Lucene search
+L

521673 matches found

Cvelist
Cvelist
added 2026/09/14 3:15 p.m.11 views

CVE-2026-90947 Gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file

A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicio...

7.8CVSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/14 3:15 p.m.4 views

EUVD-2026-77593

A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicio...

7.8CVSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/09/14 3:15 p.m.4 views

CVE-2026-90947

A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicio...

7.8CVSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/14 3:14 p.m.7 views

CVE-2025-14174-Poc

CVE-2025-14174 PoC Exploit Overview This repository contains a fully functional Proof-of-Concept PoC exploit for CVE-2025-14174 also tracked as EUVD-2025-203113, a critical memory corruption vulnerability in the ANGLE graphics engine. The flaw stems from improper restriction of operations within...

8.8CVSS8.5AI score0.22327EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/14 3:13 p.m.7 views

CVE-2024-4577

CVE-2024-4577 - Inyección de Argumentos en PHP CGI RCE Resumen CVE-2024-4577 es una vulnerabilidad crítica de inyección de argumentos en PHP CGI que afecta a sistemas Windows que ejecutan PHP en modo CGI. Esta falla permite a atacantes remotos inyectar argumentos en la línea de comandos de PHP...

9.8CVSS7.5AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/14 3:13 p.m.7 views

CVE-2021-43609-POC

Spiceworks Sort SQLi There's a SQLi in a sort parameter of Spiceworks. The full exploit chain is SQLi - file read - RCE. Demo Prerequisites root@kitploit: apt update && apt install -y ruby-dev nodejs python3 python3-pip libsqlite3-dev pip3 install requests gem install bundler && cd rce && bundle...

9.9CVSS7.8AI score0.02023EPSS
SaveExploits2
RedHat Linux
RedHat Linux
added 2026/09/14 3:12 p.m.4 views

lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href

A flaw was found in lxml, a library for processing XML and HTML in Python. The lxml.html.defs.linkattrs were missing xlink:href, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics SVG...

8.2CVSS0.0024EPSS
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/14 3:11 p.m.7 views

CVE-2019-12735

CVE-2019-12735 An Arbitrary Code Execution vulnerability through modeline in vim/neovim root@kitploit: Product: Vim 8.1.1365, Neovim 0.3.6 Type: Arbitrary Code Execution CVE: CVE-2019-12735 Date: 2019-06-04 Author: Arminius @rawsec Vim versions before 8.1.1365 and Neovim versions before 0.3.6 hav...

9.3CVSS7.9AI score0.18964EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/14 3:10 p.m.5 views

CVE-2025-32432

CVE-2025-32432 Craft CMS 预认证远程代码执行 PoC Craft CMS 中的严重预认证远程代码执行漏洞 受影响版本:Craft CMS 3.x、4.x 及 5.x(最高至 5.6.16) 信息: 此漏洞利用已在 HackTheBox Orion 机器上测试通过 概述 本仓库包含针对 CVE-2025-32432 的概念验证漏洞利用代码,该漏洞是 Craft CMS 中的一个严重预认证远程代码执行漏洞。攻击者无需认证即可利用 Yii2 的行为附件机制以及通过 class 覆盖技术进行 PHP 对象实例化,在服务器上执行任意 PHP 代码。 CVSS...

10CVSS9.1AI score0.99837EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/14 3:10 p.m.6 views

CVE-2022-42889-POC

CVE-2022-42889-POC Proof of Concept for the Apache commons-text vulnerability CVE-2022-42889. What's the Issue : Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefi...

9.8CVSS7.5AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/14 3:09 p.m.5 views

CVE-2019-16759

CVE-2019-16759 vBulletin 5.x 未授权远程代码执行漏洞 Ps: 有些poc发包过去是403 ,而不是200 增强判断:echo md5'vBulletin'; 判断返回包中是否存在be4ea51d962be8308a0099ae1eb3ec63 print r.text.split'be4ea51d962be8308a0099ae1eb3ec63'0 CVE-2019-16759.py root@kitploit: import requests import sys if lensys.argv != 2: sys.exit"Usage: %s " %...

9.8CVSS8.5AI score0.99728EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/14 3:09 p.m.8 views

ProxyLogon

ProxyLogon 元のPoC: https://github.com/testanull 使い方: python proxylogon.py 例: python proxylogon.py primary [email protected] 成功した場合、ウェブシェルが起動します。ウェブシェルから抜けるには exit または quit と入力します(または ctrl+c)。 デフォルトでは、test.aspx ファイルが作成されます。これは変更可能です。 サポート: このプロジェクトはサポートされていませんが、PRは歓迎します : 謝辞とリソース: @Flangvik...

5.9AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/09/14 3:09 p.m.4 views

lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href

A flaw was found in lxml, a library for processing XML and HTML in Python. The lxml.html.defs.linkattrs were missing xlink:href, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics SVG...

8.2CVSS0.0024EPSS
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/14 3:09 p.m.8 views

cve-2022-29464

cve-2022-29464 Disclaimer root@kitploit: 脚本仅供学习参考,请勿恶意攻击他人网站 如违法乱纪,造成一切后果由使用者自行承担 技术无罪,与作者无关 使用脚本默认同意以上说明! --Author:lowkey0808 Usage root@kitploit: usage: python3 -u url cve-2022-29464 optional arguments: -h, --help show this help message and exit -u 目标url -s 上传的木马,默认上传内置shell.jsp Direct command...

10CVSS8.3AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/14 3:09 p.m.5 views

CVE-2023-38831

CVE-2023-38831 CVE-2023-38831 is an RCE in WinRAR 6.23 Reference by https://github.com/z3r0sw0rd/CVE-2023-38831-PoC Read up by Google's TAG at: https://blog.google/threat-analysis-group/government-backed-actors-exploiting-winrar-vulnerability/ Download the latest vulnerable version: 6.22 for...

7.8CVSS7AI score0.98022EPSS
SaveExploits49References1
Kitploit
Kitploit
added 2026/09/14 3:08 p.m.9 views

CVE-2026-21018

SveService 缓冲区溢出 Samsung SMR May 2026 SVE-2026-0478CVE-2026-21018 受影响版本:Android 14、15、16 披露状态:私下披露 SveService 在 SMR May-2026 Release 1 之前的版本中存在越界写入,允许本地特权攻击者执行任意代码。 该补丁添加了适当的输入验证。 警告:这是一个概念验证(PoC),仅供教育用途。对于任何非学习用途的行为,我概不负责。请知悉。 已在 Galaxy A17 LTE SM-A175F 上测试 英语 摘要 在运行 Android 16 的三星设备上,系统服务...

6.8CVSS6.9AI score0.00155EPSS
SaveExploits2
RedHat Linux
RedHat Linux
added 2026/09/14 3:08 p.m.3 views

lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href

A flaw was found in lxml, a library for processing XML and HTML in Python. The lxml.html.defs.linkattrs were missing xlink:href, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics SVG...

8.2CVSS0.0024EPSS
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/14 3:07 p.m.6 views

SMB-Protocol-Vulnerability_CVE-2017-0144

LAB: ATTACKING THE WINDOWS OPERATING SYSTEM VIA THE SMB PROTOCOL VULNERABILITY. 1. DESCRIPTION 2. GENERAL INTRODUCTION 3. PREPARATION 4. PERFORMING THE ATTACK 5. HOW TO PREVENT 1. DESCRIPTION In this lab, we will use two computers to simulate an attack based on a vulnerability in the SMB...

9.3CVSS7.8AI score0.9923EPSS
SaveExploits67
Kitploit
Kitploit
added 2026/09/14 3:07 p.m.7 views

CVE-2024-38063

CVE-2024-38063 Windows Vulnerability that allows the implementation of unauthorised activity over the network: remote execution of Windows TCP/IP remote code. Two virtual machines - a victim and an attacker - are ready to simulate the attack. On the victim machine, a tool for capturing network...

9.8CVSS8.1AI score0.70564EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/14 3:06 p.m.15 views

CVE-2021-44228

CVE-2021-44228 漏洞复现 1. 先运行RmiServer以创建RMI注册服务。 2. 运行Log4jTest,如果你使用Windows,计算器将会弹出。...

10CVSS7.4AI score0.99999EPSS
SaveExploits370
Rows per page
Query Builder