Lucene search
+L

632801 matches found

EUVD
EUVD
•added 2026/09/24 1:32 p.m.•5 views

EUVD-2026-85880

HFS2 version 2.4.0 and earlier contains an unauthenticated arbitrary file access vulnerability that allows unauthenticated attackers to read, write, append, and delete files anywhere the HFS service account has filesystem access outside the shared folder. Attackers can exploit the macro...

10CVSS6.1AI score
SaveExploits0References2
Malwarebytes
Malwarebytes
•added 2026/09/24 1:22 p.m.•5 views

OpenAI agent breached Australian government site, took months to report it

An OpenAI agent didn’t take “no” for an answer when it encountered a government website’s access controls. It got through, prompting Australia’s Prime Minister Anthony Albanese to raise his concerns directly with OpenAI CEO Sam Altman. The BBC reports that an OpenAI agent gained unauthorized acce...

5.8AI score
SaveExploits0
Cvelist
Cvelist
•added 2026/09/24 1:20 p.m.•8 views

CVE-2026-91187 Improper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategy

Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...

9.3CVSS
SaveExploits0References5
CVE
CVE
•added 2026/09/24 1:20 p.m.•7 views

CVE-2026-91187

The dashbit nimble_zta library (versions 0.1.2 before 0.1.3 ) contains an improper verification of cryptographic signature vulnerability. Specifically, the verify_token/2 function in lib/nimble_zta/cloudflare.ex calls JOSE.JWT.verify/2 but fails to check the boolean verification result, returning...

9.3CVSS6.1AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 1:20 p.m.•5 views

EUVD-2026-85871

Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary Cloudflare service token. Applications using the Cloudflare Zero Trust authentication strategy are affected. verifytoken/2 in...

9.3CVSS6.1AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/24 1:10 p.m.•10 views

xzbot

xzbot Exploration of the xz backdoor CVE-2024-3094. Includes the following: honeypot: fake vulnerable server to detect exploit attempts ed448 patch: patch liblzma.so to use our own ED448 public key backdoor format: format of the backdoor payload backdoor demo: cli to trigger the RCE assuming...

10CVSS8.7AI score0.85974EPSS
SaveExploits41References1
Kitploit
Kitploit
•added 2026/09/24 1:10 p.m.•12 views

spydir

Usage: spydir.exe Monitor directory changes with all subdirectories For any files, including ones you have no access CVE-2007-0843 as on January, 2007 c Vladimir Dubrovin, 3APA3A http://securityvulns.com http://securityvulns.ru This approach is not reliable and should not be used for audit and...

4.6CVSS5.7AI score0.03388EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/24 1:10 p.m.•8 views

CVE-2022-26138

CVE-2022-26138 1.Introduction Confluence Hardcoded Password POC 2.Usage root@kitploit: poc -f host.txt // 批量扫描 poc -h 192.168.1.1 // 单个扫描 3.Disclaimer This tool is only for learning, research, and self-checking. It should not be used for illegal purposes. Please comply with relevant laws and...

9.8CVSS8.8AI score0.9817EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 1:10 p.m.•10 views

CVE-2025-29927_demo

CVE-2025-29937 Reproduction Steps root@kitploit: npm i npm run dev curl -H "x-middleware-subrequest: middleware:middleware:middleware:middleware:middleware" http://localhost:3000/protected...

9.1CVSS7.7AI score0.99225EPSS
SaveExploits59
Kitploit
Kitploit
•added 2026/09/24 1:08 p.m.•14 views

Grafana-CVE-2021-43798

CVE-2021-43798 Grafana Unauthorized arbitrary file reading vulnerability 8.3.1 2021-12-07 Security: Fixes CVE-2021-43798 . For more information, see our blog https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/ Example: get db password...

7.5CVSS8.4AI score0.88503EPSS
SaveExploits48References2
RedHat Linux
RedHat Linux
•added 2026/09/24 1:08 p.m.•5 views

kernel: xfrm: ah6: validate routing header segments_left

A flaw was found in the Linux kernel's xfrm subsystem, specifically within the AH6 Authentication Header for IPv6 module. The ipv6rearrangerthdr function does not properly validate the segmentsleft field in routing headers when processing raw IPv6 HDRINCL packets. This oversight allows an attacke...

5.8AI score0.00434EPSS
SaveExploits2References6
RedHat Linux
RedHat Linux
•added 2026/09/24 1:08 p.m.•5 views

kernel: pppoe: reload header pointer after dev_hard_header()

A flaw was found in the Linux kernel's PPPoE Point-to-Point Protocol over Ethernet implementation. This vulnerability occurs because a pointer to network packet data is not updated after memory is reallocated, leading to the use of an outdated memory address. An attacker with local access could...

7.8CVSS5.8AI score0.00176EPSS
SaveExploits2References6
Kitploit
Kitploit
•added 2026/09/24 1:07 p.m.•8 views

k8s-CVE-2021-43557-poc

Installation install minikube install apisix: root@kitploit: helm repo add apisix https://charts.apiseven.com helm repo add bitnami https://charts.bitnami.com/bitnami helm repo update kubectl create ns ingress-apisix helm install apisix apisix/apisix \ --set gateway.type=NodePort \ --set...

7.5CVSS7.6AI score0.1294EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 1:07 p.m.•12 views

fortipwn

fortipwn Forti CVE-2022-40684 enumeration script built in Rust. Uploads an SSH public key into authorizedkeys, allowing an attacker to SSH into a server running FortiOS as admin. Usage root@kitploit: $ ./fortipwn Build root@kitploit: $ git clone https://github.com/Grapphy/fortipwn/ $ cd fortipwn ...

9.8CVSS8.6AI score0.99984EPSS
SaveExploits25
Kitploit
Kitploit
•added 2026/09/24 1:07 p.m.•18 views

CVE-2017-15944-POC

CVE-2017-15944-POC POC For CVE-2017-15944 Palo Alto Networks firewalls remote root code execution Usage root@kitploit: python panos-poc.py https://panip...

9.8CVSS8.4AI score0.98303EPSS
SaveExploits13
Kitploit
Kitploit
•added 2026/09/24 1:07 p.m.•9 views

CVE-2025-45250

CVE-2025-45250 Suggested description root@kitploit: MrDoc =0.95 is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file. POC root@kitploit: POST /uploaddocimg/ HTTP/1.1 Host: ip:port Accept-Encoding: gzip, deflate DNT: 1 Cookie: your cookie...

6.2AI score0.0028EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 1:07 p.m.•7 views

CVE-2022-26134

CVE-2022-26134 CVE-2022-26134 - Confluence Pre-Auth RCE | OGNL injection Download PoC script root@kitploit: git clone https://github.com/crowsec-edtech/CVE-2022-26134 cd CVE-2022-26134 Run exploit root@kitploit: USE: python3 exploit.py https://target.com CMD Ex: python3 exploit.py...

9.8CVSS8.7AI score0.99999EPSS
SaveExploits77
RedHat Linux
RedHat Linux
•added 2026/09/24 1:07 p.m.•3 views

kernel: pppoe: reload header pointer after dev_hard_header()

A flaw was found in the Linux kernel's PPPoE Point-to-Point Protocol over Ethernet implementation. This vulnerability occurs because a pointer to network packet data is not updated after memory is reallocated, leading to the use of an outdated memory address. An attacker with local access could...

7.8CVSS5.8AI score0.00176EPSS
SaveExploits2References6
RedHat Linux
RedHat Linux
•added 2026/09/24 1:07 p.m.•3 views

kernel: xfrm: ah6: validate routing header segments_left

A flaw was found in the Linux kernel's xfrm subsystem, specifically within the AH6 Authentication Header for IPv6 module. The ipv6rearrangerthdr function does not properly validate the segmentsleft field in routing headers when processing raw IPv6 HDRINCL packets. This oversight allows an attacke...

5.8AI score0.00434EPSS
SaveExploits2References6
Kitploit
Kitploit
•added 2026/09/24 1:07 p.m.•10 views

CVE-2026-6279

╔══════════════════════════════════════════════════════════════╗ ║ CVE-2026-6279 · Avada Builder = 3.15.2 ║ ║ Unauthenticated RCE via calluserfunc ║ ╚══════════════════════════════════════════════════════════════╝ 📋 Summary...

9.8CVSS5.8AI score0.02387EPSS
SaveExploits5
Rows per page
Query Builder