Lucene search
+L

353886 matches found

The Hacker News
The Hacker News
•added 2026/09/26 6:22 p.m.•14 views

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service MaaS platform called Lunex. The new findings come from Ontinue, which described the activity as a four-stage attack chain aime...

7.8CVSS7.2AI score0.0046EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/26 6:14 p.m.•8 views

Aether

Aether An AI-driven OSINT analyst that lives on your desktop. Give her a name, an email, a username, a domain, or a photo. She opens a case, runs the target across the open web, reads the metadata, maps the infrastructure, and draws everything she finds into a knowledge graph that grows while you...

6.3AI score
SaveExploits0References10
Kitploit
Kitploit
•added 2026/09/26 6:09 p.m.•12 views

CVE-2024-25153

Exploit for CVE-2024-25153 Table of Contents Click to expand 1. Introduction 2. Installation 3. Usage 4. Contributing 5. License Introduction Welcome to the Exploit for CVE-2024-25153! This project is a solution to exploit the CVE-2024-25153 vulnerability and execute code remotely in Fortra...

9.8CVSS8.7AI score0.41741EPSS
SaveExploits4
GithubExploit
GithubExploit
•added 2026/09/26 6:02 p.m.•16 views

Exploit for Unrestricted Upload of File with Dangerous Type in Zohocorp Manageengine_Applications_Manager

CVE-2020-14008 — ManageEngine Applications Manager Remote Code...

7.2CVSS7.5AI score0.37525EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/26 5:50 p.m.•7 views

CVE-2016-5195

CVE-2016-5195: Dirty COW Linux Kernel Race Condition Defensive research, non-weaponized validation, and patch analysis for CVE-2016-5195 Dirty COW, a Linux kernel copy-on-write race condition that can allow a local user to modify data associated with a read-only mapping and gain elevated...

7.2CVSS7.3AI score0.83524EPSS
SaveExploits92References7
Kitploit
Kitploit
•added 2026/09/26 5:49 p.m.•1 views

aegis-audio-defense

AEGIS: Audio Endogenous Guarding via Internal Signals Against Large Audio-Language Model Jailbreaks Yu-Ling Liao, Tzu-Chin Chiu, Zong-You Chen, Chi-Lei Tsai, Shao-Yuan Lo — National Taiwan University equal contribution Code for the ICASSP 2027 submission. AEGIS keeps the target audio-language mod...

6.2AI score
SaveExploits0References7
Kitploit
Kitploit
•added 2026/09/26 5:43 p.m.•15 views

CVE-2025-63406-PoC

CVE-2025-63406 PoC Installation root@kitploit: Install dependencies pip install -r requirements.txt Or use a virtual environment python3 -m venv venv source venv/bin/activate On Windows: venv\Scripts\activate pip install -r requirements.txt Usage root@kitploit: python3 CVE-2025-63406.py -u -n -p ...

6.1AI score0.00741EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/26 5:29 p.m.•8 views

CVE-2023-37073

CVE-2023-37073 Telnet default credentials can lead to information disclosure and denial-of-service DoS attacks. Steps To reporduce This affect the AP AR-5310 root@kitploit: Telnet 192.168.1.1 username:user password:user Then Boom ... You logged in Information disclosure through Telnet default...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/26 5:22 p.m.•28 views

trustmebro

Bypass llm guardrails by confusing it with fabricated tool output. Results · Installation · Quick start · Rules · Architecture TrustMeBro intercepts command-line tools invoked by coding agents such as Codex, Claude Code, and pi. Rules decide whether to return fabricated output, modify the real...

6AI score
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/09/26 5:18 p.m.•19 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 ⚠ This tool is created solely for education...

9.8CVSS8.6AI score0.98527EPSS
SaveExploits78
Kitploit
Kitploit
•added 2026/09/26 5:14 p.m.•6 views

cve-2024-49039-task_scheduler_eop_reproduction

CVE-2024-49039: Windows Task Scheduler Elevation of Privilege Vulnerability Overview CVE-2024-49039 is a Windows Task Scheduler Elevation of Privilege EoP vulnerability that allows an authenticated attacker to escape the AppContainer sandbox, elevating from Low integrity AppContainer to Medium...

8.8CVSS8.3AI score0.14179EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/26 5:11 p.m.•11 views

CVE-2022-29078

CVE-2022-29078 | EJS SSTI → RCE White Hat School 4th Class 32 - Sangbeom Woo @taka3636 Summary EJS tags, such as Hello . Internally, EJS compiles the template string into a JavaScript function and then executes it to generate the final HTML. In other words, it is a code generator that "converts...

9.8CVSS7.4AI score0.32808EPSS
SaveExploits7References1
Kitploit
Kitploit
•added 2026/09/26 5:11 p.m.•8 views

CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server

CVE-2025-34322 and CVE-2025-34323 Nagios Log Server Proof of Concept exploits for CVE-2025-34322 and CVE-2025-34323 in Nagios Log Server, along with a combined script to return a shell as root. CVE-2025-34322 After auth, replace your session ID into these two curl commands. The first one set the...

8.6CVSS7.7AI score0.09475EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/26 5:11 p.m.•9 views

CVE-2023-4220

Exploit de prueba de concepto para CVE-2023-4220 Producto afectado : Chamilo = 1.11.24 Este CVE aprovecha una vulnerabilidad de carga de archivos sin autenticación en Chamilo 1.11.24 y versiones anteriores. Un atacante tiene la capacidad de subir archivos PHP sin restricciones, lo que conduce a...

8.1CVSS7.5AI score0.76084EPSS
SaveExploits26
Kitploit
Kitploit
•added 2026/09/26 5:11 p.m.•16 views

CVE-2026-49049

CVE-2026-49049 — Helix3 JoomShaper Joomla Unauthenticated AJAX RCE Scanner Mass scanner / verifier for CVE-2026-49049 : unauthenticated AJAX handler in the Helix3 Framework plugin for Joomla v1.0 – 3.1.0 , patched in 3.1.1+. Authorized testing only. Use only on systems you own or have written...

7.5CVSS6.3AI score0.00992EPSS
SaveExploits7References4
Kitploit
Kitploit
•added 2026/09/26 5:11 p.m.•11 views

CVE-2018-20162-digi-lr54-restricted-shell-escape

layout: post title: "CVE-2018-20162: Digi TransPort LR54 Restricted Shell Escape" author: sgo category: security The Digi TransPort LR54 is a high speed LTE router commonly used by industry, infrastructure, retail and public transportation. It supports running python scripts in a restricted...

9.9CVSS8.6AI score0.04085EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/26 5:10 p.m.•16 views

AutoIt-Obfuscator

AutoIt Obfuscator — Obfuscation for AutoIt Script Source Code AutoIt Obfuscator is a tool to modify AutoIt script source code in this way to make an analysis of obfuscated code very difficult. More technical details, downloads, documentation available at:...

6.3AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/26 5:10 p.m.•13 views

CVE-2023-6895

CVE-2023-6895 Vulnerability Scanner This is a simple Python script for scanning websites to check for the CVE-2023-6895 vulnerability. It sends modified requests to the target URL and checks the response for the vulnerability. Requirements Python 3 requests library tqdm library You can install th...

9.8CVSS7.2AI score0.89138EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/26 5:09 p.m.•10 views

CVE-2025-67888

CVE-2025-67888 Control Web Panel = 0.9.8.1208 admin/index.php OS Command Injection Vulnerability Affected Versions: Version 0.9.8.1208 and prior versions. Vulnerability Description: User input passed via the "key" GET parameter to /admin/index.php when the "api" parameter is set is not properly...

7.3CVSS6.6AI score0.03602EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/26 5:08 p.m.•9 views

cve-2024-3400-panos_rce_reproduction

CVE-2024-3400: Palo Alto PAN-OS GlobalProtect Command Injection RCE CVSS 10.0 CRITICAL | CWE-78: OS Command Injection | Mass Exploited In The Wild Overview CVE-2024-3400 is a pre-authentication command injection vulnerability in Palo Alto Networks PAN-OS GlobalProtect portal and gateway interface...

10CVSS8.9AI score0.99999EPSS
SaveExploits46
Rows per page
Query Builder