Lucene search
+L

1311 matches found

Kitploit
Kitploit
•added 2026/09/25 1:52 p.m.•15 views

CVE-2021-41773

CVE-2021-41773 Playground Esta es una pequeña receta Docker para configurar un contenedor basado en Debian bookworm con una instancia de Apache HTTPd 2.4.49 vulnerable a CVE-2021-41773. CGI se ha habilitado explícitamente para que pueda usarse para probar/verificar el comportamiento de divulgació...

9.8CVSS8.4AI score0.99992EPSS
SaveExploits167
Kitploit
Kitploit
•added 2026/09/25 3:44 a.m.•14 views

CVE-2017-10617

CVE-2017-10616 & CVE-2017-10617 Estas dos vulnerabilidades afectan a Juniper Contrail versiones 2.2, 3.0, 3.1 y 3.2: Credenciales codificadas CVE-2017-10616 Entidad Externa XML CVE-2017-10617 El boletín de seguridad del fabricante se puede encontrar en Juniper Security Alert JSA10819 2017-10. El...

6.4CVSS6.2AI score0.02278EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/25 3:09 a.m.•197 views

CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment

CVE-2022-44268 Lectura Arbitraria de Archivos Locales de ImageMagick https://www.metabaseq.com/imagemagick-zero-days/ Basado en el PoC CVE-2022-44268 ImageMagick Arbitrary File Read PoC, creé un entorno de prueba de vulnerabilidades usando docker. Uso root@kitploit: get image docker pull...

6.5CVSS7.7AI score0.89855EPSS
SaveExploits28References1
Kitploit
Kitploit
•added 2026/09/25 2:30 a.m.•12 views

CVE-2025-12137

1 Funcion auxiliar para llamar a la API REST del plugin con el nonce actual root@kitploit: async function iwpFetchpath, method='GET', body const nonce = window?.wpApiSettings?.nonce || jQuery?.ajaxSettings?.headers?.'X-WP-Nonce'; const res = await...

4.9CVSS5.9AI score0.00441EPSS
SaveExploits0
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•55 views

Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure. id: CVE-2022-38840 info: name: Güralp MAN-EAM-0003 3.2.4 - XML External Entity XXE author: daffainfo severity: high description: |...

7.5CVSS7.3AI score0.09803EPSS
SaveExploits4References2
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•15 views

Gotenberg < 8.34.0 - Local File Disclosure

Gotenberg before 8.34.0 allows SSRF and limited local file disclosure via its /forms/libreoffice/convert endpoint. When LibreOffice is used to convert user-uploaded DOCX files, external relationships within the document such as a:blip r:link TargetMode="External" can instruct LibreOffice to fetch...

7.5CVSS8.2AI score0.01514EPSS
SaveExploits0References3
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•175 views

Adobe Connect < 12.1.5 - Local File Disclosure

Adobe Connect versions 11.4.5 and earlier, 12.1.5 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not...

5.3CVSS5.9AI score0.83406EPSS
SaveExploits5References4
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•110 views

Cellinx NVT Web Server - Local File Disclosure

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi. id: CVE-2023-23063 info: name: Cellinx NVT Web Server - Local File Disclosure author: daffainfo severity: high description: | Cellinx NVT v1.0.6.002b was discover...

7.5CVSS7.1AI score0.02431EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/09/24 7:09 p.m.•9 views

CVE-2026-9335-keras-hdf5-externallink

CVE-2026-9335 — Divulgación de contenido de archivos locales HDF5 mediante ExternalLink en Keras Dos APIs públicas de Keras — keras.saving.KerasFileEditor y keras.saving.loadweights / — leen miembros de grupos HDF5 mediante sin verificar el tipo de enlace. h5py / al indexar, por lo que un archivo...

6.5CVSS6.9AI score0.00767EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 5:48 p.m.•20 views

CVE-2026-61741

The http4s-scala-xml library is vulnerable to XML External Entity (XXE) attacks in versions prior to 0.24.1 and 1.0.0-M39 . The root cause is the use of SAXParserFactory.newInstance to obtain a javax.xml.parsers.SAXParserFactory without any security configuration, allowing the parser to resolve D...

9.3CVSS5.7AI score0.00294EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/24 5:48 p.m.•36 views

CVE-2026-61741 http4s-scala-xml has an XML External Entity (XXE) processing issue

http4s-scala-xml provides EntityDecoderF, scala.xml.Elem instances that parse XML message bodies. Prior to versions 0.24.1 and 1.0.0-M39, these decoders used a javax.xml.parsers.SAXParserFactory obtained from SAXParserFactory.newInstance without any security configuration. With the JDK's default...

9.3CVSS0.00294EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/24 5:05 p.m.•9 views

CVE-2026-30039

CVE-2026-30039 Materiales de aviso de seguridad para CVE-2026-30039, un problema de extracción de archivos basado en enlaces simbólicos en rarfile que afecta a las versiones 4.2 y anteriores. Aviso en inglés | 中文版本 Resumen rarfile extrae enlaces simbólicos de archivos RAR controlados por el...

5.9AI score
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2026/09/24 2:58 p.m.•7 views

Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files

Summary HTTPSession mounts a FileAdapter for the file:// scheme and inherits redirect handling unchanged from requests.Session. requests does not check for scheme downgrades or cross-protocol transitions when it follows a redirect, so any https request Streamlink makes can be redirected by the...

6.5CVSS5.8AI score0.00267EPSS
SaveExploits0References5Affected Software1
Kitploit
Kitploit
•added 2026/09/24 2:03 p.m.•11 views

CVE-2022-0219

CVE-2022-0219 Jadx es vulnerable a una restricción inadecuada de entidades externas XML CWE-611 al exportar a gradle un archivo APK malicioso mediante la opción -e que contenga un AndroidManifest.xml / strings.xml manipulado. Puede provocar la divulgación de archivos locales cuando se utiliza des...

5.5CVSS6.2AI score0.01054EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/24 12:02 p.m.•9 views

exploit-CVE-2019-14530

Exploit para OpenEMR CVE-2019-14530 OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the file to be read Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples: exploit.rb...

8.8CVSS8.1AI score0.65529EPSS
SaveExploits11
Kitploit
Kitploit
•added 2026/09/24 8:21 a.m.•11 views

CVE-2024-58258

CVE‑2024‑58258 – SugarCRM SSRF y Divulgación de Archivos Locales Acerca de Este repositorio proporciona una prueba de concepto para CVE‑2024‑58258 , una vulnerabilidad de SugarCRM 13.0.4 / 14.0.1 en la que la entrada del usuario se interpreta como LESS en la API /css/preview, permitiendo SSRF no...

7.2CVSS5.9AI score0.18151EPSS
SaveExploits3
NVD
NVD
•added 2026/09/24 4:18 a.m.•6 views

CVE-2026-97151

mammoth aka mammoth.js before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document. Converting a crafted .docx file allows an attacker to add arbitrary properties to Object.prototype. In 1.11.0 through 1.12.1, applications that convert further documents in the...

8.4CVSS0.00355EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/24 3:08 a.m.•12 views

CVE-2026-97151

The mammoth (aka mammoth.js) library before version 1.12.2 is vulnerable to prototype pollution when processing styles defined in a document. By converting a crafted .docx file, an attacker can add arbitrary properties to Object.prototype . Additionally, in versions 1.11.0 through 1.12.1 , applic...

8.4CVSS5.9AI score0.00355EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/24 3:08 a.m.•9 views

EUVD-2026-85782

mammoth aka mammoth.js before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document. Converting a crafted .docx file allows an attacker to add arbitrary properties to Object.prototype. In 1.11.0 through 1.12.1, applications that convert further documents in the...

8.4CVSS5.9AI score0.00355EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/24 3:08 a.m.•22 views

CVE-2026-97151

mammoth aka mammoth.js before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document. Converting a crafted .docx file allows an attacker to add arbitrary properties to Object.prototype. In 1.11.0 through 1.12.1, applications that convert further documents in the...

8.4CVSS0.00355EPSS
SaveExploits0References4
Rows per page
Query Builder