Lucene search
+L

2909 matches found

Kitploit
Kitploit
added 2026/09/10 7:02 p.m.4 views

CVE-2025-0108-PoC

CVE-2025-0108 Proof of Concept PoC This repository contains a Proof of Concept PoC for the CVE-2025-0108 vulnerability, which is an authentication bypass issue in Palo Alto Networks' PAN-OS software. The scripts provided here test for the vulnerability by sending a crafted HTTP request to the...

9.1CVSS8.2AI score0.98455EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/10 5:10 p.m.9 views

CVE-2024-3400-RCE-Scan

Cyberspace Mapping Dork Fofa root@kitploit: app="paloalto-GlobalProtect" https://en.fofa.info/result?qbase64=YXBwPSJwYWxvYWx0by1HbG9iYWxQcm90ZWN0Ig%3D%3D Zoomeye root@kitploit: app:"Palo Alto Networks firewall httpd"...

10CVSS8.5AI score0.99999EPSS
SaveExploits46References1
Kitploit
Kitploit
added 2026/09/10 2:46 p.m.5 views

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto File Write Exploit This exploit search over Global Protect URLS instances & try to write-file using CVE-2024-3400 Use with Caution Made with educational Purpouses only Usage: root@kitploit: chmod +x gp-exploit.sh ./gp-exploit.sh filenametowrite urls.txt Shoda...

10CVSS8.5AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/09/10 2:35 p.m.6 views

CVE-2025-0108

Save this script as paloaltocve20250108.nse, then run the following Nmap command: nmap --script paloaltocve20250108.nse -p 80,443 or for a list of targets: nmap --script paloaltocve20250108.nse -p 80,443 -iL targets.txt...

9.1CVSS8AI score0.98455EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/10 2:02 p.m.6 views

cve-2024-0012-gui-poc

CVE-2024-0012 and CVE-2024-9474 Authentication Bypass in the Management Web Interface PAN-SA-2024-0015 and Authenticated Command Injection in Palo Alto PAN-OS. See the blog post for technical details. Exploit authors Original exploit written by Sonny of watchTowr @watchtowrcyber. Code and GUI...

9.8CVSS8.2AI score0.99718EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/10 1:17 p.m.4 views

CVE-2024-9474

CVE-2024-9474 PoC for Palo Alto PAN-OS vuln Requirements no any special requirements needed, only python3 and std library Usage root@kitploit: python3 cve.py --help root@kitploit: python3 cve.py -u URL Credits https://github.com/Chocapikk/CVE-2024-9474...

7.2CVSS8.2AI score0.94701EPSS
SaveExploits14References1
Kitploit
Kitploit
added 2026/09/10 12:37 p.m.5 views

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto OS Command Injection send this HTTP request: root@kitploit: POST /ssl-vpn/hipreport.esp HTTP/1.1 Host: 127.0.0.1 Cookie: SESSID=/../../../var/appweb/sslvpndocs/global-protect/portal/images/hellome1337.txt; Connection: close Content-Type:...

10CVSS8.5AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/09/10 12:22 p.m.6 views

CVE-2025-0108

CVE-2025-0108 - PAN-OS PoC SCRIPT /!\ Disclaimer: This script is provided 'as is' and exclusively for educational purposes. Users are strongly advised to exercise caution and utilize it within the boundaries of legal and ethical considerations. Description Python vulnerability scanner designed to...

9.1CVSS8.2AI score0.98455EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/10 9:42 a.m.12 views

CVE-2024-0012-POC

This is actual POC, inspired by https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/ Usage like - python3 cve-2024-0012-pan-os-poc.py --url "https://target-system" --no-verify --no-verify if SSL doesn't work or expired else do not use this tag...

9.8CVSS8.2AI score0.99718EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/10 9:16 a.m.5 views

CVE-2024-3400

CVE-2024-3400 PoC for educational purposes only. only use on servers you have permission to test. How-To-Use deps: root@kitploit: $ pip install rich scan targets.txt: root@kitploit: $ python run.py -f targets.txt -t 10 - Sending 102 requests... + Requests sent. Writing check file... - Polling 36...

10CVSS8.5AI score0.99999EPSS
SaveExploits46References2
Kitploit
Kitploit
added 2026/09/10 7:35 a.m.9 views

CVE-2020-2034-POC

CVE-2020-2034-POC Determine the Version Running on the Palo Alto Network Firewall for the Global Protect Portal Recently a lot of critical vulnerabilities were announced by Palo Alto Networks here: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date This is a PoC to...

9.3CVSS8AI score0.07152EPSS
SaveExploits1
NVD
NVD
added 2026/09/10 7:17 a.m.3 views

CVE-2026-0303

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

6.3CVSS
SaveExploits1References1
NVD
NVD
added 2026/09/10 7:17 a.m.3 views

CVE-2026-0304

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM...

7.5CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/10 6:17 a.m.3 views

CVE-2026-0306

A vulnerability in the EndPoint Data Loss Prevention DLP enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data. This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not...

8.4CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 6:08 a.m.6 views

CVE-2024-9464

CVE-2024-9464: Palo Alto Expedition Authenticated Command Injection Proof of concept to exploit CVE-2024-9464 on vulnerable devices. This script chains the admin reset of CVE-2024-5910 to achieve "unauthenticated" arbitrary command execution. Blog Post Root cause and indicators of compromise here...

9.3CVSS7.7AI score0.82612EPSS
SaveExploits5
Cvelist
Cvelist
added 2026/09/10 6:05 a.m.10 views

CVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...

4.7CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/10 6:02 a.m.5 views

EUVD-2026-75268

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM...

7.5CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 5:57 a.m.16 views

CVE-2026-0305

CVE-2026-0305 is currently a reserved candidate with no public technical details available in the provided documents. The affected product, root cause, and impact remain unspecified. Monitor for updates when the candidate is publicized.

6.8CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 5:51 a.m.12 views

CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

8.5CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 5:51 a.m.22 views

CVE-2026-0307

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

8.5CVSS
SaveExploits0References1
Rows per page
Query Builder