Lucene search
+L

345 matches found

Kitploit
Kitploit
added 2026/09/06 4:29 a.m.7 views

Cisco_CVE-2023-20198

CiscoCVE-2023-20198 Cisco CVE-2023-20198 👉 Cisco advirtió sobre una vulnerabilidad crítica de omisión de autenticación zero-day CVE-2023-20198 en su software IOS XE que permite a atacantes no autenticados obtener privilegios administrativos completos. 👨‍💻 La vulnerabilidad solo afecta a...

10CVSS8.1AI score0.99571EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/06 3:27 a.m.5 views

CVE-2025-5777-TrendMicro-ApexCentral-RCE

🚨 CVE-2025-5777 – Omisión de Autenticación + RCE en Trend Micro Apex Central 🔎 Resumen CVE-2025-5777 es una vulnerabilidad crítica de omisión de autenticación y ejecución remota de código RCE descubierta en Trend Micro Apex Central. Permite a atacantes no autenticados ejecutar comandos arbitrario...

9.3CVSS8.7AI score0.99962EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/06 2:47 a.m.6 views

blackash-cve-2025-6389

🔥 CVE-2025-6389 — Critical WordPress Zero-Day RCE wpvultheme 🧩 What is it? CVE-2025-6389 is a Critical CVSS 9.8 vulnerability in the Sneeit Framework WordPress plugin ≤ 8.3, widely used by popular themes. It allows unauthenticated remote code execution — the most dangerous class of web...

9.8CVSS7.4AI score0.76138EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/06 1:34 a.m.4 views

CVE-2024-23897

CVE-2024-23897 CVE-2024-23897 - Arbitrary file read vulnerability through the CLI can lead to RCE Products and Versions affected: Product| Affected Versions ---|--- Jenkis Server| = 2.441 = LTS 2.426.3 CVSS: CRITICAL Actively Exploited: YES Patch: YES Mitigation: YES Help root@kitploit: usage:...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits50References1
Kitploit
Kitploit
added 2026/09/05 8:15 p.m.7 views

rxerium-templates

一个精心整理的 144+ Nuclei 模板 集合,重点关注野外零日漏洞和已被积极利用的漏洞 ,并包含少量其他杂项模板。模板使用被动检测技术(版本/日期匹配),并按年份组织,便于导航。 ⚠️ 注意:日期匹配可能不如版本检测可靠。请谨慎使用。 📊 统计 模板总数:144(143 已完成,1 个进行中) 覆盖范围:2013-2026 | 平均 CVSS:8.3 | CISA KEV:70 严重性:严重:85 | 高危:27 | 中危:30 | 低危:2 CVSS 分布:严重(≥9.0):67 | 高危(7.0-8.9):28 年份分布:2013:2 | 2016:1 | 2017:2 |...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/05 6:16 p.m.7 views

CVE-2024-4040-CrushFTP-File-Read-vulnerability

CVE-2024-4040: Vulnerabilidad de Lectura de Archivos en CrushFTP Resumen El 19 de abril de 2024, se divulgó una nueva vulnerabilidad de día cero que afecta a las versiones de CrushFTP anteriores a 10.7.1 y 11.1.0, así como a las versiones heredadas 9.x, a una lista de correo privada por parte del...

10CVSS7.5AI score0.99539EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/05 5:03 p.m.4 views

cve-2025-32433-erlang_ssh_rce_reproduction

CVE-2025-32433: Erlang/OTP SSH Daemon Pre-Auth Remote Code Execution CVSS Score: 10.0 CRITICAL Status: Actively Exploited in the Wild Disclosure: June 2025 Overview CVE-2025-32433 is a critical unauthenticated remote code execution vulnerability in the SSH server implementation ssh application...

10CVSS8.4AI score0.98594EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/09/05 2:53 p.m.3 views

CVE-2025-55182

CVE-2025-55182 — React2Shell Critical Remote Code Execution in React Server Components. Severity: CRITICAL | CVSS v3.1: 10.0 Maximum | Status: Actively Exploited What Is This? React2Shell is a critical security vulnerability in React Server Components RSC — a modern feature that lets React run...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/05 10:12 a.m.7 views

CVE-2025-61882-POC

CVE-2025-61882 安全测试工具 🚨 重要法律警告 技术详情请参阅我们的博客文章 本工具仅用于经授权的安全测试 root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ ║ ║ 🚨 UNAUTHORIZED ACCESS TO COMPUTER SYSTEMS IS ILLEGAL 🚨 ║ ║ ║ ║ By using this tool, you acknowledge and agree that: ║ ║ ║ ║ ║ ║ FCK THIS JUST RUN AND...

9.8CVSS8AI score0.99732EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/05 9:43 a.m.3 views

CVE-2024-49138-POC

CVE-2024-49138-POC Fix Error Decombine root@kitploit: C:\Program Files\Microsoft Visual Studio\2022\Professional\MSBuild\Microsoft\VC\v170\Microsoft.CppBuild.targets456,5: error MSB8020: The build tools for Visual Studio 2019 Platform Toolset = 'v142' cannot be found. To build using the v142 buil...

7.8CVSS8.2AI score0.25414EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/05 7:26 a.m.4 views

CVE-2024-27198

CVE-2024-27198 CVE-2024-27198 - Vulnerabilidad de omisión de autenticación mediante una ruta alternativa en JetBrains TeamCity Server Consulte la publicación del blog de Rapid7 para obtener más información: CVE-2024-27198 y CVE-2024-27199: Vulnerabilidades de omisión de autenticación múltiples en...

9.8CVSS8.2AI score0.99991EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/05 7:08 a.m.9 views

CVE-2023-22515-Scan

CVE-2023-22515-Scan About This is simple scanner for CVE-2023-22515, a critical vulnerability in Atlassian Confluence Data Center and Server that is actively being exploited in the wild by threat actors in order "to create unauthorized Confluence administrator accounts and access Confluence...

10CVSS8.5AI score0.99156EPSS
SaveExploits40
Kitploit
Kitploit
added 2026/09/05 1:58 a.m.4 views

CVE-2022-22718

Una vulnerabilidad de escalada de privilegios en Windows Print Spooler El 9 de febrero de 2022: la Agencia de Seguridad de Infraestructura y Ciberseguridad de EE. UU. CISA agregó la vulnerabilidad de Windows Print Spooler a su lista de vulnerabilidades explotadas activamente. La vulnerabilidad fu...

7.8CVSS7.8AI score0.18464EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/04 10:55 p.m.6 views

CVE-2025-64446

🛡️ CVE-2025-64446 - Omisión Crítica de Autenticación y Salto de Ruta en FortiWeb Vulnerabilidad crítica no autenticada que permite a atacantes remotos crear cuentas de administrador en dispositivos FortiWeb. 📌 Resumen CVE-2025-64446 es una grave vulnerabilidad de salto de ruta relativa en la...

9.8CVSS8.9AI score0.91838EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/04 9:21 a.m.6 views

cve-2025-64446-fortiweb-exploit

Exploit de Recorrido de Ruta y Ejecución Remota de Código CVE-2025-64446 para Fortinet FortiWeb Una herramienta de investigación de seguridad para detectar y probar la vulnerabilidad CVE-2025-64446 en el Firewall de Aplicaciones Web WAF Fortinet FortiWeb. Esta vulnerabilidad crítica de recorrido ...

9.8CVSS9.1AI score0.91838EPSS
SaveExploits18References1
The Hacker News
The Hacker News
added 2026/09/04 7:18 a.m.5 views

Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day

Google on Thursday released security updates to patch 12 vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2026-85046 CVSS score: 8.8, has been described as a type confusion bug in V8, Chrome's JavaScript and...

8.8CVSS8.6AI score0.00885EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/04 12:06 a.m.6 views

react2shell-scanner

🚨 Escáner React2Shell RCE con CVSS 10.0 en React Server Components. ¿Es vulnerable tu aplicación React 19? Escáner rápido y preciso para CVE-2025-55182 React2Shell, una vulnerabilidad crítica de ejecución remota de código explotada activamente. Cero falsos positivos con detección inteligente de...

10CVSS7.5AI score0.99802EPSS
SaveExploits389References3
Kitploit
Kitploit
added 2026/09/03 8:49 p.m.6 views

POC-CVE-2026-56164-exploit

CVE-2026-56164 — Microsoft SharePoint Server Authentication Bypass Exploit Critical CVSS 9.8 — Unauthenticated Privilege Escalation to Farm Administrator in Microsoft SharePoint Server Table of Contents Overview Vulnerability Details Affected Versions Architecture Diagrams Project Structure...

9.8CVSS6.4AI score0.26636EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/03 8:04 p.m.5 views

CVE-2026-83548-SonicWall-SMA1000-Analysis

CVE-2026-83548 — SonicWall SMA1000 Vulnerability Analysis A cybersecurity project exploring a real-world vulnerability,its potential impact,and how security teams can detect,fix,and verify the issue. Project Overview This project is part of my cybersecurity learning journey. I selected...

10CVSS8.4AI score0.0071EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/03 1:52 a.m.6 views

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat CVE-2025-59287 is a critical RCE vulnerability in Windows Server Update Services WSUS caused by unsafe deserialization of untrusted data. It allows remote attackers to execute arbitrary code without authentication. Urgent...

9.8CVSS8.1AI score0.99979EPSS
SaveExploits24
Rows per page
Query Builder