Lucene search
+L

1135363 matches found

EUVD
EUVD
added 2026/09/02 7:57 p.m.7 views

EUVD-2023-60617

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...

7.4CVSS7.3AI score0.0016EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/02 7:34 p.m.6 views

CVE-2026-82524 UnoPim File Upload RCE via TinyMCE Image Upload Endpoint

UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. Attackers can upload a PHP web shell to the public stora...

8.6CVSS6AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/09/02 7:34 p.m.12 views

CVE-2026-82524 UnoPim File Upload RCE via TinyMCE Image Upload Endpoint

UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. Attackers can upload a PHP web shell to the public stora...

8.6CVSS5.8AI score0.00346EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/02 7:22 p.m.32 views

CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

8.6CVSS0.00945EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/02 7:22 p.m.16 views

CVE-2026-84452

Windows ML CLI (a command-line tool for building AI models for Windows) is vulnerable to arbitrary code execution via a CORS misconfiguration on its localhost HTTP API. Prior to version 0.4.0 , the cli_api.py and app.py components expose WinML CLI commands on localhost without authentication and ...

8.6CVSS6.3AI score0.00945EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/02 7:22 p.m.4 views

CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

8.6CVSS6.5AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/02 7:16 p.m.7 views

CVE-2026-22679

CVE-2026-22679: Weaver E-cology Unauthenticated RCE via dubboApi Debug Endpoint -critical TL;DR Weaver E-cology 10.0 prior to build 20260312 contains a critical unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboApi/debug/method endpoint. Attackers can injec...

9.8CVSS7AI score0.20359EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/02 7:00 p.m.7 views

CVE-2026-44402

CVE-2026-44402 Pre-Authenticated Full Remote Command Execution in Voltronic Power SNMP Web Pro 1.1 Content Affected Vendor: https://voltronicpower.com/ Affected product: SNMP Web pro 1.1 SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi endpoint. T...

9.8CVSS6AI score0.00888EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 7:00 p.m.10 views

CVE-2020-10199

CVE-2020-10199 Previously, during a penetration test, I encountered a target environment that had Nexus Repository Manager deployed. After stepping on some pitfalls, I finally managed to get a shell. I'll make a brief record here so it's easier to review later if needed. Target version: Sonatype...

9CVSS7.9AI score0.99064EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/02 6:53 p.m.9 views

CVE-2026-0770

🚀 CVE-2026-0770 – Langflow RCE execglobal PoC Remote Code Execution vulnerability in Langflow 📌 Affected Software This vulnerability affects: Langflow 🧠 Vulnerability Overview CVE-2026-0770 is a Remote Code Execution RCE vulnerability in the: root@kitploit: /api/v1/validate/code endpoint. When...

9.8CVSS8.2AI score0.63417EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/02 6:52 p.m.7 views

CVE-2026-33826

🚨 CVE-2026-33826: Windows Active Directory Remote Code Execution RCE 📌 General Overview CVE-2026-33826 is a critical Remote Code Execution RCE vulnerability affecting Active Directory Domain Services AD DS. The flaw resides in the way the AD service handles malformed authentication requests throu...

8CVSS7.5AI score0.00535EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 6:42 p.m.8 views

CVE-2026-30345

CVE-2026-30345 Proof of Concept Arbitrary file write vulnerability in CTFd 3.8.2 backup import functionality. Quick Start Before running cve202630345bashrcpoc.py Make sure to update the values accordingly for your exploit. Values such as RHOST, ATTACKER IP or PORT, and the credentials used for th...

7.5CVSS5.9AI score0.00406EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 6:38 p.m.11 views

CVE-2026-4800-POC

CVE-2026-4800-POC Security Advisory https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc POC root@kitploit: const = require'lodash'; Object.prototype.imports = 'x=process.getBuiltinModule"childprocess".execSync"curl https://example.com"':undefined .template'', ; Flow Using a...

9.8CVSS6.7AI score0.02759EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 6:26 p.m.10 views

CVE-2026-0300

PAN-OS CVE-2026-0300 Non-Destructive Exposure Survey Tool Overview This tool is a non-destructive exposure survey utility for assessing whether a target PAN-OS service may expose network-accessible surfaces related to CVE-2026-0300. The tool is intended for authorized defensive security validatio...

9.8CVSS7.7AI score0.31725EPSS
SaveExploits7
NVD
NVD
added 2026/09/02 6:21 p.m.6 views

CVE-2026-66786

A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...

9.1CVSS0.00737EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/02 6:19 p.m.7 views

CVE-2026-49832

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and version 10-rc1, Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN...

8CVSS0.00537EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/02 6:15 p.m.9 views

cve-2025-59489

Unity CVE-2025-59489 Vulnerability Detection Tool An automated detection tool for Unity Runtime injection vulnerabilities, specifically designed for Android game platforms. Vulnerability Overview CVE ID : CVE-2025-59489 CVSS Score : 8.4 High Affected Scope : Android applications built with Unity...

8.4CVSS8.4AI score0.00586EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/02 6:14 p.m.11 views

electroniz3r

electroniz3r Prenez le contrôle des permissions TCC des applications macOS Electron avec electroniz3r. Cet outil a été présenté pour la première fois au DEFCON31 à Las Vegas lors de ma conférence ELECTRONizing macOS privacy - a new weapon in your red teaming armory. Aperçu root@kitploit: $...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 6:05 p.m.8 views

winrar-exploit

Description This is my implementation of the CVE-2025-8088 Winrar exploit. It uses Alternate Data Streams ADS and path patching within the archive. When a victim extracts the infected archive, the patched ADS payload e.g., executable, powershell script, or some funny png is redirected into the...

8.8CVSS7.4AI score0.94551EPSS
SaveExploits35
Kitploit
Kitploit
added 2026/09/02 6:03 p.m.10 views

CVE-2026-23479

CVE-2026-23479 — Redis Use-After-Free RCE PoC Collection HackSpeak distribution mirror. This repository consolidates three public PoC/detection tools , with code identical to each upstream. ⚠️ Contains actual exploit code and detection tools ; for security research, vulnerability verification, and...

8.8CVSS8.3AI score0.01356EPSS
SaveExploits5
Rows per page
Query Builder