Lucene search
+L

60051 matches found

Kitploit
Kitploit
added 2026/09/14 3:35 a.m.13 views

CVE-2025-51401

Exploit Title: LiveHelperChat =4.61 - Stored Cross Site Scripting XSS via Operator Chat Name Field Triggers on Chat Owner Transfer Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage:...

5.4CVSS5.9AI score0.00892EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/14 1:29 a.m.10 views

BackupOperatorToolkit

BackupOperatorToolkit Usage The BackupOperatorToolkit BOT has 4 different mode that allows you to escalate from Backup Operator to Domain Admin. Use "runas.exe /netonly /user:domain.dk\backupoperator powershell.exe" before running the tool. Service Mode The SERVICE mode creates a service on the...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 1:26 a.m.14 views

chaos-operator

Litmus chaos-operator for injecting chaos experiments on Kubernetes Codacy Badge...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 11:33 p.m.9 views

renovate-operator

Renovate: The Kubernetes-Native Way Run Renovate on your own infrastructure with CRD-based scheduling, parallel execution, auto-discovery, and a built-in UI. If you self-host Renovate and already run Kubernetes, this operator gives you the control and observability that plain self-hosted setups...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 10:45 p.m.6 views

sliver-gui

Sliver GUI A desktop operator console for the Sliver C2 framework in the spirit of Cobalt Strike and Havoc. Designed and Developed by Raj Kumar Mullapudi Sliver GUI is a thin Wails v2 Go + plain HTML/CSS/JS frontend over Sliver's existing rpcpb.SliverRPC gRPC service. It reimplements no C2 logic...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 7:48 p.m.18 views

starboard

Starboard is joining Trivy. We've announced our plans to discontinue Starboard and merge it into Trivy. Starboard CLI has been reintroduced as trivy kubernetes command and starboard-operator with a focus on trivy capabilities is available as Trivy-Operator. We will not be accepting new...

6AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/13 5:12 p.m.9 views

trivy-operator

Kubernetes 原生安全工具包。(文档) 简介 Trivy Operator 利用 Trivy 持续扫描您的 Kubernetes 集群以发现安全问题。扫描结果以 Kubernetes 自定义资源定义的形式汇总为安全报告,可通过 Kubernetes API 访问。该 Operator 通过监视 Kubernetes 的状态变化并自动触发安全扫描来工作。例如,当创建新的 Pod 时,会启动漏洞扫描。 这样,用户就可以以 Kubernetes 原生的方式查找和查看与不同资源相关的风险。 集群内安全扫描 Trivy Operator 自动生成并更新安全报告。这些报告是针对...

5.8AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/09/13 4:44 p.m.7 views

CVE-2025-29557

CVE-2025-29557 – ExaGrid MailConfiguration API Credential Disclosure 📝 Overview Vulnerability Title : SMTP Credential Disclosure via MailConfiguration API Product : ExaGrid EX10 Backup Appliance Versions Affected : 6.3 – 7.0.1.P08 CVE ID : CVE-2025-29557 Severity : High Attack Vector : Remote...

5.4CVSS5.9AI score0.00219EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.308 views

MinIO Operator Console Authentication Bypass

MinIO Console is a graphical user interface for the for MinIO Operator. MinIO itself is a multi-cloud object storage project. Affected versions are subject to an authentication bypass issue in the Operator Console when an external IDP is enabled. id: CVE-2021-41266 info: name: MinIO Operator...

9.8CVSS7.9AI score0.48414EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.23 views

Windmill < 1.603.3 - SQL Injection

Windmill versions 1.276.0 through 1.603.2 contain an authenticated SQL injection vulnerability in the folder owner management endpoint. The addowner API endpoint passes user-supplied input directly into a SQL query without sanitization, enabling JSONB path injection. An authenticated user with...

9.9CVSS7.5AI score0.13582EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.18 views

Windmill < 1.603.3 - Operator Authorization Bypass

Windmill versions 1.276.0 through 1.603.2 contain an authorization bypass vulnerability in the folder management API endpoints. The endpoints for creating, deleting, and managing folder ownership do not enforce role-based access control for operator-level users. In Windmill, operators are...

9.9CVSS7.5AI score0.13582EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 3:36 p.m.12 views

nebula

Nebula AI Powered Pentesting The Zero Layer workbench Acknowledgement First, I would like to thank Almighty God, who is the source of all knowledge. Without Him, this would not be possible. Nebula brings the working parts of a security engagement into one desktop surface: terminal, code, browser,...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 1:16 p.m.11 views

fusionpbx_rce_vulnerability

Prelude This simple code tries to complete the implementation of the chained vulnerability introduced by Dustin Cobb at RCE Using Caller ID – Multiple Vulnerabilities In FusionPBX. RCE Reproduction Steps 1. View the vulnerable operator screen in a web browser, located in this example at...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 12:25 p.m.7 views

CVE-2025-51397

Exploit Title: LiveHelperChat =4.61 - Stored Cross Site Scripting XSS via Operator Surname Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage: https://github.com/LiveHelperChat/livehelperchat/ Software Link:...

5.4CVSS5.9AI score0.00917EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/13 11:46 a.m.4 views

CVE-2024-53900

CVE-2024-53900 - Mongoose populate.match $where RCE This repository provides a reproducible vulnerable environment and PoC for CVE-2024-53900 , a critical Remote Code Execution RCE vulnerability in Mongoose 8.8.3. 📌 Vulnerability Details CVE : CVE-2024-53900 Affected : Mongoose 8.8.3 Severity :...

9.1CVSS8.3AI score0.03904EPSS
SaveExploits3References2
Kitploit
Kitploit
added 2026/09/13 10:35 a.m.6 views

GeckoDroid

GeckoDroid 面向 Adaptix C2 Framework 的移动客户端。通过你的 Android 设备获得完整的操作员访问权限。 功能简介 GeckoDroid 让你可以从任何地方控制你的 Adaptix C2 服务器。无需坐在桌面客户端前,即可随时随地进行操作管理。 Agents - 查看所有已连接的代理,并带有实时状态指示器。可搜索、按存活/离线筛选,按名称、操作系统或最后在线时间排序。点击任意代理即可打开其控制台。 Console -...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 6:58 a.m.46 views

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 6:45 a.m.7 views

CVE-2025-59470-PostgreSQL-Command-Injection

Affected Software: PostgreSQL 15.x before 15.7, 16.x before 16.3. Vulnerability Type: Command injection in the pgbackup extension. Description: The pgbackup extension fails to properly sanitize user‑supplied parameters, allowing a backup operator to inject arbitrary commands that are executed as...

9CVSS8.4AI score0.01568EPSS
SaveExploits2
Wolfi
Wolfi
added 2026/09/11 8:53 a.m.13 views

CVE-2026-63435 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-mail...

5.3CVSS0.00328EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/09/11 8:53 a.m.12 views

GHSA-MVXR-6M87-MV2Q vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-mail...

5.8AI score
SaveExploits0
Rows per page
Query Builder