Lucene search
+L

627835 matches found

CVE
CVE
added 2026/09/01 8:28 p.m.34 views

CVE-2026-73750

CVE-2026-73750 affects the authentication module of HPE ArubaOS-CX (AOS-CX) , specifically an API endpoint. The root cause is improper handling of malformed or truncated input, constituting a buffer overflow. An authenticated remote attacker—via a compromised or hostile authentication server—can ...

8.8CVSS6.4AI score0.00461EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 8:28 p.m.37 views

CVE-2026-73750 Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution

Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could...

8.8CVSS0.00461EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/01 8:28 p.m.9 views

EUVD-2026-69613

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...

9.8CVSS6.4AI score0.00487EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 8:28 p.m.41 views

CVE-2026-73749 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...

9.8CVSS0.00487EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/01 8:28 p.m.171 views

CVE-2026-73749

CVE-2026-73749 affects a daemon in HPE AOS-CX , where multiple buffer overflow vulnerabilities arise from improper processing of malformed input. An unauthenticated remote attacker can exploit these by sending specially crafted packets to the affected service, potentially achieving remote code ex...

9.8CVSS6.4AI score0.00487EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/09/01 8:27 p.m.8 views

GHSA-6HWM-XVPH-95VM NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary

Two NLTK sites executed the Graphviz dot program by bare name, so process creation resolved it via the search path — and on Windows via the current working directory — rather than a validated absolute location. An attacker who can place a file named dot where resolution looks the CWD on Windows, ...

8.5CVSS5.9AI score0.0012EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/01 8:27 p.m.10 views

EUVD-2026-65226

NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary...

8.5CVSS5.9AI score0.0012EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/01 8:27 p.m.7 views

CVE-2019-9202

CVE-2019-9202 Exploit de ejecución remota de código en Nagios IM 2.6: CSRF + SQLi + RCE + LPE → root remoto Descripción Encadenando una falsificación de petición entre sitios CSRF / omisión de autorización CVE-2019-9203 es posible explotar una inyección SQL basada en UNION CVE-2019-9204, una...

9.8CVSS8.1AI score0.2377EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/01 8:25 p.m.4 views

golang-webmin-CVE-2022-0824-revshell

golang-webmin-CVE-2022-0824-revshell RCE en Webmin url objetivo c - credenciales para webmin sl - IP y puerto de tu servidor local para alojar tu payload s - IP de callback p - puerto de callback Referencias https://www.webmin.com/security.html...

9CVSS6.9AI score0.96977EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/01 8:24 p.m.5 views

CVE-2023-3722

CVE-2023-3722 POC en Python para CVE-2023-3722 Avaya Aura Device Services Carga de archivos sin restricciones RCE. Este script utilizará una solicitud PUT para subir un archivo php con un nombre de archivo generado aleatoriamente de ocho dígitos. Luego realizará una solicitud GET para recuperar...

9.8CVSS8.2AI score0.0386EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 8:23 p.m.5 views

CVE-2021-3490

El seguimiento de límites ALU32 de eBPF para operaciones bit a bit AND, OR y XOR en el kernel de Linux no actualizaba correctamente los límites de 32 bits, lo que podría convertirse en lecturas y escrituras fuera de los límites en el kernel de Linux y, por lo tanto, en ejecución arbitraria de...

7.8CVSS6.6AI score0.27477EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/01 8:23 p.m.8 views

CVE-2024-30167

PoC para Inyección de Comandos Autenticada en Atlona OME Descargo de responsabilidad : Esta prueba de concepto se proporciona únicamente con fines educativos y de investigación. No utilice este código en sistemas que no posea o para los que no tenga permiso explícito de prueba. No soy responsable...

6.3CVSS6.3AI score0.01143EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/01 8:21 p.m.8 views

CVE-2019-2725

CVE-2019-2725 WebLogic Universal Exploit - CVE-2017-3506 / CVE-2017-10271 / CVE-2019-2725 / CVE-2019-2729 constructor de payloads y exploit Información / Ayuda root@kitploit: $ python3 weblogicexploit.py -h ======================================================================== | WebLogic...

9.8CVSS8.2AI score0.99993EPSS
SaveExploits84
Kitploit
Kitploit
added 2026/09/01 8:20 p.m.4 views

React2Shell-CVE-2025-55182

🔥React2Shell - CVE-2025-55182 / CVE-2025-66478 Prueba de Concepto Demostración de Vulnerabilidad de Seguridad Crítica - CVSS 10.0 - Ejecución Remota de Código en Componentes de Servidor de React ⚠️DESCARGO DE RESPONSABILIDAD SOLO CON FINES EDUCATIVOS! Este repositorio demuestra una vulnerabilidad...

10CVSS7.5AI score0.99802EPSS
SaveExploits403References1
Kitploit
Kitploit
added 2026/09/01 8:20 p.m.4 views

CVE-2018-7600

Drupal 7 CVE-2018-7600 / SA-CORE-2018-002 Instale las bibliotecas necesarias con: root@kitploit: pip install requests pip install bs4 root@kitploit: $ python3 drupa7-CVE-2018-7600.py -h ============================================================================= | DRUPAL 7 = 7.57 REMOTE CODE...

9.8CVSS7.8AI score0.99991EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/01 8:20 p.m.8 views

CVE-2017-1000486

CVE-2017-1000486 Primefaces = 5.2.21, 5.3.8 or 6.0 - Remote Code Execution Exploit To install the requirements execute: root@kitploit: git clone https://github.com/pimps/CVE-2017-1000486.git cd CVE-2017-1000486 pip3 install -r requirements.txt Here is how to use the exploit: root@kitploit: $ pyth...

9.8CVSS8.7AI score0.94104EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/01 8:19 p.m.7 views

full-poc-CVE-2025_21298

Revisión de la vulnerabilidad CVE-2025-21298 CVE-2025-21298 es una vulnerabilidad crítica en la tecnología OLE Object Linking and Embedding utilizada en Microsoft Windows. Afecta específicamente a la función UtOlePresStmToContentsStm en la biblioteca ole32.dll. Esta función se encarga de converti...

9.8CVSS8AI score0.80912EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/01 8:19 p.m.7 views

CVE-2021-38304-PoC

CVE-2021-38304 Prueba de Concepto Resumen Este repositorio contiene una prueba de concepto para una vulnerabilidad de seguridad crítica en versiones antiguas del controlador nipalk.sys de National Instruments. La vulnerabilidad permite la ejecución arbitraria de código y la divulgación de memoria...

7.8CVSS7.4AI score0.0044EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 8:19 p.m.6 views

0-click-RCE-Exploit-for-CVE-2023-51409

CVE-2023-51409 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858586463777989073 This repository contains a proof-of-concept exploit for CVE-2023-51409, an unauthenticated arbitrary file upload vulnerability in the AI Engine: ChatGPT Chatbot WordPress plugin,...

10CVSS8.2AI score0.63077EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/01 8:19 p.m.4 views

CVE-2019-11231-PoC

Exploit RCE de GetSimpleCMS CVE-2019-11231 Exploit de ejecución remota de código no autenticado para GetSimpleCMS ≤ 3.3.15 Vulnerabilidad GetSimpleCMS expone archivos sensibles públicamente /data/other/authorization.xml, /data/users/, lo que permite a los atacantes: 1. Filtrar claves de API y...

9.8CVSS8.2AI score0.71598EPSS
SaveExploits5
Rows per page
Query Builder