Lucene search
+L

7521 matches found

Kitploit
Kitploit
added 2026/09/07 12:21 p.m.6 views

dtrace-memaccess_cve-2020-27949

Lectura y escritura de memoria de otros procesos usando fasttrap El dispositivo /dev/fasttrap para crear nodos de trampa en procesos de espacio de usuario para los proveedores pid y objc tiene los permisos 666. En contraste con /dev/dtrace, que también es 666, fasttrap carece de una verificación ...

5.5CVSS6.8AI score0.00977EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/07 10:47 a.m.9 views

CVE-2021-27876

CVE-2021-27876 Unauthenticated RCE exploit for Veritas Backup Exec Agent CVE-2021-27876/77/78 — SHA auth bypass to SYSTEM via NDMP CVEs CVE| Description| CVSS 3.1 ---|---|--- CVE-2021-27876| Authentication bypass via SHA hash manipulation in the NDMP protocol| 9.8 Critical CVE-2021-27877|...

9.8CVSS8AI score0.6491EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/07 4:06 a.m.8 views

CVE-2026-45321-Tanstack

Simulación de Ataque a la Cadena de Suministro — CVE-2026-45321 TanStack Laboratorio educativo para comprender los ataques a la cadena de suministro de npm, el abuso de CI/CD y la ejecución de código en el momento de la instalación. Descargo de responsabilidad Este proyecto se crea únicamente par...

9.6CVSS8.4AI score0.02342EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/07 12:47 a.m.7 views

CVE-2026-45321-Tanstack

Simulación de Ataque a la Cadena de Suministro — CVE-2026-45321 TanStack Laboratorio educativo para entender ataques a la cadena de suministro de npm, abuso de CI/CD y ejecución de código en tiempo de instalación Descargo de responsabilidad Este proyecto se ha creado únicamente para: aprendizaje ...

9.6CVSS8.4AI score0.02342EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/06 4:37 p.m.4 views

CVE-2023-27350

CVE-2023-27350 POC para CVE-2023-27350 que afecta a PaperCut MF/NG Versiones afectadas 'PaperCut MF o NG versión 8.0 o posterior excluyendo versiones parcheadas en todas las plataformas OS.' Resumen Este POC utiliza una vulnerabilidad de omisión de autenticación encadenada con el abuso de la...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits24
NVD
NVD
added 2026/09/06 4:16 p.m.5 views

CVE-2026-19633

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbitrary code by abusing operators, domain casts, or view subqueries that carry untrusted expressions. When these objects are evaluated in the context of the extension’s masking mechanisms, the...

8.8CVSS0.00362EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/06 3:26 p.m.6 views

DiagTrackEoP

DiagTrackEoP Just another way to abuse SeImpersonate privilege. This PoC is based on this blog by @crisprss. In this blog @crisprss showed some interesting method to abuse SeImpersonate privilege using AzureAttestService which comes with recent verions of SQL server, PoC for that can be found her...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/06 3:18 p.m.8 views

Blackhat-USA-2022-Materials

Black Hat USA 2022 Presentation Materials Presentation materials for my Black Hat USA 2022 Briefing and Arsenal talks Black Hat USA Briefing - Controlling the Source: Abusing Source Code Management Systems Description...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/06 1:42 p.m.5 views

CVE-2023-3460

🚨 CVE-2023-3460 - Exploit de escalada de privilegios en WordPress Ultimate Member Este es un exploit de prueba de concepto PoC para CVE-2023-3460, una vulnerabilidad crítica en el plugin de WordPress Ultimate Member. Permite a usuarios no autenticados escalar sus privilegios a Administrador...

9.8CVSS8.5AI score0.72306EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/06 1:12 p.m.5 views

CVE-2025-27591

CVE-2025-27591 – Escalada de Privilegios mediante Abuso de Enlace Simbólico en below 🛑 Aviso : Este exploit se proporciona solo con fines educativos y de pruebas de seguridad autorizadas. El uso no autorizado puede ser ilegal. 🧠 Resumen below es una herramienta de monitoreo de rendimiento...

6.8CVSS7.2AI score0.00364EPSS
SaveExploits23References1
Positive Technologies
Positive Technologies
added 2026/09/06 12:00 a.m.13 views

PT-2026-86535

Name of the Vulnerable Software and Affected Versions PostgreSQL Anonymizer versions prior to 3.1.4 Description Unprivileged masked users can execute arbitrary code by abusing operators, domain casts, or view subqueries that contain untrusted expressions. This occurs when these objects are...

8.8CVSS0.00362EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/05 8:16 p.m.6 views

CVE-2023-34468

CVE-2023-34468 — PoC de RCE mediante H2 RUNSCRIPT en ExecuteSQL de Apache NiFi PoC corto en Python para abusar de un procesador ExecuteSQL editable de Apache NiFi con una carga útil RUNSCRIPT de H2 para desencadenar la ejecución remota de comandos a través de una reverse shell de Bash. Solo para...

8.8CVSS8.1AI score0.61869EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/05 3:34 p.m.6 views

Abused-Legitimate-Services

Abused Legitimate Services Legitimate third-party Platform-as-a-Service PaaS providers are becoming increasingly leveraged by threat actors for phishing and malware deployment. PaaS providers such as cloud instances, marketing platforms, content delivery networks CDN, and dynamic DNS servers have...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/05 3:10 p.m.9 views

CVE-2023-40028

Exploit CVE-2023-40028 Este script explota una vulnerabilidad en Ghost CMS, permitiendo la lectura arbitraria de archivos mediante el abuso de enlaces simbólicos. Características Crea un enlace simbólico al archivo destino Comprime el payload en un archivo ZIP Sube el archivo ZIP a través de la A...

6.5CVSS6.7AI score0.68737EPSS
SaveExploits12
EUVD
EUVD
added 2026/09/05 6:00 a.m.8 views

EUVD-2026-71875

The EmbedPress WordPress plugin before 4.6.4 does not have proper authorization on a public review-loading action, allowing unauthenticated users to force the site to make repeated billable third-party API requests using the site's own configured API key, and to create an unbounded number of...

5.2AI score0.00182EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/04 7:17 a.m.5 views

CVE-2026-79632

The WPFunnels WordPress plugin before 3.13.0 does not perform any authorisation or nonce check in one of its opt-in submission handlers, and takes the notification recipients and subject from the request, allowing unauthenticated users to make the site send emails to arbitrary recipients with an...

5.3CVSS0.00182EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/04 7:17 a.m.5 views

CVE-2026-79630

The WPFunnels WordPress plugin before 3.13.0 does not verify that the product requested through a checkout order bump is the product that bump's discount was configured for, allowing unauthenticated users to obtain any purchasable product at a discount intended for a different one, with the reduc...

5.3CVSS0.00182EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/03 7:17 p.m.10 views

CVE-2026-78596

Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization CWE-862 in Kibana can lead to unauthorized modification of data via Privilege Abuse CAPEC-122. An authenticated user holding Security read-level access in a single Kibana space could trigger Entit...

4.3CVSS0.00152EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/03 7:17 p.m.9 views

CVE-2026-78595

Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization CWE-862 in the Kibana Fleet feature can lead to information disclosure via Privilege Abuse CAPEC-122. An authenticated user holding read-level Fleet agent privileges in one Kibana space could enumerate agent...

4.3CVSS0.00166EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 6:35 p.m.25 views

CVE-2026-78596

Kibana (versions 8.19.2, 9.4.6, 9.5.3 ) is affected by a Missing Authorization flaw (CWE-862) in Entity Analytics migration operations . An authenticated user holding only Security read-level access in a single Kibana space can trigger these migration operations, which perform privileged writes a...

4.3CVSS5.9AI score0.00152EPSS
SaveExploits0References1
Rows per page
Query Builder