Lucene search
+L

302781 matches found

Kitploit
Kitploit
•added 2026/09/25 7:19 a.m.•7 views

WHS4_CVE-2021-4034

CVE-2021-4034 PwnKit - Local Privilege Escalation PoC 🔗 Original Project : berdav/CVE-2021-4034 This project is an educational analysis and modification based on the original. MIT License Compliant | White Hat School Training Task 📋 Overview CVE-2021-4034 is a local privilege escalation...

7.8CVSS7.1AI score0.94345EPSS
SaveExploits155References2
Kitploit
Kitploit
•added 2026/09/25 7:18 a.m.•8 views

CoercedPotatoRDLL

Coerced Potato Reflective DLL Privilege escalation from NT Service to SYSTEM using SeImpersonateToken privilege and MS-RPRN functions. Heavily based on https://github.com/Prepouce/CoercedPotato Reflective Loader from https://github.com/stephenfewer/ReflectiveDLLInjection. Install Clone this repo...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 7:18 a.m.•10 views

cve-2025-62215-exploit-poc

CVE-2025-62215 Proof-of-Concept ⚠️ WARNING - LEGAL AND ETHICAL NOTICE THIS CODE IS FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY. DO NOT use this code on systems you do not own or have explicit written permission to test DO NOT use this code for malicious purposes Unauthorized access to...

7CVSS8.2AI score0.05985EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/25 7:17 a.m.•12 views

CVE-2026-43499-aristotle

CVE-2026-43499 — aristotle au/KDDI Xiaomi XIG04 Escalada de privilegios local tmp-root para el au/KDDI Xiaomi "aristotle" XIG04 en Android 12 , a través de CVE-2026-43499. Es una primitiva de root del propietario del dispositivo: enraíza tu propio teléfono por ejemplo, para reactivar ADB cuando l...

7.8CVSS7.5AI score0.00278EPSS
SaveExploits107References1
Kitploit
Kitploit
•added 2026/09/25 7:17 a.m.•7 views

kernel-exploit-factory

kernel-exploit-factory Keep updating...... Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore. This repository is to extract all Linux kernel exploit and relative debug environment. You can use Qem...

9.8CVSS7.8AI score0.99962EPSS
SaveExploits395
NVD
NVD
•added 2026/09/25 7:16 a.m.•4 views

CVE-2026-93477

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash allows a user to set the value of a private action argument on the bulk destroy and bulk update paths. Action arguments declared with public?: false are meant to be set only by trusted...

5.9CVSS0.00197EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/25 7:16 a.m.•6 views

CVE-2026-14281

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to missing permission enforcement on the publicly accessible REST route POST...

9.8CVSS0.00531EPSS
SaveExploits1References14
Kitploit
Kitploit
•added 2026/09/25 7:15 a.m.•12 views

CVE-2025-11749

CVE-2025-11749 AI Engine = 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation ⚠️ AI Engine = 3.1.3 — Unauthenticated Sensitive Information Exposure → Privilege Escalation GitHub: Nxploited Telegram: @KNxploited IMPORTANT NOTICE: Many unethical individuals attempt to...

9.8CVSS7.6AI score0.74759EPSS
SaveExploits5References1
Kitploit
Kitploit
•added 2026/09/25 7:15 a.m.•12 views

CVE-2023-34039

CVE-2023-34039 POC for CVE-2023-34039 VMWare Aria Operations for Networks vRealize Network Insight Static SSH key RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-34039/ Summary VMWa...

9.8CVSS8.6AI score0.67182EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/09/25 7:14 a.m.•14 views

CVE-2023-36003

CVE-2023-36003: Windows Defender Exploit Protection Bypass PoC This repository contains a Proof of Concept PoC for CVE-2023-36003 , a critical security feature bypass vulnerability affecting Windows Defender Exploit Protection. Overview CVE-2023-36003 is a vulnerability in Windows Defender that...

7.3CVSS7.6AI score0.02846EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/25 7:13 a.m.•13 views

CVE-2023-36723

CVE-2023-36723 Este es un PoC para el bug de creación arbitraria de directorios en el servicio Container Manager. Este PoC no se ha probado a fondo, por lo que es posible que no funcione la mayor parte del tiempo fue suficiente para que msrc confirmara la vulnerabilidad. Para explotar esta...

7.8CVSS7.6AI score0.02183EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 7:12 a.m.•8 views

ExploitGSM

ExploitGSM Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5 Telegram for contact - https://t.me/YuriiCrimson Telegram chat - https://t.me/itcrowdua In winter I found two vulnerabilities in the ngsm driver. After that Jammes wrote to me offering to buy them from me. As you...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 7:11 a.m.•10 views

CVE-2024-4040

CVE-2024-4040 Introducción Recientemente vi esta vulnerabilidad y la encontré bastante interesante. Leí los siguientes artículos y escribí un pequeño exploit. https://y4tacker.github.io/2023/12/10/year/2023/12/CrushFTP-Unauthenticated-Remote-Code-Execution-CVE-2023-43177/...

10CVSS8.2AI score0.99539EPSS
SaveExploits27References3
Kitploit
Kitploit
•added 2026/09/25 7:11 a.m.•21 views

windows-kernel-exploits

windows-kernel-exploits Introduction windows-kernel-exploits Vulnerability List Security Bulletin KB Description Operating System CVE-2021-33739 Microsoft DWM Core Library Elevation of Privilege Vulnerability Windows 10, 20 CVE-2021-1732 Windows Win32k Elevation of Privilege Vulnerability Windows...

10CVSS7.5AI score0.9981EPSS
SaveExploits256References74
Kitploit
Kitploit
•added 2026/09/25 7:11 a.m.•15 views

CVE-2025-8045

CVE-2025-8045 — Arm Mali GPU KCPU Queue UAF A local privilege escalation exploit for CVE-2025-8045 , a use-after-free in the Arm Mali GPU kernel driver kbase. A non-privileged local process races the CSF KCPU queue dump path to free and reclaim a cpuqueue.buffer, turns the dangling allocation int...

6.6AI score0.00178EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 7:10 a.m.•13 views

CVE-2018-8581

CVE-2018-8581 Se trata de una vulnerabilidad de movimiento lateral y escalada de privilegios a nivel de buzón de correo. Permite, tras contar con las credenciales de una cuenta de correo con permisos normales, realizar la delegación y toma de control de la bandeja de entrada de otros usuarios...

7.4CVSS8.1AI score0.27355EPSS
SaveExploits7References1
Kitploit
Kitploit
•added 2026/09/25 7:10 a.m.•10 views

CVE-2016-5195

CVE-2016-5195 mi POC y EXPLOIT personal de CVE-2016-5195 dirty COW Uso POC: escribir archivos de forma arbitraria Simplemente un POC de este CVE, compile el archivo poc.c de la siguiente manera: root@kitploit: $ gcc poc.c -o poc -static -lpthread Debe ejecutarlo de la siguiente manera:...

7.2CVSS7.5AI score0.83524EPSS
SaveExploits92
Cvelist
Cvelist
•added 2026/09/25 7:08 a.m.•8 views

CVE-2026-93477 Private action arguments can be set by user input on the bulk destroy and bulk update paths in Ash

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash allows a user to set the value of a private action argument on the bulk destroy and bulk update paths. Action arguments declared with public?: false are meant to be set only by trusted...

5.9CVSS0.00197EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/25 7:08 a.m.•5 views

EUVD-2026-86550

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash allows a user to set the value of a private action argument on the bulk destroy and bulk update paths. Action arguments declared with public?: false are meant to be set only by trusted...

5.9CVSS5.8AI score0.00197EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/25 7:08 a.m.•13 views

CVE-2026-93477

The ash-project ash framework is vulnerable to an Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability. In versions 2.17.15 before 3.33.11 , the Ash.Actions.Destroy.Bulk.base_changeset/5 and Ash.Actions.Update.Bulk.base_changeset/5 functions fail to verify ...

5.9CVSS5.8AI score0.00197EPSS
SaveExploits0References5
Rows per page
Query Builder