Lucene search
+L

9038 matches found

Kitploit
Kitploit
added 2026/09/06 4:13 a.m.15 views

CVE-2023-35674

Description CVE-2023-35674 is a high-severity zero-day security vulnerability in the Android Framework. This vulnerability allows an attacker to escalate their privileges without requiring user interaction or additional execution permissions. The vulnerability occurs in how the Android Framework...

8.8CVSS7.5AI score0.02203EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/05 9:42 p.m.3 views

CVE-2024-34102

CVE-2024-34102 ★ 感谢 @th3gokul、Sanjaith3hacker 和 Chocapikk 提供的原始代码库。★ 描述 CVE-2024-34102:Adobe Commerce XXE 漏洞 描述:Adobe Commerce 2.4.7、2.4.6-p5、2.4.5-p7、2.4.4-p8 及更早版本受到 XML 外部实体引用('XXE')限制不当(Improper Restriction of XML External Entity Reference)漏洞的影响,该漏洞可能导致任意代码执行。攻击者可通过发送引用外部实体的特制 XML...

9.8CVSS8.5AI score0.99994EPSS
SaveExploits26References1
Kitploit
Kitploit
added 2026/09/05 10:55 a.m.2 views

CVE-2022-24086-RCE

CVE-2022-24086-RCE CVE-2022-24086 RCE Description Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrar...

10CVSS8.6AI score0.99199EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/05 6:50 a.m.7 views

CVE-2022-24086

CVE-2022-24086 CVE-2022-24086 关于 Magento RCE 的漏洞 描述 Adobe Commerce 2.4.3-p1(及更早版本)和 2.3.7-p2(及更早版本)在结账过程中受到不当输入验证漏洞的影响。利用此问题无需用户交互,可能导致任意代码执行。 POC 注意:这不是真正的 POC ... POC var this.getTemplateFilter.addAfterFilterCallback"system".filter"whoami"...

10CVSS8.4AI score0.99199EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/04 5:54 a.m.7 views

CVE-2023-7028

CVE-2023-7028 GitLab CVE-2023-7028:无需用户交互即可通过密码重置接管账户 GitLab CE/EE 中的一个严重漏洞(CVE-2023-7028)可被攻击者轻易利用,从而重置 GitLab 用户帐户的密码。 虽然这些帐户同样存在漏洞,但已启用双因素认证(2FA)的用户可以免受帐户接管的影响。此外,LDAP 登录也是安全的! 关于 CVE-2023-7028 CVE-2023-7028 影响运行 GitLab Community Edition CE 和 Enterprise Edition EE 以下版本的 GitLab 自托管实例:...

10CVSS8.6AI score0.94647EPSS
SaveExploits16
Cvelist
Cvelist
added 2026/09/03 3:27 p.m.32 views

CVE-2026-83961 ColdFusion | Improper Authentication (CWE-287)

ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain limited read and write access. The vulnerable component is restricted to an administrative network zone by default. Exploitation of...

7.1CVSS0.00221EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 3:27 p.m.17 views

CVE-2026-83961

Adobe ColdFusion is affected by an Improper Authentication vulnerability (CWE-287) that could allow an unauthenticated attacker to escalate privileges and gain limited read and write access . By default, the vulnerable component is restricted to an administrative network zone , and exploitation r...

7.1CVSS5.9AI score0.00221EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/03 3:27 p.m.8 views

EUVD-2026-70530

ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain limited read and write access. The vulnerable component is restricted to an administrative network zone by default. Exploitation of...

7.1CVSS5.9AI score0.00221EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 1:43 a.m.6 views

CVE-2023-23397

CVE-2023-23397 Prueba de concepto Este es un exploit de prueba de concepto PoC para CVE-2023-23397, una vulnerabilidad en el cliente de Windows Microsoft Outlook. Requisitos previos Python 3 paquete pywin32 Cómo usar Windows 1. Instale el paquete pywin32 requerido ejecutando pip install pywin32. ...

9.8CVSS8.7AI score0.97408EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/02 12:12 a.m.8 views

CVE-2023-7028

CVE-2023-7028 | الاستيلاء على حساب Gitlab إخلاء مسؤولية هذا الكود هو دليل على إثبات المفهوم للثغرة، ولا أحث أي شخص على استخدامه على نسخ Gitlab التي لا يملكها. تم تطوير هذه الأداة لأغراض البحث والتعليم فقط، ولن أكون مسؤولًا عن أي استخدام قد تقوم به لها. الوصف هذا هو فرع من...

10CVSS8.7AI score0.94647EPSS
SaveExploits16References3
Kitploit
Kitploit
added 2026/09/01 4:19 p.m.4 views

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084,Atlassian Confluence OGNL注入漏洞 Atlassian Confluence 是企业广泛使用的维基系统,其部分版本中存在OGNL 表达式注入漏洞。攻击者可以通过漏洞,不需要任何用户的情况下在目标Confluence 中执行任意代码。 queryString参数执行任意命令 root@kitploit:...

9.8CVSS8AI score0.99999EPSS
SaveExploits46References2
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.33 views

Adobe Commerce (Magento) - Remote Code Execution

Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution. id: CVE-2022-24086 info: name:...

10CVSS7.5AI score0.99199EPSS
SaveExploits5References4
Kitploit
Kitploit
added 2026/08/31 2:29 a.m.5 views

DNS-Mayhem-CVE-2026-41096-Deep-Dive

DNS-Mayhem-CVE-2026-41096-Deep-Dive In‑depth technical analysis of CVE‑2026‑41096, a critical heap overflow in Windows DNSAPI.dll enabling remote code execution via crafted DNS responses. Includes attack vectors, patch insights, and defensive guidance for security teams. Overview CVE‑2026‑41096 i...

9.8CVSS8.9AI score0.01932EPSS
SaveExploits4
NCSC
NCSC
added 2026/08/27 7:42 a.m.6 views

vulnerabilities in Adobe Campaign Classic

Adobe has identified several vulnerabilities in Adobe Campaign Classic. These vulnerabilities involve Server-Side Request Forgery SSRF and OS Command Injection. The SSRF vulnerability allows attackers to manipulate requests on the server, which can lead to the execution of arbitrary code without...

10CVSS6.6AI score0.01586EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/25 6:18 p.m.10 views

CVE-2026-76197

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary...

10CVSS0.01586EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/25 6:18 p.m.8 views

CVE-2026-76195

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary...

10CVSS0.01586EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/25 6:18 p.m.8 views

CVE-2026-76189

CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...

6.2CVSS0.00153EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/25 6:18 p.m.11 views

CVE-2026-76193

Adobe Campaign Classic ACC is affected by a Server-Side Request Forgery SSRF vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

10CVSS0.00676EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/25 6:18 p.m.8 views

CVE-2026-71442

CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...

7.5CVSS0.00508EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/25 6:18 p.m.10 views

CVE-2026-71443

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require use...

7.5CVSS0.00508EPSS
SaveExploits0References1
Rows per page
Query Builder