Lucene search
+L

5063 matches found

Kitploit
Kitploit
added 2026/09/16 8:29 p.m.11 views

Januscape

Januscape: Guest-to-Host Escape in KVM/x86 Abstract This document describes the Januscape CVE-2026-53359 vulnerability discovered and reported by Hyunwoo Kim @v4bel. It is a KVM escape vulnerability that lets a guest escape to the host in a KVM/x86 environment. To the best of public knowledge, th...

8.8CVSS6.7AI score0.00962EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/16 8:12 p.m.11 views

CVE-2023-2825-Gitlab

CVE-2023-2825 On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition CE and Enterprise Edition EE version 16.0.0. The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug. It wa...

10CVSS8.1AI score0.71641EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/16 5:26 p.m.11 views

CVE-2023-2825

CVE-2023-2825 Unauthenticated Directory traversal leads to file read. Summary of the CVE An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment...

10CVSS7.8AI score0.71641EPSS
SaveExploits5References2
Kitploit
Kitploit
added 2026/09/16 4:10 p.m.11 views

Detection-and-Mitigation-script-for-CVE-2021-42717

Detection-and-Mitigation-script-for-CVE-2021-42717 Detection and Mitigation script for CVE-2021-42717 - ModSecurity DoS Vulnerability in JSON Parsing ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could result in...

7.5CVSS7.5AI score0.03145EPSS
SaveExploits2
RedHat Linux
RedHat Linux
added 2026/09/16 3:05 p.m.5 views

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

A flaw was found in the Kernel-based Virtual Machine KVM for x86. This vulnerability occurs when KVM incorrectly re-checks Level 1 L1 intercepts during the completion of userspace I/O emulation for a Level 2 L2 instruction. If the L1 or host userspace modifies I/O interception settings during thi...

7.9CVSS0.00158EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/16 2:37 p.m.8 views

log4j2-CVE-2021-45105

Sample Log4j2 vulnerable application CVE-2021-45105 Versions Affected: all versions from 2.0-beta9 to 2.16.0 This application is based on Spring Boot web application vulnerable to CVE-2021-45105 It uses Log4j 2.16.0 Running the application Run it: root@kitploit: Import the project in Java IDE as ...

5.9CVSS7.7AI score0.99999EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/16 1:41 p.m.9 views

CVE-2021-3656-Demo

CVE-2021-3656: This issue is caused by missing validation of the the virtext VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS Virtual VMLOAD/VMSAVE for the L2 guest. Under these circumstances, the L2 guest is able to run VMLOAD/VMSAVE unintercepted, and...

8.8CVSS6.5AI score0.00658EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 11:43 a.m.8 views

CVE-2023-2825

CVE-2023-2825 - GitLab CE/EE 16.0.0 Arbitrary File Read via Path Traversal On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition CE and Enterprise Edition EE version 16.0.0. The vulnerability allows unauthenticated user...

10CVSS7.9AI score0.71641EPSS
SaveExploits5
NVD
NVD
added 2026/09/16 11:17 a.m.3 views

CVE-2026-89930

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter KVM services local TLB flushes on "full" nested VM-Exits through nestedvmxvmexit, but not if a nested VM-Enter fails e.g. due to failed VMCS checks in...

9.3CVSS
SaveExploits0References7
NVD
NVD
added 2026/09/16 11:17 a.m.3 views

CVE-2026-89929

In the Linux kernel, the following vulnerability has been resolved: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU When emulating INVVPID, KVM executes INVVPID on the physical CPU using vpid02 instead of the L1 assigned VPID, after doing some validations on the operands. However...

8.8CVSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/16 10:49 a.m.8 views

Log4j_dos_CVE-2021-45105

Log4j2 DOS CVE-2021-45105 Poc root@kitploit: $$::-$::-$$::-$ Versions Affected: all versions from 2.0-beta9 to 2.16.0 This application is based on Spring Boot web application vulnerable to CVE-2021-45105 It uses Log4j 2.16.0 Running the application Run it: root@kitploit: Import the project in Jav...

5.9CVSS7.7AI score0.99999EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/16 10:40 a.m.9 views

hyperv_local_dos_poc

Hyper-V DoS PoC. This is code files of Visual Studio 2019 driver project. 1. Compile driver. 2. Enable nested virtualization for guest OS using command: root@kitploit: Set-VMProcessor -VMName -ExposeVirtualizationExtensions $true 3. Run driver inside guest OS. Host OS will be rebooted or generate...

5.9AI score
SaveExploits0
EUVD
EUVD
added 2026/09/16 10:32 a.m.4 views

EUVD-2026-80532

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always flush vpid02 on first use Make sure vpid02 is always flushed on first use by setting lastvpid=0 when allocating vpid02. nestedvmxtransitiontlbflush will always detect a VPID change on first VM-Enter after VMXON,...

8.8CVSS5.8AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/09/16 10:32 a.m.7 views

CVE-2026-89930 KVM: nVMX: Service local TLB flushes on failed nested VM-Enter

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter KVM services local TLB flushes on "full" nested VM-Exits through nestedvmxvmexit, but not if a nested VM-Enter fails e.g. due to failed VMCS checks in...

9.3CVSS
SaveExploits0References7
CVE
CVE
added 2026/09/16 10:32 a.m.7 views

CVE-2026-89930

CVE-2026-89930 affects the Linux kernel's KVM nVMX subsystem (nested virtualization). The root cause is that KVM failed to service local TLB flushes when a nested VM-Enter failed (e.g., due to failed VMCS checks in nested_vmx_enter_non_root_mode()). Specifically, a failed VM-Enter would update la...

9.3CVSS5.8AI score
SaveExploits0References7
EUVD
EUVD
added 2026/09/16 10:32 a.m.3 views

EUVD-2026-80530

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter KVM services local TLB flushes on "full" nested VM-Exits through nestedvmxvmexit, but not if a nested VM-Enter fails e.g. due to failed VMCS checks in...

9.3CVSS5.8AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/09/16 10:32 a.m.6 views

CVE-2026-89929 KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU

In the Linux kernel, the following vulnerability has been resolved: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU When emulating INVVPID, KVM executes INVVPID on the physical CPU using vpid02 instead of the L1 assigned VPID, after doing some validations on the operands. However...

8.8CVSS
SaveExploits0References4
CVE
CVE
added 2026/09/16 10:32 a.m.9 views

CVE-2026-89929

CVE-2026-89929 affects the Linux kernel KVM subsystem, specifically the nested virtualization (nVM ) code path that emulates the INVVPID instruction. When a guest L1 vCPU migrates between physical CPUs and issues INVVPID, KVM executes the instruction on the current physical CPU rather than the on...

8.8CVSS5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/16 10:27 a.m.10 views

SessionReaper-CVE-2025-54236

SessionReaper — CVE-2025-54236 PoC unificado para CVE-2025-54236 "SessionReaper", un RCE crítico sin autenticación en Magento 2 / Adobe Commerce mediante deserialización anidada en la API REST. CVSS: 9.1 Crítico Causa raíz: Validación de entrada incorrecta CWE-20 en ServiceInputProcessor; la...

9.1CVSS8.6AI score0.94532EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/16 8:59 a.m.10 views

CVE-2021-42697

Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote attacker to conduct a Denial of Service attack by sending a User-Agent header with deeply nested comments. References MITRE Akka blog Arbitrary nesting of...

7.5CVSS7.3AI score0.36139EPSS
SaveExploits5
Rows per page
Query Builder