Lucene search
+L

4529 matches found

Kitploit
Kitploit
added 2026/09/13 10:23 a.m.5 views

Overflow-Demo-CVE-2017-11882

Overflow-Demo-CVE-2017-11882 Demo simple de desbordamiento mediante cadena de texto strcpy, similar al exp de CVE-2017-11882. Compilación Compilar con Visual Studio 2017 2019 también funciona; 2015 no funciona. Configuración del Proyecto root@kitploit: Project setting: c/c++ Optimization...

9.3CVSS7.8AI score0.99945EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/13 10:15 a.m.5 views

Umbra

Este es el repositorio para la distribución del navegador Umbra. El código fuente de Umbra no se encuentra aquí, construimos Umbra con un script llamado fern.js. Nuestro sistema de compilación se puede encontrar aquí: https://github.com/openconstruct/user-agent-desktop Umbra es un navegador de...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 8:09 a.m.4 views

CVE-2021-21551

CVE-2021-21551 Un PoC que explota el controlador dbutil23 de Dell. Obtendrá ejecución de código en un sistema que tenga HVCI deshabilitado, como se muestra a continuación: Salida: El artículo sobre este código se puede encontrar aquí: https://ch3rn0byl.com/2021/05/a-dell-cve-2021-21551/...

8.8CVSS7.8AI score0.79249EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/13 7:42 a.m.7 views

CVE-2021-22911-rust

CVE-2021-22911 Un proof of concept en Rust para esta CVE. Se utiliza como parte de https://tryhackme.com/room/rocket, un CTF boot to root en la plataforma de aprendizaje TryHackMe. Para usarlo, actualiza las constantes en main.rs y ejecútalo, y debería funcionar directamente. Requiere que tengas ...

9.8CVSS8.1AI score0.95242EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/13 6:24 a.m.8 views

CVE-2026-42945-NGINX-Rift-Toolkit

CVE-2026-42945 Kit de herramientas para la vulnerabilidad Rift de Nginx Kit de herramientas integral para escanear, parchar y probar CVE-2026-42945, una vulnerabilidad crítica de ejecución remota de código en nginx Tabla de Contenidos Resumen Detalles de CVE Características Componentes del kit...

9.2CVSS7.7AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/13 3:12 a.m.7 views

relayer

Relayer - SMB Relay Attack Script. Relayer is an SMB relay Attack Script that automates all the necessary steps to scan for systems with SMB signing disabled and relaying authentication request to these systems with the objective of gaining a shell. Great when performing Penetration testing...

5.8AI score
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.76 views

The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass

The Plus Addons for Elementor plugin before version 4.1.7 allowed attackers to bypass authentication, gain admin access, and create accounts with elevated roles, even when registration was disabled and the Login widget was inactive. id: CVE-2021-24175 info: name: The Plus Addons for Elementor Pag...

9.8CVSS7.9AI score0.14462EPSS
SaveExploits3References2
Kitploit
Kitploit
added 2026/09/13 1:10 a.m.7 views

macstealer

MacStealer: Wi-Fi Client Isolation Bypass 1. Introduction This repo contains MacStealer. It can test Wi-Fi networks for client isolation bypasses CVE-2022-47522. Our attack can intercept steal traffic toward other clients at the MAC layer, even if clients are prevented from communicating with eac...

7.5CVSS7.5AI score0.00889EPSS
SaveExploits1References8
Kitploit
Kitploit
added 2026/09/13 12:11 a.m.10 views

ibmsecurity

IBM Sample Code Este repositorio contiene código Python para gestionar IBM Security Appliances mediante sus respectivas API REST. El appliance ISAM es el que tiene el código más maduro. El código para el appliance ISDS está en desarrollo. El código para el appliance ISVG es nuevo probado solo con...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 10:21 p.m.9 views

InfectPE

Using this tool you can inject x-code/shellcode into PE file. InjectPE works only with 32-bit executable files. Why you need InjectPE? You can test your security products. Use in a phishing campaign. Learn how PE injection works. ...and so on. In the project, there is hardcoded x-code of...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 1:40 p.m.5 views

CVE-2024-8381

CVE-2024-8381 Un error de confusión de tipos en el intérprete SpiderMonkey. Este repositorio contiene análisis en formato Markdown y diapositivas, incluyendo la causa raíz, el PoC y el exploit. Desafortunadamente, debido a la naturaleza de este error, el exploit solo es aplicable cuando ASLR está...

9.8CVSS8.1AI score0.04395EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/12 3:13 a.m.8 views

CVE-2026-13157

CVE-2026-13157 Theme Demo Import = 1.1.3 — Carga Arbitraria de Archivos y Ejecución Remota de Código -E5A500?style=for-the-badge&logo=security&logoColor=white 📖 Descripción General del Aviso CVE-2026-13157 es una vulnerabilidad autenticada de carga arbitraria de archivos que afecta al plugin de...

7.2CVSS6.2AI score0.00347EPSS
SaveExploits1
NVD
NVD
added 2026/09/11 8:19 p.m.6 views

CVE-2026-89598

In the Linux kernel, the following vulnerability has been resolved: fbdev: ssd1307fb: defer I2C transfers from damage callbacks The fbdev damage callbacks may run from fbcon while printk has disabled preemption. They currently update the display synchronously, which enters the sleeping I2C transf...

0.00168EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/11 12:31 a.m.8 views

EUVD-2026-75758

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions...

8.1CVSS0.0021EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.13 views

PT-2026-90314

In the Linux kernel, the following vulnerability has been resolved: fbdev: ssd1307fb: defer I2C transfers from damage callbacks The fbdev damage callbacks may run from fbcon while printk has disabled preemption. They currently update the display synchronously, which enters the sleeping I2C transf...

0.00168EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/11 12:00 a.m.8 views

EUVD-2026-76190

An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier ships with authentication disabled, allowing remote unauthenticated attackers to access live H.264 video and G.711 audio fee...

0.00224EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/10 10:17 p.m.7 views

CVE-2026-87958

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions...

8.1CVSS0.0021EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 9:23 p.m.16 views

CVE-2026-87958

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 are vulnerable to a denial of service condition in which a specific server functionality can be disabled by a privileged user under certain conditions. The CVSS v3.1 score is 8.1 (HIGH) with high impact on both integrity and availab...

8.1CVSS0.0021EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/09/10 9:07 p.m.6 views

NPM: n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions

NPM: n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions vulnerability discovered by ? in WordPress Npm n8n versions 1.123.76...

6CVSS0.00261EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/09/10 9:07 p.m.6 views

EUVD-2026-74272

n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions...

6CVSS0.00261EPSS
SaveExploits0References5
Rows per page
Query Builder