Lucene search
+L

2842 matches found

Kitploit
Kitploit
added 2026/08/31 5:39 p.m.3 views

GraphQLmap

GraphQLmap GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. Install Features and examples Dump a GraphQL schema Interact with a GraphQL endpoint Execute GraphQL queries Autocomplete queries GraphQL field fuzzing Example 1 - Bruteforce a character Examp...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 2:57 p.m.3 views

CVE-2019-1367

0x00 Background Internet Explorer is a web browser developed by Microsoft. It has a massive user base. On September 23, Microsoft released an emergency security update to fix a remote code execution vulnerability affecting Internet Explorer. Discovered by Google's Threat Analysis Group, the...

7.6CVSS7.2AI score0.52729EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 2:29 p.m.3 views

CVE-2020-5902-NSE

This repository does not have a README...

10CVSS7.6AI score0.99999EPSS
SaveExploits62
Kitploit
Kitploit
added 2026/08/31 8:47 a.m.2 views

RustScan

➡️ Discord | Guía de instalación | Guía de uso ⬅️ Rápido, inteligente, efectivo. 🤔 ¿Qué es esto? El escáner de puertos moderno. Encuentra puertos rápidamente 3 segundos en su máxima velocidad. Ejecuta scripts a través de nuestro motor de scripting compatible con Python, Lua, Shell. 🛠️ Instalación...

6AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/08/31 7:09 a.m.3 views

nmap-nse-scripts

Repository for NSE Nmap Scripting Engine development. You will find my scripts including non-official ones, libraries, resources and other related material from my workshops. TODO -Finishing SMB2 NSE library -Currently working on password mangling functionality Paulino Calderon calderonwebsec.mx...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 2:30 a.m.24 views

sandmap

sandmap Description • How To Use • Command Line • Configuration • Requirements • Other • Contributing • License • Wiki Description sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning...

5.5AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/31 2:09 a.m.3 views

CVE-2024-43044-jenkins

Intro This is an exploit for CVE-2024-43044, an arbitrary file read that allows an agent to fetch files from the controller. The exploit will use the vulnerability to read files to forge a remember-me cookie for an admin account and gain access to Jenkins scripting engine. Check out the full...

8.8CVSS6.9AI score0.28782EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/28 3:35 a.m.4 views

CVE-2018-8353-POC

CVE-2018-8353 POC PoC simples de CVE-2018-8353 Microsoft Scripting Engine Uso Após Liberação fonte : https://bugs.chromium.org/p/project-zero/issues/detail?id=1506...

7.6CVSS7.1AI score0.6769EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/27 8:59 p.m.3 views

nmap-nse-vulnerability-scripts

Scripts de verificação de vulnerabilidades do NMAP Uma coleção de scripts de verificação de vulnerabilidades do nmap para auxiliar na detecção e correção acessível. Contexto Estes scripts usam o Nmap Scripting Engine NSE para implementar verificações de várias vulnerabilidades. Referências:...

5.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/27 12:07 a.m.3 views

CVE-2023-27350

PaperCut NG/MG RCE CVE-2023-27350 CVE-2023-27350 के लिए एक सरल बैश एक्सप्लॉइट। यह स्क्रिप्ट प्रमाणीकरण बाइपास, वातावरण तैयारी, और PaperCut प्रिंटर स्क्रिप्टिंग इंजन के माध्यम से कमांड इंजेक्शन को स्वचालित करता है। दृश्य प्रमाण बुनियादी RCE: रिवर्स शेल ट्रिगर करना: त्वरित आरंभ root@kitploit: Clone...

9.8CVSS9AI score0.99999EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.6 views

CVE-2025-49844

🚨 CVE-2025-49844 — “RediShell” Critical Remote Code Execution in the World's Fastest In-Memory Store Redis Lua scripting just became the perfect post-auth landing zone. Authenticated attacker → crafted Lua script → escape sandbox → full RCE on host ⚠️ Overview CVE-2025-49844 "RediShell " is a...

9.9CVSS8.2AI score0.86767EPSS
SaveExploits14
Tenable Nessus
Tenable Nessus
added 2026/08/25 12:00 a.m.6 views

Redis < 6.2.20 / 7.0.x < 7.2.11 / 7.4.x < 7.4.6 / 8.0.x < 8.0.4 / 8.2.x < 8.2.2 RCE (RediShell)

The version of Redis installed on the remote host is prior to 6.2.20, 7.0.x prior to 7.2.11, 7.4.x prior to 7.4.6, 8.0.x prior to 8.0.4, or 8.2.x prior to 8.2.2. It is, therefore, affected by a vulnerability as referenced in the security advisory. - A use-after-free vulnerability in the Lua...

9.9CVSS8AI score0.86767EPSS
SaveExploits14References3
EUVD
EUVD
added 2026/08/20 12:35 a.m.11 views

EUVD-2026-62937

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...

6.6CVSS5.5AI score0.00304EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/19 10:17 p.m.9 views

CVE-2026-76372

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...

6.6CVSS0.00304EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/19 5:11 p.m.9 views

CVE-2026-72712

A flaw was found in Nmap. A remote attacker can exploit this denial of service vulnerability by sending a specially crafted packet that includes a zero-length Transmission Control Protocol TCP option. This malformed packet forces the application to enter an infinite loop during packet processing,...

6.9CVSS5.5AI score0.00418EPSS
SaveExploits0References7
Circl
Circl
added 2026/08/11 7:01 p.m.12 views

CVE-2026-65813

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:06+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 01:01:02+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 12:49:33+00:00| seen|...

8.8CVSS4.9AI score0.0065EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/11 6:41 p.m.42 views

CVE-2026-18708

The CVE-2026-18708 issue affects MongoDB Server’s JavaScript scripting engine. An authenticated user with write privileges can cause code they control to run within the query scope of other users via a specially crafted stored value processed during an internal maintenance cycle. This can lead to...

6.4CVSS5.7AI score0.00284EPSS
SaveExploits0References1
MongoDB
MongoDB
added 2026/08/11 6:41 p.m.11 views

Improper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query Scopes

An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to cause code they control to be executed within the query scope of other users, through a specially crafted stored value processed during an internal maintenance cycle. This could...

6.4CVSS5.7AI score0.00284EPSS
SaveExploits0References1Affected Software1
AstraLinux
AstraLinux
added 2026/08/10 7:11 a.m.21 views

Astra Linux – Vulnerability in Chromium

The use of after-free in V8 in Google Chrome before version 147.0.7727.55 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

8.8CVSS7.7AI score0.00303EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/22 7:11 p.m.14 views

CVE-2026-13078 Local File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader

A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit...

6.3CVSS5.6AI score
SaveExploits0References3
Rows per page
Query Builder