Lucene search
+L

627813 matches found

Kitploit
Kitploit
added 2026/09/01 7:23 p.m.4 views

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 VMware vSphere Client Carga de archivos no autorizada para ejecución remota de código RCE El vSphere Web Client HTML5 es esencialmente una interfaz administrativa que permite la gestión de una instalación de vSphere. El vSphere Client proporciona a un administrador...

10CVSS8.2AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/01 7:23 p.m.4 views

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE Este repositorio contiene mi código de exploit para la vulnerabilidad RCE en Adobe ColdFusion 2021. Descripción del Exploit El exploit envía una solicitud POST que contiene un reverse shell JSP a /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm...

10CVSS8.5AI score0.9995EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/01 7:22 p.m.8 views

CVE-2025-59528.yaml

CVE-2025-59528.yaml Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses...

10CVSS7.9AI score0.8737EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/01 7:22 p.m.4 views

CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – Inyección SQL en LangGraph SQLite Checkpoint CVE-2025-67644 es una vulnerabilidad de inyección SQL CWE-89 en el paquete langgraph-checkpoint-sqlite parte del ecosistema LangGraph / LangChain. Permite a un atacante inyectar SQL arbitrario a través de claves de filtro de...

7.8CVSS6.3AI score0.02306EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/01 7:22 p.m.5 views

CVE-2024-42009

CVE-2024-42009 – Roundcube Stored XSS Docker PoC 📌 Overview This repository demonstrates a working Proof-of-Concept PoC for CVE-2024-42009 , a stored Cross-Site Scripting XSS vulnerability in Roundcube Webmail. The vulnerability is caused by improper HTML sanitization followed by unsafe attribute...

9.3CVSS8.4AI score0.82882EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/01 7:22 p.m.3 views

CVE-2025-55182

Herramienta de detección por lotes CVE-2025-55182 Herramienta eficiente de detección por lotes para la vulnerabilidad de contaminación de prototipos CVE-2025-55182 de Next.js. Introducción a la vulnerabilidad CVE-2025-55182 es una vulnerabilidad de contaminación de prototipos en el framework...

10CVSS7.9AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/01 7:22 p.m.4 views

CVE-2025-69516

CVE-2025-69516 - Ejecución remota de código en Tactical RMM Este repositorio contiene un script de Python que automatiza la explotación de la vulnerabilidad SSTI CVE-2025-69516 en Tactical RMM. Ha sido probado en la versión 1.3.1. Uso root@kitploit: python xpl.py -d api.tactical.xyz -t SESSIONTOK...

8.8CVSS6AI score0.02137EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/01 7:21 p.m.5 views

Rocket.Chat-Automated-Account-Takeover-RCE-CVE-2021-22911

Rocket.Chat: Toma de control de cuenta no autenticada automatizada para RCE CVE-2021-22911 Prueba de concepto completa de RCE no autenticado para Rocket.Chat 3.12.1 CVE-2021-22911 El PoC original creado por Enox. Actualmente esto solo funciona para cuentas sin 2FA. Pronto añadiré bypasses de 2FA...

9.8CVSS8.1AI score0.95242EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/01 7:21 p.m.7 views

CVE-2022-26809-RCE

CVE-2022-26809-RCE CVE-2022-26809-RCE https://satoshidisk.com/pay/CFGspB...

10CVSS9AI score0.90961EPSS
SaveExploits14
CVE
CVE
added 2026/09/01 7:20 p.m.60 views

CVE-2026-72649

This CVE affects the Elasticsearch machine learning component , where a deserialization of untrusted data flaw (CWE-502) via object injection (CAPEC-586) permits remote code execution . A specially crafted trained model artifact can cause attacker-controlled logic to execute with a materially bro...

8.8CVSS6.4AI score0.0058EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/09/01 7:20 p.m.41 views

CVE-2026-72649 Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution

Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586. A specially crafted trained model artifact could cause attacker-controlled logic to execute with a materially broader system-call surface tha...

8.8CVSS0.0058EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/01 7:20 p.m.9 views

EUVD-2026-69562

Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586. A specially crafted trained model artifact could cause attacker-controlled logic to execute with a materially broader system-call surface tha...

8.8CVSS6.4AI score0.0058EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/01 7:20 p.m.5 views

CVE-2026-72649 Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution

Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586. A specially crafted trained model artifact could cause attacker-controlled logic to execute with a materially broader system-call surface tha...

8.8CVSS6.7AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/01 7:18 p.m.4 views

CVE-2026-2898-FunAdmin-Deserialization

CVE-2026-2898 - Deserialización insegura en FunAdmin Resumen FunAdmin Aviso legal Solo con fines educativos y pruebas autorizadas...

6.5CVSS6AI score0.00223EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 7:18 p.m.3 views

CVE-Requests-1896609

CVE Requests 1896609 - feiskyer/mcp-kubernetes-server Executive Summary This report details two critical security vulnerabilities discovered in the feiskyer/mcp-kubernetes-server package. When deployed, the server exposes an MCP tool named kubectl which is intended to provide limited, safe access...

6.2AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/09/01 7:18 p.m.8 views

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

8.5CVSS6.1AI score0.00175EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/01 7:18 p.m.9 views

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

8.5CVSS6.2AI score0.00175EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/01 7:18 p.m.8 views

Important: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.5CVSS6.5AI score0.00175EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/01 7:17 p.m.6 views

CVE-2026-83551

Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid...

8.5CVSS0.00379EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/01 7:16 p.m.3 views

CVE-2019-12735-VIM-NEOVIM

CVE-2019-12735-VIM-NEOVIM USAGE: Prerequisite: modeline feature must be enabled. For regular users, modeline is enabled by default, while for root users it is disabled by default. Use echo &modeline to check the status: 1 means enabled, 0 means disabled. If not, you can add set modeline to /.vimr...

9.3CVSS7.9AI score0.18964EPSS
SaveExploits5
Rows per page
Query Builder