Lucene search
+L

13103 matches found

Kitploit
Kitploit
added 2026/09/11 10:00 p.m.7 views

CVE-2024-31964

CVE-2024-31964 CVE-2024-31964 PoC: Mitel 6900w 시리즈 SIP 전화기 - 임시 인증 우회 취약점 세부 정보 요약 여러 Mitel 제품의 HTTP 관리 웹사이트 패널에서 임시 인증 우회 취약점으로 구성됩니다. 영향 공격자가 장치 구성을 수정하고, 영향을 받는 장치에 대해 서비스 거부 공격을 수행할 수 있게 합니다. 요구 사항 사용자가 몇 분 전에, 그리고 공격자와 동일한 소스 IP에서 성공적으로 로그인했어야 합니다. 제안된 CVSS 제안된 CVSS: CVSS v4.0 점수: 7.2 CVSS...

7.5CVSS6.8AI score0.00623EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 9:56 p.m.7 views

BlackNET

BlackNET 😈 VB.NET を使用して開発された、無料で高度かつモダンな Windows ボットネットで、洗練された安全な PHP パネルを備えています。 BlackNET について 🤓 VB.NET を使用して構築された、無料で高度かつモダンな Windows ボットネットで、洗練された安全な PHP パネルを備えています。 このボットネットコントローラーには多くの機能が搭載されており、無料で最も安全なパネルを利用できます。 開発者: Black.Hacker できること 💪 1. ファイルをアップロード URLから ディスクから 2. DDoS攻撃...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/11 9:42 p.m.5 views

CVE-2023-41362_MyBB_ACP_RCE

CVE-2023-41362 - MyBB ACP RCE CVE-2023-41362에 대한 익스플로잇 블로그 포스트: https://blog.sorcery.ie/posts/mybbacprce...

7.2CVSS7.3AI score0.02034EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2026/09/11 9:31 p.m.7 views

Shopper: Missing authorization on product removal actions in CollectionProducts component

Title Missing authorization on product removal actions in CollectionProducts component Description A lack of authorization control was discovered on both the per-record delete action and the bulk delete action inside packages/admin/src/Livewire/Components/Collection/CollectionProducts.php. Neithe...

SaveExploits0References2Affected Software1
OSV
OSV
added 2026/09/11 9:29 p.m.5 views

GHSA-G3F9-G5VJ-P62F Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

Title Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component Description A lack of authorization control was discovered in the stockAction method in packages/admin/src/Livewire/Components/Products/VariantStock.php. The component exposes a public $variant...

8.1CVSS
SaveExploits0References2
OSV
OSV
added 2026/09/11 9:28 p.m.6 views

GHSA-J328-XMGP-J4Q3 Shopper: privilege escalation via improper Livewire admin component authorization

Summary Three Livewire admin components in shopper/framework latest master at commit fcd0c59, released as v2.8.0 gate state-mutating actions on the read-only viewusers permission. This is the same class as the issue Shopper fixed in v2.8.0 / PR 511 / GHSA-f946-9qp6-vgch — the PR moved most write...

8.8CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 8:28 p.m.8 views

CVE-2024-41958-PoC

CVE-2024-41958-PoC Это небольшая концептуальная демонстрация для CVE-2024-41958. Возможен обход аутентификации TFA в панели администратора. Затронутые версии: 2024-07 Необходимые предварительные условия для работы CVE: Пароль и имя пользователя для учетной записи без TFA. Пароль и имя пользовател...

7.2CVSS6.8AI score0.01027EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 8:20 p.m.4 views

CVE-2025-49132_HTB_SEASON10

CVE-2025-49132 - Pterodactyl Panel RCE エクスプロイト HTB Season 10 - Pterodactyl マシンの writeup 概要 ターゲット: Pterodactyl HTB マシン 中程度の難易度 CVE: CVE-2025-49132 深刻度: Critical CVSS 9.8 攻撃タイプ: 認証なしリモートコード実行 影響を受けるバージョン: Pterodactyl Panel リモートコード実行 方法 1: 提供された exploit.sh を使用 root@kitploit: chmod +x exploit.sh Get...

10CVSS6AI score0.54677EPSS
SaveExploits30
NVD
NVD
added 2026/09/11 8:19 p.m.5 views

CVE-2026-89599

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicmprobe registers the display before initializing ddata-lock. Once omapdssregisterdisplay publishes the display, another consumer can reach a dsicm callba...

8.4CVSS0.00168EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/11 7:55 p.m.7 views

CVE-2025-50365_CSRF_DELETE_CATEGORY-phpgurukul-CVE

Название проекта и URL репозитория: Система управления наймом горничных на PHP и MySQL Тип уязвимости: Подделка запроса на стороне клиента Client Side Request Forgery Затронутаяые версияи: v1.0 💣Описание уязвимости: Уязвимость межсайтовой подделки запроса CSRF существует в панели администратора...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 7:53 p.m.6 views

CVE-2022-35501

CVE-2022-35501 Magento 2용 Amasty Blog Pro의 블로그 게시물 생성 기능에 저장형 크로스사이트 스크립팅XSS 취약점 설명 Magento 2용 Amasty Blog Pro 2.10.3 및 2.10.4 플러그인의 게시물 생성 기능은 title 필드에 JavaScript 코드 삽입을 허용하여, 중복 게시물 기능을 통해 관리자 패널 사용자에 대한 XSS 공격을 유발합니다. 이 기능은 data.title 필드를 사용하여 JavaScript 코드를 실행합니다. 위에서 언급한 매개변수의 주입 지점인 취약한...

5.4CVSS6AI score0.00491EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/11 7:45 p.m.5 views

EUVD-2026-76511

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicmprobe registers the display before initializing ddata-lock. Once omapdssregisterdisplay publishes the display, another consumer can reach a dsicm callba...

0.00168EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/11 7:45 p.m.10 views

CVE-2026-89599

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicmprobe registers the display before initializing ddata-lock. Once omapdssregisterdisplay publishes the display, another consumer can reach a dsicm callba...

8.4CVSS0.00168EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/11 7:45 p.m.21 views

CVE-2026-89599 fbdev: omapfb: panel-dsi-cm: initialize lock before registering display

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicmprobe registers the display before initializing ddata-lock. Once omapdssregisterdisplay publishes the display, another consumer can reach a dsicm callba...

8.4CVSS0.00168EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/11 7:45 p.m.4 views

CVE-2026-89599 fbdev: omapfb: panel-dsi-cm: initialize lock before registering display

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicmprobe registers the display before initializing ddata-lock. Once omapdssregisterdisplay publishes the display, another consumer can reach a dsicm callba...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/11 7:01 p.m.4 views

CVE-2024-21413

CVE-2024-21413 - Expect Script POC Уязвимость утечки учетных данных и удаленного выполнения кода в Microsoft Outlook при связке с CVE-2023-21716 через панель предварительного просмотра CVSS:3.1 9.8 / 8.5 Outlook должен предупреждать о риске при открытии внешней ссылки, но этого не происходит!...

9.8CVSS8AI score0.9466EPSS
SaveExploits31
Kitploit
Kitploit
added 2026/09/11 6:11 p.m.5 views

CVE-2022-36432

CVE-2022-36432 Magento 2용 Amasty Blog Pro의 미리보기 기능에서 발생하는 교차 사이트 스크립팅XSS 설명 Magento 2용 Amasty Blog Pro 2.10.3 플러그인의 미리보기 기능은 eval을 안전하지 않게 사용합니다. 이로 인해 공격자는 생성된 미리보기 애플리케이션 응답을 조작하여 관리자 패널 사용자에 대한 교차 사이트 스크립팅 공격을 수행할 수 있습니다. 취약점은 blog/view/base/web/js/adminhtml/preview.js 파일에 존재합니다. 참조 자료에서 Magen...

5.4CVSS6AI score0.00544EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/11 6:00 p.m.6 views

CVE-2022-36433

CVE-2022-36433 Amasty Blog Pro for Magento 2의 블로그 게시물 작성 기능에서의 크로스 사이트 스크립팅XSS 설명 Magento 2용 Amasty Blog Pro 2.10.3 플러그인의 블로그 게시물 작성 기능은 shortcontent 및 fullcontent 필드에 JavaScript 코드를 주입할 수 있게 하여, posts/preview 또는 posts/save를 통해 관리자 패널 사용자를 대상으로 한 XSS 공격을 유발합니다. 앞서 언급한 매개변수의 주입 지점이 되는 취약한 엔드포인트:...

6.1CVSS6.4AI score0.00576EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 4:55 p.m.6 views

CVE-2022-44877-white-box

문서 : https://docs.google.com/document/d/1rQ7e9i2AFzHbASfRu3nkgjIswbrS2AB2i7V9OK3dJLs/edit?usp=sharing Libprochider : https://github.com/gianlucaborello/libprocesshider /var/www/html YouTube 데모 : https://www.youtube.com/watch?v=V0HgzE8IElA&t=343s 테스트한 머신 박스 CentOS 7 - CentOS Web Panel 9.8.1146 Kal...

9.8CVSS8.2AI score0.99995EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/11 4:38 p.m.7 views

CVE-2022-44877

Centos Web Panel 7 인증 없는 원격 코드 실행 - CVE-2022-44877 root@kitploit: + Centos Web Panel 7 Unauthenticated Remote Code Execution + Centos Web Panel 7 - log ➜ CVE-2022-44877 cat log examplelog ➜ CVE-2022-44877 echo "examplelog $whoami" log ➜ CVE-2022-44877 cat log examplelog examplelog root ➜...

9.8CVSS8.5AI score0.99995EPSS
SaveExploits12
Rows per page
Query Builder