Lucene search
+L

924 matches found

RedHat Linux
RedHat Linux
added 2026/09/09 3:07 a.m.8 views

Moderate: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System...

8.6CVSS0.00661EPSS
SaveExploits6References8
RedHat Linux
RedHat Linux
added 2026/09/09 3:04 a.m.8 views

GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input...

5.3CVSS0.00225EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/09 2:06 a.m.8 views

watchTowr-vs-SysAid-PreAuth-RCE-Chain

SysAid PreAuth RCE Chain PoC PoC for SysAid PreAuth RCE Chain CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778 See our blog post for technical details https://github.com/user-attachments/assets/03245fab-915d-43b6-8e91-f0a18251af49 PoC in Action root@kitploit: python...

9.8CVSS8.5AI score0.72202EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/09 2:05 a.m.9 views

juniper-rce_cve-2023-36844

CVE-2023-36844 , CVE-2023-36845 , CVE-2023-36846 , CVE-2023-36847 A Proof of Concept for chaining the CVEs CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 developed by @watchTowr to achieve Remote Code Execution in Juniper JunOS within SRX and EX Series products. Follow the watchTo...

9.8CVSS7.5AI score0.9507EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/09 2:05 a.m.10 views

CVE-2024-40711

CVE-2024-40711 Exploit for Veeam backup and Replication Pre-Auth Deserialization CVE-2024-40711 See our blog post for technical details https://github.com/user-attachments/assets/24e8122c-3e84-408b-87a9-684a9aabeb70 PoC in Action root@kitploit: CVE-2024-40711.exe -f binaryformatter -g Veeam -c...

9.8CVSS8.6AI score0.90369EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/09 2:04 a.m.12 views

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure IFT TLS Stack Overflow pre-auth RCE CVE-2025-0282 This is purposefully broken in non-trivial ways and will require effort to work as outlined previously in our exploitation technique blogpost. To understand this vulnerability, you can take a look at our technic...

9CVSS7.5AI score0.99979EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/09 12:28 a.m.7 views

CVE-2019-0708

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction...

10CVSS7.6AI score0.99999EPSS
SaveExploits126
NVD
NVD
added 2026/09/09 12:17 a.m.7 views

CVE-2026-53937

MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol. In versions 0.7.0 through 0.12.0, ReadBuffer.append in kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/ReadBuffer.kt writes every chunk of bytes received from the...

6.2CVSS0.00186EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/08 10:59 p.m.4 views

CVE-2016-7434

CVE-2016-7434 CVE-2016-7434 ntpd remote pre-auth Denial of Service PoC's/info Sources: http://dumpco.re/cve-2016-7434/ https://www.exploit-db.com/exploits/40806/ root@nop:/code/CVE-2016-7434 echo -e...

7.5CVSS7.1AI score0.52935EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/08 10:31 p.m.9 views

CVE-2021-43799

CVE-2021-43798 Grafana 8.x Path Traversal Pre-Auth All credits go to j0v and his tweet https://twitter.com/j0v0x0/status/1466845212626542607 Disclaimer This is for educational purposes only. I am not responsible for your actions. Use at your own discretion. In good faith, I've held back releasing...

9.8CVSS8.1AI score0.88503EPSS
SaveExploits45References1
Kitploit
Kitploit
added 2026/09/08 8:51 p.m.6 views

http-vuln-CVE-2019-16759

SUMMARY Simple NSE script to detect vBulletin 5.x 0day pre-auth RCE. This should work on all versions from 5.0.0 till 5.5.4 INSTALLATION $ git clone https://github.com/r00tpgp/http-vuln-CVE-2019-16759 $ cd http-vuln-CVE-2019-16759/ $ sudo cp http-vuln-CVE-2019-16759.nse /usr/share/nmap/scripts/...

9.8CVSS8.2AI score0.99728EPSS
SaveExploits28References1
Kitploit
Kitploit
added 2026/09/08 7:40 p.m.6 views

confusploit

This is a Script to find vulnerable servers to CVE-2022-26134 and can be used together SHODAN CLI and Bash Scripting One-Liner Please use only for legal and educational purposes Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/09/08 7:37 p.m.9 views

vBulletin-5.x-0day-pre-auth-RCE-exploit

vBulletin-5.x-0day-pre-auth-RCE-exploit 影响版本:vBulletin 5.0.05.5.4 poc如下: !/usr/bin/python vBulletin 5.x 0day pre-auth RCE exploit This should work on all versions from 5.0.0 till 5.5.4 Google Dorks: - site:.vbulletin.net - "Powered by vBulletin Version 5.5.4" import requests import sys if...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 6:44 p.m.9 views

CVE-2026-39987

CVE-2026-39987 — Marimo Pre-Auth RCE via Terminal WebSocket root@kitploit: / / | / / / | \ / \ \ / / | // / \ / / | | / / // // / / // // \ / Status: Patched in 0.23.0 — marimo-team/marimo@c24d480 Vulnerability The /terminal/ws endpoint lacks the validateauth call present in every other authe...

9.8CVSS8.3AI score0.98945EPSS
SaveExploits25References4
Kitploit
Kitploit
added 2026/09/08 4:11 p.m.7 views

CVE-2020-13942

CVE-2020-13942 Apache Unomi pre-auth RCE CVE-2020-13942 exploit POST /context.json HTTP/1.1 Host: x.x.x.x User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/72.0.3626.81 Safari/537.36 SE 2.X MetaSr 1.0 Content-Type: application/json Content-Length: 200...

9.8CVSS8.2AI score0.68398EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/08 10:48 a.m.4 views

watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553

CVE-2025-40552 and CVE-2025-40553 SolarWinds Web Help Desk Pre-Auth RCE Chain SolarWinds Web Help Desk Pre-Auth RCE Chain Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if SolarWinds Web Help Desk instance is vulnerable to CVE-2025-40552 and CVE-2025-4055...

9.8CVSS8.5AI score0.6039EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 10:35 a.m.4 views

CVE-2026-39987-marimo-rce

CVE-2026-39987 - Marimo Pre-Auth RCE Unauthenticated Remote Code Execution in Marimo via WebSocket Terminal 📌 Overview CVE-2026-39987 is a critical Pre-Authentication Remote Code Execution vulnerability affecting Marimo versions prior to 0.23.0. The /terminal/ws WebSocket endpoint completely...

9.8CVSS8AI score0.98945EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/08 10:16 a.m.7 views

CVE-2026-45829

🚨 CVE-2026-45829 - RCE sin autenticación en ChromaDB Ejecución remota de código crítica en la base de datos vectorial ChromaDB 📌 Resumen CVE-2026-45829 es una vulnerabilidad crítica de Ejecución remota de código sin autenticación previa en ChromaDB , una popular base de datos vectorial de IA de...

10CVSS8.5AI score0.12387EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/08 8:15 a.m.4 views

wp2shell-detect

wp2shell-detect Blackbox, non-intrusive detector for wp2shell — the pre-authentication RCE chain in WordPress core disclosed on 2026-07-17: CVE-2026-63030 — route confusion in the REST batch endpoint /wp-json/batch/v1: a sub-request whose path fails wpparseurl lands in the validation array but no...

9.8CVSS8.5AI score0.97271EPSS
SaveExploits79References1
EUVD
EUVD
added 2026/09/08 8:11 a.m.5 views

EUVD-2026-72663

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The length of the URL component contained in pre-authenticated HTTP messages is not properly validated before appending additional data to it, resulting in an out-of-bounds write condition in memory. This could allow an...

8.7CVSS0.00327EPSS
SaveExploits0References1
Rows per page
Query Builder