Lucene search
+L

60051 matches found

Kitploit
Kitploit
added 2026/09/14 3:35 a.m.13 views

CVE-2025-51401

Exploit Title: LiveHelperChat =4.61 - Stored Cross Site Scripting XSS via Operator Chat Name Field Triggers on Chat Owner Transfer Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage:...

5.4CVSS5.9AI score0.00892EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/14 1:29 a.m.10 views

BackupOperatorToolkit

BackupOperatorToolkit Usage The BackupOperatorToolkit BOT has 4 different mode that allows you to escalate from Backup Operator to Domain Admin. Use "runas.exe /netonly /user:domain.dk\backupoperator powershell.exe" before running the tool. Service Mode The SERVICE mode creates a service on the...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 11:33 p.m.9 views

renovate-operator

Renovate: The Kubernetes-Native Way Run Renovate on your own infrastructure with CRD-based scheduling, parallel execution, auto-discovery, and a built-in UI. If you self-host Renovate and already run Kubernetes, this operator gives you the control and observability that plain self-hosted setups...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 7:48 p.m.18 views

starboard

Starboard is joining Trivy. We've announced our plans to discontinue Starboard and merge it into Trivy. Starboard CLI has been reintroduced as trivy kubernetes command and starboard-operator with a focus on trivy capabilities is available as Trivy-Operator. We will not be accepting new...

6AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/13 5:12 p.m.9 views

trivy-operator

Kubernetes 原生安全工具包。(文档) 简介 Trivy Operator 利用 Trivy 持续扫描您的 Kubernetes 集群以发现安全问题。扫描结果以 Kubernetes 自定义资源定义的形式汇总为安全报告,可通过 Kubernetes API 访问。该 Operator 通过监视 Kubernetes 的状态变化并自动触发安全扫描来工作。例如,当创建新的 Pod 时,会启动漏洞扫描。 这样,用户就可以以 Kubernetes 原生的方式查找和查看与不同资源相关的风险。 集群内安全扫描 Trivy Operator 自动生成并更新安全报告。这些报告是针对...

5.8AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/09/13 4:44 p.m.7 views

CVE-2025-29557

CVE-2025-29557 – ExaGrid MailConfiguration API Credential Disclosure 📝 Overview Vulnerability Title : SMTP Credential Disclosure via MailConfiguration API Product : ExaGrid EX10 Backup Appliance Versions Affected : 6.3 – 7.0.1.P08 CVE ID : CVE-2025-29557 Severity : High Attack Vector : Remote...

5.4CVSS5.9AI score0.00219EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.308 views

MinIO Operator Console Authentication Bypass

MinIO Console is a graphical user interface for the for MinIO Operator. MinIO itself is a multi-cloud object storage project. Affected versions are subject to an authentication bypass issue in the Operator Console when an external IDP is enabled. id: CVE-2021-41266 info: name: MinIO Operator...

9.8CVSS7.9AI score0.48414EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.23 views

Windmill < 1.603.3 - SQL Injection

Windmill versions 1.276.0 through 1.603.2 contain an authenticated SQL injection vulnerability in the folder owner management endpoint. The addowner API endpoint passes user-supplied input directly into a SQL query without sanitization, enabling JSONB path injection. An authenticated user with...

9.9CVSS7.5AI score0.13582EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.18 views

Windmill < 1.603.3 - Operator Authorization Bypass

Windmill versions 1.276.0 through 1.603.2 contain an authorization bypass vulnerability in the folder management API endpoints. The endpoints for creating, deleting, and managing folder ownership do not enforce role-based access control for operator-level users. In Windmill, operators are...

9.9CVSS7.5AI score0.13582EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 3:36 p.m.12 views

nebula

Nebula AI Powered Pentesting The Zero Layer workbench Acknowledgement First, I would like to thank Almighty God, who is the source of all knowledge. Without Him, this would not be possible. Nebula brings the working parts of a security engagement into one desktop surface: terminal, code, browser,...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 2:41 p.m.14 views

chaos-operator

Litmus chaos-operator para inyectar experimentos de caos en Kubernetes Codacy Badge...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 1:16 p.m.11 views

fusionpbx_rce_vulnerability

前言 这段简单的代码试图完整实现由Dustin Cobb在使用来电显示实现RCE – FusionPBX的多个漏洞中介绍的链式漏洞。 远程代码执行 复现步骤 1. 在Web浏览器中查看存在漏洞的操作员屏幕,本例位于 https://fusionpbxaddress/app/operatorpanel/index.php 2. 在远程系统(rcelisteneraddress)上启动一个netcat监听器.x 3. 在远程系统的另一个终端窗口中运行下面的漏洞利用代码 python3 .\main.py --closercesockets False --attackeraddress...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 12:25 p.m.7 views

CVE-2025-51397

Exploit Title: LiveHelperChat =4.61 - Stored Cross Site Scripting XSS via Operator Surname Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage: https://github.com/LiveHelperChat/livehelperchat/ Software Link:...

5.4CVSS5.9AI score0.00917EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/13 11:46 a.m.4 views

CVE-2024-53900

CVE-2024-53900 - Mongoose populate.match $where 远程代码执行(RCE) 本仓库提供了一个可复现的漏洞环境及针对 CVE-2024-53900 的概念验证(PoC),该漏洞是 Mongoose 8.8.3 中的一个严重远程代码执行(RCE)漏洞。 📌 漏洞详情 CVE : CVE-2024-53900 受影响的版本 : Mongoose 8.8.3 严重性 : 严重(CVSS 9.1) 攻击向量 : populate.match 与 $where 结合 影响 : 在 Node.js 环境中执行任意 JavaScript(RCE) 参考资料:...

9.1CVSS8.3AI score0.03904EPSS
SaveExploits3References2
Kitploit
Kitploit
added 2026/09/13 10:45 a.m.6 views

sliver-gui

Sliver GUI A desktop operator console for the Sliver C2 framework in the spirit of Cobalt Strike and Havoc. Designed and Developed by Raj Kumar Mullapudi Sliver GUI is a thin Wails v2 Go + plain HTML/CSS/JS frontend over Sliver's existing rpcpb.SliverRPC gRPC service. It reimplements no C2 logic...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 10:35 a.m.6 views

GeckoDroid

GeckoDroid 面向 Adaptix C2 Framework 的移动客户端。通过你的 Android 设备获得完整的操作员访问权限。 功能简介 GeckoDroid 让你可以从任何地方控制你的 Adaptix C2 服务器。无需坐在桌面客户端前,即可随时随地进行操作管理。 Agents - 查看所有已连接的代理,并带有实时状态指示器。可搜索、按存活/离线筛选,按名称、操作系统或最后在线时间排序。点击任意代理即可打开其控制台。 Console -...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 6:58 a.m.46 views

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 6:45 a.m.7 views

CVE-2025-59470-PostgreSQL-Command-Injection

受影响软件:PostgreSQL 15.x 早于 15.7 的版本,16.x 早于 16.3 的版本。 漏洞类型:pgbackup 扩展中的命令注入。 描述:pgbackup 扩展未能正确清理用户提供的参数,使得备份操作员能够注入任意命令,这些命令将以 PostgreSQL 用户身份执行。...

9CVSS8.4AI score0.01568EPSS
SaveExploits2
Wolfi
Wolfi
added 2026/09/11 8:53 a.m.13 views

CVE-2026-63435 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-mail...

5.3CVSS0.00328EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/09/11 8:53 a.m.12 views

GHSA-MVXR-6M87-MV2Q vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-mail...

5.8AI score
SaveExploits0
Rows per page
Query Builder