Lucene search
+L

22576 matches found

RedHat Linux
RedHat Linux
added 2026/09/08 4:09 a.m.4 views

python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

A flaw was found in the tarfile.extractall function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside th...

7.8CVSS5.9AI score0.0075EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/08 4:09 a.m.4 views

Important: Red Hat Security Advisory: python3 security update

An update for python3 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

7.8CVSS5.8AI score0.0075EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/08 3:56 a.m.5 views

page_inject

pageinject - AFALG aead cross-container escape AFALG aead vulnerability cross-container exploit -- pivot from one compromised container into every sibling container that shares the samelibc.so.6 image layer. This is an escape primitive : it runs from inside an unprivileged container that the...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits242
Kitploit
Kitploit
added 2026/09/08 3:49 a.m.7 views

CVE-2022-0492

CVE-2022-0492 Container Escape Analysis toc Vulnerability Overview Vulnerability ID: CVE-2022-0492 Vulnerable Product: linux kernel - cgroup Affected Versions: linux kernel 5.17-rc3 Vulnerability Impact: When a container does not have additional security measures enabled, an attacker with root...

7.8CVSS7AI score0.05528EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/08 3:39 a.m.7 views

CVE-2025-1094

I have written this exploit with reference to the PoC available at CVE-2025-1094 CVE‑2025‑1094 | PostgreSQL Input Sanitization Vulnerability Overview CVE‑2025‑1094 is an input sanitization vulnerability in PostgreSQL’s libpq escape functions and the psql interactive tool. It stems from the improp...

8.1CVSS7.8AI score0.9003EPSS
SaveExploits10References1
Kitploit
Kitploit
added 2026/09/08 3:33 a.m.9 views

BreakEscape

BreakEscape Rails Engine Cybersecurity training escape room game as a mountable Rails Engine. Features 24+ cybersecurity escape room scenarios Server-side progress tracking with 2-table schema Randomized passwords per game instance via ERB JIT Ink script compilation for NPC dialogue Polymorphic...

6AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/09/08 3:17 a.m.5 views

python-cryptography: python-cryptography: python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

A flaw was found in python-cryptography. This vulnerability arises from incorrect handling of wildcard Domain Name System DNS names during certificate validation. Specifically, the verifier may accept a certificate with a broad wildcard DNS name e.g., .example.com even when a more restrictive nam...

8.3CVSS5.8AI score0.00185EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/08 3:11 a.m.9 views

CVE-2024-48208

CVE-2024-48208 The repo contains all the work surrounding the development of the PoC for how a simple OOBOut-of-bound read can result in jail escapes as well as broken access control. About the Vulnerability The orginial CVE Description is as follows: The Github PR on the official repo details ou...

8.6CVSS7.8AI score0.01562EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/08 3:06 a.m.7 views

Copy-Fail-CVE-2026-31431-Kubernetes-PoC

Copy Fail CVE-2026-31431 — Kubernetes Container Escape PoC A proof-of-concept demonstrating how a fully unprivileged container can achieve node-level code execution on Kubernetes by exploiting the CVE-2026-31431 Linux kernel page-cache corruption bug through shared container image layers. The cor...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits242References8
Kitploit
Kitploit
added 2026/09/08 2:54 a.m.9 views

ipv6_frag_escape

IPV6FRAGESCAPE A reliable unprivileged container / jail escape proof of concept for CentOS / RHEL 10. It rides a now fixed IPv6 fragmentation bug in ip6appenddata closed upstream by 38becddc, no CVE, an in-slab linear overflow into the skbsharedinfo at the tail of a packet's own head object. This...

6.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 2:47 a.m.3 views

CVE-2019-5782_CVE-2019-13768

https://googleprojectzero.blogspot.com/2019/04/virtually-unlimited-memory-escaping.html Exploits CVE-2019-7582 and CVE-2019-13768/P0 issue 1755 Targets Chrome 71.0.3578.98 Needed to update the original PoC to work on Windows 10 1909+. Also needed to increase reliability on a particular target...

8.8CVSS8AI score0.12777EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/08 2:38 a.m.8 views

Docker-breakout-runc

Docker breakout via runc Originally from : https://github.com/Frichetten/CVE-2019-5736-PoC. This repo is simply me messing around with the PoC and attempting to figure the exploit's flow...

9.3CVSS7AI score0.98452EPSS
SaveExploits35References1
Kitploit
Kitploit
added 2026/09/08 2:25 a.m.6 views

cve-2023-1671

Сve-2023-1671 How does cve-2023-1671https://vulners.com/cve/CVE-2023-1671 work? /opt/ws/bin/ftsblistpack is a Perl script that calls /opt/ws/bin/sblistpack, which is another Perl script. The shell command arguments in it are enclosed in single quotes: root@kitploit: $rc += system"$sblistpack '$ur...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/08 2:07 a.m.6 views

container-escape-ebpf

White Paper https://www.scs-europe.net/dlib/2026/2026-0321.html Assumptions Host runs vulnerable version of runc: For CVE-2025-31133: 1.2.7 and below, 1.3.0-rc.1 through 1.3.2, 1.4.0-rc.1 and 1.4.0-rc.2. For CVE-2024-21626: 1.0.0-rc93 through 1.1.11. Unprivileged user is able to create containers...

8.6CVSS7.1AI score0.18087EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/08 1:23 a.m.4 views

cve-2019-5736-poc

CVE-2019-5736 Proof of Concept This appends a string to the host runc binary. Bring your own payload see stage2.c. To run: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...

9.3CVSS7AI score0.98452EPSS
SaveExploits35
NVD
NVD
added 2026/09/08 1:17 a.m.4 views

CVE-2026-82710

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usagerules allows a malicious package publisher to inject terminal control sequences into the output of mix usagerules.searchdocs. mix usagerules.searchdocs searches Hex documentation through...

2.3CVSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/08 1:16 a.m.7 views

CrackKeyIso

CVE 2023 28229 Windows CNG KeyIso RPC EoP/SBX Discovered by: @k0shl - @Y3A Educational purposes only!...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 1:15 a.m.3 views

Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py-

远程代码执行 – CVE-2024-28397 pyload-ng / js2py 本仓库包含针对 CVE-2024-28397 的概念验证(PoC) 利用代码,该漏洞是 pyload-ng 因不安全使用 js2py 而导致的远程代码执行漏洞。 免责声明: 此 PoC 仅用于教育和研究目的 。 请勿在非您所有或未经明确授权测试的系统上使用。 作者对任何滥用此代码的行为概不负责 。 漏洞详情 CVE ID: CVE-2024-28397 组件: pyload-ng 中的 js2py 影响: 远程代码执行(RCE) 攻击向量: 恶意 JS 载荷逃逸 js2py 沙箱并执行任意系统命令。...

5.3CVSS7AI score0.04548EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/08 12:45 a.m.6 views

CVE-2023-32364-macos-app-sandbox-escape

CVE-2023-32364-macos-app-sandbox-escape Exploit for CVE-2023-32364...

8.6CVSS7.5AI score0.00825EPSS
SaveExploits0
CVE
CVE
added 2026/09/08 12:23 a.m.8 views

CVE-2026-82710

usage_rules (ash-project, Elixir Mix task) is vulnerable to terminal escape sequence injection via the Mix.Tasks.UsageRules.SearchDocs formatter. Publisher-controlled fields from Hex documentation are interpolated verbatim without neutralizing terminal control characters, allowing a malicious pac...

2.3CVSS5.9AI score
SaveExploits0References4
Rows per page
Query Builder