Lucene search
+L

30870 matches found

Kitploit
Kitploit
added 2026/09/13 3:39 p.m.6 views

CVE-2025-50675-GPMAW-Permissions

CVE-2025-50675 – Insecure Permissions in GPMAW 14.2 Summary CVE-2025-50675 affects GPMAW 14.2, a bioinformatics software developed by Lighthouse Data. The installer creates the folder C:\Program Files\gpmaw with full control granted to the 'Everyone' group , allowing any local user to modify file...

7.8CVSS5.9AI score0.00228EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 3:37 p.m.4 views

sharepoint-toolshell-cve-2025-53770

SharePoint "ToolShell" RCE Exploit CVE-2025-53770 Overview CVE-2025-53770 is a critical remote code execution RCE vulnerability affecting Microsoft SharePoint Server 2016, 2019, and Subscription Edition on-premises only, not SharePoint Online. Attackers can bypass authentication and achieve full...

9.8CVSS7.9AI score0.99998EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/13 3:33 p.m.9 views

PipeViewer

A GUI tool for viewing Windows Named Pipes and searching for insecure permissions. The tool was published as part of a research about Docker named pipes: "Breaking Docker Named Pipes SYSTEMatically: Docker Desktop Privilege Escalation – Part 1" "Breaking Docker Named Pipes SYSTEMatically: Docker...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 3:22 p.m.7 views

CVE-2020-14066

Icewarp Email Server 12.3.0.1 insecurepermissions https://nvd.nist.gov/vuln/detail/CVE-2020-14066...

8.8CVSS8.2AI score0.01774EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 3:18 p.m.9 views

cve-2021-33879

CVEID : CVE-2021-33879 Name of the affected products and versions : GameLoop all versions prior to 4.1.21.90 Vulnerability type : CWE-494: Download of Code Without Integrity Check Summary GameLoop is an Android emulator developed by Tencent. It features an update mechanism which is not encrypted ...

8.1CVSS7.5AI score0.01022EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 3:13 p.m.7 views

CVE-2024-1651-PoC

CVE-2024-1651 This CVE was discovered by Carlos Bello from the Fluid Attack Offensive Team. The finding discusses Insecure Object Deserialization to obtain RCE Remote Code Execution. Here, I have created a faster and easier-to-use PoC Proof of Concept. Therefore, if anyone wants to reproduce the...

10CVSS8.1AI score0.34235EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 3:03 p.m.2 views

cve-2025-55182-analysis

CVE-2025-55182 — React Server Components RCE Analysis Web application vulnerability analysis · M2 Cybersecurity · 2025 Author: Niane Mohamed · LinkedIn End-to-end exploitation chain of a critical CVSS 10.0 insecure deserialization vulnerability in React Server Components, from reconnaissance to...

10CVSS7.5AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/13 2:56 p.m.6 views

CVE-2017-11317-auto-exploit-

Vulnerabilities CVE-2017-11317 . https://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference...

9.8CVSS8.3AI score0.84175EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/13 2:29 p.m.5 views

CVE-2025-50461

CVE-2025-50461: Remote Code Execution via Unsafe Model Deserialization in Verl Status: RESERVED This CVE ID has been assigned but is not yet published in the official CVE list. A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/modelmerger.py script whe...

6.5CVSS5.9AI score0.00496EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/13 2:25 p.m.5 views

CVE-2024-27674

CVE-2024-27674 Macro Expert icacls "C:\Program Files x86\GrassSoft\Macro Expert" C:\Program Files x86\GrassSoft\Macro Expert BUILTIN\Users:OICIM NT SERVICE\TrustedInstaller:IF NT SERVICE\TrustedInstaller:ICIIOF NT AUTHORITY\SYSTEM:IF NT AUTHORITY\SYSTEM:IOICIIOF BUILTIN\Administrators:IF...

7.8CVSS6.7AI score0.0031EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 2:18 p.m.6 views

CVE-2022-1257

CVE-2022-1257 PoC: McAfee Agent Database Credential Harvesting Made by scottk817 This script is a PoC for CVE-2022-1257 , a vulnerability in the McAfee Agent Trellix Agent when working with it's database. The vulnerability allows attackers to retrieve and decrypt credentials from the McAfee Agent...

6.1CVSS6.1AI score0.00646EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/09/13 2:15 p.m.5 views

Telerik-UI-ASP.NET-AJAX-Exploitation

Telerik-UI-ASP.NET-AJAX-Exploitation Unrestricted File Upload by Weak Encryption affected versions CVE-2017-11317 2. Remote Code Execution by Insecure Deserialization - CVE-2019-18935...

9.8CVSS7.8AI score0.99737EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/13 2:03 p.m.7 views

CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV

Executive summary macOS Music and TV do an insecure rename resulting in FDA by gaining full control over the user's TCC.db I reported this bug in separate tickets for each app, feel free to merge if applicable. The underlying problem is that these apps have FDA but fail to sanitize their file...

7.5CVSS7.2AI score0.01567EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 1:49 p.m.4 views

disclosures

Divulgaciones Este es un repositorio que documenta problemas de seguridad que he encontrado. El cliente de Citrix para Linux filtra credenciales a syslog El cliente de Citrix para Linux crea archivos ICA temporales de forma insegura CVE-2023-24486...

5.5CVSS6.6AI score0.00185EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/13 1:38 p.m.13 views

Electrolink-FM-DAB-TV

Electrolink-FM-DAB-TV For CVE-2025-51040 Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2 Description Electrolink FM/DAB/TV Transmitter web management...

7.5CVSS5.9AI score0.00379EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 1:04 p.m.7 views

Telerik_CVE-2019-18935

Escáner Python para TelerikUI telerikrcescan.py Ejemplos Evaluar una IP para CVE-2019-18935 $ python3 telerikrcescan.py -t 192.168.44.21 Evaluar un nombre de host para CVE-2019-18935 $ python3 telerikrcescan.py -t vulnerable.telerik.net Evaluar un rango de red CIDR para CVE-2019-18935 $ python3...

9.8CVSS7.8AI score0.99737EPSS
SaveExploits16References2
Kitploit
Kitploit
added 2026/09/13 12:38 p.m.67 views

php_code_analysis

this script will scan your code the script can find 1. checkfileupload issues 2. hostheaderinjection 3. SQl injection 4. insecure deserialization 5. openredirect 6. SSRF 7. XSS 8. LFI 9. commandinjection features 1. fast 2. simple report usage: root@kitploit: python code.py file.php -this will sc...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 12:12 p.m.7 views

ermir

Ermir Ermir es un Registro RMI Malicioso/Pícaro, explota la deserialización insegura en cualquier código Java que llame a métodos RMI estándar sobre él list/lookup/bind/rebind/unbind. Requisitos Ruby v3 o superior. Instalación Instala Ermir desde rubygems.org: root@kitploit: $ gem install ermir o...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 11:49 a.m.6 views

IoTGoat

OFFICIAL REPO HAS BEEN MOVED TOhttps://github.com/OWASP/IoTGoat Description The IoTGoat Project is a deliberately insecure firmware based on OpenWrt and maintained by OWASP to educate users how to test for the most common vulnerabilities found in IoT devices. The vulnerability challenges are base...

6AI score
SaveExploits0References9
EUVD
EUVD
added 2026/09/13 11:42 a.m.6 views

EUVD-2026-77001

ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weightsonly=False, allowing arbitrary code execution from attacker-supplied files. Attackers can craft malicious checkpoint files that execute code during deserialization when loaded through the initialization or...

8.8CVSS0.00507EPSS
SaveExploits0References6
Rows per page
Query Builder