8618 matches found
CVE-2023-32707
CVE-2023-32707 An improved POC exploit based on the reported CVE on exploitdb Exploit Title: Splunk 9.0.5 - Admin Account Takeover CVE: CVE-2023-32707 Overview This script allows for exploiting a vulnerability in Splunk 9.0.5, leading to admin account takeover. The exploit leverages a low-privile...
EUVD-2026-68154
The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custom header/footer script values saved from its post metabox, and does not restrict them to users with the unfilteredhtml capability, allowing users with contributor-level access a...
Nostromo_Python3
Nostrom RCE Python3: Codice Exploit: Utilizzo: root@kitploit: $ python3 ./exp.py vulnerable.host 8080 id uid=65534 gid=65534...
CVE-2024-22120-RCE-with-gopher
Uso root@kitploit: python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Exemplo de Cenário Você identificou um servidor Zabbix rodando no IP 192.168.1.100 e tem acesso a um usuário de privilégios baixos com os seguintes detalhes: ID da sessão sid: d82bf6715e1d3c1f25 ID do host...
EUVD-2026-66391
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
EUVD-2026-66393
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
EUVD-2026-66384
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
LeakedWallpaper
Leaked Wallpaper Questo è uno strumento di escalation dei privilegi corretto con CVE-2024-38100 in KB5040434 che ci permette di divulgare l'hash NetNTLM di un utente da qualsiasi sessione sul computer, anche se stiamo operando da un utente con privilegi limitati. Utilizzo root@kitploit:...
CVE-2026-82306
StarRocks through 4.0.13 contains an information disclosure vulnerability in the querydetail endpoint that returns unfiltered query history for all users. Authenticated attackers with low privileges can access full SQL text, execution plans, and profiling data from every query executed by other...
CVE-2026-55521
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits authorization checks in IndexesApi.listPacketIndex, IndexesApi.listEventIndex, Cop1Api.disable, Cop1Api.resume, Cop1Api.initialize, Cop1Api.updateConfig, and TimeApi.setTime. An authenticated low-privilege user can read...
DB_Audit_Research
Self-Defeating Audits — reproduzierbares Labor Lizenz: MIT Code / CC BY 4.0 Doku Forschung zur defensiven Sicherheit, die testet, ob eine privilegienarme, nur zur Injektion fähige Datenbankrolle einen trigger-basierten Auditor reversibel blenden und die Attribuierung auf Standard-PostgreSQL...
EUVD-2026-42986
Snipe-IT has missing object-level authorization in Kits API...
CVE-2026-55545 Yamcs: WebSocket subscription handlers omit the privilege checks their REST siblings enforce
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs WebSocket subscription handlers fail to enforce the privileges required by equivalent REST endpoints. PacketsApi.subscribePackets exposes the packets WebSocket topic without ObjectPrivilegeType.ReadPacket,...
CVE-2026-55521 Yamcs : Multiple Missing Function Level Access Control vulnerabilities in Yamcs Core API
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits authorization checks in IndexesApi.listPacketIndex, IndexesApi.listEventIndex, Cop1Api.disable, Cop1Api.resume, Cop1Api.initialize, Cop1Api.updateConfig, and TimeApi.setTime. An authenticated low-privilege user can read...
CVE-2026-55521 Yamcs : Multiple Missing Function Level Access Control vulnerabilities in Yamcs Core API
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits authorization checks in IndexesApi.listPacketIndex, IndexesApi.listEventIndex, Cop1Api.disable, Cop1Api.resume, Cop1Api.initialize, Cop1Api.updateConfig, and TimeApi.setTime. An authenticated low-privilege user can read...
CVE-2026-82306 StarRocks Query Detail Endpoint Returns Every User's Query History
StarRocks through 4.0.13 contains an information disclosure vulnerability in the querydetail endpoint that returns unfiltered query history for all users. Authenticated attackers with low privileges can access full SQL text, execution plans, and profiling data from every query executed by other...
EUVD-2026-67823
StarRocks through 4.0.13 contains an information disclosure vulnerability in the querydetail endpoint that returns unfiltered query history for all users. Authenticated attackers with low privileges can access full SQL text, execution plans, and profiling data from every query executed by other...
CVE-2026-82306
StarRocks through 4.0.13 contains an information disclosure vulnerability in the query_detail endpoint, which returns unfiltered query history for all users rather than scoping results to the requesting user. An authenticated attacker with low privileges can thereby retrieve the full SQL text , e...
CVE-2026-82306 StarRocks Query Detail Endpoint Returns Every User's Query History
StarRocks through 4.0.13 contains an information disclosure vulnerability in the querydetail endpoint that returns unfiltered query history for all users. Authenticated attackers with low privileges can access full SQL text, execution plans, and profiling data from every query executed by other...