Lucene search
+L

27845 matches found

CVE
CVE
added 2026/09/13 10:45 a.m.4 views

CVE-2026-90773

procs through 0.14.12 is vulnerable to terminal escape sequence injection via its Command column. The tool fails to sanitize ANSI or OSC escape sequences embedded in process command-line arguments before rendering them, allowing a local attacker with low privileges to craft a process whose comman...

3.2CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 6:35 a.m.7 views

CVE-2023-44765_ConcreteCMS-Stored-XSS---Associations

ConcreteCMS XSS v2.2.18 Autor: Sergio Descripción: La vulnerabilidad de Cross Site Scripting en ConcreteCMS v.9.2.1 permite a un atacante local ejecutar código arbitrario mediante un script manipulado en el Plural Handle de los Data Objects de System & Settings. Vectores de Ataque: Scripting: Una...

5.4CVSS6.1AI score0.00559EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 4:49 a.m.5 views

CVE-2023-43354-CMSmadesimple-Stored-XSS---MicroTIny-extension

CMSmadesimple XSS Almacenado v2.2.18 Autor: Sergio Descripción: La vulnerabilidad de Cross Site Scripting en CMSmadesimple v.2.2.18 permite a un atacante local ejecutar código arbitrario mediante un script manipulado en los perfiles del editor Extensions - MicroTiny WYSIWYG. Vectores de ataque:...

5.4CVSS6.1AI score0.00461EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 3:46 a.m.7 views

CVE-2025-47181

CVE-2025-47181 Concept: Microsoft Edge Link Following Privilege Escalation Project Overview This repository presents the CVE-2025-47181 Concept , a Python program designed to illustrate the mechanism and impact of CVE-2025-47181. This is a Privilege Escalation vulnerability in Microsoft Edge...

8.8CVSS7.9AI score0.00563EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 3:40 a.m.7 views

CVE-2021-3560

Polkit D-Bus Authentication Bypass Exploit A vulnerability exists within the polkit system service that can be leveraged by a local, unprivileged attacker to perform privileged operations. In order to leverage the vulnerability, the attacker invokes a method over D-Bus and kills the client proces...

7.8CVSS7.8AI score0.22193EPSS
SaveExploits37
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.109 views

Smart s200 Management Platform v.S200 - SQL Injection

SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain sensitive information and escalate privileges via the /importexport.php component. id: CVE-2024-27718 info: name: Smart s200 Management Platform v.S200 - SQL Injection author:...

7.8CVSS5.8AI score0.01101EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 11:48 p.m.5 views

CVE-2021-3560

CVE-2021-3560 - Escalada de Privilegios Local de Polkit ⚠️ Solo con fines educativos y de investigación de seguridad autorizada Autores del Exploit Original Muy agradecidos al autor original del PoC @UNICORDev por @NicPWNs y @Dev-Yeoj Descripción Se descubrió que se podía engañar a polkit para que...

7.8CVSS7.7AI score0.22193EPSS
SaveExploits37References4
Kitploit
Kitploit
added 2026/09/12 9:45 p.m.11 views

CoD-MW-Warzone-2---CVE-2023-38821

CoD-MW-Warzone-2 - CVE-2023-38821 DLL Planting en CoD MW Warzone 2 - CVE-2023-38821 Descubridor: Idan Malihi Descripción Un problema en Activision Call of Duty Modern Warfare: Warzone v.2 permite a un atacante local ejecutar código arbitrario a través de un archivo manipulado dirigido a los...

6.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 8:35 p.m.7 views

CVE-2023-43357-CMSmadesimple-Stored-XSS---Shortcut

CMSmadesimple XSS Almacenado v2.2.18 Autor: Sergio Descripción: Vulnerabilidad de Cross Site Scripting en CMSmadesimple v.2.2.18 que permite a un atacante local ejecutar código arbitrario mediante un script manipulado en el campo Title en My Preferences - Manage Shortcuts Vectores de Ataque:...

5.4CVSS6.1AI score0.00461EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 8:17 p.m.6 views

CVE-2024-22734

CVE-2024-22734 Exploit PoC for CVE-2024-22734 This repository contains the exploit source Proof of Concept PoC for CVE-2024-22734 , a vulnerability discovered by Bryan Smith of Redline Cyber Security. For detailed information about the vulnerability, please refer to our blog post: CVE-2024-22734:...

6.2CVSS5.9AI score0.00728EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 8:15 p.m.5 views

CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension

CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Top Directory in the File Picker Menu. Attack Vectors: Scripting A vulnerability in the...

5.4CVSS6.1AI score0.00544EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 8:15 p.m.7 views

CVE-2023-43353-CMSmadesimple-Stored-XSS---News---Extra

CMSmadesimple XSS Almacenado v2.2.18 Autor: Sergio Descripción: La vulnerabilidad de Cross Site Scripting en CMSmadesimple v.2.2.18 permite a un atacante local ejecutar código arbitrario mediante un script manipulado en el campo Extra del menú Content - News. Vectores de ataque: Una vulnerabilida...

5.4CVSS6.1AI score0.00473EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 7:51 p.m.7 views

CVE-2023-44762_ConcreteCMS-Reflected-XSS---Tags

ConcreteCMS XSS Reflejado v.9.2.1 Autor: Sergio Descripción: La vulnerabilidad de Cross Site Scripting en ConcreteCMS v.9.2.1 permite a un atacante local ejecutar código arbitrario mediante un script manipulado en las Etiquetas desde Configuración - Etiquetas. Vectores de Ataque: La explotación d...

5.4CVSS6AI score0.0059EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 7:29 p.m.11 views

Windows-WinSock-UAF-Mitigation

CVE-2026-68820: Windows WinSock afd.sys UAF Mitigation This repository contains a conceptual patch demonstrating the mitigation for CVE-2026-68820 , a critical Use-After-Free UAF vulnerability in the Windows Ancillary Function Driver for WinSock afd.sys. Active exploitation of this flaw allows a...

7CVSS7.6AI score0.06184EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/12 5:32 p.m.4 views

CVE-2023-43342-Quick-CMS-Stored-XSS---Languages-Frontend

Quick CMS XSS Almacenado v6.7 Autor: Sergio Descripción: Una vulnerabilidad de Cross-Site Scripting XSS en Quick CMS v6.7 permite a un atacante local ejecutar código arbitrario mediante un script manipulado en el Frontend y backend - Páginas en el Menú de Idiomas. Vectores de ataque: Scripting. U...

5.4CVSS6.1AI score0.00486EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 4:41 p.m.7 views

CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection-

Evolution CMS XSS Reflejado v3.2.3 Autor: Sergio Descripción: Una vulnerabilidad de cross-site scripting XSS reflejado en el proceso de conexión de la instalación de Evolution v.3.2.3 permite a un atacante local ejecutar scripts web arbitrarios mediante un payload manipulado inyectado en el...

6.1CVSS6.5AI score0.00588EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 10:34 a.m.4 views

CVE-2025-27591-below-

CVE-2025-27591 – Escalada de privilegios en Below 1 Introducción Below es una herramienta de Linux para registrar y mostrar datos del sistema como uso de hardware y métricas de cgroups. En versiones anteriores a v0.9.0 , el servicio systemd de Below se ejecuta con privilegios de root y crea...

6.8CVSS7.1AI score0.00364EPSS
SaveExploits23References1
Kitploit
Kitploit
added 2026/09/12 9:11 a.m.5 views

CVE-2023-41717

CVE-2023-41717 Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions. Executive Summary During the summer of 2022, I have found a vulnerability affecting the ZScaler proxy versions 3.6.1.25 and prior. This...

5.5CVSS6AI score0.00382EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 8:41 a.m.5 views

CVE-2023-43874-e107-CMS-Stored-XSS---MetaCustomTags

e107 CMS XSS Almacenado v2.3.2 Autor: Sergio Descripción: Múltiples vulnerabilidades de Cross Site Scripting XSS en e107 CMS v.2.3.2 permiten a un atacante local ejecutar código arbitrario a través de un script manipulado en los campos Copyright y Author del menú Meta & Custom Tags. Vectores de...

5.4CVSS6.1AI score0.00628EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 8:12 a.m.3 views

exploit-CVE-2021-3560

Exploit for CVE-2021-3560 Polkit - Local Privilege Escalation Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description It was found that polkit could be tricked into bypassing the...

7.8CVSS7.9AI score0.22193EPSS
SaveExploits37References5
Rows per page
Query Builder