Lucene search
+L

2909 matches found

Kitploit
Kitploit
added 2026/09/10 2:46 p.m.5 views

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto File Write Exploit This exploit search over Global Protect URLS instances & try to write-file using CVE-2024-3400 Use with Caution Made with educational Purpouses only Usage: root@kitploit: chmod +x gp-exploit.sh ./gp-exploit.sh filenametowrite urls.txt Shoda...

10CVSS8.5AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/09/10 2:35 p.m.6 views

CVE-2025-0108

Save this script as paloaltocve20250108.nse, then run the following Nmap command: nmap --script paloaltocve20250108.nse -p 80,443 or for a list of targets: nmap --script paloaltocve20250108.nse -p 80,443 -iL targets.txt...

9.1CVSS8AI score0.98455EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/10 9:42 a.m.12 views

CVE-2024-0012-POC

This is actual POC, inspired by https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/ Usage like - python3 cve-2024-0012-pan-os-poc.py --url "https://target-system" --no-verify --no-verify if SSL doesn't work or expired else do not use this tag...

9.8CVSS8.2AI score0.99718EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/10 7:35 a.m.9 views

CVE-2020-2034-POC

CVE-2020-2034-POC Determine the Version Running on the Palo Alto Network Firewall for the Global Protect Portal Recently a lot of critical vulnerabilities were announced by Palo Alto Networks here: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date This is a PoC to...

9.3CVSS8AI score0.07152EPSS
SaveExploits1
NVD
NVD
added 2026/09/10 7:17 a.m.3 views

CVE-2026-0303

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

6.3CVSS
SaveExploits1References1
NVD
NVD
added 2026/09/10 7:17 a.m.3 views

CVE-2026-0304

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM...

7.5CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/10 6:17 a.m.3 views

CVE-2026-0306

A vulnerability in the EndPoint Data Loss Prevention DLP enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data. This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not...

8.4CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 6:05 a.m.8 views

CVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...

4.7CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/10 6:02 a.m.5 views

EUVD-2026-75268

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM...

7.5CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 5:57 a.m.14 views

CVE-2026-0305

CVE-2026-0305 is currently a reserved candidate with no public technical details available in the provided documents. The affected product, root cause, and impact remain unspecified. Monitor for updates when the candidate is publicized.

6.8CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 5:51 a.m.10 views

CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

8.5CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 5:51 a.m.20 views

CVE-2026-0307

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

8.5CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/10 5:21 a.m.4 views

EUVD-2026-75253

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service DoS condition on VM-Series firewalls or execute arbitrary co...

9.2CVSS
SaveExploits0References1
Circl
Circl
added 2026/09/10 5:17 a.m.3 views

CVE-2026-0309

creationtimestamp| type| source ---|---|--- 2026-09-10 05:17:42+00:00| seen| https://www.hkcert.org/security-bulletin/palo-alto-products-multiple-vulnerabilities20260910...

7.1CVSS
SaveExploits0References1
Circl
Circl
added 2026/09/10 5:17 a.m.4 views

CVE-2026-0308

creationtimestamp| type| source ---|---|--- 2026-09-10 05:17:40+00:00| seen| https://www.hkcert.org/security-bulletin/palo-alto-products-multiple-vulnerabilities20260910...

4.8CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 5:02 a.m.6 views

Unit42-timely-threat-intel

Unit42-Timely-Threat-Intel This repository contains files with indicators supporting social media posts designed to disseminate timely threat intelligence data from Palo Alto Network's Unit 42 team. This information is provided "as is" to the public...

5.9AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.134 views

Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting

PAN-OS management web interface is vulnerable to reflected cross-site scripting. A remote attacker able to convince an administrator with an active authenticated session on the firewall management interface to click on a crafted link to that management web interface could potentially execute...

8.8CVSS7.7AI score0.2389EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.78 views

Palo Alto Networks Expedition - OS Command Injection

An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls...

9.8CVSS7.9AI score0.78532EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 4:02 a.m.5 views

CVE-2024-9465

CVE-2024-9465: Palo Alto Expedition Unauthenticated SQL Injection Proof of concept to exploit CVE-2024-9465 on vulnerable devices. Blog Post Root cause and indicators of compromise here: https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/ Usage root@kitploi...

9.2CVSS8.3AI score0.99626EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/10 1:45 a.m.3 views

CVE-2024-3400

PAN-OS Firewall Exploit Script This script is designed to demonstrate the exploitation of vulnerabilities in PAN-OS firewalls. It sends a specially crafted payload to the firewall's API endpoint to execute arbitrary commands. This exploit specifically targets CVE-2024-3400, a command injection...

10CVSS9AI score0.99999EPSS
SaveExploits46
Rows per page
Query Builder