Lucene search
+L

25726 matches found

Kitploit
Kitploit
added 2026/09/08 9:53 p.m.6 views

CVE-2024-28000

PoC de Escalada de Privilegios en LiteSpeed Cache - CVE-2024-28000 🎤 Traducción del README Inglés فارسی 📸 Captura de pantalla 💎 Introducción Este repositorio contiene una Prueba de Concepto PoC para una vulnerabilidad crítica de escalada de privilegios descubierta en el plugin LiteSpeed Cache de...

9.8CVSS7.8AI score0.68266EPSS
SaveExploits8References3
Kitploit
Kitploit
added 2026/09/08 9:37 p.m.12 views

whosthere

Whosthere Herramienta de descubrimiento de redes de área local con una interfaz de usuario de terminal interactiva TUI escrita en Go. Descubre, explora y comprende tu LAN de forma intuitiva. Whosthere realiza escaneos concurrentes sin privilegios utilizando escáneres mDNS y SSDP. Además, recorre ...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/08 9:31 p.m.10 views

phpcms-2008-CVE-2018-19127

phpcms-2008-CVE-2018-19127 Recientemente encontramos una vulnerabilidad en /type.php del código fuente de phpcms 2008. Cuando los atacantes envían solicitudes manipuladas como "/type.php?template=tag;@unlinkFILE;assert$POST1;//../rss", el contenido malicioso en este caso "@unlinkFILE;assert$POST1...

9.8CVSS8.1AI score0.20766EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 9:30 p.m.12 views

dnspooq

dnspooq DNSpooq PoC - dnsmasq cache poisoning CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 For educational purposes only Requirements Docker compose Docker Exploit Launch containers root@kitploit: $ docker-compose up -d Run exploit.py root@kitploit: $ docker-compose exec attacker bash bash-5.0...

4.3CVSS7AI score0.04873EPSS
SaveExploits2
Github Security Blog
Github Security Blog
added 2026/09/08 9:22 p.m.3 views

Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials

Summary Hono's query parsing does not stop at the URL fragment: a ? appearing after a is treated as the start of a query string. As a result, the application can read request parameters that no other component involved in handling the request can see. Details A fragment is never part of the query...

5.9CVSS0.00345EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2026/09/08 9:22 p.m.9 views

EUVD-2026-69610

Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials...

5.9CVSS5.8AI score0.00345EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/08 9:12 p.m.7 views

cve-2019-6715

cve-2019-6715 Shout out to TomNomNom for 99.9% of his code.... Build root@kitploit: go get github.com/fatih/color go build Usage root@kitploit: cat list.txt | ./2019-6715 All vuln urls are logged in text.log CVE 2019-6715 Description: pub/sns.php in the W3 Total Cache plugin before 0.9.4 for...

7.5CVSS7.4AI score0.19396EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/08 9:08 p.m.3 views

CVE-2017-7529-POC

CVE-2017-7529-POC Descripción de la vulnerabilidad Esta vulnerabilidad afecta a todas las versiones de Nginx entre la 0.5.6 y la 1.13.2 que tengan activado el módulo de configuración por defecto. Basta con que el servidor tenga habilitado el almacenamiento en caché para que un atacante pueda envi...

7.5CVSS6.8AI score0.62597EPSS
SaveExploits6
RedHat Linux
RedHat Linux
added 2026/09/08 9:07 p.m.2 views

firefox: thunderbird: Mitigation bypass in the Storage: Cache API component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Storage: Cache API component...

9.1CVSS0.00342EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/08 8:51 p.m.11 views

EUVD-2026-69702

Next.js: Unauthenticated Remote Code Execution on windows-hosted servers...

9CVSS6.6AI score0.01057EPSS
SaveExploits3References6
Kitploit
Kitploit
added 2026/09/08 8:47 p.m.4 views

litespeed-cache-xss-poc

PoC de XSS en LiteSpeed Cache PoC de vulnerabilidad XSS en el plugin LiteSpeed Cache de WordPress que permite escalar privilegios. Esta vulnerabilidad fue corregida en la versión 5.7.0.1 del plugin y se le asignó CVE-2023-40000. Según la página de vista avanzada del plugin, aproximadamente el 35%...

8.3CVSS7.3AI score0.54872EPSS
SaveExploits5References2
Kitploit
Kitploit
added 2026/09/08 8:41 p.m.6 views

CVE-2024-46982-Reproduction

Primeros pasos 1. Instala Node.js LTS 2. npm install 3. npm run build 4. npm run start Explotación 1: XSS almacenado mediante envenenamiento de caché 1. Envía la siguiente solicitud HTTP Solicitud de ataque utilizando cualquier cliente HTTP. root@kitploit: GET /poc?nextDataReq=1 HTTP/1.1 Host:...

7.5CVSS7.3AI score0.5918EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/08 8:36 p.m.5 views

cve_2026_31431

CVE-2026-31431 "Copy Fail" Toolkit Detector and proof-of-concept LPE for the Linux algifaead / authencesn page-cache scratch-write bug disclosed 2026-04-29. Disclosure writeup: https://xint.io/blog/copy-fail-linux-distributions Authorization Use only on hosts you own or are explicitly engaged to...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits242
Kitploit
Kitploit
added 2026/09/08 8:36 p.m.6 views

cve_2026_31431

CVE-2026-31431 "Copy Fail" Kit de herramientas Detector y LPE de prueba de concepto para el error de escritura temporal en la caché de páginas de Linux algifaead / authencesn divulgado el 2026-04-29. Divulgación del informe: https://xint.io/blog/copy-fail-linux-distributions Autorización Úselo...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits242
Kitploit
Kitploit
added 2026/09/08 8:25 p.m.6 views

CVE-2024-28000

CVE-2024-28000 PoC This repository contains tools for exploiting the CVE-2024-28000 vulnerability affecting WordPress sites using the LiteSpeed Cache plugin. The included scripts automate the detection of exposed debug.log files and the exploitation of a privilege escalation vulnerability that...

9.8CVSS8.1AI score0.68266EPSS
SaveExploits8
CVE
CVE
added 2026/09/08 8:18 p.m.19 views

CVE-2026-19625

CVE-2026-19625 is a cross-tenant authentication bypass in the OIDC extension of IBM Enterprise Build of Quarkus . When an optional token-introspection cache is enabled, a valid token issued by one OIDC provider tenant can be used to access endpoints secured by a different tenant, because the shar...

5.3CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 8:18 p.m.7 views

CVE-2026-84685

The react-native-auth0 SDK 's web platform implementation fails to scope its in-memory token cache to individual user sessions in server-side rendering (SSR) environments where module state persists across HTTP requests. As a result, tokens cached in module memory can be retrieved by subsequent r...

6.5CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 8:10 p.m.9 views

CVE-2026-1010-WebSocket-Connection-Smuggling-via-Malformed-Upgrade-Header

CVE-2026-1010 – WebSocket Connection Smuggling Overview A reverse proxy and backend disagree on how to parse an HTTP request with a malformed WebSocket upgrade header. The proxy treats it as one request, while the backend interprets it as two, allowing an attacker to smuggle a hidden request. Thi...

8CVSS5.9AI score0.00315EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 8:07 p.m.6 views

spectre-attack-demo

Spectre Attack Example Example of using revealed "Spectre" exploit from 2 Jan 2018 CVE-2017-5753 and CVE-2017-5715 Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the...

7AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/09/08 8:05 p.m.2 views

firefox: thunderbird: Mitigation bypass in the Storage: Cache API component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Storage: Cache API component...

9.1CVSS0.00342EPSS
SaveExploits0References6
Rows per page
Query Builder