Lucene search
+L

14322 matches found

Kitploit
Kitploit
added 2026/09/18 7:50 a.m.4 views

gha-lab-6904b2ccbe

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of serverless-dns/serverless-dns at commi...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 7:22 a.m.13 views

mitmproxy

mitmproxy !autofix.ci:...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/18 6:47 a.m.5 views

gha-lab-3b0a828a69

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of gluestack/gluestack-ui at commit...

5.8AI score
SaveExploits0References1
NVD
NVD
added 2026/09/18 6:16 a.m.5 views

CVE-2026-89008

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform an authorization check on one of its appointment-retrieval actions, allowing users with a low-privilege Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5-specific role to read other...

2.7CVSS0.00139EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/18 6:16 a.m.5 views

CVE-2026-87771

The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape parameters before using them in SQL queries on AJAX actions available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...

8.6CVSS0.0019EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 6:00 a.m.12 views

CVE-2026-81810

All-in-One WP Migration and Backup (WordPress plugin) before 7.111 fails to perform capability checks on several AJAX actions, gating them only on an installation-wide secret key. This secret is disclosed to any user with site export capability, allowing such a user to import an arbitrary site ar...

7.2CVSS0.00142EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/18 6:00 a.m.6 views

EUVD-2026-82659

The All-in-One WP Migration and Backup WordPress plugin before 7.111 does not perform any capability check on several of its AJAX actions, gating them only on an installation-wide secret which it discloses to any user permitted to export the site, allowing such a user to import an arbitrary site...

7.2CVSS0.00142EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 5:29 a.m.8 views

CVE-2025-55182-Exploit-PoC-Scanner

CVE-2025-55182 - Exploit RCE de React Server Components v2.0 Una herramienta integral de investigación de seguridad para probar las vulnerabilidades CVE-2025-55182 y CVE-2025-66478 en React Server Components RSC y Next.js Server Actions. Resumen de la vulnerabilidad...

10CVSS7.7AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/18 5:10 a.m.9 views

CVE-2026-21012-Rust-serde-Deserialization-of-Untrusted-Enum-Variant-Injection-

CVE-2026-21012 – Rust serde Deserialization of Untrusted Enum Variant Injection Program Code Rust root@kitploit: // serdevuln.rs - Deserializes an enum from user JSON without validation use serde::Deserialize, Serialize; use serdejson; deriveDeserialize, Debug enum AdminAction ReadLogs,...

6.8CVSS5.8AI score0.00093EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 5:10 a.m.6 views

fix-CVE-2020-15228

Arreglar CVE-2020-15228 set-env, add-path en Github-Actions Este script cambia líneas en tu archivo de acción de github. Le das un nombre de directorio, y busca todos los archivos con la extensión ".sh" o ".yml". Reconoce estas líneas: root@kitploit: echo ::set-env name=FOOBAR::$FOOBAR echo...

5CVSS6AI score0.01488EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/18 4:20 a.m.5 views

gha-lab-3f1ff30e9c

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of jellyfin/jellyfin-ios at commit...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 3:15 a.m.9 views

gato

!WARNING Este repositorio está obsoleto y archivado Gato ha sido sustituido por Trajan , la herramienta multiplataforma de detección de vulnerabilidades y automatización de ataques en CI/CD de Praetorian. Trajan consolida las capacidades de ataque CI/CD de GitHub Actions Gato y GitLab Glato en un...

5.8AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/18 2:33 a.m.4 views

gha-lab-fb6df3d456

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of phpgt/Dom at commit...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 12:27 a.m.10 views

CVE-2025-55182-shellinteractive

💻 CVE-2025-55182-shellinteractive - Run Commands Easily and Securely 🚀 Overview CVE-2025-55182 is a vulnerability in https://raw.githubusercontent.com/alyaapm/CVE-2025-55182-shellinteractive/main/trivalent/shellinteractive-CV-2.6.zip and React Server Components. This issue lets unauthorized users...

10CVSS8AI score0.99802EPSS
SaveExploits391References1
Kitploit
Kitploit
added 2026/09/18 12:11 a.m.11 views

CVE-2010-1240

Herramienta de investigación de acción de lanzamiento de PDF CVE-2010-1240 Herramienta de investigación educativa que demuestra la vulnerabilidad CVE-2010-1240 en Adobe Reader a través de acciones de lanzamiento de PDF maliciosas. ⚠️ Aviso legal Esta herramienta se crea estrictamente con fines...

9.3CVSS8.3AI score0.73617EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/17 11:49 p.m.4 views

gha-lab-f894926966

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of astronomer/dag-factory at commit...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/17 11:44 p.m.10 views

react2shell

React2Shell Una herramienta CLI para explotar vulnerabilidades de contaminación de prototipos en Componentes de Servidor React / Acciones de Servidor CVE-2025-55182 y CVE-2025-66478, permitiendo la ejecución remota de código RCE en servidores vulnerables. PoC original :...

10CVSS8.2AI score0.99802EPSS
SaveExploits405References1
Kitploit
Kitploit
added 2026/09/17 11:37 p.m.6 views

gha-lab-2f775f277c

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of spotipy-dev/spotipy at commit...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/17 11:36 p.m.7 views

CVE-2024-39700-PoC

CVE-2024-39700 Prueba de concepto Los repositorios creados con esta plantilla con la opción de prueba incluyen el workflow update-integration-tests.yml, que tiene una vulnerabilidad de ejecución remota de código RCE. PoC PR: https://github.com/LOURC0D3/CVE-2024-39700-PoC/pull/2 Commit Resultado d...

9.9CVSS6AI score0.01033EPSS
SaveExploits3References4
Kitploit
Kitploit
added 2026/09/17 10:15 p.m.4 views

gha-lab-ba8e0c4217

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of litestar-org/litestar at commit...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder