Lucene search
+L

54342 matches found

Kitploit
Kitploit
added 2026/08/31 1:10 p.m.3 views

AirDroidPwner

AirDroidPwner CVE-2019-9599 此漏洞利用程序已不再可用 PoC 漏洞利用视频:https://www.youtube.com/watch?v=0QDM2246DM CVE:https://nvd.nist.gov/vuln/detail/CVE-2019-9599 Exploit-db:https://www.exploit-db.com/exploits/46337 什么是 AirDroid? AirDroid 是最知名且使用最广泛的工具之一,用于远程控制电脑,尤其是通过浏览器进行控制。 它是如何工作的?...

7.8CVSS7.2AI score0.13309EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/31 12:41 p.m.4 views

cve-2015-7547

Servidor de ataque PoC para la vulnerabilidad CVE-2015-7547 en el resolutor DNS de glibc Para probar en una máquina local con una versión vulnerable de glibc: root@kitploit: user@localhost:/ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/ echo 'nameserver 127.0.0.127' |...

8.1CVSS7.5AI score0.91057EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/31 12:37 p.m.3 views

siem-threat-detection-lab

🛡️ SIEM + 威胁检测实验室 一个端到端的蓝队 实验室:一个Wazuh 4.7.5 SIEM检测7种模拟攻击 ——从端口扫描和SSH暴力破解到真实的CVE漏洞利用(Slowloris DoS)——每个事件都被记录、告警并实时映射到MITRE ATT &CK。从零开始在两台虚拟机上构建。 📄 完整报告: 所有12页(含截图)在本页面底部内联渲染,或下载PDF。 🧱 实验室架构 虚拟机| 操作系统| 角色 ---|---|--- SIEM服务器| Ubuntu 26.04 LTS| Wazuh 4.7.5 + OpenSearch 攻击者| Kali Linux 2026.2| 攻击模拟...

5CVSS5.9AI score0.70525EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/31 12:29 p.m.2 views

Winrar-CVE-2023-40477-POC

CVE-2023-4047 PoC By Wild Pointer Read Research: https://wildptr.io/winrar-cve-2023-40477-poc-new-vulnerability-winrar-security-research/ Recvol3.cpp Vulnerability: https://www.rarlab.com/vulnrev3names.html, https://www.win-rar.com/ Vulnerable: WinRAR = 6.22 How to Test? You can generate your own...

8.8CVSS7.2AI score0.1138EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2026/08/31 12:20 p.m.5 views

nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks

A flaw was found in Node.js's handling of HTTP/2. This vulnerability allows a remote attacker to bypass maxSessionMemory limits by sending specially crafted HTTP/2 retained header blocks. This can lead to memory exhaustion, resulting in a denial of service DoS for the affected system...

7.5CVSS7.1AI score0.005EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/31 12:15 p.m.4 views

CVE-2017-13089

CVE-2017-13089 wget v1.19.1 for exploit dev. NOTE This is not a working exploit - under development. Usage root@kitploit: Build the container docker build -t cve201713089 . OR ... docker pull robertcolejensen/cve201713089 Play around in the container, src will be mounted at /opt/CVE-2017-13089/sr...

9.3CVSS7.2AI score0.79855EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/31 12:10 p.m.2 views

CVE_2020_0796_CNA

CVE-2020-0796-CNA Modificado según el POC proporcionado por danigargu, se implementó la reproducción de escalada de privilegios en Windows 10 y se desarrolló AggressorScripts basado en el proyecto de DLL de reflexión de stephenfewer y la interfaz proporcionada por la documentación de CobaltStrike...

10CVSS7.3AI score0.9981EPSS
SaveExploits126References2
Kitploit
Kitploit
added 2026/08/31 12:02 p.m.4 views

CVE-2022-21907

CVE-2022-21907 针对 CVE-2022-21907 的真实 DoS 利用程序 支持 IPv4/IPv6/HTTP/HTTPS 影响 root@kitploit: - Windows - 10 Version 1809 for 32-bit Systems - 10 Version 1809 for x64-based Systems - 10 Version 1809 for ARM64-based Systems - 10 Version 21H1 for 32-bit Systems - 10 Version 21H1 for x64-based System - 10...

10CVSS7.4AI score0.9279EPSS
SaveExploits21
BDU FSTEC
BDU FSTEC
added 2026/08/31 11:52 a.m.11 views

The vulnerability of the h2 library in the Rust programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

3.7CVSS5.5AI score
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/08/31 11:39 a.m.4 views

CVE-2026-41285-OpenBSD-v6daemons-go-brrr

CVE-2026-41285: One Packet Kills IPv6 on OpenBSD One crafted ICMPv6 packet from the local network permanently hangs slaacd and/or rad. IPv6 SLAAC address autoconfiguration dies until someone manually restarts the daemon. No auth, no privileges, 18 bytes of ICMPv6 payload...

4.3CVSS5.9AI score0.00209EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 11:30 a.m.3 views

CVE-2021-33959

CVE-2021-33959 可以看到,Plex 服务监听了 32410、32412、32413 和 32414 四个 udp 端口。通过分析攻击载荷,并参考设备查询请求的消息格式,我们编写软件向这些端口发送带有 M-SEARCH HTTP/1.1 攻击载荷的 udp 数据包,并抓包获取反射源 IP。最后,我们发现 32410 和 32414 都会响应。复现攻击如下图所示: 发送请求 echo "M-SEARCH HTTP/1.1" | nc -4u 32410 示例 受影响版本 plex media server - 1.21 之前 参考链接...

7.5CVSS7AI score0.15035EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 11:28 a.m.4 views

CVE-2022-0778-POC

一个针对 CVE-2022-0778 的简单远程触发 POC 为什么 在尝试验证我们这边的服务器实现是否受到 CVE-2022-0778 影响时,发现远程验证极其繁琐。虽然关于如何构造恶意证书来触发 BNnodsqrt 中的解析漏洞的教程早已存在,但主要问题在于大多数客户端实现会尝试解析客户端证书以便在 TLS 握手中使用它。这反过来意味着: 如果实现存在漏洞,该漏洞会被触发,客户端将占用 100% CPU 并停滞。 如果实现不存在漏洞,则无法解析证书,客户端会理所当然地退出。 是什么 实际需要的是能够在 TLS 握手中注入一条消息,从而替换客户端在响应 CertificateReque...

7.5CVSS7AI score0.73188EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/08/31 11:27 a.m.5 views

CVE-2026-13156

CVE-2026-13156 — MailerSend Official SMTP Integration !IMPORTANT Abstract: A High-Severity Cross-Site Request Forgery CSRF vulnerability CVE-2026-13156 was discovered in the official MailerSend SMTP Integration plugin for WordPress 1.0.8. The configuration eradication handler...

5.4CVSS6AI score0.00138EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/08/31 10:58 a.m.2 views

CVE-2026-80652

A flaw was found in the Linux kernel's Cryptographic Co-processor CCP driver. A local attacker could trigger a kernel crash, leading to a denial of service DoS, by providing a zero-length certificate chain buffer during a Platform Dynamic Hardware PDH export operation. This issue specifically...

5.5CVSS6AI score0.00176EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/31 10:52 a.m.2 views

CVE-2026-80684

A flaw was found in the KVM Kernel-based Virtual Machine subsystem for s390 PCI devices in the Linux kernel. This vulnerability occurs when the airqivcreate function fails to allocate a resource, returning a NULL value that is not properly checked. An attacker, potentially a malicious guest user,...

9.3CVSS5.9AI score0.00144EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/31 10:52 a.m.4 views

CVE-2026-80671

A flaw was found in the Linux kernel's perf sched subsystem. Multiple vulnerabilities exist within the registerpid function when processing untrusted performance data. These include an integer overflow that can lead to out-of-bounds memory writes and a heap buffer overflow due to improper string...

9.3CVSS6.5AI score0.00157EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/31 10:51 a.m.5 views

CVE-2026-80620

A flaw was found in the Linux kernel. During the error handling of Message Signaled Interrupts eXtended MSI-X region setup, the kernel attempts to unmap an already freed memory region. This double unmap operation on a null pointer can lead to a kernel warning or crash. A local attacker could...

5.5CVSS5.9AI score0.00172EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/31 10:46 a.m.4 views

CVE-2017-8056

CVE-2017-8056 CVE-2017-8056 XML-RPC Exploit DoS ⭐ FOR LINUX : sudo apt-get update sudo apt-get install python3 sudp apt-get install python3-pip pip3 install colorama fakeuseragent pystyle 🧨 RUN TOOL : python3 main.py ⭐ FOR WINDOWS : Download & Install Python3 :...

5.3CVSS6.1AI score0.05076EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 10:41 a.m.6 views

CVE-2024-6387-Mitigation-Ansible-Playbook

Playbook de Ansible para Mitigación de CVE-2024-6387 Un playbook de Ansible para mitigar el riesgo de la vulnerabilidad regreSSHion RCE CVE-2024-6387 hasta que las plataformas actualicen OpenSSH a una versión no vulnerable. La mitigación aplicada aquí se basa en el Consejo de Mitigación...

8.1CVSS6.9AI score0.99506EPSS
SaveExploits71
Kitploit
Kitploit
added 2026/08/31 10:33 a.m.1 views

POC-CVE-2025-48988-CVE-2025-48976

CVE-2025-48988 和 CVE-2025-48976 关于 本项目运行一个简单的文件上传端点,使用 Tomcat 10.1.41 和 Jakarta Servlet。 默认情况下,该漏洞利用程序会从 50 个工作节点并发发送 1000 个并行化的多部分请求,每个请求包含 1000 个部分和每个部分 50 个头。 运行 POC 构建并运行 Docker 容器: docker build -t poc-cve-2025-48988 . docker run -p 8080:8080 poc-cve-2025-48988 启动漏洞利用程序: python3...

7.5CVSS6.9AI score0.67821EPSS
SaveExploits1
Rows per page
Query Builder