CVE-2025-0282-Ivanti-exploit

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 是 Ivanti Connect Secure 中的一个严重漏洞，允许通过缓冲区溢出漏洞实现远程命令执行（RCE）。 该漏洞使攻击者能够上传恶意文件（如 Web Shell）并在目标系统上以提升的权限执行命令。 强烈建议将受影响的系统更新至最新版本，以减轻被利用的风险。 上传 Web Shell 要使用该工具向目标系统上传 Web Shell： root@kitploit: python3 CVE20250282Ivanti.py ：目标服务器的 IP 地址。 ：本地机器上 Web Shell 文件的路...

CVE-2024-21388

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 我们要求安全归还所有被恐怖组织哈马斯劫持为人质的公民。我们将不懈努力，直到所有人质获释并安全回家。您可以帮助他们回家。https://stories.bringthemhomenow.net/ Microsoft Edge 漏洞利用 CVE-2024-21388 此 Python 脚本利用 Microsoft Edge 中的一个漏洞 CVE-2024-21388，可通过私有 API 以提升的权限静默安装浏览器扩展。 描述 Guardio Labs 发现 Microsoft Edge 中存在一个漏洞，编号为...

CVE-2021-42292

CVE-2021-42292 该包将检测针对 CVE-2021-42292（一个 Microsoft Excel 本地权限提升漏洞）的利用行为，并为其在 notice.log 中生成一条 notice 记录。 https://corelight.com/blog/detecting-cve-2021-42292 检测方法： 当触发漏洞的 Excel 电子表格下载第二个电子表格时，该包即可检测到此漏洞。第二个电子表格将以提升的权限执行。借助此脚本，我们可以检测 Microsoft Excel 下载 Microsoft Excel...

LolDriverScan

LolDriverScan LolDriverScan es una herramienta en golang que permite a los usuarios descubrir controladores vulnerables en su sistema. Esta herramienta obtiene la lista de loldrivers.io desde sus APIs y escanea el sistema en busca de controladores vulnerables. Este proyecto está implementado en G...

EUVD-2026-42967

ZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token Exchange...

CVE-2026-86830

Incorrect privilege assignment in Temporary Elevated Access Management TEAM for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended...

CVE-2026-86830 Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

Incorrect privilege assignment in Temporary Elevated Access Management TEAM for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended...

CVE-2026-86830

CVE-2026-86830 is an incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center, versions prior to 1.5.1 . An authenticated remote user with application-level access can read, approve, modify, or revoke arbitrary access requests , enabling them to ob...

EUVD-2026-77769

Incorrect privilege assignment in Temporary Elevated Access Management TEAM for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended...

CVE-2025-24890 gix-sec safe.directory protections absent for elevated administrators

gitoxide is an implementation of git written in Rust. Prior to 0.13.3, the gix-sec crate on Windows incorrectly treats repositories controlled by another user as trusted when an administrator runs a dependent program with an unfiltered elevated token. In gix-sec/src/identity.rs,...

EUVD-2025-210908

gitoxide is an implementation of git written in Rust. Prior to 0.13.3, the gix-sec crate on Windows incorrectly treats repositories controlled by another user as trusted when an administrator runs a dependent program with an unfiltered elevated token. In gix-sec/src/identity.rs,...

CVE-2025-24890

CVE-2025-24890 affects the gix-sec crate (part of gitoxide , a Rust git implementation) on Windows prior to version 0.13.3 . The root cause is in is_path_owned_by_current_user (gix-sec/src/identity.rs), where the administrator-specific IsWellKnownSid and CheckTokenMembership calls erroneously ins...

PT-2026-90805

A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes stack-based buffer overflow. Remote exploitation of the attack is possible...

CVE-2024-40635_POC

CVE-2024-40635POC CVE-2024-40635 漏洞的概念验证代码 数据来源：https://nvd.nist.gov/vuln/detail/CVE-2024-40635 1. 导入 Docker 库 root@kitploit: import docker 这将导入 Python 的 docker 库，允许通过其 API 与 Docker 交互。如果尚未安装该库，可以通过运行以下命令添加： root@kitploit: pip install docker 2. 初始化 Docker 客户端 root@kitploit: client =...

CVE-2026-90448

A deployment mode intended to expose only read access to stored data proxies a set of application programming interface routes without restricting which request methods are allowed. One such route accepts a request that creates or overwrites a stored record, including an attacker-chosen identifie...

CVE-2026-90448

CVE-2026-90448 affects a read-only deployment mode that proxies a set of API routes without restricting allowed request methods. One of these routes accepts a request that creates or overwrites a stored record with an attacker-chosen identifier, using the application's own elevated backend creden...

slui-file-handler-hijack-privilege-escalation

Slui 文件处理程序劫持 LPE 漏洞信息| ---|--- 日期| 15.01.2018 已修补| Windows 10 20H1 19041 exploit-db| 44830 测试环境| Windows 8-10, x86/x64 通用 描述 slui.exe 是一个自动提升权限的二进制文件，容易遭受文件处理程序劫持攻击。 执行时会读取 HKCU\Software\Classes\exefile\shell\open。由于该注册表项可从用户模式访问，因此可以注入任意可执行文件。 该漏洞利用通常与编程语言和位数无关，因为无需 DLL...

PT-2026-90516

A deployment mode intended to expose only read access to stored data proxies a set of application programming interface routes without restricting which request methods are allowed. One such route accepts a request that creates or overwrites a stored record, including an attacker-chosen identifie...

CVE-2026-63427

An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges...

CVE-2026-63427

An authentication bypass vulnerability in Lenovo Software Fix allows a local authenticated user with low privileges to achieve arbitrary code execution with elevated privileges . The attack vector is local with low complexity and no user interaction required, yielding HIGH impact across confident...