Lucene search
+L

627127 matches found

Cvelist
Cvelist
added 2026/08/31 5:54 p.m.31 views

CVE-2026-79750 MCPHub authenticated horizontal IDOR: any non-admin user executes tools on other users' MCP servers (cross-tenant file read + SSRF)

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.30, MCPHub scopes non-admin users to servers they own list views and config edits enforce ownership, but the...

7.7CVSS0.00253EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/31 5:54 p.m.15 views

CVE-2026-79750

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs. Prior to version 1.0.30 , while list views and config edits correctly enforce per-user ownership, the tool-execution API does not. Any authenticated non-admin user can invoke tools on MCP serve...

7.7CVSS5.9AI score0.00253EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 5:54 p.m.2 views

CVE-2024-23897

CVE-2024-23897: Jenkins Arbitrary File Read Vulnerability Leading to RCE Introduction This repository contains a Python script that exploits a critical vulnerability CVE-2024-23897 in Jenkins, leading to arbitrary file read and remote code execution RCE. This vulnerability allows an unauthenticat...

9.8CVSS7.3AI score0.99999EPSS
SaveExploits50
Kitploit
Kitploit
added 2026/08/31 5:53 p.m.6 views

CVE-2024-8856

CVE-2024-8856: WordPress WP Time Capsule Plugin Arbitrary File Upload Vulnerability Overview CVE-2024-8856 is a security vulnerability found in the WP Time Capsule plugin for WordPress that allows unauthenticated users to upload arbitrary files to the server. This can lead to remote code executio...

9.8CVSS7.3AI score0.94004EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/31 5:52 p.m.6 views

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 According to The National Vulnerability Database NVD CVE-2021-41773, Apache HTTP Server 2.4.49 is vulnerable to Path Traversal and Remote Code execution attacks. Path Traversal The path traversal vulnerability was introduced due to the new code change added for path...

9.8CVSS7.3AI score0.99992EPSS
SaveExploits164
Kitploit
Kitploit
added 2026/08/31 5:52 p.m.6 views

CVE-2025-1307

Newscrunch एक्सप्लॉइट CVE-2025-1307 🚨 अवलोकन यह एक्सप्लॉइट Newscrunch WordPress थीम में एक गंभीर भेद्यता CVE-2025-1307 को लक्षित करता है। यह दोष newscrunchinstallandactivateplugin फ़ंक्शन में क्षमता जांच की कमी के कारण प्रमाणित उपयोगकर्ताओं सब्सक्राइबर और उससे ऊपर को मनमानी फ़ाइलें अपलोड करने की...

9.8CVSS7.2AI score0.02122EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 5:52 p.m.4 views

CVE-2021-3129

CVE-2021-3129 लारावेल = V8.4.2 डीबग मोड रिमोट कोड निष्पादन RCE के लिए मास स्कैन उपकरण | Python संदर्भ Ambionics.io PHPGCC PHPGCC श्रृंखला Laravel/RCE1 Laravel/RCE2 Laravel/RCE3 Laravel/RCE4 Laravel/RCE5 Laravel/RCE6 Laravel/RCE7 Monolog/RCE1 Monolog/RCE2 Monolog/RCE3 Monolog/RCE4 पर्यावरण चर इस...

9.8CVSS7AI score0.99943EPSS
SaveExploits38References1
Kitploit
Kitploit
added 2026/08/31 5:49 p.m.4 views

CVE-2019-0232

Exploit for Apache Tomcat CVE-2019-0232 This script exploits the CVE-2019-0232 vulnerability in Apache Tomcat, which allows remote code execution through the improper handling of the ism.bat script. The script leverages a reverse shell technique using certutil and nc.exe Netcat to gain remote...

9.3CVSS7.2AI score0.99652EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/31 5:49 p.m.5 views

RCE_CVE-2024-7954-

RCECVE-2024-7954- El plugin porteplume utilizado por SPIP antes de 4.30-alpha2, 4.2.13 y 4.1.16 es vulnerable a una ejecución de código arbitrario. Un atacante remoto no autenticado puede ejecutar PHP arbitrario como el usuario de SPIP enviando una solicitud HTTP manipulada. CRÍTICO Exploit: POST...

9.8CVSS7.2AI score0.90053EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/08/31 5:48 p.m.8 views

PCmanBoF

PCman FTP Server Buffer overflow and Remote Code Execution CVE-2013-4730 A very simple buffer overflow using CVE-2013-4730 against PCman's FTP server v.2.0.7 How it works? That easy BoF overwrite the buffer and execute the shellcode that will connect back reverse shell Vuln machines: WindowsXP SP...

10CVSS5.9AI score0.66462EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/31 5:48 p.m.4 views

CVE-2019-19781

CVE-2019-19781 Ejecución Remota de Comandos en Citrix ADC Referencia: https://www.exploit-db.com/exploits/47901...

9.8CVSS7AI score0.99999EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/08/31 5:47 p.m.4 views

CVE-2023-47400

CVE-2023-47400 CVE-2023-47400 के लिए प्रमाण अवधारणा प्रमाणीकृत PHP रिमोट कोड निष्पादन Nagios XI 5.11.0 पर मनमानी फ़ाइल लेखन के माध्यम से !Note यह poc NCC समूह द्वारा प्रकाशित तकनीकी सलाह पर आधारित है https://research.nccgroup.com/2023/12/13/technical-advisory-multiple-vulnerabilities-in-nagios-xi...

7.2AI score
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 5:47 p.m.6 views

cve-2020-14882

cve-2020-14882 Script Bash para explotar la ejecución remota de comandos no autenticada en Oracle Weblogic - CVE-2020-14882 Uso ./cve-2020-14882.sh...

10CVSS7.4AI score0.99997EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/08/31 5:45 p.m.5 views

CVE-2021-38647

CVE-2021-38647 This is a POC for CVE-2021-38647 : Send a POST request to /wsman with the content of payload.xml and only change the command with your desired one, AS POC, only id command is executed. Source: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure Follow if you like :...

9.8CVSS6.9AI score0.99933EPSS
SaveExploits19
RedHat Linux
RedHat Linux
added 2026/08/31 5:42 p.m.19 views

libssh2: integer overflow via large username or password arguments

A flaw was found in the libssh2 library. A remote attacker can exploit an integer overflow vulnerability in the userauthpassword function by manipulating the usernamelen or passwordlen arguments and cause a heap-based buffer overflow. This leads to a crash to the application linked to the library...

9.1CVSS7.5AI score0.00466EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
added 2026/08/31 5:42 p.m.7 views

libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation

A flaw in libssh2 allows a malicious SSH server to trigger a memory overflow by sending a manipulated attribute count. This can cause the connecting client to crash or allow unauthorized code execution...

8.3CVSS7.2AI score0.00444EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/08/31 5:42 p.m.7 views

libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read

A missing bounds check in the libssh2 publickey subsystem allows malicious SSH servers to trigger a client-side out-of-bounds read, leaking heap pointers that could enable security bypasses, denial of service, or code execution...

7.7CVSS7.2AI score0.00418EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/08/31 5:42 p.m.18 views

Important: Red Hat Security Advisory: libssh2 security update

An update for libssh2 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

9.1CVSS7.7AI score0.00466EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/31 5:42 p.m.11 views

libssh2: libssh2: Arbitrary code execution via double-free in SFTP session

A flaw was found in libssh2. A malicious SSH Secure Shell server can exploit a double-free vulnerability in the sftpopen function. This flaw allows the server to corrupt the heap memory of an authenticated client when it opens an SFTP SSH File Transfer Protocol session. This heap corruption can...

8.8CVSS7.4AI score0.00448EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/31 5:40 p.m.3 views

webmin_docker_and_exp

Docker-webmin-RCE-lab 1. Dockerfiles para la recurrencia de CVE-2019-15107 webmin RCE incluyendo v1.890 y v1.920. 2. Exploit para cada versión. Construir la imagen root@kitploit: First, clone the files Then cd webmin1.890/1.920docker docker build -t hachp1/webmin . Ejecutar el contenedor...

10CVSS7.4AI score0.99766EPSS
SaveExploits39
Rows per page
Query Builder