Lucene search
+L

318 matches found

Kitploit
Kitploit
added 2026/09/16 1:22 p.m.8 views

CVE-2017-4490-

CVE-2017-4490 I've done some experiments I have succeeded in Exploit file .basgrc Specialist on Writing and decorating on Terminal I have created Weakness in file .bashrc And succeeded in Impede Terminal The weakness exists with me Works on all systems Linux Because figlet Works on all systems Ju...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 9:16 a.m.10 views

TeleShadow2

TeleShadow 2 Teleshadow2- Advanced Telegram Desktop Session Hijacker! Stealing desktop telegrams has never been so easy ! Set the email and sender details of the sender and recipient or use Telegram API! and send it to the victim after compiling. How do I use the session file? Delete everything...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 7:48 a.m.13 views

dirtycow-replacer

PLEASE NOTICE I AM NOT FORMALLY TESTING THIS CODE IT IS BEING DESIGNED AS AN EDUCATIONAL TOOL What's it do? android-dirtycow-replacer uses the CVE-2016-5195 dirtycow exploit to patch a list of over 1000 files. You can edit it to be 10000 but 1000 should do. It checks first to make sure the files...

7.2CVSS7.1AI score0.83524EPSS
SaveExploits92
Kitploit
Kitploit
added 2026/09/16 2:25 a.m.11 views

o365-attack-toolkit

¿Qué es o365-attack-toolkit o365-attack-toolkit permite a los operadores realizar ataques de phishing oauth. Decidimos pasar del antiguo modelo de definiciones estáticas a ser completamente "interactivos" con la cuenta en tiempo real. Algunos de los cambios Búsqueda interactiva de correos...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 12:42 a.m.11 views

SetupHijack

SetupHijack Overview SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows installer and update processes. It targets scenarios where privileged installers or updaters drop files in %TEMP% or other world-writable locations, allowing an attacke...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 8:17 p.m.9 views

sudo_digest_toctou_poc_CVE-2015-8239

sudoers DigestSpec TOCTOU POC Rationale Alyssa Milburn https://twitter.com/noopwafel discovered a TOCTOU race condition bug in sudo when the DigestSpec setting is used. The DigestSpec setting can be used to allow a user to sudo a binary if and only if its hash matches a prescribed value. See man...

7CVSS7.1AI score0.00542EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 7:55 p.m.8 views

CVE-2020-1066-EXP

Reference This vulnerability belongs to the Windows CardSpace service that does not properly handle symbolic link objects, leading to a local privilege escalation via arbitrary file replacement. Disclaimer The author's PoC is for research purposes only. If readers use this PoC for other activitie...

7.8CVSS7.2AI score0.02501EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 3:15 a.m.12 views

CVE-2024-10449-patch

Patch for CVE-2024-10449 https://nvd.nist.gov/vuln/detail/CVE-2024-10449 Steps: Download the patched loginAction.php file from this repository https://raw.githubusercontent.com/g-u-i-d/CVE-2024-10449-patch/refs/heads/main/loginAction.php and replace the vulnerable version with this one. Edit the...

9.8CVSS7.2AI score0.01441EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/14 9:04 p.m.10 views

FileSwitcherX

FileSwitcherX iOS 14.0-15.7.1 & 16.0-16.1.2 Install TrollStore AltStore Credits https://github.com/zhuowei/MacDirtyCow MacDirtyCow exploit https://github.com/haxi0/TrollLock-Reborn https://twitter.com/i41nbeer CVE-2022-46689 https://twitter.com/straighttamago FileSwitcherX...

7CVSS7.3AI score0.44678EPSS
SaveExploits10References2
Cvelist
Cvelist
added 2026/07/30 2:00 a.m.49 views

CVE-2026-16727

Concurrent Execution using Shared Resource with Improper Synchronization “Race Condition” in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated privileges via a crafted file replacement. Refer to the ' Security Update for ASUS Armoury Crate ' section on the ASUS Securi...

7.3CVSS0.00087EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/30 2:00 a.m.37 views

CVE-2026-16727

CVE-2026-16727 describes a race condition in ASUS Armoury Crate caused by Concurrent Execution using a shared resource due to improper synchronization. The vulnerability allows a local user to replace a crafted file and achieve arbitrary code execution with elevated privileges. Affected product: ...

7.3CVSS6.3AI score0.00087EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/30 2:00 a.m.22 views

EUVD-2026-50946

Concurrent Execution using Shared Resource with Improper Synchronization “Race Condition” in ASUS Armoury Crate allows a local user to execute arbitrary code with elevated privileges via a crafted file replacement. Refer to the ' Security Update for ASUS Armoury Crate ' section on the ASUS Securi...

7.3CVSS6.3AI score0.00087EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/07/17 5:17 p.m.20 views

CVE-2026-44722

pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a Python operator precedence bug in pyzipper/zipfileaes.py caused the AE-2 format to never be automatically selected during encryption, causing encrypted entries to be written in AE-1...

6.2CVSS5.4AI score0.00116EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/15 4:16 p.m.35 views

CVE-2026-50148

Metabase is an open-source business intelligence and embedded analytics tool. From 1.54.0 until 1.54.24, 1.55.24, 1.56.25, 1.57.19, 1.58.14, 1.59.10, and 1.60.4, a Metabase user with permission to add or edit a database connection can achieve remote code execution on the Metabase server by...

10CVSS0.00427EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/01 10:20 p.m.65 views

CVE-2026-50283

Craft CMS versions 5.0.0-RC1–5.9.20 and 4.0.0-RC1–4.17.13 contain an authorization issue in AssetsController::actionReplaceFile that can delete a source asset without source delete permission when both assetId and sourceAssetId are supplied. The runtime loads assetId ($assetToReplace) and sourceA...

5.3CVSS5.8AI score0.00364EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/01 10:20 p.m.36 views

CVE-2026-50283 Craft CMS: Unauthorized Deletion of Source Assets During File Replacement

Craft CMS is a content management system CMS. Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId...

5.3CVSS0.00364EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/01 10:20 p.m.20 views

CVE-2026-50283 Craft CMS: Unauthorized Deletion of Source Assets During File Replacement

Craft CMS is a content management system CMS. Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId...

5.3CVSS5.9AI score
SaveExploits0References4
NVD
NVD
added 2026/06/29 4:16 p.m.22 views

CVE-2026-13742

Honeywell IQ MultiAccess, all versions prior to and including version 28, contain an improper digital signature verification vulnerability. An attacker could potentially exploit this vulnerability, leading to the replacement of downloaded file with a malicious one. Honeywell also recommends...

5.8CVSS0.00115EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/29 3:19 p.m.34 views

CVE-2026-13742

CVE-2026-13742 affects Honeywell IQ MultiAccess, all versions prior to and including 28. The root cause is improper digital signature verification, enabling an attacker with local access and low privileges (no user interaction) to have a downloaded file replaced with a malicious one. CVSS metrics...

5.8CVSS5.8AI score0.00115EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:12 p.m.15 views

CVE-2026-44469

The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation. A low-privileged local attacker can exploit a TOCTOU race condition with a practical time window to replace verified files with malicious ones before...

8.5CVSS5.5AI score0.00105EPSS
SaveExploits0References1
Rows per page
Query Builder