Lucene search
+L

58238 matches found

Kitploit
Kitploit
added 2026/08/29 8:09 a.m.3 views

Spring-Data-Mongodb-Example

Spring-Data-Mongodb-Example CVE-2022-22980 Umgebung Docker-Umgebung erstellen root@kitploit: docker build -t mongo . docker run -dit -p 6666:6666 mongo Poc root@kitploit: ➜ Spring-Data-Mongodb-Example git:main curl 0:6666/v1/user/get -d 'id=Tjava.lang.Runtime.getRuntime.exec"touch /tmp/aaaa"'...

9.8CVSS7.1AI score0.17969EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/29 7:17 a.m.4 views

Vulnerable-to-Debian-OpenSSL-bug-CVE-2008-0166

Ricerca di monete BTC nelle versioni precedenti di Bitcoin Core con la vulnerabilità critica OpenSSL 0.9.8 CVE-2008-0166 In questo articolo creeremo uno strumento che genererà Indirizzi Bitcoin P2PKH utilizzando la vulnerabilità CVE-2008-0166. Questo è un progetto di ricerca per trovare monete BT...

7.8CVSS6.8AI score0.70721EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/29 6:58 a.m.4 views

CVE-2023-24775-and-CVE-2023-24780

CVE-2023-24775 und CVE-2023-24780 Mein Python-PoC für 2023-24780 und CVE-2023-24775, diese SQLi-CVEs in Funadmin Dies ist ein Repository mit einem PoC-Exploit für Python-CVE-SQLi in Funadmin. CVE-2023-24774 - https://nvd.nist.gov/vuln/detail/CVE-2023-24780 Verwundbare Version von Funadmin v3.2.0...

9.8CVSS7.2AI score0.19763EPSS
SaveExploits3
EUVD
EUVD
added 2026/08/29 6:00 a.m.4 views

EUVD-2026-68063

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the instructor role to read other users' order billing details, including name, email address, phone number and postal address, by enumerating order...

2.7CVSS5.9AI score0.00132EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/29 3:00 a.m.2 views

m33tfinder

M33tfinder è uno strumento per rilevare intervalli di ID di conferenza attivi in un server Cisco Meeting Server. M33tbreak è uno strumento per testare codici di accesso deboli contro una conferenza in un server Cisco Meeting Server. Pins.txt contiene, ad esempio, codici di accesso a 4 cifre. Ques...

7.5CVSS6.7AI score0.01964EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/29 2:36 a.m.2 views

ibrute

AGGIORNAMENTO Se sei preoccupato per la sicurezza dell'archivio cloud, leggi E se fossi una nuvola? e lascia il tuo feedback, per favore. Grazie. La fine del divertimento, Apple ha appena patchato Ecco il pOc di bruteforce della password appleID. È solo un p0c, quindi non ci sono Funzionalità...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/29 12:50 a.m.2 views

jwt-key-id-injector

Iniettore di ID Chiave JWT Semplice script Python per verificare un'ipotetica vulnerabilità JWT. Supponiamo che esista un'applicazione che utilizza token JWT firmati con l'algoritmo HS256. Un esempio di token è il seguente: root@kitploit:...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 10:41 p.m.4 views

CVE-2026-66384

cve-id Donazioni...

5.3CVSS5.9AI score0.00579EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 10:36 p.m.2 views

ID-entify

Di Carlos Ramírez L. | BillyV4 | V 1.0 INFORMAZIONI ID-entify è uno strumento che permette di cercare informazioni in modo passivo relative a un dominio. RICERCA DI INFORMAZIONI RELATIVE A UN DOMINIO: Email Indirizzi IP Sottodomini Informazioni sulla tecnologia WEB Tipo di firewall Record NS e MX...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 9:56 p.m.2 views

untitledgoosetool

Untitled Goose Tool L'oca è in libertà. Indice Informazioni Per Iniziare Prerequisiti Requisiti Installazione Utilizzo Config GUI Auth Csv Honk Messagetrace Flusso di lavoro predefinito consigliato Flusso di lavoro consigliato per chiamata UAL con limiti di tempo Considerazioni Problemi noti...

5.9AI score
SaveExploits0
NVD
NVD
added 2026/08/28 8:18 p.m.6 views

CVE-2026-55834

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.6.0 until 2.9.0, frontend/src/routes/authorize/+page.ts reads the redirecturi query parameter and frontend/src/routes/authorize/+page.svelte uses the raw callbackURL in redirectWithError when...

4.3CVSS0.00269EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/28 7:23 p.m.741 views

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to , etc...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/28 7:10 p.m.4 views

CVE-2026-73072

cve-id Spenden...

8.5CVSS5.9AI score0.00125EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 6:37 p.m.4 views

CVE-2026-73034-PoC

CVE-2026-73034 — DB-GPT v0.8.1 Path Traversal não autenticado → Escrita Arbitrária de Arquivos CVSS 9.8 Crítico · CWE-22 · GHSA/Issue 3104 Resumo POST /api/v1/python/file/upload no DB-GPT v0.8.1 recebe o cabeçalho HTTP user-id e o utiliza bruto como um componente de caminho : root@kitploit:...

9.8CVSS5.3AI score0.01509EPSS
SaveExploits1References1
Circl
Circl
added 2026/08/28 6:35 p.m.8 views

CVE-2026-55834

creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:34+00:00| published-proof-of-concept| https://github.com/pocket-id/pocket-id/security/advisories/GHSA-2wvm-8mvp-22qv...

4.3CVSS5.8AI score0.00269EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/28 6:15 p.m.4 views

panos-captive-portal-rce

CVE-2026-0300 — Scanner RCE per Buffer Overflow nel Captive Portal User-ID di PAN-OS...

9.8CVSS7.2AI score0.31725EPSS
SaveExploits7References6
Kitploit
Kitploit
added 2026/08/28 6:04 p.m.7 views

CVE-2026-23003-Cross-Chain-Bridge-Message-Forging-via-Missing-Origin-Chain-ID

CVE-2026-23003 – Forjamento de Mensagens de Ponte Cross-Chain por Ausência do Chain ID de Origem Código do Programa Solidity + exploit em Python root@kitploit: // Bridge.sol - Vulnerable bridge contract contract Bridge mappingbytes32 = bool public processed; event Depositedaddress from, address t...

7.5CVSS6.8AI score0.00476EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 6:01 p.m.6 views

CVE-2026-65643

cve-id Spenden...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 5:54 p.m.2 views

CVE-2026-22014-GraphQL-Persisted-Queries-Injection-via-ID-Manipulation

CVE-2026-22014 – Injection nelle query persistite GraphQL tramite manipolazione dell'ID Codice del programma Node.js root@kitploit: // graphqlpersisted.js - Accepts persisted query IDs const express = require'express'; const graphqlHTTP = require'express-graphql'; const queries = "abc": "query us...

3.8CVSS7.2AI score0.00193EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2026/08/28 4:52 p.m.9 views

Vikunja has cross-tenant IDOR in kanban move-task endpoint via unauthorized body task_id

Summary The kanban endpoint POST /api/v1/projects/project/views/view/buckets/bucket/tasks moves a task into a bucket. The task is identified by taskid in the request body. The endpoint's authorization check TaskBucket.CanUpdate only verifies that the caller may update the project/view/bucket name...

7.1CVSS7.3AI score0.0027EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder