Lucene search
+L

15421 matches found

Kitploit
Kitploit
added 2026/09/08 10:52 p.m.6 views

CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server

CVE-2026-7777 – Rust Use‑After‑Free in Unsafe Web Server Program Code Rust root@kitploit: // uafserver.rs - Vulnerable Rust HTTP server with use-after-free use std::sync::Arc, Mutex; use std::thread; use std::io::prelude::; use std::net::TcpListener, TcpStream; struct SharedBuffer data: Vec, impl...

6AI score
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 10:47 p.m.6 views

Simple-Sweet32

Sweet32 This is a demonstration of the Sweet32 attack CVE-2016-2183: https://sweet32.info/ The attack is an example of a birthday attack which exploits crypto algorithms with small block sizes 64-bit in CBC mode, such as 3DES and Blowfish. The attack requires generation of a lot of encrypted bloc...

7.5CVSS6.9AI score0.95707EPSS
SaveExploits7
NVD
NVD
added 2026/09/08 10:19 p.m.4 views

CVE-2026-81904

Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout area without checking whether the requesting user could view that sub-block. An unauthenticated visitor could recover configuration values emitted by a restricted sub-block's asset registration —...

6.3CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 10:09 p.m.6 views

CVE-2024-10930

CVE Disclosure: CVE-2024-10930 Public Disclosure of CVE-2024-10930 Date: 12-02-2025 Summary A vulnerability was identified in Carrier product E20-BLK416X.EXE version 4.16, which could allow local privilege escalation. This issue has been assigned the identifier CVE-2024-10930 .The vendor will...

7.8CVSS5.9AI score0.00367EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/09/08 9:55 p.m.21 views

CVE-2026-81904 Concrete CMS before 9.5.3 is vulnerable to Missing Authorization in Stack/Container Sub-Block Asset Registration

Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout area without checking whether the requesting user could view that sub-block. An unauthenticated visitor could recover configuration values emitted by a restricted sub-block's asset registration —...

6.3CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 9:55 p.m.12 views

CVE-2026-81904

Concrete CMS below 9.5.3 is affected by a missing authorization flaw in the asset registration for sub-blocks within a Stack , Container , or layout area. The system registered view assets for every sub-block without verifying whether the requesting user had permission to view that sub-block, all...

6.3CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 9:15 p.m.8 views

fbchecker

ABANDONADO Facebook bloquea el acceso múltiple con su API COMPROBADOR MASIVO DE CUENTAS DE FACEBOOK Comprobador Masivo de Cuentas de Facebook Sin Cuenta Bloqueada Instalación simple : root@kitploit: apt install git php -y git clone https://github.com/fdciabdul/fbchecker cd fbchecker php fbcheck.p...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 9:14 p.m.9 views

crypto_identifier

crypto-identifier Crypto tool for pentest and ctf : try to uncipher data using multiple algorithms and block chaining modes. Usefull for a quick check on unknown cipher text and key dictionary Supported Algorithms : AES ARC2 ARC4 Blowfish CAST DES DES3 XOR Supported modes : ECB CBC CFB OFB Usage:...

6AI score
SaveExploits0
NVD
NVD
added 2026/09/08 8:18 p.m.4 views

CVE-2026-78552

The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field. The field is interpolated directly into the nginx server block without inspection, resulting in execution of injected directives...

6CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 8:08 p.m.4 views

EUVD-2026-74168

The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field. The field is interpolated directly into the nginx server block without inspection, resulting in execution of injected directives...

6CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 8:05 p.m.5 views

CVE-2026-78545

Okta Access Gateway is vulnerable to improper input sanitization in the application label field. The unsanitized value is interpolated directly into an nginx server block directive within the generated configuration file, allowing an attacker to inject arbitrary directives. This requires high pri...

6.6CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 6:46 p.m.10 views

VMProtect-devirtualization

VMProtect Devirtualization An experimental dynamic approach to devirtualize pure functions protected by VMProtect 3.x TL;DR Introduction The approach Example 1: A simple bitwise operation protected Example 2: A MBA operation protected Example 3: More than one basic block Conclusion and limitation...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 4:32 p.m.3 views

dnsenum

README - dnsenum.pl VERSIÓN: 1.2.4 script perl multihilo para enumerar información DNS de un dominio y para descubrir bloques de IP no contiguos. OPERACIONES: root@kitploit: 1 Obtener la dirección del host registro A. 2 Obtener los servidores de nombres multihilo. 3 Obtener el registro MX...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 4:20 p.m.5 views

CVE-2024-4439

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2024-4439...

7.2CVSS7.2AI score0.71024EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/08 11:13 a.m.5 views

CVE-2025-45809-PoC

CVE-2025-45809 — LiteLLM SQL Injection via /key/block Time-Based Blind SQLi LiteLLM v1.65.4 versions before v1.81.0 /key/block and /key/unblock endpoints have a SQL injection vulnerability in the key parameter. Attackers can use time-based blind injection techniques to steal database content and...

5.4CVSS5.9AI score0.00253EPSS
SaveExploits2
NVD
NVD
added 2026/09/07 1:20 p.m.2 views

CVE-2026-86430

league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter processing that perform super-linear work on crafted input. Attackers can submit specially crafted Markdown with long...

8.7CVSS0.00285EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/07 12:53 p.m.6 views

CVE-2026-86430

league/commonmark (a PHP Markdown parsing library) versions before 2.9.1 are affected by multiple denial-of-service vulnerabilities in three components: fenced code block detection , reference link label lookup , and emphasis delimiter processing . The root cause is super-linear work performed on...

8.7CVSS0.00285EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/07 11:46 a.m.5 views

cve-2026-42945-scan

cve-2026-42945-scan Static scanner for NGINX configuration files that detects the rewrite/set pattern associated with CVE-2026-42945. The scanner parses NGINX configs with crossplane, walks location blocks, and prints every location that looks affected in this format: root@kitploit: //xxx.conf: -...

9.2CVSS7.8AI score0.68047EPSS
SaveExploits42References2
Kitploit
Kitploit
added 2026/09/07 7:36 a.m.37 views

python-paddingoracle

python-paddingoracle: A portable, padding oracle exploit API UPDATED FOR PYTHON 3 python-paddingoracle is an API that provides pentesters a customizable alternative to PadBuster and other padding oracle exploit tools that can't easily without a heavy rewrite be used in unique, per-app scenarios...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/07 1:55 a.m.5 views

CVE-2026-7465-Lab

CVE-2026-7465 - Spectra Gutenberg Blocks Local Lab Local Docker lab for analyzing and reproducing CVE-2026-7465 in the WordPress plugin Spectra Gutenberg Blocks ultimate-addons-for-gutenberg. This lab compares: vuln: Spectra 2.19.25 patched: Spectra 2.19.26 The proof is intentionally least-harm. ...

8.8CVSS5.9AI score0.01174EPSS
SaveExploits3
Rows per page
Query Builder