Lucene search
+L

1047168 matches found

GithubExploit
GithubExploit
added 2026/09/20 7:18 p.m.10 views

Exploit for Use After Free in Linux Linux_Kernel

GhostLock for Humane AI Pin GhostLock for Humane AI Pin is an...

7.8CVSS0.00789EPSS
SaveExploits103
GithubExploit
GithubExploit
added 2026/09/20 6:59 p.m.10 views

Exploit for CVE-2026-88854

CVE-2026-88854 — OrdaSoft Joomla Gallery SQL Injection Python...

9.3CVSS
SaveExploits1
NVD
NVD
added 2026/09/20 6:16 p.m.6 views

CVE-2026-88856

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions updateOSGallery, reached via task=updateosgallery, read a JSON request body and called the value of a method field as a live PHP function, passi...

9.4CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/20 6:16 p.m.6 views

CVE-2026-88854

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

9.3CVSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/09/20 5:53 p.m.11 views

CVE-2026-88854 Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

9.3CVSS
SaveExploits1References1
CVE
CVE
added 2026/09/20 5:53 p.m.15 views

CVE-2026-88854

CVE-2026-88854 is an unauthenticated SQL injection in the OrdaSoft Joomla Gallery extension (mod_osgallery_search) affecting Joomla getVar()—not a real Joomla filter method—so only HTML tags are stripped while quotes and SQL syntax pass through. The value is concatenated directly into a LIKE clau...

9.3CVSS
SaveExploits1References1
EUVD
EUVD
added 2026/09/20 5:53 p.m.6 views

EUVD-2026-83767

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

9.3CVSS
SaveExploits1References1
CVE
CVE
added 2026/09/20 5:50 p.m.10 views

CVE-2026-88856

OrdaSoft Joomla Gallery extension for Joomla versions

9.4CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/20 5:50 p.m.5 views

EUVD-2026-83765

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions updateOSGallery, reached via task=updateosgallery, read a JSON request body and called the value of a method field as a live PHP function, passi...

9.4CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/20 5:50 p.m.11 views

CVE-2026-88856 Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions updateOSGallery, reached via task=updateosgallery, read a JSON request body and called the value of a method field as a live PHP function, passi...

9.4CVSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/09/20 5:19 p.m.6 views

unruly

unruly Security scanner for backend-as-a-service databases...

SaveExploits0
Kitploit
Kitploit
added 2026/09/20 4:55 p.m.21 views

katana

下一代爬取与爬虫框架 特性 • 安装 • 用法 • 范围 • 配置 • 过滤器 • 加入Discord 特性 快速且完全可配置的网页爬取 标准 和无头 模式 JavaScript 解析/爬取 可自定义的自动表单填写 范围控制 - 预配置字段/正则 知识库 - 机器学习页面类型/表单分类(自动下载模型) 可自定义的输出 - 预配置字段 输入 - STDIN 、URL 和LIST 输出 - STDOUT 、FILE 和JSON 安装 katana需要Go...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/20 4:54 p.m.10 views

CVE-2022-47132

CVE-2022-47132 Academy LMS history.pushState'', '', '/' input type="hidden" nam...

8.8CVSS7.8AI score0.00857EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 4:53 p.m.188 views

scour

Scour - AWS Detection Framework This tool is used to emulate attack patterns inside of the AWS Controlplane. Each attack is tagged with a specific UA for the blue team to signal off of. Status This is still an active work in progress. Lots of Bugs Not ready for production Where to file issues :...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/20 4:53 p.m.12 views

scour

Scour - AWS 检测框架 该工具用于在 AWS 控制平面内模拟攻击模式。每个攻击都会附带一个特定的 UA(用户代理),供蓝队进行信号检测。 状态 目前仍在积极开发中。存在大量错误 。 尚未准备好投入生产环境。 问题提交地址 : https://github.com/grines/scour/issues 维护者 : grines 什么是 Scour? Scour 是一个基于 Golang 编写的现代模块化 AWS 利用框架,专为红队测试和蓝队分析而设计。它包含可用来攻击环境或构建防御检测的现代技术。 特性 命令补全 动态资源列表 命令历史 蓝队模式(为攻击行为添加唯一的用户代理标...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/20 4:52 p.m.12 views

CVE-2023-6538

CVE-2023-6538 CVE-2023-6538 es una vulnerabilidad de Referencia Directa a Objetos Insegura IDOR encontrada en la funcionalidad de Copia de Seguridad y Restauración de Configuración de la Unidad de Gestión del Sistema SMU de Hitachi NAS HNAS. Esta vulnerabilidad afecta a versiones de SMU anteriore...

7.6CVSS6.6AI score0.01583EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/20 4:52 p.m.9 views

cracklord

本包提供了 Go 语言中读写 INI 文件的功能。 功能特性 支持覆盖加载多个数据源(byte 或文件) 支持递归读取键值 支持读取父子分区 支持读取自增键名 支持读取多行的键值 支持大量辅助方法 支持在读取时直接转换为 Go 语言类型 支持读取和 写入 分区和键的注释 轻松操作分区、键值和注释 在保存文件时分区和键值会保持原有的顺序 下载安装 使用一个特定版本: root@kitploit: go get gopkg.in/ini.v1 使用最新版: root@kitploit: go get github.com/go-ini/ini 如需更新请添加 -u 选项。 测试安装...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/20 4:51 p.m.14 views

CVE-2024-21338-Exploit

CVE-2024-21338 Exploit Project Introduction This is a POC for CVE-2024-21338, a privilege escalation vulnerability in the Windows AppLocker driver appid.sys. It was exploited as a 0-day by the Lazarus group for local privilege escalation on Windows. Vulnerability Background CVE-2024-21338 is a...

7.8CVSS8.2AI score0.5981EPSS
SaveExploits13References1
Kitploit
Kitploit
added 2026/09/20 4:50 p.m.316 views

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

10CVSS8.8AI score0.09667EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/20 4:49 p.m.7 views

CVE-2022-36804-PoC-Exploit

CVE-2022-36804-PoC-Exploit Un exploit PoC algo confiable para CVE-2022-36804 inyección crítica de comandos en BitBucket. Este ataque generalmente requiere que los repositorios públicos estén habilitados; sin embargo, las cookies de sesión también son compatibles con este exploit. Nota: este explo...

8.8CVSS8.4AI score0.99174EPSS
SaveExploits25References1
Rows per page
Query Builder