Lucene search
+L

73917 matches found

Kitploit
Kitploit
•added 2026/09/26 4:39 p.m.•10 views

CVE-2024-48990

======================================================================== CVE-2024-48990 and CVE-2024-48992 To determine whether a Python process a process that is running the Python interpreter needs to be restarted, needrestart extracts the PYTHONPATH environment variable from this process's...

7.8CVSS8.3AI score0.20452EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/09/26 4:34 p.m.•12 views

magento2-template-filter-patch

Magento 2 Template Filter Patch for CVE-2022-24086, CVE-2022-24087 Magento 2 patch for CVE-2022-24086, CVE-2022-24087. Fix the RCE vulnerability and related bugs by performing deep template variable escaping. If you cannot upgrade Magento or cannot apply the official patches, try this one...

10CVSS8.7AI score0.99199EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/26 4:31 p.m.•7 views

apache__uima-uimaj_CVE-2022-32287_3-3-0

Welcome to the Apache UIMA Java SDK Apache UIMA helps you managing unstructured data such as texts that is enriched useful information. For example, if you want to identify a mention of an entity in a text or possible link that entity to a reference dataset, then Apache UIMA provides: a convenien...

7.5CVSS7.2AI score0.01673EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/26 4:28 p.m.•13 views

CVE-2014-6271_pwnable

CVE-2014-6271 CVE-2014-6271 is a critical vulnerability known as "Shellshock", discovered and disclosed in 2014. This vulnerability was found in the Bash shell and affects almost all Unix and Linux systems, making it one of the most widely known vulnerabilities on the internet. Security Threat Th...

10CVSS8.4AI score0.99999EPSS
SaveExploits140
Kitploit
Kitploit
•added 2026/09/26 3:31 p.m.•12 views

rtty_CVE-2025-56708-CVE-2025-56709

CVE-2025-56708&CVE-2025-56709 【CVE-2025-56709】savepath Buffer Overflow Vulnerability Overview In rtty totalsize = ctx-remainsize = bufferpullu32beinfo; ment = findmountpointsavepath; if ment uint64t avail; if !strcmpment-mnttype, "ramfs" struct sysinfo si; if sysinfo&si logerr"download file fail:...

6.2AI score
SaveExploits1
Kitploit
Kitploit
•added 2026/09/26 3:23 p.m.•10 views

Reproducing-ConnMan-1.34

Connection Manager Copyright C 2007-2012 Intel Corporation. All rights reserved. Functionality and features The following features are built-in into Connection Manager: - Generic plugin infrastructure - Device and network abstraction with basic storage support - IPv4, IPv4-LL link-local and DHCP...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/26 3:22 p.m.•8 views

reproducer-poc-CVE-2022-0847

Naive detector and reproducer of CVE-2022-0847 dirty pipe. Uses simple generator of syscall sequences / programs from purposefully limited set of building blocks / input values only generation, no advanced fuzzing; no mutation; no coverage guidance; no shrinking / minimization and detects...

7.8CVSS7.2AI score0.92795EPSS
SaveExploits102
Kitploit
Kitploit
•added 2026/09/26 3:17 p.m.•11 views

FiberBreak

FiberBreak Exploitation framework for CVE-2025-55182 React2Shell - Critical RCE vulnerability in React Server Components. Overview CVE : CVE-2025-55182 CVSS : 10.0 CRITICAL Type : Remote Code Execution RCE Affected : React 19.0.0-rc.0 to 19.0.0, Next.js 15.0.0 to 15.0.3 Discovery : Lachlan Miller...

10CVSS8.4AI score0.99802EPSS
SaveExploits391References4
Kitploit
Kitploit
•added 2026/09/26 2:56 p.m.•13 views

CVE-2017-1000486

CVE-2017-1000486 Remote Code Execution exploit for PrimeFaces 5.x - EL Injection CVE-2017-1000486 This is basically the same exploit made by Mogwailabs, but edited to work in closed environments without access to the internet or with blocked firewall outbound traffic. It gives you results in HTTP...

9.8CVSS8.7AI score0.94104EPSS
SaveExploits6References1
Kitploit
Kitploit
•added 2026/09/26 2:54 p.m.•9 views

jenkinsci__perfecto-plugin_CVE-2020-2261_1-17

Perfecto Jenkins Plugin Perfecto Jenkins Plugin provides the ability to auto-create/ re-use existing Perfecto Connect tunnel-id in build environment. Table of Contents Perfecto Jenkins Plugin Table of Contents Prerequisites 1. Steps to Enable the plugin Screenshots Mac Windows Advanced Options 2...

8.8CVSS8AI score0.01357EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/26 2:43 p.m.•13 views

CVE-2022-2588

CVE-2022-2588 The fix The bug is fixed in Linux v5.19 by this commit. The bug The bug was introduced in Linux v3.17 by this commit back to 2014. It requires User Namespaces to trigger. This bug is very similar to CVE-2021-3715, which was caused by improper operation on the route4filter's linked...

7.8CVSS6.9AI score0.05871EPSS
SaveExploits7
Kitploit
Kitploit
•added 2026/09/26 2:27 p.m.•9 views

l4s-vulnapp

Log4Shell Vulnerable Applicationl4s-vulnapp This is a potentially vulnerable Java web application containing Log4j2.14.1 affected by log4shellCVE-2021-44228. Verified environment and various versions AdoptOpenJDK 17.0.10+7 Gradle 8.6 Gretty 4.1.2 Apache Tomcat 10.1.15 Apache Log4j Core 2.14.1...

10CVSS7.5AI score0.99999EPSS
SaveExploits375
Kitploit
Kitploit
•added 2026/09/26 2:15 p.m.•7 views

CVE-2022-24086

CVE-2022-24086 CVE-2022-24086 POC example provided by BurpRoot CVE-2022-24086: Overview Affected Software: Magento2 CVE ID: CVE-2022-24086 CVSS Score: 9.8 Critical Description CVE-2022-24086 is a critical security vulnerability affecting multiple versions of the Magento2 e-commerce platform. This...

10CVSS8.9AI score0.99199EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/26 1:59 p.m.•11 views

Poison-HTB-Report

Poison-HTB-Report Privilege Escalation on HTB "Poison" using PwnKit CVE-2021-4034 HTB "Poison" - Privilege Escalation Report BugVex This repository contains a full vulnerability report on the Hack The Box machine Poison. 🔍 Exploit Summary CVE: CVE-2021-4034 PwnKit Technique: Privilege escalation...

7.8CVSS7.1AI score0.94345EPSS
SaveExploits155
Kitploit
Kitploit
•added 2026/09/26 1:36 p.m.•11 views

CVE-2020-10977.py

CVE-2020-10977.py authenticated arbitrary file read for Gitlab CVE-2020-10977 usage: CVE-2020-10977.py -h --verifySSL -f FILELIST host token Exploit for the gitlab local file inclusion arbitrary authenticated file read - CVE-2020-10977. modify the variable pullfiles to include all the files you...

5.5CVSS6.3AI score0.42741EPSS
SaveExploits10
Kitploit
Kitploit
•added 2026/09/26 1:34 p.m.•12 views

CVE-2012-2593

Atmail XSS-CSRF-RCE Exploit Chain PoC atmail-rce.py: Exploits CVE-2012-2593 in Atmail's webmail interface. atmail-csrf.js: Javascript file which leverages CVE 2012-2593 into a CSRF to install a malicious plugin which executes a reverse shell Plugin.php: Atmail plugin to be installed which calls a...

6.1CVSS7.1AI score0.06229EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/26 1:19 p.m.•2 views

sudotimewarp-cve-2026-96512-

SudoTimeWarp — CVE-2026-96512 sudo: the caller'sTZ decides NOTBEFORE/NOTAFTER Reproduction material for SudoTimeWarp CVE-2026-96512. A sudoers rule whose DateSpec timestamp omits the trailing Z is converted by mktime, which re-reads getenv"TZ" on every call. Because sudo is setuid-root and the...

7.8CVSS6.1AI score0.00132EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/09/26 1:19 p.m.•5 views

CVE-2026-96512

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-96512 CVE-2026-96512 sudo 1.9.13p3 Debian bookworm — Sudo Project A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing Z timezone indicator, the...

7.8CVSS5.8AI score0.00132EPSS
SaveExploits2References7
Kitploit
Kitploit
•added 2026/09/26 12:52 p.m.•12 views

spring-cloud__spring-cloud-config_CVE-2020-5410_2-1-8-RELEASE

//// DO NOT EDIT THIS FILE. IT WAS GENERATED. Manual changes to this file will be lost when it is generated again. Edit the files in the src/main/asciidoc/ directory instead. //// image::https://circleci.com/gh/spring-cloud/spring-cloud-config/tree/master.svg?style=svg"CircleCI",...

7.5CVSS6.8AI score0.95586EPSS
SaveExploits3References13
AstraLinux
AstraLinux
•added 2026/09/26 12:48 p.m.•7 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfqueue: It was discovered that nfqueue holds the bridgeskb-dev variable while the packet is being queued. The function brpassFrameup reassigns skb-dev from the ingress port to the bridge master before queuing bridge...

7.8CVSS6.9AI score0.00152EPSS
SaveExploits0References3
Rows per page
Query Builder