Lucene search
+L

285 matches found

Kitploit
Kitploit
added 2026/09/15 7:42 a.m.8 views

CVE-2023-35078

Herramienta de Explotación CVE-2023-35078 root@kitploit: ██████╗ ███╗ ██╗███████╗███████╗ ██████╗ ██╔═████╗████╗ ██║██╔════╝██╔════╝██╔════╝ ██║██╔██║██╔██╗ ██║███████╗█████╗ ██║ ████╔╝██║██║╚██╗██║╚════██║██╔══╝ ██║ ╚██████╔╝██║ ╚████║███████║███████╗╚██████╗ ╚═════╝ ╚═╝ ╚═══╝╚══════╝╚══════╝...

10CVSS8.5AI score0.99999EPSS
SaveExploits14
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.30 views

Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control

Apache ActiveMQ 6.x contains an unauthenticated API web context caused by default configuration lacking security measures in the Jetty server, letting anyone interact with broker APIs and messaging layers, exploit requires no authentication. id: CVE-2024-32114 info: name: Apache ActiveMQ 6.x 6.1....

8.8CVSS7.7AI score0.07148EPSS
SaveExploits1References4
Kitploit
Kitploit
added 2026/09/15 2:52 a.m.12 views

CVE-2025-50505

CVE-2025-50505 API no autorizada conduce a ejecución arbitraria de comandos y escalada de privilegios en Clash Verge Rev Descripción La vulnerabilidad se origina en un endpoint API no autenticado expuesto por el componente clash-verge-service, que se instala con privilegios elevados por defecto...

7.8CVSS5.9AI score0.00231EPSS
SaveExploits1References7
Kitploit
Kitploit
added 2026/09/15 12:43 a.m.7 views

CVE-2023-35078

CVE-2023-35078 shodan dorks You can use the following shodan dorks to find public targets. http.favicon.hash:362091310 http.favicon.hash:545827989 path=/mifs You can use the following to transform data from shodan API to format suitable for the checking script: root@kitploit: jq -cr...

10CVSS8.3AI score0.99999EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/15 12:12 a.m.6 views

rewerse-engineering

rewerse engineering Un cliente no oficial de la API de REWE en Go y Python. Implementa los endpoints de acceso público sin autenticación que la aplicación REWE utiliza para consultar descuentos actuales Angebote, productos, mercados y retiradas de productos. Versión de APK compatible actual: 5.16...

5.9AI score
SaveExploits0References15
Kitploit
Kitploit
added 2026/09/14 6:42 p.m.10 views

masq

Sit where the model sits. See what it can see. MASQ MASQ is a local security CLI for AI agent stacks. It sits in the same seat the model sits in: it reads MCP tool catalogs, completes the MCP handshake, looks through session logs, and probes local model HTTP ports. Then it prints findings and...

6AI score
SaveExploits0References1
CVE
CVE
added 2026/09/14 4:54 p.m.8 views

CVE-2026-57579

CVE-2026-57579 affects Alchemy CMS , an open-source Ruby on Rails content management system. The unauthenticated GET /api/pages/nested endpoint (in Api::PagesController#nested) performs no authorization and does not scope page descendants by the caller's ability, allowing anonymous callers to ret...

7.5CVSS0.00467EPSS
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/14 2:22 p.m.8 views

CVE-2020-13937

Descripción Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha tiene una API REST que expone la información de configuración de...

5.3CVSS5.9AI score0.78331EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 1:49 p.m.7 views

cve-2025-9074-poc

CVE-2025-9074 PoC educativo / Código de prueba de concepto Este repositorio contiene un PoC con fines educativos que demuestra el riesgo de explotar la API remota no autenticada de Docker Engine para crear un contenedor privilegiado con capacidad de lectura/escritura en el sistema de archivos del...

9.3CVSS8.1AI score0.01629EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/14 3:52 a.m.9 views

CVE-2025-9074-Docker-Desktop-API-Escape-PoC

🐚 docker-shell Un script bash ligero y sin dependencias que te proporciona un shell interactivo emulado dentro de un contenedor Docker — usando solo curl, dd, od y awk. Sin Python, sin jq, sin editor necesario. Creado para entornos donde solo tienes acceso raw a la terminal y necesitas ejecutar...

9.3CVSS8AI score0.01629EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/13 10:24 p.m.3 views

monitorsfour

MonitorsFour — HackTheBox Plataforma: HackTheBox SO: Windows Estado: Retirada — walkthrough completo publicado. Walkthrough completo: l3dsec.com/walkthroughs/monitorsfour-htb Cadena de ataque root@kitploit: Nmap → nginx 80 + WinRM 5985 → ffuf → cacti.monitorsfour.htb Cacti → endpoint de API no...

9.3CVSS0.54024EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/12 2:24 a.m.9 views

CVE-2023-35078-Exploit-POC

PoC del exploit CVE-2023-35078 La vulnerabilidad de acceso remoto no autenticado a la API CVE-2023-35078 ha sido descubierta en Ivanti Endpoint Manager Mobile EPMM, anteriormente conocido como MobileIron Core. Esta vulnerabilidad afecta a todas las versiones compatibles: versión 11.4, lanzamiento...

10CVSS8.5AI score0.99999EPSS
SaveExploits14References1
Kitploit
Kitploit
added 2026/09/10 5:43 a.m.6 views

CVE-2025-9074

CVE-2025-9074 – Escape total de Docker en Docker Desktop para Windows y macOS 📌 Descripción Docker Desktop expone la API interna del motor de Docker en http://192.168.65.7:2375 a cualquier contenedor en ejecución — sin autenticación ni control de acceso. Dado que el motor puede montar el sistema ...

9.3CVSS8.1AI score0.01629EPSS
SaveExploits15
NVD
NVD
added 2026/09/07 11:16 p.m.5 views

CVE-2026-86543

knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with no password required on fresh installations. Attackers can access the unauthenticated /api/tunnel/start endpoint to provision a public tunnel and republish the API at a publicl...

9.8CVSS0.00443EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/09/07 11:03 p.m.36 views

CVE-2026-86543 knowns before 0.30.0 Unauthenticated Management API Exposure

knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with no password required on fresh installations. Attackers can access the unauthenticated /api/tunnel/start endpoint to provision a public tunnel and republish the API at a publicl...

9.8CVSS0.00443EPSS
SaveExploits0References7
CVE
CVE
added 2026/09/07 11:03 p.m.17 views

CVE-2026-86543

knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with no password required on fresh installations. An unauthenticated attacker can access the /api/tunnel/start endpoint to provision a public tunnel and republish the API at a publi...

9.8CVSS5.7AI score0.00443EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/09/07 12:00 a.m.9 views

PT-2026-86936

knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with no password required on fresh installations. Attackers can access the unauthenticated /api/tunnel/start endpoint to provision a public tunnel and republish the API at a publicl...

9.8CVSS5.7AI score0.00443EPSS
SaveExploits0References12
NVD
NVD
added 2026/09/05 10:16 a.m.6 views

CVE-2026-86123

SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and execute arbitrary SQL queries against attacker-specified hosts. Attackers can connect to internal databases, execute SQL commands, enumerate schemas, and pivot into the server's...

9.4CVSS0.00332EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/02 7:22 p.m.20 views

CVE-2026-84452

Windows ML CLI (a command-line tool for building AI models for Windows) is vulnerable to arbitrary code execution via a CORS misconfiguration on its localhost HTTP API. Prior to version 0.4.0 , the cli_api.py and app.py components expose WinML CLI commands on localhost without authentication and ...

8.6CVSS6.3AI score0.00945EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/02 1:17 a.m.6 views

CVE-2026-84702

facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...

8.7CVSS0.00375EPSS
SaveExploits0References6
Rows per page
Query Builder