Lucene search
+L

1137064 matches found

Kitploit
Kitploit
added 2026/09/06 3:30 p.m.3 views

CVE-2025-24893-Reverse-Shell

CVE-2025-24893 - Exploit de ejecución remota de código en XWiki PoC para CVE-2025-24893 – Ejecución remota de código mediante macro de XWiki Inspirado en el PoC original de Artemir Descripción Este es un exploit de prueba de concepto PoC para CVE-2025-24893 , una vulnerabilidad de ejecución remot...

9.8CVSS8.1AI score0.99864EPSS
SaveExploits52References1
Kitploit
Kitploit
added 2026/09/06 3:27 p.m.5 views

OneDriveUpdaterSideloading

OneDriveUpdater DLL Sideloading This repo contains source code for DLL sideloading the version.dll for OneDriveUpdater.exe/OneDriveStandaloneUpdater.exe. The payload is based on the subroutines outlined in the PaloAltoNetworks Unit42's blog post. My blog post regarding this payload:...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/06 3:26 p.m.4 views

Lastenzug

LastenZug This project implements a Socka4a proxy based on websockets. The client component is implemented in C compiling down to fully position independent code PIC. During the compilation process, obfuscation is applied on assembly level by leveraging a second tool: SpiderPIC located in...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 3:26 p.m.4 views

Awesome-RCE-techniques

Awesome RCE techniques Awesome list of techniques to achieve Remote Code Execution RCE on various apps! Goal of this project The goal of this project is to provide an OpenSource knowledge database of all the techniques to achieve Remote Code Execution RCE on various applications. All of these...

5.9AI score
SaveExploits0References1
CVE
CVE
added 2026/09/06 3:25 p.m.17 views

CVE-2026-83534

PostgreSQL Anonymizer contains a privilege escalation vulnerability in the anon.anonymize_database_parallel() function, allowing the owner of a table to execute arbitrary code with superuser privileges. The CVSS 3.1 score is 6.4 (MEDIUM) , with a network attack vector, high complexity, high privi...

6.4CVSS0.00191EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/06 3:25 p.m.9 views

EUVD-2026-72143

PostgreSQL Anonymizer contains a vulnerability in the anon.anonymizedatabaseparallel function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions...

6.4CVSS0.00191EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/06 3:25 p.m.39 views

CVE-2026-83534 PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()

PostgreSQL Anonymizer contains a vulnerability in the anon.anonymizedatabaseparallel function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions...

6.4CVSS0.00191EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/06 3:25 p.m.4 views

CVE-2026-83534 PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()

PostgreSQL Anonymizer contains a vulnerability in the anon.anonymizedatabaseparallel function that allows the owner of a table to run arbitrary code with superuser privilege. The issue is fixed in PostgreSQL Anonymizer 3.2.0 and later versions...

6.4CVSS0.00191EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/06 3:25 p.m.7 views

EUVD-2026-72142

PostgreSQL Anonymizer contains a SQL injection vulnerability in two import functions. A user can create a malicious JSON document containing specially crafted object names. If a superuser subsequently calls anon.importdatabaserules or anon.importrolesrules, the malicious code is executed with...

6.4CVSS0.00185EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/06 3:25 p.m.36 views

CVE-2026-19633 PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueries

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbitrary code by abusing operators, domain casts, or view subqueries that carry untrusted expressions. When these objects are evaluated in the context of the extension’s masking mechanisms, the...

8.8CVSS0.00362EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/06 3:25 p.m.26 views

CVE-2026-19633

PostgreSQL Anonymizer is a PostgreSQL extension for data masking. This vulnerability allows unprivileged masked users to execute arbitrary code by abusing operators, domain casts, or view subqueries that carry untrusted expressions. When these objects are evaluated within the extension's masking ...

8.8CVSS0.00362EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/06 3:25 p.m.8 views

EUVD-2026-72141

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbitrary code by abusing operators, domain casts, or view subqueries that carry untrusted expressions. When these objects are evaluated in the context of the extension’s masking mechanisms, the...

8.8CVSS0.00362EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/06 3:25 p.m.3 views

CVE-2026-19633 PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueries

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbitrary code by abusing operators, domain casts, or view subqueries that carry untrusted expressions. When these objects are evaluated in the context of the extension’s masking mechanisms, the...

8.8CVSS0.00362EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/06 3:22 p.m.5 views

cq

cq Code Query, una herramienta universal de escaneo de seguridad de código. CQ escanea código en busca de vulnerabilidades de seguridad y otros elementos de interés para revisores de código centrados en seguridad. Genera archivos de texto que contienen referencias a los problemas encontrados, en ...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 3:21 p.m.6 views

Blackash-CVE-2025-53770

🧠 CVE-2025-53770 : Critical SharePoint RCE Vulnerability Exploited via ViewState Forgery 📌 Vulnerability Overview Type : Remote Code Execution RCE CVSS Score : 9.8 Critical Component : Microsoft SharePoint Server on-prem Root Cause : Insecure deserialization of ViewState data using stolen ASP.NET...

9.8CVSS7.9AI score0.99998EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/06 3:19 p.m.5 views

SCMKit

SCMKit Description S ource C ode M anagement Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials username/password or API key to the respective SCM system...

6AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/06 3:18 p.m.6 views

cve-2023-5044

CVE-2023-5044 Ingress Nginx Exploit Proof-Of-Concept This is a quick Go program to exploit the recent CVE in the Ingress Nginx controller. Details on how to do this are already out there via Rory McCune's blog at https://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044/, this just...

8.8CVSS7.9AI score0.56605EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/06 3:18 p.m.8 views

Apache-2.4.49-2.4.50-Traversal-Remote-Code-Execution-Exploit

This repository does not have a README...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 3:18 p.m.5 views

Starlink-FI

Starlink User Terminal Modchip This repository accompanies the talk titled "Glitched on Earth by Humans: A Black-Box Security Evaluation of the SpaceX Starlink User Terminal". A slide deck is available here, a recording of the talk should be available soon. The talk covers how we managed to execu...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/06 3:18 p.m.6 views

Blackhat-USA-2022-Materials

Black Hat USA 2022 Presentation Materials Presentation materials for my Black Hat USA 2022 Briefing and Arsenal talks Black Hat USA Briefing - Controlling the Source: Abusing Source Code Management Systems Description...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder