Lucene search
+L

38519 matches found

Kitploit
Kitploit
added 2026/08/26 7:57 p.m.2 views

CVE-2024-6387

Script de Mitigação CVE-2024-6387 do OpenSSH Este repositório contém um script Python projetado para ajudar administradores de rede a escanear e proteger configurações SSH contra a vulnerabilidade CVE-2024-6387 encontrada no mecanismo de tratamento de sinais do OpenSSH. Esta vulnerabilidade, se...

8.1CVSS7.1AI score0.99506EPSS
SaveExploits71
Kitploit
Kitploit
added 2026/08/26 7:55 p.m.2 views

cve-2025-5054

Ferramenta de Detecção de Vulnerabilidade CVE-2025-5054 Uma ferramenta Python para verificar se seu sistema Ubuntu está vulnerável ao CVE-2025-5054, uma condição de corrida no Apport que permite a divulgação local de informações. Esta ferramenta realiza uma série de verificações para determinar o...

4.7CVSS5AI score0.00714EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/26 7:52 p.m.2 views

CVE-2024-6387

OpenSSH CVE-2024-6387 취약점 점검기 이 Python 스크립트는 서버가 CVE-2024-6387 취약점에 영향을 받는 OpenSSH 버전을 실행 중인지 확인합니다. 지정된 IP 주소 또는 네트워크 범위를 스캔하여 OpenSSH 배너를 찾고, 이를 알려진 취약 버전과 비교합니다. 🚨🚨보안 경고 알림🚨🚨 발표일: 2024년 7월 1일 취약점 세부 정보 최근 OpenSSH 유지보수 담당자는 인증되지 않은 원격 코드 실행RCE으로 이어져 루트 권한을 획득할 수 있는 치명적인 취약점을 수정하기 위해 보안 업데이트를...

8.1CVSS7.1AI score0.99506EPSS
SaveExploits71
Kitploit
Kitploit
added 2026/08/26 7:44 p.m.4 views

CVE-2016-5195

CVE-2016-5195 gcc -pthread dirty.c -o dirty -lcrypt روابط مرجعية https://github.com/FireFart/dirtycow/blob/master/dirty.c...

7.2CVSS7AI score0.83524EPSS
SaveExploits91References1
Kitploit
Kitploit
added 2026/08/26 7:34 p.m.3 views

CVE-2026-33825

🔵 CVE-2026-33825 — “BlueHammer” 🔵 Escalatazione dei Privilegi Locale LPE di Microsoft Defender BlueHammer è una vulnerabilità di escalation dei privilegi locale ad alta gravità che colpisce i componenti di Microsoft Defender sui sistemi Windows. Il difetto consente a un utente malintenzionato con...

7.8CVSS6.9AI score0.06749EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/26 7:31 p.m.3 views

CVE-2026-46333

🚀 CVE-2026-46333 - ssh-keysign-pwn Высококачественное доказательство концепции для уязвимости состояния гонки в ядре Linux Чистый и надежный эксплойт доказательства концепции для CVE-2026-46333 — локальное раскрытие информации через состояние гонки в пути завершения процесса ядра Linux. 🖼️ Скриншо...

7.8CVSS5.3AI score0.01501EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/26 7:22 p.m.3 views

CVE-2021-3560_Polkit

CVE-2021-3560 Polkit Lokale Privilegienausweitung root@kitploit: .--. .-" "-. .--. / .. / .-. .-. / .. \ | | '| / Y \ |' | | | \ \ \ 0 | 0 / / / | \ '- ,.-" "-./, -' / '-' / ^ ^ \ '-' .--'| . ./ |'--. / \ \ / / \ / '. '---' .' \ / '---' \ / \ Ein automatisierter Exploit für die CVE-2021-3560...

7.8CVSS8.3AI score0.22193EPSS
SaveExploits37References2
Kitploit
Kitploit
added 2026/08/26 7:07 p.m.1 views

CVE-2026-46242

🚨 CVE-2026-46242 - BadEpoll 影响 Linux 内核eventpoll 子系统的高危释放后使用漏洞,可能导致本地权限提升、内存损坏或拒绝服务。 📖 概述 CVE-2026-46242 是 Linux 内核 eventpoll epoll 实现中的一个释放后使用(UAF)漏洞。 该问题存在于 epremove 逻辑内部,其竞态条件允许 struct file 及其关联的 eventpoll 对象在被引用时被释放。 具备本地访问权限 的攻击者可以利用此竞态条件破坏内核内存,可能导致: 🔺 本地权限提升 💥 内核内存损坏 🚫 拒绝服务(内核恐慌) ⚠️ 系统不稳定 📊...

7.8CVSS7.5AI score0.03153EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/26 6:57 p.m.2 views

CVE-2024-30088

CVE-2024-30088 Bug: Il bug si trova all'interno della funzione AuthzBasepCopyoutInternalSecurityAttributes quando il kernel copia la struttura AUTHZBASEPSECURITYATTRIBUTESINFORMATION del token corrente nello spazio utente, la quale ha una struttura come questa: root@kitploit: //0x30 bytes sizeof...

7CVSS7.9AI score0.68202EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/26 6:49 p.m.2 views

CVE-2023-32233

Compilazione e Configurazione Le istruzioni riportate di seguito sono state testate su Ubuntu 23.04 Lunar Lobster. Installazione delle Dipendenze di Compilazione Eseguire il seguente comando per installare le dipendenze di compilazione: root@kitploit: sudo apt install gcc libmnl-dev libnftnl-dev...

7.8CVSS6.3AI score0.12966EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/08/26 6:41 p.m.2 views

collateral-damage

Danni Collaterali Danni Collaterali è un exploit per il kernel di Xbox SystemOS che sfrutta CVE-2024-30088. Prende di mira console Xbox One e Xbox Series con versioni del kernel 25398.4478, 25398.4908 e 25398.4909. Il punto di ingresso iniziale è tramite l'applicazione UWP Game Script. I payload...

7CVSS7.7AI score0.68202EPSS
SaveExploits7References2
NVD
NVD
added 2026/08/26 6:16 p.m.3 views

CVE-2026-47836

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...

7.2CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 6:11 p.m.2 views

cve-2024-6387-poc

cve-2024-6387-poc una condizione di corsa nel gestore dei segnali nel server OpenSSH sshd 7etsuo Descrizione Un exploit per CVE-2024-6387, che colpisce una condizione di corsa nel gestore dei segnali del server OpenSSH sshd su sistemi Linux basati su glibc. La vulnerabilità consente l'esecuzione...

8.1CVSS7AI score0.99506EPSS
SaveExploits71
Kitploit
Kitploit
added 2026/08/26 6:02 p.m.2 views

ksmbrace

ksmbrace Ricerca di vulnerabilità in ksmbd , il server SMB3 nel kernel Linux fs/smb/server/. Difetti lato attaccante autenticato sui percorsi durable-handle e di risoluzione dei path di ksmbd. Il nome richiama il tema della race condition di questa linea di lavoro vedi la UAF sul byte-range-lock...

9.1CVSS8AI score0.00446EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/08/26 6:00 p.m.2 views

RoguePlanet

RoguePlanet RoguePlanet Windows Defender Schwachstelle Willkommen zurück allerseits !!! Der Exploit ist eine Race Condition, also ist es Glückssache. Ich habe auf manchen Maschinen eine 100% Erfolgsrate erzielt, während er auf anderen nicht funktionierte. Der Exploit wurde unter Windows 11...

5.4AI score
SaveExploits0
CVE
CVE
added 2026/08/26 5:05 p.m.51 views

CVE-2026-47836

Spring Cloud Config Server is susceptible to a time-of-check-time-of-use (TOCTOU) attack via the spring.cloud.config.server.svn.basedir property, which specifies where SVN repositories are cloned. The affected version ranges are 5.0.0–5.0.4, 4.3.0–4.3.4, 4.0.0–4.2.8, and 3.1.14 and earlier . The ...

7.2CVSS5.3AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/26 4:25 p.m.2 views

CVE-2026-78991

A flaw was found in WebProtect in Google Chrome. A race condition vulnerability allows a remote attacker, who has compromised the renderer process, to obtain sensitive information. This can be achieved by enticing a user to visit a specially crafted HTML page...

5.3CVSS5.3AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/26 4:24 p.m.2 views

CVE-2026-79196

A flaw was found in Google Chrome's Editing feature. This race condition vulnerability allows a remote attacker, leveraging social engineering, to obtain sensitive information by crafting a malicious HTML page. Successful exploitation could lead to unauthorized disclosure of user data...

5.3CVSS5.3AI score
SaveExploits0References2
CVE
CVE
added 2026/08/26 2:37 p.m.6 views

CVE-2026-80556

CVE-2026-80556 is a use-after-free vulnerability in the Linux kernel's mmc: atmel-mci driver, occurring in atmci_remove due to a race condition. When the module is removed, atmci_remove performs cleanup and devm_kzalloc-allocated host memory is freed, but pending or running work (atmci_work_func ...

5.5AI score
SaveExploits0References4
CVE
CVE
added 2026/08/26 2:37 p.m.6 views

CVE-2026-80548

This vulnerability affects the s390/vfio_ccw driver in the Linux kernel . The io_mutex lock, originally defined to serialize io_regions , had also been informally associated with I/O operations due to their close relationship. This left a small number of race condition windows unaddressed. The fi...

5.4AI score
SaveExploits0References5
Rows per page
Query Builder