Lucene search
+L

516295 matches found

Kitploit
Kitploit
added 2026/09/01 3:30 p.m.2 views

CVE-2020-6418

CVE-2020-6418: Chrome RCE chained with a Windows privilege escalation This repo has a working, single stage exploit chain for CVE-2020-6418 a type confusion bug in V8's Turbofan compiler, affecting Google Chrome 80.0.3987.87 x64. Visiting a malicious page with a vulnerable Chrome gets you native...

8.8CVSS7.3AI score0.78808EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/01 3:30 p.m.7 views

mgo3-rce

MGO3 RCE This repository contains information regarding CVE-2026-19874. documentation video demo Timeline 2026-06-26: vulnerability is discovered 2026-06-26: first contact with Konami 2026-07-01: vulnerability is reported to Konami 2026-08-04: vulnerability is silently patched by Konami...

9.1CVSS5.8AI score0.0073EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/01 3:29 p.m.4 views

ActiveMQ-CVE-2023-46604

CVE-2023-46604 ActiveMQ Safe Validator A single-file, non-destructive validator for Apache ActiveMQ CVE-2023-46604. It starts its own HTTP callback server, generates target-specific Spring XML in memory, sends the crafted OpenWire packet, correlates callbacks with unique tokens, and writes CSV/JS...

10CVSS7AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/01 3:28 p.m.4 views

BUK_TS_KILLER

BUKTSKILLER BUK-TS Exploit RCE Authentification Bypass - CVE-2026-12183: 1. write any password 2. intercept response 3. write "userid=" 4. successfully bypassed Public Exploit for BDU:2025-13914 and CVE-2026-3843...

9.8CVSS6.7AI score0.00763EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 3:28 p.m.5 views

cve-2022-41352-zimbra-rce

This repository does not have a README...

9.8CVSS7.4AI score0.95478EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/01 3:27 p.m.6 views

CVE-2020-9496

CVE-2020-9496 - RCE Because the 2 xmlrpc related requets in webtools xmlrpc and ping are not using authentication they are vulnerable to unsafe deserialization. This issue was reported to the security team by Alvaro Munoz [email protected] from the GitHub Security Lab team. This vulnerabilit...

6.1CVSS6.8AI score0.98926EPSS
SaveExploits15References1
Kitploit
Kitploit
added 2026/09/01 3:22 p.m.8 views

CVE-2022-35914-RCE

CVE-2022-35914 by cyb3rk0ala PoC for CVE-2022-35914 , a command-injection vulnerability involving the htmLawed test component in vulnerable GLPI installations. The tool provides command execution through the vulnerable endpoint and includes optional callback functionality for authorized lab...

9.8CVSS7.5AI score0.99662EPSS
SaveExploits16
EUVD
EUVD
added 2026/09/01 3:18 p.m.5 views

EUVD-2026-69289

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users...

8.8CVSS6.3AI score
SaveExploits0References5
CVE
CVE
added 2026/09/01 3:18 p.m.17 views

CVE-2026-84202

ModelScope (through v1.40.0 ) uses PyYAML's unsafe yaml.Loader to parse model configuration files, enabling arbitrary code execution via Python object construction tags. An attacker can craft a malicious model repository with a poisoned configuration file that executes code when a user loads the ...

8.8CVSS6.3AI score
SaveExploits0References5
NVD
NVD
added 2026/09/01 3:17 p.m.5 views

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

8.8CVSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/09/01 3:15 p.m.3 views

CVE-2026-84268

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

8.8CVSS6.1AI score
SaveExploits0
Cvelist
Cvelist
added 2026/09/01 3:15 p.m.17 views

CVE-2026-84268 Gvfs: sftp: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

8.8CVSS
SaveExploits0References3
CVE
CVE
added 2026/09/01 3:15 p.m.13 views

CVE-2026-84268

CVE-2026-84268 is a heap-based buffer overflow in the gvfs SFTP backend (gvfsd-sftp process). When mounting a share and reading a file, the read_reply() function fails to validate the server-provided length against the allocated buffer size, allowing a malicious SFTP server to write past intended...

8.8CVSS6.1AI score
SaveExploits0References3
EUVD
EUVD
added 2026/09/01 3:15 p.m.5 views

EUVD-2026-69287

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

8.8CVSS6.1AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/09/01 3:15 p.m.5 views

CVE-2026-84268

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

8.8CVSS6.1AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/01 2:38 p.m.19 views

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

8.8CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/01 2:38 p.m.5 views

EUVD-2026-69230

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

8.8CVSS6.2AI score
SaveExploits0References1
CVE
CVE
added 2026/09/01 2:38 p.m.12 views

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could exploit this to execute arbitrary code with root privileges , resulting in high impact to confidentiality, integrity, and availability with a cha...

8.8CVSS6.2AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 2:28 p.m.4 views

cve-2017-8760

Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other...

9.3CVSS7AI score0.88698EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/01 2:27 p.m.2 views

Magento-CVE-2016-4010

Análisis y explotación de la vulnerabilidad de ejecución remota de código no autenticada en Magento CVE-2016-4010 0x00 Prefacio El 17 de mayo, el investigador de seguridad Netanel Rubin publicó una vulnerabilidad de ejecución remota de código no autenticada en Magento CVE-2016-4010. Esta...

9.8CVSS7.2AI score0.92869EPSS
SaveExploits10
Rows per page
Query Builder