Lucene search
+L

522154 matches found

Kitploit
Kitploit
added 2026/09/15 6:20 p.m.7 views

CVE-2024-27348-Apache-HugeGraph-RCE

Remote Code Execution vulnerability in Apache HugeGraph Server CVE-2024–27348 CVE-2024-27348 is a critical Remote Command Execution RCE vulnerability in Apache HugeGraph Server, a popular graph database system. The flaw resides in the Gremlin traversal language interface, which allows users to...

9.8CVSS9AI score0.9921EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/15 6:20 p.m.6 views

CVE-2019-17564

CVE-2019-17564: Apache Dubbo Deserialization Vulnerability 0x00 Introduction Apache Dubbo is a high-performance, lightweight open-source Java RPC framework. It provides three core capabilities: interface-based remote method invocation, intelligent fault tolerance and load balancing, and automatic...

9.8CVSS8.5AI score0.36513EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/15 6:19 p.m.7 views

CVE-2026-23918-poc

CVE-2026-23918 — Apache modhttp2 Double Free Affected: Apache HTTP Server 2.4.66 with modhttp2 + Event MPM Fixed in: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 HIGH — Unauthenticated Remote Code Execution possible CWE: CWE-415 Double Free What's the vulnerability modhttp2 in Apache 2.4.66 has a...

8.8CVSS8.3AI score0.49727EPSS
SaveExploits18
NVD
NVD
added 2026/09/15 6:19 p.m.3 views

CVE-2026-81236

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

8.6CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 6:19 p.m.3 views

CVE-2026-81240

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

8.6CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 6:19 p.m.3 views

CVE-2026-81239

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

8.6CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 6:18 p.m.9 views

CVE-2024-29973

CVE-2024-29973 root@kitploit: GET /cmd,/simZysh/registermain/setCookie?c0=storageextcgi+CGIGetExtStoInfo+None+and+False+or+import"subprocess".checkoutput"id",+shell=True%23 HTTP/1.1 Host: xxxx User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0 Gecko/20100101 Firefox/115.0 Accept: / Accept-Languag...

9.8CVSS8.6AI score0.86089EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/15 6:17 p.m.9 views

CVE-2019-9791

Exploit chain for CVE-2019-9791 & CVE-2019-11708 against Firefox 65.0 Works against Firefox 65.0 on windows 64bit. CVE-2019-11708 part is taken from exploit by 0vercl0k: https://github.com/0vercl0k/CVE-2019-11708 The exploit uses CVE-2019-9791 to obtain read/write primitive in content process the...

10CVSS8.6AI score0.55874EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/15 6:17 p.m.4 views

CVE-2025-57819-exploit

CVE-2025-57819 — FreePBX Pre-Auth SQLi to RCE An all-in-one exploit for CVE-2025-57819 , an unauthenticated SQL injection in FreePBX's endpoint module that leads to remote code execution via cron job injection. CVSS : 9.8 Critical — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CISA KEV : Added...

10CVSS9.2AI score0.85463EPSS
SaveExploits30
NVD
NVD
added 2026/09/15 6:17 p.m.2 views

CVE-2026-61667

DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, DataManagementSystem/Service/FileCatalogHandler.py checkDataset forwards an authenticated caller-controlled datasets value to DatasetManager.py checkDataset, where...

9.9CVSS
SaveExploits0References10
NVD
NVD
added 2026/09/15 6:17 p.m.4 views

CVE-2026-52484

An issue in MitraStar GPT-2742GX4X5v6-SV GLg2.5100XNT0b233 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/device-management-utilities-internet.cgi component...

8.8CVSS
SaveExploits1References1
NVD
NVD
added 2026/09/15 6:17 p.m.5 views

CVE-2026-45579

DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, the RequestManagementSystem/Service/ReqManagerHandler.py exportgetRequestCountersWeb function passes an authenticated caller-controlled groupingAttribute to...

9.9CVSS
SaveExploits0References7
NVD
NVD
added 2026/09/15 6:17 p.m.4 views

CVE-2026-12751

IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

5.4CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 6:17 p.m.5 views

CVE-2026-12728

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code due to a deserialization of untrusted...

8.8CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 6:17 p.m.3 views

CVE-2026-12354

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code on the application server due to...

7.5CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 6:17 p.m.2 views

CVE-2026-12355

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an attacker to perform JNDI injection attacks due to insufficient input validation,...

8.1CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 6:17 p.m.5 views

CVE-2026-12351

IBM MQ 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 LTS, and 10.0.0.0 could allow a remote attacker to execute arbitrary code due to unsafe JNDI lookup processing when the IVT application is deployed...

9.8CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 6:17 p.m.2 views

CVE-2026-11729

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code in client applications due to unsafe...

8.5CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 6:17 p.m.4 views

CVE-2026-11728

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote attacker to cause a denial of service or potentially execute arbitrary code in t...

8.1CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 6:17 p.m.7 views

CVE-2025-53770-Scanner

CVE-2025-53770 扫描器 by DanSec 一款简单有效的侦察工具,用于识别潜在暴露于关键 SharePoint 漏洞 CVE-2025-53770 的系统。 !Warning 本工具仅供授权测试使用。 作者(DanSec)不承担 因未经授权扫描或使用导致的滥用或损失的任何责任。使用本工具前,请确保你拥有对任何域名或服务进行扫描的明确许可。 关于 CVE-2025-53770 CVE-2025-53770(“ToolShell”) 是一个影响本地 SharePoint Server 2016、2019 和订阅版(Subscription Edition)的关键漏洞。...

9.8CVSS8.2AI score0.99998EPSS
SaveExploits42
Rows per page
Query Builder