Lucene search
+L

6951 matches found

RedhatCVE
RedhatCVE
•added 2026/09/22 5:50 p.m.•5 views

CVE-2026-64847

A flaw was found in AnyIO. Untrusted or faulty worker code can write a large amount of data to the standard error stderr stream. This data fills a pipe that the parent process fails to drain, causing the process-pool call to block indefinitely. This can lead to a Denial of Service DoS condition,...

6.8CVSS5.8AI score0.00156EPSS
SaveExploits0References7
Kitploit
Kitploit
•added 2026/09/22 7:52 a.m.•13 views

CVE-2025-21333

CVE-2025-21333 Hyper-V NT Kernel Integration VSP vkrnlintvsp.sys Paged Pool heap overflow → Local Privilege Escalation LPE. This directory contains lab PoC source code based on MrAle98/CVE-2025-21333-POC, including a local patch. 1. Vulnerability Summary Item| Content ---|--- CVE| CVE-2025-21333...

7.8CVSS8.5AI score0.09988EPSS
SaveExploits6References1
CVE
CVE
•added 2026/09/21 7:35 p.m.•37 views

CVE-2026-73548

CVE-2026-73548 affects Envoy (open source edge/service proxy) prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1 . The root cause is that Envoy forwards data for a configured non-WebSocket HTTP upgrade before the upstream accepts it. An unauthenticated HTTP/2 client can smuggle a complete HTTP/1.1 requ...

7.5CVSS5.8AI score0.0048EPSS
SaveExploits0References9
OSV
OSV
•added 2026/09/21 7:35 p.m.•6 views

CVE-2026-73548 Envoy: Cross-user response poisoning via a generic (non-WebSocket) HTTP upgrade on Envoy's shared backend pool

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy forwards data for a configured non-WebSocket HTTP upgrade before the upstream accepts the upgrade. An unauthenticated HTTP/2 client can place a complete...

7.5CVSS5.7AI score
SaveExploits0References11
Cvelist
Cvelist
•added 2026/09/21 7:35 p.m.•40 views

CVE-2026-73548 Envoy: Cross-user response poisoning via a generic (non-WebSocket) HTTP upgrade on Envoy's shared backend pool

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy forwards data for a configured non-WebSocket HTTP upgrade before the upstream accepts the upgrade. An unauthenticated HTTP/2 client can place a complete...

7.5CVSS0.0048EPSS
SaveExploits0References9
Kitploit
Kitploit
•added 2026/09/21 3:26 p.m.•10 views

CVE-2023-36407

CVE-2023-36407 This is poc for CVE-2023-36407, Hyper-V Elevation of Privilege Vulnerability. https://github.com/pwndorei/CVE-2023-36407/assets/96749184/a8ef87d3-e0d0-40e5-9b23-35ab057a9c78 Vulnerability OOB Read/Write from/to Non-paged Pool via winhvr.sys!WinHvGet/SetVpState Reproduction Steps...

7.8CVSS7.6AI score0.0173EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/21 2:36 p.m.•9 views

CVE-2019-0708

CVE-2019-0708 BlueKeep Currently, I public only the exploitation note for Windows 7 x64 only. See NOTE.md Note: Windows 2008 R2 with default configuration fDisableCam=1 can be exploited. Reliability is same as Windows 7. Update July 2020 Add info for Windows Server 2008 to NOTE.md Add PoCs for...

10CVSS8.1AI score0.99999EPSS
SaveExploits126References1
Kitploit
Kitploit
•added 2026/09/21 1:36 p.m.•14 views

CVE-2026-50416-writeup-and-poc

CVE-2026-50416: One QWORD Too Many in the Desktop Heap On Windows 11 Insider build 10.0.28020.2149, the user mode mapping of the Win32k desktop heap exposed a raw kernel session pool pointer at offset 0x100. The read itself is almost offensively small: root@kitploit: ULONG64 leaked = ULONG64...

3.3CVSS5.8AI score0.00458EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/21 12:12 p.m.•12 views

CVE-2016-3309_Reloaded

Kernel Exploitation Case Study - "Wild" Pool Overflow on Win10 x64 RS2 CVE-2016-3309 Reloaded This Github repo contains exploits for the recently-patched win32kfull!bFill vulnerability. Executing the Palette or Bitmap exploit will give you SYSTEM privileges on the affected system. The exploits...

7.8CVSS7.3AI score0.20467EPSS
SaveExploits8
IBM AIX
IBM AIX
•added 2026/09/21 4:38 a.m.•6 views

Multiple vulnerabilities impacts AIX due to cURL libcurl

IBM SECURITY ADVISORY First Issued: Mon Sep 21 04:38:42 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/curladvisory12.asc Security Bulletin: Multiple vulnerabilities impacts AIX due to cURL libcurl...

7.5CVSS6.4AI score0.0075EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/21 12:19 a.m.•7 views

outlook-auto-register

Outlook Auto Register Registro masivo de Microsoft Outlook por protocolo puro · Resolución de PerimeterX · Consola web · Pool de proxies / Pool de cuentas / Verificación de actividad integrados Qué resuelve · Vista general · Inicio rápido · Estrategia anti-bloqueo · English · Tiếng Việt...

5.9AI score
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/09/21 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-64847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, AnyIO starts process-pool...

6.8CVSS5.9AI score0.00156EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/20 11:24 a.m.•9 views

CVE-2019-0708

CVE-2019-0708-poc CVE-2019-0708 remote code execution vulnerability batch detection 3389hosts is the list of IP addresses to be detected, one per line pool = ThreadPool10 defines the custom scanning thread Note Windows python3 environment Usage 1. Edit 3389hosts, write the IP addresses to be...

10CVSS8.3AI score0.99999EPSS
SaveExploits126
Kitploit
Kitploit
•added 2026/09/20 1:48 a.m.•12 views

CVE-2025-62454

This is not exploiting, just POC root@kitploit: BUGCHECKCODE: 50 BUGCHECKP1: ffff808b75973000 BUGCHECKP2: 2 BUGCHECKP3: fffff803df12ddda BUGCHECKP4: 0 READADDRESS: ffff808b75973000 Special pool MMINTERNALCODE: 0 IMAGENAME: cldflt.sys MODULENAME: cldflt FAULTINGMODULE: fffff803df110000 cldflt...

7.8CVSS7.4AI score0.02312EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/19 8:25 p.m.•10 views

CSRFBrute

CSRFBrute Herramienta de fuerza bruta de inicio de sesión CSRF - V 0.5.0 Dev Se recomienda usar preferentemente csrfbrute.py, la versión estable simplificada 🚀 Características Actualización dinámica de tokens CSRF - Garantiza precisión en objetivos de alta seguridad Gestión de sesiones segura par...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/19 3:01 p.m.•11 views

AntiKernelDebug-POC

AntiKernelDebug-poc ¿Qué es esto? Una POC sobre cómo detectar el kernel debug de Windows mediante pool tag. ¿Cómo funciona esta POC? Consulta la información del pool tag del sistema y comprueba si TagUlong == 'oIdK'. Probado en Win10 1809 Compilar Visual Studio 2019 llvm-msvc enlace...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/18 11:48 p.m.•7 views

BlackHat-Europe-2022

BlackHat-Europe-2022 Select Bugs From Binary Where Pattern Like CVE-1337-Days Resumen La revisión estática de código es una forma eficaz de descubrir variantes de vulnerabilidades y primitivas de explotación, pero dos de las tareas más desafiantes del análisis estático son la extracción eficaz de...

10CVSS8AI score0.99999EPSS
SaveExploits126
NVD
NVD
•added 2026/09/18 8:17 p.m.•6 views

CVE-2026-76899

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. From 1.7.0 until 1.7.4, POST /account-pool/page allows an authenticated caller with MODULESETTINGUPDATE to place an arbitrary database function in SortRequest.name because...

5.7CVSS0.00395EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/18 8:17 p.m.•7 views

CVE-2026-52745

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.0, the POST /account-pool/page endpoint allows an authenticated caller with MODULESETTING:UPDATE to place a crafted sort.name value into a dynamic SQL ORDER BY expression...

5.3CVSS0.00343EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/18 7:58 p.m.•8 views

EUVD-2026-83373

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. From 1.7.0 until 1.7.4, POST /account-pool/page allows an authenticated caller with MODULESETTINGUPDATE to place an arbitrary database function in SortRequest.name because...

5.7CVSS5.9AI score0.00395EPSS
SaveExploits0References5
Rows per page
Query Builder