Lucene search
+L

619641 matches found

Kitploit
Kitploit
β€’added 2026/09/23 8:04 a.m.β€’9 views

CVE-2025-32463-PoC

CVE-2025-32463 – Privilege Escalation via Sudo chroot πŸ“ Overview CVE-2025-32463 is a local privilege escalation vulnerability affecting the sudo utility. It allows a regular user to escalate privileges to root by exploiting the -R option which sets a custom runtime root directory together with...

9.3CVSS7.7AI score0.61039EPSS
SaveExploits71
Kitploit
Kitploit
β€’added 2026/09/23 8:04 a.m.β€’6 views

CVE-2021-3156

CVE-2021-3156 Description Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character...

7.8CVSS7.4AI score0.99969EPSS
SaveExploits83
Kitploit
Kitploit
β€’added 2026/09/23 8:02 a.m.β€’9 views

Confluence-Question-CVE-2022-26138-

Confluence-Question-CVE-2022-26138 Atlassian Confluence Server and Data Center: CVE-2022-26138 When the 'Questions for Confluence' app is installed and enabled on Confluence Server or Data Center, it creates a Confluence user account with the username 'disabledsystemuser' and password...

9.8CVSS8.4AI score0.9817EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/23 8:00 a.m.β€’7 views

CVE-2022-41272

CVE-2022-41272 On this repository, we will briefly write information about the CVE-2022-41272 vulnerability. The vulnerability exists on the SAP P4 service that runs on the 5NN04 port. Where NN is an instance number, that can be from 00-99. There are remote call functions that an attacker can cal...

9.9CVSS7AI score0.01028EPSS
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/23 7:56 a.m.β€’7 views

CVE-2020-10238

Made by HK CVE-2020-10238: Incorrect Access Control in comtemplates- RCE CVE-2020-10239: Incorrect Access Control in comfields SQL field- RCE Link https://developer.joomla.org/security-centre/804-20200303-core-incorrect-access-control-in-com-templates.html...

8.8CVSS7.8AI score0.04863EPSS
SaveExploits2
Kitploit
Kitploit
β€’added 2026/09/23 7:51 a.m.β€’10 views

CVE-2024-21893.py

CVE-2024-21893 is server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication. run python CVE-2024-21893.py -u...

8.2CVSS8.4AI score0.99999EPSS
SaveExploits5
Kitploit
Kitploit
β€’added 2026/09/23 7:51 a.m.β€’20 views

KslDump

KslDump - BMVD Bring the Microsoft Vulnerable Driver Important context I reported the issue to Microsoft on 7 March 2026. However, almost 20 days earlier, the game-hacking community had already reversed and publicly discussed it. From my side, I do not follow their projects and I was not aware of...

5.9AI score
SaveExploits0References5
EUVD
EUVD
β€’added 2026/09/23 7:51 a.m.β€’4 views

EUVD-2026-85133

When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks required by the specification. As a result, a trusted malicious PDF could potentially access sensitive content from other documents within the same process and transmit it...

4.7CVSS
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/23 7:51 a.m.β€’18 views

sisu

sisu ⚑ Your AWS, as a filesystem. This: root@kitploit: grep -l "AdministratorAccess" iam/users//policies.json Instead of this: root@kitploit: aws iam list-users --query 'Users.UserName' --output text | \ xargs -I sh -c 'aws iam list-attached-user-policies --user-name --query...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/23 7:49 a.m.β€’38 views

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

6AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/23 7:35 a.m.β€’9 views

CVE-2024-20767

CVE-2024-20767 CVE-2024-20767 - Arbitrary file system read using an Improper Access Control vulnerability in Adobe ColdFusion Please refer to ma4ter blogpost for more information: Adobe ColdFusionδ»»ζ„ζ–‡δ»Άθ―»ε–ζΌζ΄žCVE-2024-20767εˆ†ζž Products and Versions affected:...

7.4CVSS7.9AI score0.98514EPSS
SaveExploits7
Kitploit
Kitploit
β€’added 2026/09/23 7:30 a.m.β€’14 views

CVE-2022-22639

Details See Blog: https://www.trendmicro.com/enus/research/22/d/macos-suhelper-root-privilege-escalation-vulnerability-a-deep-di.html Exploitation of CVE-2022-22639 1. Compile with command: clang exploit.m -o /tmp/exploit -framework Foundation -fobjc-arc -fobjc-link-runtime...

7.8CVSS7.5AI score0.08191EPSS
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/23 7:29 a.m.β€’10 views

cve-2021-4034

cve-2021-4034 PoC for cve-2021-4034 Based on the PoC by https://haxx.in: https://haxx.in/files/blasty-vs-pkexec.c. Probably he's https://github.com/blasty?! I don't know. With a little help from https://github.com/daimoniac How to use? Compile cve-2021-4034.c root@kitploit: gcc -Wall...

7.8CVSS7.2AI score0.94921EPSS
SaveExploits155References3
Kitploit
Kitploit
β€’added 2026/09/23 7:29 a.m.β€’5 views

exploit-grafana-CVE-2021-43798

CVE-2021-43798 – Grafana Exploit About This is a proof-of-concept exploit for Grafana's Unauthorized Arbitrary File Read Vulnerability CVE-2021-43798. This vulnerability affects Grafana 8.0.0-beta1 to 8.3.0. According to Shodan data, there are just over 2,000 Grafana servers exposed online, with...

7.5CVSS8.1AI score0.88503EPSS
SaveExploits48
Kitploit
Kitploit
β€’added 2026/09/23 7:27 a.m.β€’11 views

CVE-2024-3656

Keycloak 24.0.5 is vulnerable to Broken Access Control vulnerability, where the attacker can use any authenticated user to perform some api action such as : Test LDAP connections via the testLDAPConnection endpoint. Retrieve unmanaged attributes of any user via the getUnmanagedAttributes endpoint...

8.1CVSS7.5AI score0.02862EPSS
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/23 7:26 a.m.β€’7 views

CVE-2021-21123-PoC-Google-Chrome

πŸ“ Description Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski Total Bug Bounty Reward: $5.000 This is Proof of Concept for: Google SecuritySeverity CVE HIGH CVE-2021-21123 MEDIUM CVE-2021-21129 MEDIUM CVE-2021-21130 MEDIUM CVE-2021-21131 MEDIUM CVE-2021-2117...

8.1CVSS6.5AI score0.1091EPSS
SaveExploits1References1
Kitploit
Kitploit
β€’added 2026/09/23 7:24 a.m.β€’13 views

Hwacha

Hwacha https://www.n00py.io/2017/12/raining-shells-on-linux-environments-with-hwacha/ Hwacha is a tool to quickly execute payloads on Nix based systems. Easily collect artifacts or execute shellcode on an entire subnet of systems for which credentials are obtained. root@kitploit: $python hwacha.p...

6.2AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/23 7:22 a.m.β€’11 views

Microsoft365_devicePhish

Microsoft365devicePhish Abusing Microsoft 365 OAuth Authorization Flow for Phishing Attack This is a simple proof-of-concept script that allows an attacker to conduct a phishing attack against Microsoft 365 OAuth Authorization Flow. Using this, one can connect to Microsoft's OAuth API endpoints t...

6AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/23 7:18 a.m.β€’14 views

ClickOnceBlobber

ClickOnce AppDomainManager Injection Toolkit Weaponize signed .NET ClickOnce applications for initial access by hijacking a dependency DLL via AppDomainManager injection and loading a C port of ProxyBlob Agent. Ships with a C port of ProxyBlob β€” a SOCKS5 proxy that tunnels all traffic through Azu...

6AI score
SaveExploits0References3
Kitploit
Kitploit
β€’added 2026/09/23 7:14 a.m.β€’8 views

WebSecProbe

.png WebSecProbe is a security testing utility designed for web security researchers, penetration testers, and system administrators to analyze HTTP 403 Forbidden responses and access control behavior in web applications. The tool assists in identifying misconfigurations, inconsistent authorizati...

5.8AI score
SaveExploits0
Rows per page
Query Builder