Lucene search
+L

629303 matches found

Kitploit
Kitploit
added 2026/09/03 2:23 a.m.8 views

POC_CVE-2026-41940

POCCVE-2026-41940 Quick start root@kitploit: python3 pocCVE-2026-41940.py -h Usage examples Scan one host root@kitploit: python3 pocCVE-2026-41940.py -u https://target.example:2086 List accounts after successful chain root@kitploit: python3 pocCVE-2026-41940.py -u https://target.example:2086...

9.8CVSS8.5AI score0.98527EPSS
SaveExploits75References1
Kitploit
Kitploit
added 2026/09/03 2:22 a.m.8 views

CVE-2026-42167-PoC

CVE reported by ZeroPath Research original writeup: https://zeropath.com/blog/proftpd-cve-2026-42167-auth-bypass-privesc-rce my version : https://jimmexploit.vercel.app/cve/proftpd-unauthenticated-sql-injection-leads-to-rce Description This repository contains a functional exploit for...

8.1CVSS7.8AI score0.07389EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/03 2:20 a.m.7 views

cve-2026-2005

CVE-2026-2005 — PostgreSQL pgcrypto Heap Overflow → RCE Remote code execution via a single SQL query targeting PostgreSQL's pgcrypto extension. The vulnerability is a heap buffer overflow in pgpparsepubencsesskey that allows corruption of PostgreSQL's internal MemoryContext allocator metadata,...

8.8CVSS7.6AI score0.01274EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/03 2:20 a.m.8 views

CVE-2026-42779

CVE-2026-42779 — Apache MINA Deserialization Filter Bypass to RCE CVSS 3.1: 9.8 CRITICAL AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE: CWE-502 Deserialization of Untrusted Data Reporter: Venkatraman Kumar, Securin Advisory: Apache Mailing List Overview Apache MINA versions 2.1.0 through 2.1.11 and 2.2...

9.8CVSS7AI score0.00902EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/03 2:17 a.m.8 views

CVE-2026-26211

CVE-2026-26211 — Stored XSS in Ekushey Project Manager CRM Product: Ekushey Project Manager CRM Version: 5.0 Vulnerability: Stored Cross-Site Scripting XSS CWE: CWE-79 CVE: CVE-2026-26211 Researcher: LINDAN TRI SAPUTRA Initial Report: August 1, 2026 Summary A stored Cross-Site Scripting XSS...

4.8CVSS5.7AI score0.00306EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/03 2:17 a.m.6 views

c-copy-fail

CopyFail CVE-2026-31431 in Linux Kernel Crypto API Resources: main website aarch64 syscalls pwntools for generating shell code how ancillary data work in sendmsg...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits242
Kitploit
Kitploit
added 2026/09/03 2:16 a.m.11 views

CVE-2026-21514_CVE-2026-21510

CVE-2026-21514 & CVE-2026-21510 Builders 1; CVE-2026-21514 SBX bypass or Protected View Bypass Rebuild document package with obfuscated path to WindowsUpdateDiagnostic.xml inside word/rels/webSettings.xml.rels Pending Check other xml configs in path C:\Windows\diagnostics\index if they support th...

8.8CVSS7.8AI score0.25835EPSS
SaveExploits3
CVE
CVE
added 2026/09/03 2:15 a.m.17 views

CVE-2021-43614

CVE-2021-43614 affects the VariableEditSmm component in Insyde UEFI firmware . The root cause is an error in handling the PlatformLangCodes UEFI variable, which can cause a buffer overflow leading to resource exhaustion and failure; the CVE title further suggests potential for code execution . Th...

6.7CVSS5.5AI score0.00131EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/03 2:15 a.m.31 views

CVE-2021-43614 VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure...

6.7CVSS0.00131EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 2:15 a.m.8 views

CVE-2026-56705

CVE-2026-56705: Adminer 5.4.3 — Unauthenticated RCE via MSSQL PDO DSN Injection...

9.8CVSS8.1AI score0.00497EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/03 2:15 a.m.12 views

cve-2026-39440-funnelforms-fix

CVE-2026-39440 FunnelForms Fix A drop-in WordPress plugin that blocks the vulnerable Demo Import handler in FunnelForms Pro ≤ 3.8.1 to mitigate Remote Code Execution CVE-2026-39440, CVSS 9.9. The Vulnerability Field| Value ---|--- CVE ID| CVE-2026-39440 CVSS Score| 9.9 Critical Affected|...

9.9CVSS5.9AI score0.00364EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/03 2:15 a.m.4 views

Research-CVE-2026-21858

CVE-2026-21858 Ni8mare: n8n Authentication Bypass & Remote Code Execution 1. OverviewVulnerability Name: Ni8mare CVE ID: CVE-2026-21858 CVSS Score: 10.0 Critical Vulnerability Type: Authentication Bypass, Local File Inclusion LFI, Remote Code Execution RCE Affected Versions: n8n versions 1.65.0 a...

10CVSS8.4AI score0.78447EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/03 2:14 a.m.6 views

CVE-2026-41900-POC

OpenLearnX-RCE OpenLearnX Unauthenticated RCE via Container Volume Mount Diff-based discovery → Silent patch → Sandbox escape → Full /tmp disclosure...

10CVSS5.9AI score0.0091EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/03 2:14 a.m.8 views

CVE-2026-44590

CVE-2026-44590 - sherlock-project/sherlock CI - RCE mediante inyección en pullrequesttarget → Compromiso de la cadena de suministro Descubierto y reportado por: Astaruf Informe completo: https://nstsec.com/en/posts/sherlock-rce-pull-request-target-cve-2026-44590/ Aviso upstream: Aviso GHSA de...

9.3CVSS5.9AI score0.01141EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/03 2:13 a.m.7 views

CVE-2026-5027

CVE-2026-5027 - Langflow Path Traversal to Remote Code Execution Description Langflow versions up to and including 1.8.4 do not sanitize the filename parameter in the POST /api/v2/files endpoint. An attacker can use path traversal sequences ../ to write files to arbitrary locations on the...

8.8CVSS6.3AI score0.36141EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/03 2:13 a.m.10 views

CVE-2026-0740

CVE-2026-0740 : Ninja Forms - File Upload = 3.3.26 Unauthenticated Arbitrary File Upload. Description : The Ninja Forms - File Uploads plugin for WordPress is vulnerable to unauthenticated arbitrary file upload due to missing file type validation and missing capability checks in the...

9.8CVSS7.9AI score0.62903EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/03 2:12 a.m.9 views

cve-2021-3864

Test for CVE-2021-3864. How to run create a user echo ALL= path/to/gen-core /etc/sudoers sysctl kernel.corepattern=core ./cve-2021-3864 It should generate a core file in /etc/logrotate.d...

7CVSS7.3AI score0.00769EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/03 2:11 a.m.6 views

cve-2021-41773

cve-2021-41773 Run the Server $ docker build -t cve-2021-41773 . $ docker run --rm -d -p 80:80 cve-2021-41773 Exploitation curl --data "echo;id" 'http://localhost/cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd' Root Cause Misconfiguration in the httpd.conf file combined with Path traversal = RCE...

9.8CVSS8.1AI score0.99992EPSS
SaveExploits164
Kitploit
Kitploit
added 2026/09/03 2:09 a.m.8 views

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - LFI & RCE Exploit Info root@kitploit: Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on:...

9.8CVSS8.2AI score0.99992EPSS
SaveExploits164
Kitploit
Kitploit
added 2026/09/03 2:09 a.m.8 views

CVE-2026-2964-Lab

CVE‑2026‑2964 Lab – Prototype Pollution to RCE This repository contains a complete lab environment for CVE‑2026‑2964, a prototype pollution vulnerability in the web‑audio‑recorder‑js library that can lead to remote code execution under specific conditions. The lab includes: A vulnerable server...

9.8CVSS5.9AI score0.00367EPSS
SaveExploits0
Rows per page
Query Builder