Lucene search
+L

302819 matches found

Kitploit
Kitploit
•added 2026/09/25 7:45 a.m.•12 views

CVE-2026-41091-PoC-Exploit

☀️ CVE-2026-41091 - RedSun SolarFlare - Exploit de elevación de privilegios locales de Microsoft Defender Vulnerabilidad de seguimiento de enlaces en Microsoft Defender - Escalada de privilegios locales a NT AUTHORITY\SYSTEM La vulnerabilidad se conoce como "RedSun" 🎯, "SolarFlare" es el nombre...

7.8CVSS8.1AI score0.00443EPSS
SaveExploits3References3
Kitploit
Kitploit
•added 2026/09/25 7:45 a.m.•17 views

juicy-potato

Juicy Potato(滥用黄金权限) RottenPotatoNG的加糖版本,带点汁水,即另一个本地权限提升工具,从Windows服务账户到NT AUTHORITY\SYSTEM 概述 RottenPotatoNG及其变种利用基于BITS 服务的权限提升链,该服务在127.0.0.1:6666上具有MiTM监听器,并且当你拥有SeImpersonate或SeAssignPrimaryToken权限时。在一次Windows构建审查中,我们发现一个设置,其中BITS被故意禁用,端口6666被占用。 我们决定将RottenPotatoNG武器化:向Juicy Potato打个招呼 。...

6.1AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/25 7:45 a.m.•694 views

juicy-potato

Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/25 7:44 a.m.•9 views

CVE-2020-9758

CVE-2020-9758 Descripción Se descubrió un problema en chat.php en LiveZilla Live Chat 8.0.1.3 Helpdesk. Una inyección de JavaScript ciega reside en el parámetro name. Al activarla se pueden obtener los nombres de usuario y contraseñas del personal del helpdesk en la URI. Esto conduce a una escala...

9.6CVSS8.2AI score0.02465EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 7:42 a.m.•9 views

dirtypipe

Acerca de: Título: DirtyPipe Descripción: Exploit para una nueva vulnerabilidad de Linux conocida como 'Dirty Pipe CVE-2022-0847' que permite a usuarios locales obtener privilegios de root. AUTOR: drapl0n Versión: 1.0 Categoría: Ejecución Objetivo: Sistemas operativos Linux. Modos de ataque: HID,...

7.8CVSS7.1AI score0.92795EPSS
SaveExploits102
Kitploit
Kitploit
•added 2026/09/25 7:40 a.m.•9 views

QuickHeal

QuickHeal CVE-2017-5005 para Quick Heal Antivirus Aviso Restricción incorrecta de operaciones dentro de los límites de un búfer de memoria. El software realiza operaciones sobre un búfer de memoria, pero puede leer o escribir en una ubicación de memoria que está fuera del límite previsto del búfe...

9.8CVSS8.4AI score0.09481EPSS
SaveExploits1
EUVD
EUVD
•added 2026/09/25 7:40 a.m.•6 views

EUVD-2026-86579

The Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.6.1.0. This is due to the maybeupdateuserrole function reading the target role directly from an attacker-controlled Gravity Forms entry...

8.8CVSS5.7AI score0.00475EPSS
SaveExploits0References10
CVE
CVE
•added 2026/09/25 7:40 a.m.•23 views

CVE-2026-89426

The Knit Pay WordPress plugin (versions up to and including 9.6.1.0 ) is vulnerable to Privilege Escalation . The root cause is the maybe_update_user_role() function, which reads a target role directly from an attacker-controlled Gravity Forms entry field (via user_role_field_id) and passes it to...

8.8CVSS5.7AI score0.00475EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2026/09/25 7:40 a.m.•15 views

CVE-2026-89426 Knit Pay <= 9.6.1.0 - Authenticated (Subscriber+) Privilege Escalation via Gravity Forms Role Field

The Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.6.1.0. This is due to the maybeupdateuserrole function reading the target role directly from an attacker-controlled Gravity Forms entry...

8.8CVSS0.00475EPSS
SaveExploits0References10
EUVD
EUVD
•added 2026/09/25 7:40 a.m.•6 views

EUVD-2026-86601

The Optima Express IDX plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 8.7.5. This is due to the provisionBlogCredentials function in iHomefinderAdmin.php being reachable via the wpajaxnoprivihfclearcache AJAX action — through the call chain...

7.3CVSS5.6AI score0.00346EPSS
SaveExploits0References10
CVE
CVE
•added 2026/09/25 7:40 a.m.•18 views

CVE-2026-93901

The Optima Express IDX plugin for WordPress (versions

7.3CVSS5.6AI score0.00346EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2026/09/25 7:40 a.m.•14 views

CVE-2026-93901 Optima Express IDX <= 8.7.5 - Unauthenticated Privilege Escalation to 'ihf_clear_cache' AJAX Action to Author Role Assignment

The Optima Express IDX plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 8.7.5. This is due to the provisionBlogCredentials function in iHomefinderAdmin.php being reachable via the wpajaxnoprivihfclearcache AJAX action — through the call chain...

7.3CVSS0.00346EPSS
SaveExploits0References10
EUVD
EUVD
•added 2026/09/25 7:39 a.m.•6 views

EUVD-2026-86588

A flaw was found in the Fine-Grained Admin Permissions FGAP v2 feature of Keycloak, an identity and access management solution. The issue occurs when the system checks if a delegated administrator has permission to assign a specific role to a user. Because the check does not look inside composite...

6.6CVSS5.7AI score0.00237EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/25 7:39 a.m.•16 views

CVE-2026-96448

A flaw in the Fine-Grained Admin Permissions (FGAP v2) feature of Keycloak allows for privilege escalation . The vulnerability exists because the system fails to inspect the contents of composite roles when verifying if a delegated administrator has permission to assign a specific role. Consequen...

6.6CVSS5.7AI score0.00237EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/25 7:39 a.m.•12 views

CVE-2026-96448 Keycloak-services: keycloak-services: fgap v2 composite-blind role mapping allows privilege escalation

A flaw was found in the Fine-Grained Admin Permissions FGAP v2 feature of Keycloak, an identity and access management solution. The issue occurs when the system checks if a delegated administrator has permission to assign a specific role to a user. Because the check does not look inside composite...

6.6CVSS0.00237EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/25 7:39 a.m.•4 views

CVE-2026-96448

A flaw was found in the Fine-Grained Admin Permissions FGAP v2 feature of Keycloak, an identity and access management solution. The issue occurs when the system checks if a delegated administrator has permission to assign a specific role to a user. Because the check does not look inside composite...

6.6CVSS5.8AI score0.00237EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/25 7:39 a.m.•10 views

CVE-2022-35841

CVE-2022-35841 Este es solo un pequeño informe con la teoría, ya que este fallo fue colisionado y nunca llegué a probarlo adecuadamente. EnterpriseAppMgmtSvc es un servicio interesante que implementa objetos COM. Parece datar de Windows Phone y, de hecho, la mayoría de las interfaces COM...

8.8CVSS8AI score0.03579EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 7:38 a.m.•13 views

CVE-2026-3629

CVE-2026-3629 - Comprobador de Escalada de Privilegios en WordPress Una herramienta de línea de comandos para detectar CVE-2026-3629 , una vulnerabilidad crítica de escalada de privilegios en el plugin de WordPress "Import and export users and customers". 📢 Únete a Nuestra Comunidad ¡Mantente al...

8.1CVSS6.1AI score0.0054EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/09/25 7:37 a.m.•10 views

CVE-2022-0847_DirtyPipeExploit

¿Qué es esto? Esta es la prueba de concepto de Max Kellermann para Dirty Pipe, pero modificada para sobrescribir el campo de contraseña de root en /etc/passwd y restaurarlo después de obtener un shell de root. Nota al margen: No reclamo ningún crédito por haber encontrado esta vulnerabilidad o...

7.8CVSS7.2AI score0.92795EPSS
SaveExploits102
Kitploit
Kitploit
•added 2026/09/25 7:37 a.m.•9 views

CVE-2024-30088-Windows-poc

CVE-2024-30088-Windows-poc 该漏洞存在于 NtQueryInformationToken 函数中,特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时,该漏洞源于内核在操作对象时对锁定机制的不当管理,这一失误可能导致恶意实体意外提升权限。 提权因为需要条件竞争,所以需要耐心等待一会...

7CVSS7.8AI score0.68202EPSS
SaveExploits7
Rows per page
Query Builder