione XML infontTools.varLib Testato su HackTheBox — VarIaType Vulnerabilità fontTools.varLib elabora file XML .designspace per creare font variabili. Due...

9.8CVSS7.1AI score0.00547EPSS
SaveExploits9
OSV
OSV
added 2026/08/28 10:47 p.m.4 views

GHSA-XVR9-35CR-46V9 org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context

Summary The connector encodes and decodes all character data assuming the connection character set is UTF-8. A server can change charactersetclient mid-session to a non-UTF-8 charset, after which the driver and server interpret the same bytes under different encodings, causing silent data...

5.9CVSS5.9AI score0.00344EPSS
SaveExploits0References11
Rows per page
Query Builder