Lucene search
+L

4099 matches found

EUVD
EUVD
added 2026/09/15 7:23 p.m.3 views

EUVD-2026-79215

A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote attacker with administrative privileges could exploit this vulnerability by providing specially crafted configuration data. Successful...

7.2CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/15 7:23 p.m.4 views

EUVD-2026-79199

Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete...

9.8CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 5:17 p.m.8 views

CVE-2022-1903

CVE-2022-1903 root@kitploit: Title: ARMember 3.4.8 - Unauthenticated Admin Account Takeover Author: Cyllective https://cyllective.com/ CVE: CVE-2022-1903 Instalación root@kitploit: git clone https://github.com/biulove0x/CVE-2022-1903.git cd CVE-2022-1903/ python3 -m pip install -r requirements.tx...

8.1CVSS7.7AI score0.08665EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 4:43 p.m.11 views

r0ak

r0ak r0ak es una utilidad de línea de comandos de Windows que permite leer, escribir y ejecutar código en modo kernel con algunas limitaciones desde el símbolo del sistema, sin necesidad de nada más que privilegios de Administrador. Primer vistazo root@kitploit: r0ak v1.0.0 -- Ring 0 Army Knife...

6.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 1:05 p.m.10 views

Cisco_CVE-2023-20198

CiscoCVE-2023-20198 Cisco CVE-2023-20198 👉 Cisco warned of a critical authentication bypass zero-day vulnerability CVE-2023-20198 in its IOS XE software that allows unauthenticated attackers to gain full administrative privileges. 👨‍💻 The vulnerability only affects devices with the Web User...

10CVSS7.8AI score0.99571EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/15 12:24 p.m.8 views

SessionView

SessionView A lightweight C console application for enumerating and displaying all user sessions on Windows Server, including session GUIDs. Features Complete Session Enumeration : Lists all active sessions on the Windows server Detailed Session Information : Displays Session ID, Station Name,...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 12:00 p.m.7 views

CVE-2026-16232

CVE-2026-16232 — Check Point SmartConsole Authentication Bypass An authentication bypass PoC from unauthenticated network access to full administrator privileges. Single file, pure Python 3 standard library, zero dependencies. Vulnerability Summary The Management Server Java login service...

9.8CVSS8.5AI score0.72051EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/15 10:19 a.m.8 views

iTop-CVEs-exploit

iTop-CVEs-exploit This repository contains exploits for iTOP CVE-2024-52002, 52000, 31998, 31448 that involve CSRF+XSS chaining to get admin privileges on the software. Set up 1. Download the vulnerable iTOP version from docker root@kitploit: sudo docker run -d -p 8090:80 --name=my-itop2...

8.8CVSS7.3AI score0.00662EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 9:46 a.m.11 views

CVE-2018-8090

CVE-2018-8090 DLL Hijacking in Quickheal Total Security/ Internet Security/ Antivirus Pro Installers Affected Products: Quick Heal Total Security - 17.00 Quick Heal Internet Security - 17.00 Quick Heal AntiVirus Pro - 17.00 Affected Installers: Quick Heal Total Security 64 bit 17.00 QHTS64.exe,...

7.8CVSS7.4AI score0.01196EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 9:05 a.m.5 views

CVE-2019-12562

CVE-2019-12562 CVE-2019-12562 Stored Cross-Site Scripting in DotNetNuke DNN Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing content, adding...

6.1CVSS6.4AI score0.06175EPSS
SaveExploits6
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.20 views

System Dashboard < 2.8.15 - Admin+ Path Traversal

The System Dashboard WordPress plugin before 2.8.15 does not validate user input used in a path, which could allow high privilege users such as admin to perform path traversal attacks an read arbitrary files on the server id: CVE-2024-10708 info: name: System Dashboard 2.8.15 - Admin+ Path...

4.9CVSS8AI score0.0203EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.30 views

KevinLAB BEMS (Building Energy Management System) - Backdoor Account

KevinLAB BEMS has an undocumented backdoor account, and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution through the RMI. An attacker could exploit this vulnerability by logging in using the backdoor account with highes...

9CVSS7AI score0.0655EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/15 2:50 a.m.8 views

CVE-2024-22275

CVE-2024-22275: Partial File Read in VMware vCenter Server The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data. Vendor...

4.9CVSS6.5AI score0.00994EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 2:32 a.m.6 views

CVE-2021-39115

CVE-2021-39115 メールテンプレートのテンプレートインジェクションにより、Jira Service Management Server でコード実行が可能になる I 構築 デプロイとデバッグの手順はこちらで解説しています。参考にしてください。 II 解析 このCVEのDescriptionにも明記されているとおり、バグは Email Template 機能にあります。管理者権限があれば、ユーザーは通知メールのテンプレートを自由に編集できます。このバグは実行に管理者権限が必要なため、RCEに至ってもそれほど深刻ではありませんが、楽しみのためにブログを書くことにしました :...

9CVSS8.2AI score0.04483EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 2:05 a.m.8 views

CVE-2022-44721-CsFalconUninstaller

CVE-2022-44721 Crowdstrike Falcon Uninstaller CrowdStrike Falcon is a cloud-powered endpoint detection and response EDR and antivirus AV solution. On each end-device a kernel level managed sensor is deployed and makes use of the cloud-based capabilities. The sensor can be configured with an...

5.5AI score
SaveExploits4
Kitploit
Kitploit
added 2026/09/15 12:00 a.m.7 views

MSDIA-x64

Install Visual C++ redistributable from here: https://go.microsoft.com/fwlink/?LinkId=746572 2. Run install.bat as admin...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 11:45 p.m.6 views

CVE-2020-5844

CVE-2020-5844 Authenticated RCE in PandoraFMS 7.0-NG 742 Admin privileged attackers can upload malicious PHP documents. By decoding the base64 file location users can gain a shell as apache user. Discovered by TheCyberGeek PoC python script root@kitploit: Usage: python3 CVE-2020-5844.py URL USER...

7.2CVSS7.3AI score0.30254EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/14 5:39 p.m.7 views

CVE-2024-0012

CVE-2024-0012 CVE-2024-0012 es una omisión de autenticación en el software PAN-OS de Palo Alto Networks que permite a un atacante no autenticado con acceso de red a la interfaz web de gestión obtener privilegios de administrador de PAN-OS para realizar acciones administrativas, manipular la...

9.8CVSS8.3AI score0.99718EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/14 4:32 p.m.3 views

CVE-2019-9193byVulHub

CVE-2019-9193byVulHub Ejecución de comandos arbitrarios con privilegios de administrador en PostgreSQL CVE-2019-9193 Descripción PostgreSQL es un potente sistema de gestión de bases de datos relacional de código abierto. Una vulnerabilidad presente en las versiones de la 9.3 a la 11 permite a los...

9CVSS7.5AI score0.91655EPSS
SaveExploits17References1
Kitploit
Kitploit
added 2026/09/14 1:46 p.m.6 views

CVE-2025-11001

...

7.8CVSS7.5AI score0.26999EPSS
SaveExploits11
Rows per page
Query Builder