Lucene search
+L

77072 matches found

Kitploit
Kitploit
added 2026/08/31 3:56 a.m.4 views

Blackash-CVE-2025-48593

🚨 CVE-2025-48593 Zero-Click Remote Code Execution in Android System 🚨 "A single malicious packet can own your device." — Android Security Team, Nov 2025 🎯 Vulnerability Snapshot Attribute| Details ---|--- CVE ID| CVE-2025-48593 Severity| 🔴 Critical RCE, Zero-Click CVSS Est.| 9.8 Pending NVD...

8.4CVSS7.3AI score0.00894EPSS
SaveExploits4
RedHat Linux
RedHat Linux
added 2026/08/31 3:46 a.m.5 views

iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion

A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread...

7.5CVSS6AI score0.00412EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/31 3:43 a.m.3 views

drupal-openai-provider-ssrf-cve-2026-13233

Drupal OpenAI Provider — 응답 URL을 통한 SSRF / 로컬 파일 읽기 CVE-2026-13233 신뢰할 수 없는 업스트림: 응답이 지시한 URL을 가져온fetch 프로바이더. Drupal OpenAI Provideraiprovideropenai · SSRFCWE-918 · CVE-2026-13233 · SA-CONTRIB-2026-053 상태: 조율된 공개 완료2026-07-10. Drupal 보안 팀에 비공개로 보고되었고, 수정 후 CVE-2026-13233 / 권고 SA-CONTRIB-2026-053...

3.3CVSS5.9AI score0.00208EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 3:40 a.m.7 views

CVE-2020-11890

Made by HK CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE Link https://developer.joomla.org/security-centre/810-20200402-core-missing-checks-for-the-root-usergroup-in-usergroup-table.html PoC Affected version: Joomla core...

5.3CVSS6.1AI score0.02761EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 3:35 a.m.4 views

CVE-2022-24086

CVE-2022-24086 CVE-2022-24086 about Magento RCE Description Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result i...

10CVSS7.5AI score0.99199EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/31 3:28 a.m.4 views

CVE-2024-48589

phpAbook 9.0i - Cross-Site Scripting XSS Vulnerability CVE-2024-48589 Summary: A Cross-Site Scripting XSS vulnerability was discovered in the rol parameter of index.php or the path section in the phpAbook application. This vulnerability allows an attacker to inject arbitrary JavaScript code into ...

6.3CVSS6AI score0.00601EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 3:21 a.m.5 views

CVE-2023-32692-CodeIgniter4

CVE-2023-32692 — CodeIgniter 4 Validation Rule Injection CVE-2023-32692 is a code injection vulnerability in the CodeIgniter 4 PHP framework, affecting versions 4.0.0 through 4.3.4. It was fixed in 4.3.5 released June 2023. This is a demo environment for anyone that wants to play with it...

9.8CVSS7.3AI score0.01126EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 3:05 a.m.3 views

CVE-2026-23744-poc

CVE-2026-23744 — mcpJam Remote Code Execution RCE Exploit A Python 3 proof-of-concept exploit for CVE-2026-23744 , an arbitrary command execution vulnerability affecting mcpJam v1.4.2. This utility automates payload delivery by transparently Base64-encoding commands before transmission, helping...

9.8CVSS6.3AI score0.45026EPSS
SaveExploits39
Kitploit
Kitploit
added 2026/08/31 3:04 a.m.4 views

CVE-2026-49777

CVE-2026-49777 CVE-2026-49777 - ShapedPlugin Product Slider Pro for WooCommerce Backdoor RCE Углублённый технический анализ: уязвимость бэкдора в Product Slider Pro Основа и причина уязвимости CWE-1284 Техническое происхождение уязвимости классифицируется как CWE-1284: «Некорректная проверка...

10CVSS5.8AI score0.01656EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/31 2:03 a.m.3 views

CVE-2026-27626-POC

CVE-2026-27626: OliveTin password-argument command injection OliveTin lets an admin define "actions": shell commands with parameterized arguments that users can trigger from a web UI or API. Before templating a user-supplied value into the shell command, OliveTin is supposed to run it through...

9.9CVSS7.2AI score0.00549EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 1:35 a.m.2 views

CVE-2025-65640

CVE-2025-65640 1. Vulnerability Information CVE ID: CVE-2025-65640 Currently RESERVED Vulnerability Type: Stored Cross-Site Scripting XSS CVSSv3 score: 6.3 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N Vendor: Arket/Bluenext S.r.l. Product: Globe Document Intelligence Affected Version: 5.0.0.559 Discoverer...

6.3CVSS6AI score0.00216EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 1:23 a.m.5 views

CVE-2026-3288

CVE-2026-3288: ingress-nginx Configuration Injection via rewrite-target Annotation Keywords: CVE-2026-3288, ingress-nginx vulnerability, Kubernetes security, nginx configuration injection, rewrite-target annotation, RCE, Secret disclosure, CWE-20, CAPEC-176, ingress-nginx CVE 2026, Kubernetes...

8.8CVSS7.2AI score0.063EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/31 1:11 a.m.6 views

ColdFusionPwn

ColdFusionPwn Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12. Description The tool allows you to generate serialized AMF-payloads to exploit the missing input validation of allowed classes. For details see our blog post. Install Get the latest version of ysoserial. Get...

10CVSS7.4AI score0.90597EPSS
SaveExploits6References2
Kitploit
Kitploit
added 2026/08/31 12:02 a.m.6 views

CVE-2020-10567

POC-CVE-2020-10567 RCE poc - RESPONSIVE filemanager v.9.14.0. not Main branche ⚠️ Github project : https://github.com/trippo/ResponsiveFilemanager Requirements: Nothing is required, this exploit is unauthenticated. The Responsive Filemanager application is a web-based file management tool used to...

9.8CVSS7.3AI score0.1964EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/08/30 11:14 p.m.30 views

ansvif

ansvif A Not So Very Intelligent Fuzzer Marshall Whittaker oxagast [email protected] As the complexity of a system rises, as does the potential for problems within that system. --Whittaker's Law Compile Dependancies: automake autoconf-archive zlib1g-dev g++ gcc and libgtk2.0-dev if you want...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/30 10:27 p.m.4 views

CVE-2021-21985_PoC

CVE-2021-21985 Vulnerable Code CLASS/METHODs available, a little sample for PoC purposes: com.vmware.vsan.client.services.capability.VsanCapabilityProvider root@kitploit: ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported...

10CVSS7.4AI score0.99999EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/08/30 10:04 p.m.4 views

CVE-2021-4045

CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all firmware versions prior to 1.1.16 Build 211209 Rel. 37726N due to insufficient checks on user input in uhttpd, which is one of the main binaries of...

10CVSS7.4AI score0.72376EPSS
SaveExploits11References2
NVD
NVD
added 2026/08/30 7:17 p.m.7 views

CVE-2026-81633

Improper Input Validation vulnerability in ash-project ashgraphql allows an unauthenticated client to crash a relay nodeid: ... query with an unhandled KeyError. AshGraphql.Graphql.Resolver.resolvenode/2 decodes the client-supplied global ID with decoderelayid/1, which only base64-decodes the...

6.9CVSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/30 6:45 p.m.3 views

Hipcam-RTSP-Format-Validation-Vulnerability

Hipcam RealServer/V1.0 RTSP Format Validation Vulnerability Proof-of-Concept | CVE-2023-50685 Proof-of-Concept for RTSP Service Format Validation Vulnerability in Hipcam RealServer/V1.0. Description This POC exploits a format validation vulnerability in the Real Time Streaming Protocol RTSP servi...

7.5CVSS5.8AI score0.01219EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/08/30 6:22 p.m.22 views

CVE-2026-81633 Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment

Improper Input Validation vulnerability in ash-project ashgraphql allows an unauthenticated client to crash a relay nodeid: ... query with an unhandled KeyError. AshGraphql.Graphql.Resolver.resolvenode/2 decodes the client-supplied global ID with decoderelayid/1, which only base64-decodes the...

6.9CVSS
SaveExploits0References4
Rows per page
Query Builder