Lucene search
+L

96840 matches found

Cvelist
Cvelist
added 2026/09/13 6:00 a.m.14 views

CVE-2026-86407 User Registration & Membership < 5.2.8 - Unauthenticated User Data Disclosure via Membership Thank You Page

The User Registration & Membership WordPress plugin before 5.2.8 does not verify that the visitor requesting its membership confirmation page owns the account named in the request, nor that any registration or purchase has taken place, allowing unauthenticated users to retrieve another user's ema...

SaveExploits0References1
CVE
CVE
added 2026/09/13 6:00 a.m.10 views

CVE-2026-86407

The User Registration & Membership WordPress plugin before 5.2.8 fails to verify that a visitor requesting its membership confirmation (thank you) page actually owns the account named in the request or that any registration/purchase occurred. This allows unauthenticated users to retrieve another ...

3.7CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 5:56 a.m.6 views

CVE-2020-6418

CVE-2020-6418 The CVE 2020-6418 is about the the type confusion in V8 in Google chrome.The affected versions were prior to 80.0.3987.122. The vulnerability is achived by remote attacker accessing the shell of a target device via a crafted HTML page. Environment Requirements 1. Google Chrome with...

8.8CVSS7.5AI score0.78808EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/13 5:53 a.m.6 views

CVE-2023-49971

CVE-2023-49971 Customer Support System 1.0 - Vulnerabilidad de Cross-Site Scripting XSS en el campo/parámetro "firstname" en la página "customerlist" Descripción : Customer Support System 1.0 es vulnerable a XSS almacenado. Existe una vulnerabilidad XSS en la versión 1 del Customer Support System...

6.1CVSS6AI score0.00433EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:42 a.m.10 views

Copy-Fail-CVE-2026-31431-Kubernetes-PoC

Copy Fail CVE-2026-31431 — Kubernetes Container Escape PoC A proof-of-concept demonstrating how a fully unprivileged container can achieve node-level code execution on Kubernetes by exploiting the CVE-2026-31431 Linux kernel page-cache corruption bug through shared container image layers. The cor...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits242References8
Kitploit
Kitploit
added 2026/09/13 5:34 a.m.7 views

CVE-2023-34845

CVE-2023-34845 Vulnerability POC for CVE-2023-34845 Vulnerability I found a cross-site scripting attack on the new content creating page http://localhost:800/admin/new-content it will execute the script in user context allowing the attacker to access any cookies or sessions tokens retained by the...

5.4CVSS6AI score0.00804EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 5:27 a.m.45 views

xcrawl3r

xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...

5.6AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/13 5:12 a.m.4 views

CVE-2022-31061

CVE-2022-31061 PoC for GLPI CVE-2022-31061 A Proof of Concept for GLPI = 9.3.0 and 10.0.2 - Unauthenticated SQL injection on login page Legal disclaimer : Use of this script for attacking à target without mutual consent is illegal. It's is the end user responsibility to obey all applicables laws...

9.8CVSS8.2AI score0.50889EPSS
SaveExploits3References3
Kitploit
Kitploit
added 2026/09/13 5:06 a.m.7 views

CVE-2021-40375

CVE-2021-40375 - Broken Access Control in OpenEyes 3.5.1 Description An improper access control vulnerability was identified in OpenEyes 3.5.1, developed by the Apperta Foundation. A low privileged user could load a patient's profile in their browser and access sensitive information without the...

6.5CVSS6.7AI score0.01649EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 4:56 a.m.7 views

DirtyClone

DirtyClone DirtyClone is a diagnostic, proof-of-concept local privilege escalation tool written in C. It targets a kernel/XFRM-related exploit path described in the source as CVE-2026-43503 and is intended only for authorized security research in controlled environments. Overview This repository...

8.8CVSS6.6AI score0.00337EPSS
SaveExploits7References2
Kitploit
Kitploit
added 2026/09/13 4:46 a.m.10 views

copy-fail-mcp

Copy Fail MCP 📖 Guía de instalación — inicio rápido, configuración manual y solución de problemas CVE-2026-31431 — La peor vulnerabilidad de Linux jamás descubierta. Ahora controlable mediante MCP. 732 bytes de Python. Sin compilación. Sin condición de carrera. Sin offsets por distribución. Un so...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits242References5
Kitploit
Kitploit
added 2026/09/13 4:30 a.m.6 views

CVE-2023-29489

Introducción Se ha descubierto una vulnerabilidad de Cross-Site Scripting XSS reflejado explotable en ciertas versiones de cPanel, a la que se le asignó el CVE-2023-29489. Esta vulnerabilidad permite a los atacantes ejecutar código JavaScript arbitrario sin requerir autenticación. La vulnerabilid...

6.1CVSS6.6AI score0.65533EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/13 4:28 a.m.5 views

CVE-2023-22432

CVE-2023-22432 PoC verification of web2py vulnerability CVE-2023-22432 A vulnerability CVE-2023-22432 in web2py was disclosed on Jan 31, 2023 US time. This article describes our discussion of this vulnerability and the results of our verification. Vulnerability Summary This vulnerability is an op...

6.1CVSS6AI score0.02402EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 3:53 a.m.6 views

CVE-2026-43284

🚨 CVE-2026-43284 - Dirty Frag 🚨 Universal Linux Kernel Local Privilege Escalation 📋 Overview Dirty Frag also known as Copy Fail 2 is a high-impact local privilege escalation vulnerability in the Linux kernel. It allows an unprivileged local user to obtain root privileges on affected systems...

8.8CVSS7.2AI score0.93235EPSS
SaveExploits32
Kitploit
Kitploit
added 2026/09/13 3:46 a.m.82 views

autovpn

!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 3:38 a.m.6 views

Linux-Kernel-Dirty-Pipe-Exploitation-Logic-Bug-

Explotación de Dirty Pipe en el Kernel de Linux Error Lógico por: Antonius w1sdom https://www.bluedragonsec.com https://github.com/bluedragonsecurity Dirty Pipe CVE-2022-0847 es una de las vulnerabilidades de seguridad más significativas en el Kernel de Linux 5.8 – 5.15.24, descubierta por Max...

7.8CVSS7AI score0.89721EPSS
SaveExploits102References2
Kitploit
Kitploit
added 2026/09/13 3:35 a.m.11 views

CVE-2024-39031

CVE-2024-39031 : Silverpeas Core Stored XSS in in Mes agendas Information Description: In Mes Agendas, a user can create new events and add them to their calendar. Additionally, users can invite others from the same domain, including administrators, to these events. A standard user can inject an...

5.4CVSS5.8AI score0.00767EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/13 2:46 a.m.6 views

CVE-2026-31431

🔥 CVE-2026-31431 - "Copy Fail !!!" Una escalada de privilegios local sorprendentemente simple pero letal en el kernel de Linux 📌 Resumen CVE-2026-31431 apodado "Copy Fail" es una vulnerabilidad de escalada de privilegios local en el subsistema criptográfico del kernel de Linux, que afecta...

7.8CVSS6.6AI score0.99907EPSS
SaveExploits242
Kitploit
Kitploit
added 2026/09/13 2:45 a.m.5 views

CVE-2016-5640

CVE-2016-5640 Crestron AirMedia AM-100 RCE CVE-2016-5640 Metasploit Module Module for exploiting a Remote Command Injection vulnerability in the wireless diagnostics page for Crestron AirMedia AM-100 devices with a firmware version 1.4.0.13. Commands execute as the account running the service i.e...

10CVSS8.2AI score0.17707EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 2:41 a.m.7 views

CVE-2022-22965

CVE-2022-22965 2022.04.02 16:44 Optimized POC, no longer a one-time validation Warning: This program will destroy log information integrity, please back up server data! Use only if you have server penetration test authorization! pocsuite -r CVE-2022-22965POCEXP.py -u url As shown below, the progr...

9.8CVSS7.5AI score0.99638EPSS
SaveExploits105
Rows per page
Query Builder