Lucene search
+L

628 matches found

Kitploit
Kitploit
added 2026/09/13 6:31 a.m.36 views

httpgrep

Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 2:45 a.m.3 views

CVE-2021-21300

CVE-2021-21300: Arbitrary Code Execution via Malicious Git Hooks 📌 Summary CVE-2021-21300 is a critical vulnerability in Git versions 2.14.2 to 2.30.1 that allows attackers to execute arbitrary code on victim machines by exploiting symbolic links and case-insensitive file systems. 🧠 Problem...

8CVSS6.9AI score0.88533EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/12 11:45 p.m.7 views

hook

amalmurali47/hook This repository is part of the PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. This repository contains the malicious hook used in the exploit. Overview For detailed instructions and an explanation of how the exploit works,...

9CVSS7.8AI score0.29234EPSS
SaveExploits32References2
Kitploit
Kitploit
added 2026/09/12 5:05 p.m.9 views

CVE-2021-21300

CVE-2021-21300 In multiple versions of git, the handling of symbolic links is not strict. After uploading files to git on a case-sensitive file system e.g., Linux, cloning a malicious repository on a host using a case-insensitive file system e.g., Windows may lead to remote command execution...

8CVSS6.8AI score0.88533EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/12 5:01 p.m.6 views

CVE-2024-32002

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...

9CVSS7.8AI score0.29234EPSS
SaveExploits32
Kitploit
Kitploit
added 2026/09/12 4:51 p.m.6 views

CVE-2024-32002-Reverse-Shell

CVE-2024-32002-Reverse-Shell This script demonstrates how to exploit CVE-2024-32002 to obtain a reverse shell, providing remote access to the affected system. Use it with caution in controlled environments and only for educational or security testing purposes. Blog Post This script is inspired by...

9CVSS7.8AI score0.29234EPSS
SaveExploits32
Kitploit
Kitploit
added 2026/09/12 1:53 p.m.7 views

git_rce

Remote Code Execution Attack via git clone CVE-2024-32002 Contributors 이정우@Roronoawjd Background This vulnerability is a Remote Code Execution RCE vulnerability that occurs when cloning a git repository containing submodules on case-insensitive file systems such as Windows and macOS. RCE is a...

9CVSS7.8AI score0.29234EPSS
SaveExploits32References2
Kitploit
Kitploit
added 2026/09/12 1:54 a.m.7 views

CVE-2024-32002

CVE-2024-32002: git clone을 통한 Git RCE 악용 이 저장소는 git clone 작업 중 RCE를 허용하는 Git의 취약점인 CVE-2024-32002를 악용하기 위한 PoC를 포함합니다. 공격자는 특정 방식으로 서브모듈을 포함한 저장소를 조작하여 대소문자를 구분하지 않는 파일 시스템에서 심볼릭 링크 처리를 악용하고, .git/ 디렉토리에 파일을 작성하여 악성 훅을 실행할 수 있습니다. 참고: 이 PoC는 Windows 또는 Mac 시스템에서만 작동합니다. 블로그 게시물 이 익스플로잇이 어떻게...

9CVSS7.8AI score0.29234EPSS
SaveExploits32
Kitploit
Kitploit
added 2026/09/11 1:33 p.m.9 views

git_rce

CVE-2024-32002: git clone을 통한 Git RCE 악용 이 저장소는 git clone 작업 중 RCE를 허용하는 Git의 취약점인 CVE-2024-32002를 악용하는 PoC를 포함합니다. 공격자는 특정 방식으로 서브모듈이 포함된 저장소를 제작하여 대소문자를 구분하지 않는 파일시스템에서 심볼릭 링크 처리를 악용하고, .git/ 디렉터리에 파일을 작성하여 악성 훅의 실행을 유도할 수 있습니다. 참고: 이 PoC는 Windows 또는 Mac 시스템에서만 작동합니다. 블로그 게시글 이 익스플로잇이 어떻게...

9CVSS7.8AI score0.29234EPSS
SaveExploits32
OSV
OSV
added 2026/09/10 12:00 a.m.5 views

UBUNTU-CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside...

3CVSS0.00389EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/10 12:00 a.m.4 views

CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside...

3CVSS0.00389EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/09 5:17 p.m.6 views

DEBIAN-CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

3CVSS0.00389EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/09 5:17 p.m.7 views

CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

3CVSS0.00389EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/09/09 4:12 p.m.9 views

CVE-2026-87876 Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

3CVSS5.8AI score0.00389EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/09 4:12 p.m.32 views

CVE-2026-87876 Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

3CVSS0.00389EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/09 4:12 p.m.7 views

EUVD-2026-75089

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

3CVSS0.00389EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/09 4:12 p.m.12 views

CVE-2026-87876

This CUPS vulnerability (a follow-up to CVE-2026-27447 ) involves two case-insensitive comparisons on request-derived usernames in scheduler side paths outside the main authorization path—specifically in printer ACL validation and private-attribute filtering . The mismatched case handling could a...

3CVSS0.00389EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/09/09 4:12 p.m.10 views

CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations...

3CVSS0.00389EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/09/09 4:12 p.m.10 views

CVE-2026-87876

Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler printer ACL validation and private-attribute filtering could allow bypass of username-based access controls in certain configurations. Mitigation Fixed on upstream master branch...

3CVSS0.00389EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/09 1:27 a.m.10 views

CVE-2024-50379-POC

CVE-2024-50379 Exploitation and POC This repository contains a Proof of Concept POC for CVE-2024-50379 , a vulnerability affecting Apache Tomcat. The issue involves a Time-of-Check Time-of-Use TOCTOU race condition , which can lead to Remote Code Execution RCE , especially on case-insensitive fil...

9.8CVSS8.2AI score0.44312EPSS
SaveExploits13
Rows per page
Query Builder