Lucene search
+L

632793 matches found

Kitploit
Kitploit
•added 2026/09/24 11:31 a.m.•12 views

Privilege-escalation-MitraStar

Privilege-escalation-MitraStar-Router-GPT-2541GNAC-N1 CVE-2021-42165 Vulnerabilidad de escalada de privilegios en routers MitraStar Dispositivo: Mitrastar GPT-2541GNAC-N1 Firmware: BRg3.5100VNZ0b33 no probado en otras versiones Exploit: Los dispositivos Mitrastar GPT-2541GNAC-N1 proporcionan acce...

9CVSS8.1AI score0.14104EPSS
SaveExploits2
CVE
CVE
•added 2026/09/24 11:31 a.m.•8 views

CVE-2026-4806

The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable in all versions up to and including 1.1.2 . The root cause is a missing capability check on the save_option() function, which allows unauthenticated attackers to perform unauthorized settings export or settings reset (de...

6.5CVSS5.7AI score
SaveExploits0References2
CVE
CVE
•added 2026/09/24 11:31 a.m.•7 views

CVE-2026-16302

The Spectra Legacy – Gutenberg Blocks plugin for WordPress (versions up to and including 2.20.0 ) is vulnerable to Sensitive Information Exposure . The root cause is a missing capability check in the editor_assets function, which exposes the uag_insta_linked_accounts option via the uagb_blocks_in...

4.3CVSS5.7AI score
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 11:31 a.m.•5 views

EUVD-2026-85855

The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized access and loss of data due to a missing capability check on the saveoption function in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to to export or...

6.5CVSS5.7AI score
SaveExploits0References2
CVE
CVE
•added 2026/09/24 11:31 a.m.•7 views

CVE-2026-3253

The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to unauthorized modification of data in versions up to and including 1.7.21 . The root cause is a missing capability check on the forms() method of the AdminController class. This vulnerability allows authenticated attack...

4.3CVSS5.8AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/24 11:28 a.m.•9 views

citrix-cve-2021-22941-lab

⚠️ Aviso legal Esta es una simulación simulada de la vulnerabilidad CVE-2021-22941 con fines de prueba. El servidor simulado replica el comportamiento vulnerable real donde el endpoint Upload.aspx es accesible sin autenticación y devuelve respuestas LocalFile GUID, según lo documentado en los...

10CVSS8.4AI score0.53585EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 11:28 a.m.•12 views

CVE-2024-1209

CVE-2024-1209 Exposición de información sensible mediante assignments en LearnDash. Los visitantes no autenticados pueden explorar y descargar los assignments subidos. Vulnerabilidad: CVE-2024-1209 Exposición de información sensible mediante assignments CVSS: 5.3 Media Software: LearnDash sfwd-lm...

5.3CVSS7AI score0.02399EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 11:25 a.m.•15 views

wlctl

wlctl WiFi TUI for NetworkManager. Why impala is a great wifi TUI but it talks to iwd. If your distro already runs NetworkManager most do — GNOME, KDE, Ubuntu, Fedora, Pop, …, you can't drop impala in without ripping the stack out. wlctl keeps the impala UX and points it at NetworkManager, so it...

6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/24 11:24 a.m.•23 views

conjur

Conjur Maintainability Test Coverage Conjur provides secrets management and application identity for modern infrastructure: Machine Authorization Markup Language "MAML" , a role-based access policy language to define system components & their roles, privileges and metadata A REST web service to:...

6AI score
SaveExploits0References17
Kitploit
Kitploit
•added 2026/09/24 11:20 a.m.•8 views

CVE-2024-41107

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ 🚀 CVE-2024-41107...

8.1CVSS8.4AI score0.1776EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 11:20 a.m.•19 views

OpenAM

Open Access Management OpenAM es una solución de gestión de accesos que incluye Autenticación, SSO, Autorización, Federación, Entitlements y Seguridad de Servicios Web. Cross Domain Single Sign On CDSSO, SAML 2.0, OAuth 2.0 y OpenID Connect garantizan que OpenAM se integre fácilmente con...

5.9AI score
SaveExploits0References17
Kitploit
Kitploit
•added 2026/09/24 11:18 a.m.•12 views

hostapd-mana

hostapd-mana Overview A featureful rogue access point first presented at Defcon 22 by Dominic White @singe & Ian de Villiers @ sensepost [email protected] Documentation Check the wiki for information of getting and using hostapd-mana. Features KARMA/MANA Mode - respond to any device looking...

5.9AI score
SaveExploits0References2
NVD
NVD
•added 2026/09/24 11:16 a.m.•4 views

CVE-2026-79680

Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module. An attacker using a specially modified VNC client that violates the RFB protocol can bypass Qt VNC Server's password authentication and gain unauthorized remote access to the shared...

7.4CVSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/24 11:16 a.m.•12 views

CVE-2020-11547--PRTG-Network-Monitor-Information-Disclosure

PRTG-Network-Monitor-Information-Disclosure - CVE-2020-11547 Remote unauthenticated user can craft an HTTP request in /public/login.htm or /index.htm by providing the 'type' parameter. Example: http://127.0.0.1/public/login.htm?type=probes replace probes by any of the following to get diferent in...

5.3CVSS6.1AI score0.52059EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 11:15 a.m.•17 views

njutils

njutils ./njclient.py 192.168.56.101 5552 -k "You won't find keylogs here" -u "5k1d d357r0y3r" -p "m41nfr4m3-3000" -f "TRACKING LOCATION - PREPARING DRONE STRIKE" -o "Mac OSX 9.9" Usa la opción -K de njclient.py para abrir tu arte ASCII l33t al conectarte correctamente. Ejemplo: ./njclient.py...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 11:14 a.m.•10 views

CVE-2021-24741

CVE-2021-24741 Multiple SQL Injection Unauthenticated in Support Board v 3.3.3 Description root@kitploit: Support Board V 3.3.3 Multiple SQL Injection Vulnerability in Support Board Version 3.3.3 that allow remote unauthenticated attacker to execute arbitrary SQL commands via statuscode,...

9.8CVSS8.6AI score0.05603EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/24 11:13 a.m.•17 views

CVE-2023-27163-POC

CVE-2023-27163 CVE-2023-27163 Request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request. This POC utilizes the...

6.5CVSS6.6AI score0.06591EPSS
SaveExploits29
Kitploit
Kitploit
•added 2026/09/24 11:13 a.m.•15 views

Pegasus---Forbidden-Buster

Pegasus - Forbidden Buster Author: Letda Kes dr. Sobri, S.Kom. A penetration testing tool for bypassing HTTP 401/403 responses using various header manipulation techniques and path fuzzing. Features Tests various header manipulations X-Forwarded-For, X-Original-URL, X-Rewrite-URL, etc. Unicode pa...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 11:12 a.m.•10 views

cve-2018-10933

CVE-2018-10933 CVE-2018-10933 omisión de autenticación de libssh, un contenedor Docker vulnerable que escucha en el puerto 2222 para explotación. Un parche básico de prueba de concepto de libssh incluido en el contenedor para omitir la autenticación. Para iniciar sesión use el "myuser" /...

9.1CVSS7.9AI score0.91789EPSS
SaveExploits13
Kitploit
Kitploit
•added 2026/09/24 11:12 a.m.•13 views

cve-2018-10933

CVE-2018-10933 CVE-2018-10933 libssh authentication bypass, a vulnerable Docker container that listens on port 2222 for exploitation. A basic proof-of-concept libssh patch included in the container to bypass auth. To login use the default "myuser" / "mypassword" from libssh. A patch is applied to...

9.1CVSS8AI score0.91789EPSS
SaveExploits13
Rows per page
Query Builder