Lucene search
+L

2804 matches found

BDU FSTEC
BDU FSTEC
added 2026/09/14 11:42 a.m.22 views

The vulnerability of the TrueConf Server software, related to deficiencies in the authentication process, allows a perpetrator to obtain a token with administrator privileges.

The vulnerability of the TrueConf Server software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain an administrator-level token...

8.5CVSS6.1AI score
SaveExploits0Affected Software1
Kitploit
Kitploit
added 2026/09/14 5:32 a.m.4 views

Microsoft365_devicePhish

Microsoft365devicePhish Abusing Microsoft 365 OAuth Authorization Flow for Phishing Attack This is a simple proof-of-concept script that allows an attacker to conduct a phishing attack against Microsoft 365 OAuth Authorization Flow. Using this, one can connect to Microsoft's OAuth API endpoints t...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 4:58 a.m.10 views

365-Stealer

365-Stealer Table of Contents About 365-Stealer About Illicit Consent Grant Attack Key Features of 365-Stealer Setup Attacking Environment Automated Azure App Registration Manual Azure App Registration Configuring the Application Creating Client Secrets Adding API Permissions Setting Up 365-Steal...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 3:08 a.m.10 views

CVE-2026-66421-OpenClaw-Dashboard-Stored-XSS-via-lastMessage-Session-Field

Security Advisory: Stored Cross-Site Scripting Via Agent Messages Leading To Session Token Theft openclaw-dashboard Title: OpenClaw Dashboard Stored XSS via lastMessage Session Field CVE ID: CVE-2026-66421 https://github.com/tugcantopaloglu/openclaw-dashboard Summary The sessions table on the...

9.3CVSS5.8AI score0.00529EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/14 1:31 a.m.7 views

cve-2025-7771

CVE-2025-7771 — ThrottleStop.sys LPE Proof-of-concept for CVE-2025-7771. ThrottleStop.sys exposes two IOCTL handlers that allow arbitrary physical memory read/write with no access control — any admin process can read or write anywhere in physical RAM. Tested on Windows 10 22H2 and Windows 11 23H2...

8.7CVSS7.4AI score0.06835EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/13 10:50 p.m.6 views

ThingsBoard-IoT-Platform-CVE-2024-55466

ThingsBoard Privilege Escalation Using Stored XSS While tinkering with IoT technology, I found vulnerability in the Thingsboard Application that allowed avenues for privilege escalation. Thingsboard is an open-source application that allows device management, data collection, processing and...

6.5CVSS5.9AI score0.00364EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 10:12 p.m.7 views

CVE-2020-1054

CVE-2020-1054 CVE-2020-1054 Aprendizaje Captura de pantalla Referencia https://0xeb-bp.github.io/blog/2020/06/15/cve-2020-1054-analysis.html robar token de seguridad https://github.com/mwrlabs/CVE-2016-7255 filtrar función https://github.com/DreamoneOnly/CVE-2019-0808-32-64-exp...

7.8CVSS7.6AI score0.54158EPSS
SaveExploits5References3
Kitploit
Kitploit
added 2026/09/13 10:02 p.m.8 views

CVE-2025-51860

CVE-2025-51860 Descripción de la vulnerabilidad TelegAI, una aplicación web para construir y chatear con personajes de IA, es vulnerable a Cross-Site Scripting Almacenado XSS en su componente de chat y en el componente contenedor de personajes. Un atacante puede lograr la ejecución arbitraria de...

6.1CVSS5.9AI score0.00281EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 9:51 p.m.8 views

CVE-2024-26229-BOF

CVE-2024-26229 BOF Implementación en Beacon Object File de CVE-2024-26229 — escalada de privilegios local del controlador CSC de Windows mediante robo de token DKOM. Basado en RalfHacker/CVE-2024-26229-exploit, convertido a BOF con resolución dinámica de funciones DFR para usar con frameworks C2...

7.8CVSS7.6AI score0.09375EPSS
SaveExploits4References2
Kitploit
Kitploit
added 2026/09/13 9:09 p.m.6 views

CVE-2019-0803

CVE-2019-0803 Win32k Elevación de Privilegios Poc Captura de pantalla Referencia robar token de seguridad https://github.com/mwrlabs/CVE-2016-7255...

7.8CVSS7.4AI score0.4523EPSS
SaveExploits26References1
Kitploit
Kitploit
added 2026/09/13 4:22 p.m.6 views

CVE-2023-31779

CVE-2023-31779 Stored XSS in Wekan Description : Stored XSS vulnerability exists in the "Reaction to comment" feature. An attacker with user privilege on kanban board can execute JavaScript code in the browsers of users who open card with malicious reaction. Impact : An attacker can steal...

5.4CVSS6.2AI score0.0056EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 3:44 p.m.7 views

CVE-2025-51864

CVE-2025-51864 Descripción de la vulnerabilidad AIBOX es una aplicación web para explorar consultoría de IA y probar múltiples LLM. Permite a los usuarios chatear con varios LLM. Existe una vulnerabilidad de cross-site scripting XSS reflejado en el componente de chat, que podría provocar el robo ...

6.5CVSS5.9AI score0.00353EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 3:11 p.m.12 views

RPC-Backdoor

RPC Backdoor Emulation This project is a basic implementation of an "RPC Backdoor" meant to emulate TTPs used by certain groups. The project contains an RPC server with five functions: Execute a command with cmd.exe /c and the CreateProcess API call. Steal a token and execute a command with cmd.e...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 10:35 a.m.8 views

CVE-2025-22381

CVE-2025-22381: Host Header Injection in Aggie Detailed analysis and Proof-of-Concept for CVE-2025-22381, a Host Header Injection vulnerability discovered in the Aggie Open-Source Project. Vulnerability Overview+ CVE ID: CVE-2025-22381 Published: October 2025 MITRE assignment Disclosed publicly:...

8.2CVSS5.8AI score0.00603EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 6:22 a.m.8 views

offensive-azure

一组针对 Microsoft Azure 的攻击工具集合,使用 Python 编写以实现平台无关性。当前工具列表及其简要功能描述如下。 ./DeviceCode/devicecodeeasymode.py 生成一个供目标用户输入的代码 可用于通用令牌生成,或在钓鱼/社会工程攻击活动中使用。 ./AccessTokens/tokenjuggle.py 以多种方式接收一个刷新令牌,并为指定资源获取一个新的刷新令牌和一个访问令牌 ./AccessTokens/readtoken.py 接收一个访问令牌,解析其包含的声明信息,检查过期时间,并尝试验证签名...

5.9AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/09/13 6:20 a.m.8 views

CVE-2024-55040-Sensaphone-XSS

SENSAPHONE 漏洞披露 摘要 2024年9月中旬,我在 Sensaphone Web600 监控系统中识别出多个中低严重性的安全问题,包括系统设置、个人资料和区域选项中的存储型跨站脚本(XSS)漏洞。远程认证攻击者可利用该漏洞在 Web600 仪表板的多个元素中注入任意 JavaScript 载荷。这些问题的严重性有限;然而,它可能允许低权限用户窃取管理员账户的会话令牌,从而有效提升其系统访问权限并进行未授权修改。该漏洞已在 Sensaphone Web600 固件版本 v.1.6.5.H 上测试。10月,Sensaphone...

6.1CVSS5.9AI score0.00687EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 4:42 a.m.6 views

CVE-2019-0803

CVE-2019-0803 PoC de elevación de privilegios de Win32k Captura de pantalla Referencia robar token de seguridad https://github.com/mwrlabs/CVE-2016-7255...

7.8CVSS7.4AI score0.4523EPSS
SaveExploits26References1
Kitploit
Kitploit
added 2026/09/13 2:20 a.m.7 views

CitrixBleedCVE-2026-8452-2025-5777

CitrixBleed Exploit Tool - CVE-2025-5777 & CVE-2026-8452. Unauthenticated remote memory read from Citrix NetScaler ADC & Gateway. Steal admin session tokens, extract nsroot hashes, dump secrets, and bypass MFA. Python 3 exploit with full memory parsing. https://satoshi-box.com/pay/CSHeT8...

9.8CVSS8.2AI score0.99953EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/12 4:12 p.m.7 views

CVE-2023-31851

CVE-2023-31851 Existe un ataque de cross-site scripting XSS reflejado en la interfaz de gestión web de Cudy LT400. La página /cgi-bin/luci/admin/network/wireless/status tiene XSS reflejado a través del parámetro iface. Los métodos de explotación implicarían enviar una solicitud especialmente...

6.1CVSS6.5AI score0.00499EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 3:04 p.m.7 views

CVE-2024-50335

CVE-2024-50335: XSS autenticado en el campo "Publish Key" que permite la creación no autorizada de usuarios administradores Resumen El campo "Publish Key" en la página Edit Profile de SuiteCRM es vulnerable a Cross-Site Scripting Reflejado XSS, lo que permite a un atacante inyectar código...

5.4CVSS5.9AI score0.00303EPSS
SaveExploits1
Rows per page
Query Builder