Lucene search
+L

23809 matches found

Kitploit
Kitploit
added 2026/09/15 9:03 p.m.5 views

CVE-2024-23897

CVE-2024-23897 Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controll...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits50
Kitploit
Kitploit
added 2026/09/15 8:39 p.m.10 views

SnafflerParser

Snaffler Output File Parser Especially in large environments, the Snaffler output gets very large and time-consuming to analyze. This script parses the Snaffler output file TSV format required and: Beautifies results into readable tables and exports to TXT, CSV, HTML, JSON or PS Gridview. Generat...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 8:26 p.m.6 views

CVE-2021-22205

CVE-2021-22205 GitLab fails to properly verify image files passed to the file parser, leading to command execution. An attacker can craft malicious requests to exploit this vulnerability and execute arbitrary commands on the target system, ultimately taking control of the GitLab server. Since mos...

10CVSS8.5AI score0.99731EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/09/15 8:02 p.m.6 views

PoC

PoC A collection of proof-of-concept codes from DARKNAVY. CVE-2025-43300 Target: iOS && macOS Version: before iOS 18.6.2 && macOS 14.7.8 CVE-2025-6554 Target: Chrome Renderer Version: before 138.0.7204.96 CVE-2024-5274 Target: Chrome Renderer Version: before 125.0.6422.112 Blog Post: CVE-2024-527...

10CVSS7.1AI score0.99979EPSS
SaveExploits25References6
Kitploit
Kitploit
added 2026/09/15 7:53 p.m.7 views

CVE-2024-9465

CVE-2024-9465 Checkpoint SQL Injection via Time-Based Attack CVE-2024-9465 SHODAN SEARCH root@kitploit: https://www.shodan.io/search?query=html%3A%22Expedition+Project%22 html:"Expedition Project" FOFA SEARCH root@kitploit: https://en.fofa.info/ body="Expedition Project" || title="Expedition...

9.2CVSS8.4AI score0.99626EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/15 7:43 p.m.6 views

cve-2017-12629

README Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML...

9.8CVSS7.9AI score0.91896EPSS
SaveExploits12
Cvelist
Cvelist
added 2026/09/15 7:42 p.m.6 views

CVE-2026-92240 Out-of-bounds read in IMAP response parser

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged ' ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16...

SaveExploits0References3
CVE
CVE
added 2026/09/15 7:42 p.m.5 views

CVE-2026-92240

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser in Thunderbird by sending an untagged * ID response, causing the application to crash. The affected parsing path is reachable before authentication , broadening the attack surface. The vulnerabili...

SaveExploits0References3
EUVD
EUVD
added 2026/09/15 7:42 p.m.4 views

EUVD-2026-79244

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged ' ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16...

SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 7:26 p.m.7 views

pastego

pastego Extrae/Parsea Pastebin usando GO y expresión gramatical PEG. pastego.png Instalación $ go get -u github.com/notdodo/pastego Uso Las palabras clave de búsqueda distinguen entre mayúsculas y minúsculas. pastego -s "password,keygen,PASSWORD" Puedes usar operadores booleanos para reducir fals...

6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/15 7:24 p.m.8 views

CVE-2017-12635

CVE-2017-12635 Case study and PoC of CVE-2017-12635 Apache CouchDB 1.7.0 / 2.x 2.1.1 - Remote Privilege Escalation Presentation CouchDB Apache CouchDB is a document-oriented NoSQL database, implemented in Erlang. CouchDB uses multiple formats and protocols to store, transfer, and process it's dat...

10CVSS8.2AI score0.99838EPSS
SaveExploits23References1
Kitploit
Kitploit
added 2026/09/15 7:20 p.m.7 views

zeek-quic

Google QUIC analyzer/detector for Zeek This analyzer can parse and detect the Google implementation of QUIC called GQUIC here for simplicity, using the wire format described at: https://www.chromium.org/quic. The version of GQUIC used by Chrome at the time of writing this analyzer was Q039 with...

6AI score
SaveExploits0References1
CVE
CVE
added 2026/09/15 7:20 p.m.4 views

CVE-2026-69217

Http4s (a Scala HTTP service interface) is vulnerable to CL.CL request smuggling due to its Ember HTTP/1.1 parser accepting differing duplicate Content-Length headers and using the last value instead of rejecting the message. Affected versions are prior to 0.23.35 and 1.0.0-M47 . When an Ember se...

8.7CVSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/15 7:20 p.m.3 views

EUVD-2026-79193

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/1.1 parser accepts differing duplicate Content-Length headers and uses the last value instead of rejecting the message. When an Ember server is behind a keep-alive intermediary that selects a different...

8.7CVSS
SaveExploits0References4
CVE
CVE
added 2026/09/15 6:59 p.m.5 views

CVE-2026-69216

Http4s is a Scala library for HTTP services. Prior to 0.23.35 and 1.0.0-M47 , the Ember chunk decoder accepted leading plus or minus signs in the chunk-size token instead of requiring one or more hexadecimal digits followed by CRLF. This leniency allows an unauthenticated attacker to construct TE...

5.4CVSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/15 6:57 p.m.7 views

ENV-CVE-2020-8036

ENV-CVE-2020-8036 — tcpdump vulnerability reproduction environment This repository is a reproducible vulnerability environment snapshot of CVE-2020-8036 tcpdump SOME/IP parser out-of-bounds read, CWE-125, exported from the corresponding container image yan5ui/cve-2020-8036:tier1 based on...

7.5CVSS7.4AI score0.01479EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 6:56 p.m.13 views

ALEAPP

Android Logs Events And Protobuf Parser If you want to contribute hit me up here: https://abrignoni.github.io Blog posts here: https://leapps.org/blog Requirements Python 3.10 or above Dependencies Dependencies for your python environment are listed in requirements.txt. Install them using the bel...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 6:50 p.m.9 views

CVE-2023-20052

CVE-2023-20052 CVE-2023-20052 information leak vulnerability in the DMG file parser of ClamAV A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information o...

5.3CVSS7.6AI score0.07003EPSS
SaveExploits5References2
Kitploit
Kitploit
added 2026/09/15 6:41 p.m.8 views

CVE-2023-20052

CVE-2023-20052 CVE-2023-20052, information leak vulnerability in the DMG file parser of ClamAV Usage To create malicious DMG file root@kitploit: git clone https://github.com/nokn0wthing/CVE-2023-20052.git cd CVE-2023-20052 sudo docker build -t cve-2023-20052 . sudo docker run -v $pwd:/exploit -it...

5.3CVSS7.5AI score0.07003EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/15 6:38 p.m.5 views

ADExplorerSnapshot

ADExplorerSnapshot.py ADExplorerSnapshot.py es un analizador de instantáneas de AD Explorer. Está diseñado como un ingestor para BloodHound a través de BOFHound, y también admite el volcado completo de objetos a NDJSON. AD Explorer te permite conectarte a un DC y explorar datos LDAP. También pued...

6AI score
SaveExploits0References8
Rows per page
Query Builder