Lucene search
+L

9342 matches found

Kitploit
Kitploit
added 2026/09/15 2:47 a.m.5 views

CVE-2021-20253

CVE-2021-20253: Privilege Escalation via Job Isolation Escape in Ansible Tower A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated...

6.7CVSS6.8AI score0.00411EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/15 1:18 a.m.6 views

CVE-2024-22120-RCE-with-gopher

Usage root@kitploit: python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Example Scenario You have identified a Zabbix server running on IP 192.168.1.100, and you have access to a low-privileged user with the following details: Session ID sid: d82bf6715e1d3c1f25 Host ID hosti...

9.1CVSS8.2AI score0.76618EPSS
SaveExploits5
EUVD
EUVD
added 2026/09/15 12:31 a.m.6 views

EUVD-2026-78170

On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authorization, a low-privileged attacker on an adjacent network segment who induces a RADIUS packet through a configured RADIUS proxy client can prevent RADIUS dynami...

5.9CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 6:25 p.m.9 views

CVE-2026-34213

CVE-2026-34213 A low-privileged Docmost user could supply a victim attachmentId to the generic upload endpoint and overwrite another page's stored attachment inside the same workspace. Intro I identified, responsibly disclosed, and reproduced a High-severity authorization flaw in Docmost , the...

5.4CVSS5.7AI score0.00221EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/14 1:45 p.m.8 views

CVE-2024-3183-POC

CVE-2024-3183-POC POC para CVE-2024-3183 FreeIPA Rosting Impacto: Un usuario con pocos privilegios puede obtener un hash de las contraseñas de todos los usuarios del dominio y realizar fuerza bruta offline kerberoasting. Parche para impacket-getTGT: 1. Añade decoder.decode.defaultErrorState =...

8.1CVSS7.6AI score0.02053EPSS
SaveExploits1
NVD
NVD
added 2026/09/14 1:19 p.m.5 views

CVE-2026-90933

laradashboard through 1.2.2 contains a missing authorization vulnerability in the Local License API endpoints that allows any authenticated user to read, overwrite, and delete premium module license keys. Attackers with low-privileged accounts can access GET /api/admin/licenses/show, POST...

7.1CVSS
SaveExploits0References2
CVE
CVE
added 2026/09/14 12:48 p.m.7 views

CVE-2026-90933

laradashboard through 1.2.2 contains a missing authorization vulnerability in its Local License API endpoints. Any authenticated user with low privileges can access three endpoints — GET /api/admin/licenses/show , POST /api/admin/licenses/store , and POST /api/admin/licenses/remove — to read, ove...

7.1CVSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/09/14 11:20 a.m.6 views

postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound

A flaw was found in PostgreSQL fuzzystrmatch. A low-privileged database user can exploit an integer wraparound vulnerability by providing extreme inputs to the levenshtein or levenshteinlessequal SQL functions. This allows the user to execute arbitrary code as the operating system user running th...

8.8CVSS0.00436EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.54 views

W&B Weave Server - Remote Arbitrary File Leak

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin. id:...

8.8CVSS8.2AI score0.05015EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/11 6:51 a.m.7 views

MAL-015

MAL-015: Escape de Aislamiento 2 en Ansible Tower Las instalaciones de Ansible Tower en ciertas configuraciones de Rhel 7/8 son potencialmente vulnerables a los escapes de “Job Isolation” que permiten a un atacante escalar al usuario “awx” desde fuera del entorno aislado. Los siguientes...

6.7CVSS6.9AI score0.00411EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/10 9:29 p.m.6 views

CVE-2026-5173

🦊 CVE-2026-5173: PoC de Ejecución No Autorizada de Métodos en GitLab WebSocket 🛠️ Resumen CVE-2026-5173 permite a un atacante autenticado con bajos privilegios invocar métodos backend restringidos a través del endpoint WebSocket /-/cable de GitLab, específicamente mediante GraphqlChannel. Esto...

8.5CVSS7.8AI score0.00425EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/10 3:37 p.m.42 views

CVE-2026-81051

Dell ThinOS 10, versions prior to 260510.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

6.6CVSS0.00155EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/10 1:20 p.m.9 views

CVE-2026-85543

Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration information through these interfaces...

4.3CVSS0.00197EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/10 12:47 p.m.13 views

EUVD-2026-75402

Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration information through these interfaces...

4.3CVSS0.00197EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 12:47 p.m.37 views

CVE-2026-85543

Hikvision Wi-Fi series IP cameras are affected by insufficient permission validation on certain interfaces. An authenticated low-privileged user can exploit this flaw to obtain the device's Wi-Fi configuration information , representing a confidentiality impact rated CVSS 3.1: 4.3 (MEDIUM) . No i...

4.3CVSS0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 12:47 p.m.41 views

CVE-2026-85543

Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration information through these interfaces...

4.3CVSS0.00197EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.10 views

PT-2026-89370

Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration information through these interfaces...

4.3CVSS0.00197EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/09 5:17 p.m.9 views

CVE-2026-46460

Dell PowerScale OneFS, versions 9.5.0.0 through 9.7.1.15, versions 9.8.0.0 through 9.13.1.0, and versions prior to 9.15.0.0, contain an Incorrect Authorization vulnerability. A low privileged adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized...

3.5CVSS0.00117EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/09 4:30 p.m.7 views

EUVD-2026-75106

Dell PowerScale OneFS, versions 9.5.0.0 through 9.7.1.15, versions 9.8.0.0 through 9.13.1.0, and versions prior to 9.15.0.0, contain an Incorrect Authorization vulnerability. A low privileged adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized...

3.5CVSS0.00117EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/09 4:30 p.m.11 views

CVE-2026-46460

Dell PowerScale OneFS versions 9.5.0.0 through 9.7.1.15 , 9.8.0.0 through 9.13.1.0 , and prior to 9.15.0.0 are affected by an Incorrect Authorization vulnerability. A low-privileged attacker on the adjacent network can exploit this to perform unauthorized modification of system logs . The CVSS v3...

3.5CVSS0.00117EPSS
SaveExploits0References1
Rows per page
Query Builder