Lucene search
+L

323035 matches found

Kitploit
Kitploit
•added 2026/09/28 2:13 a.m.•13 views

CVE-2022-0847-Docker

Dirty Pipe CVE-2022-0847: Una Demostración Práctica de Explotación en Docker Este repositorio proporciona un entorno Docker interactivo y autónomo para demostrar y analizar de forma segura la vulnerabilidad de escalada de privilegios "Dirty Pipe". Está diseñado como una herramienta educativa para...

7.8CVSS7.2AI score0.92795EPSS
SaveExploits102
Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•227 views

User Registration & Membership <= 4.1.1 - Unauthenticated Privilege Escalation

The User Registration & Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 4.1.1. This is due to insufficient restrictions on role type in the 'preparemembersdata' function. This makes it possible for unauthenticated attackers to create newuser...

7.8AI score0.48804EPSS
SaveExploits7References3
Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•42 views

Ruijie RG-NBS2009G-P - Improper Authentication

An issue in Ruijie RG-NBS2009G-P RGOS v.10.41P2 Release9736 allows a remote attacker to gain privileges via the system/configmenu.htm. id: CVE-2024-24116 info: name: Ruijie RG-NBS2009G-P - Improper Authentication author: friea severity: critical description: | An issue in Ruijie RG-NBS2009G-P RGO...

9.8CVSS5.9AI score0.28411EPSS
SaveExploits1References3
Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•134 views

Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover

The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to chan...

9.8CVSS8.4AI score0.15524EPSS
SaveExploits3References4
Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•70 views

OttoKit < 1.0.83 - SureTriggers allows Privilege Escalation

Incorrect Privilege Assignment vulnerability in Brainstorm Force SureTriggers allows Privilege Escalation.This issue affects SureTriggers- from n/a through 1.0.82. id: CVE-2025-27007 info: name: OttoKit 1.0.83 - SureTriggers allows Privilege Escalation author: iamnoooob,rootxharsh,pdresearch...

9.8CVSS8.5AI score0.53884EPSS
SaveExploits3References3
Kitploit
Kitploit
•added 2026/09/28 2:12 a.m.•11 views

CVE-2019-16784-POC

CVE-2019-16784 POC This is my POC for the Windows PyInstaller version 3.6 vulnerability that exists for the --onefile option. An attacker could achieve command execution and possible LPE by hijacking a DLL imported by the python interpreter DLL used by the pyinstaller binary. A short explanation ...

7.8CVSS8AI score0.00695EPSS
SaveExploits1References3
Kitploit
Kitploit
•added 2026/09/28 2:10 a.m.•11 views

CVE-2019-18634

CVE-2019-18634 CVE-2019-18634 es una vulnerabilidad que afecta a Sudo en versiones 1.8.25 cuando pwfeedback está habilitado en el archivo sudoers. Permite a un atacante escalar privilegios a root explotando un desbordamiento de búfer basado en BSS, donde se alteran las estructuras de datos y el...

7.8CVSS7.7AI score0.19426EPSS
SaveExploits14
RedHat Linux
RedHat Linux
•added 2026/09/28 2:09 a.m.•9 views

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

10CVSS5.8AI score0.00856EPSS
SaveExploits1References13
RedHat Linux
RedHat Linux
•added 2026/09/28 2:09 a.m.•9 views

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

9.6CVSS5.7AI score0.00692EPSS
SaveExploits0References8
Kitploit
Kitploit
•added 2026/09/28 2:07 a.m.•11 views

mcpjam-to-root

⚠️ Aviso legal Este repositorio está destinado únicamente a investigación de seguridad autorizada, pruebas de penetración y fines educativos. No utilice las técnicas aquí descritas contra sistemas sin autorización explícita. ⚡ MCPJam → Root De MCPJam Inspector RCE a root — CVE-2026-23744,...

9.8CVSS6.4AI score0.67516EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/28 2:00 a.m.•8 views

cve-2026-11837-ansible-posix-authorized-key

CVE-2026-11837: escalada de privilegios local en authorizedkey de ansible.posix Escalada de privilegios local en el módulo Ansible ansible.posix.authorizedkey mediante chown que sigue enlaces simbólicos y creación de archivos que sigue enlaces simbólicos en el directorio /.ssh del usuario y el...

7.3CVSS7.6AI score0.00161EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 1:47 a.m.•14 views

CVE-2025-32462-POC

CVE-2025-32462 – sudo -h Privilege Escalation PoC 🚨 Local privilege escalation exploit for sudo via the -h/--host argument Affects systems with sudo misconfigurations allowing unintended root access. 🧠 About This PoC demonstrates CVE-2025-32462 , a logic flaw in sudo all versions ≤ 1.9.17, where...

8.8CVSS6.9AI score0.04425EPSS
SaveExploits12
Kitploit
Kitploit
•added 2026/09/28 1:33 a.m.•7 views

2009

2009 Exploits del kernel de Linux - CVE-2009-1185 + CVE-2009-1337 + CVE-2009-2692 + CVE-2009-2698 + CVE-2009-3547...

7.8CVSS6.7AI score0.80416EPSS
SaveExploits66
Kitploit
Kitploit
•added 2026/09/28 1:33 a.m.•10 views

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

CVE-2025-6018 + CVE-2025-6019 提权利用指南 📋 快速利用流程 步骤 1:准备 XFS 镜像(本地机器) 创建 300MB XFS 镜像 dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image 挂载并安装 SUID bash mkdir mnt sudo mount -t xfs xfs.image mnt sudo cp /bin/bash mnt/bash sudo chmod 4755 mnt/bash sudo umount mnt rmdir mnt 验证(应该显示 300...

7.8CVSS8AI score0.01053EPSS
SaveExploits19
Kitploit
Kitploit
•added 2026/09/28 1:32 a.m.•12 views

cve-2025-7771

CVE-2025-7771 — LPE con ThrottleStop.sys Prueba de concepto para CVE-2025-7771. ThrottleStop.sys expone dos manejadores IOCTL que permiten lectura/escritura arbitraria de memoria física sin control de acceso: cualquier proceso administrador puede leer o escribir en cualquier parte de la RAM físic...

8.7CVSS7.7AI score0.07168EPSS
SaveExploits10References1
Kitploit
Kitploit
•added 2026/09/28 1:15 a.m.•8 views

CVE-2025-32462

CVE-2025-32462 – sudo提权验证脚本 这是一个CVE‑2025‑32462 的提权检测脚本, 提供sudo直接检测和非权限用户遍历检测两种模式. 文件结构 文件| 说明 ---|--- poc.sh| 这是CVE-2025-32462的漏洞验证文件支持bash、dash. version.txt| 用于进行版本匹配工具的文件. 受影响版本 sudo的受影响版本为1.8.8 - 1.9.17, 主要受影响为linux系统. 使用方式 1 – 克隆脚本 $ git clone https://github.com/cryingn/CVE-2025-32462.git $ c...

8.8CVSS7.2AI score0.04425EPSS
SaveExploits12
Kitploit
Kitploit
•added 2026/09/28 1:09 a.m.•15 views

CVE-2025-8714-POC

CVE-2025-8714-POC PoC de RCE en PostgreSQL — CVE-2025-8714 PoC de Ejecución Remota de Código en PostgreSQL — CVE-2025-8714 pgdump Reverse Shell Este repositorio presenta una prueba de concepto PoC para la vulnerabilidad crítica CVE-2025-8714 que afecta a versiones PostgreSQL anteriores a: 17.6,...

8.8CVSS8AI score0.00762EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/28 1:08 a.m.•17 views

CVE-2026-49176_BOF

BOF de CVE-2026-49176 para Cobalt Strike Beacon Object File BOF de Cobalt Strike para escalada de privilegios local a través del WalletService de Windows CVE-2026-49176 , corregido en julio de 2026. Desde un Beacon de integridad media usuario estándar, esta herramienta prepara una base de datos E...

7.8CVSS7.7AI score0.00328EPSS
SaveExploits3References2
Kitploit
Kitploit
•added 2026/09/28 1:07 a.m.•12 views

Gitea-template-sync-Path-Traversal-Privilege-Escalation-CVE-2026-38526-

Nexus — Local Privilege Escalation PoC Gitea template-sync path traversal via forged Git objects → root A proof-of-concept privilege-escalation exploit for the HackTheBox machine Nexus. A root-owned systemd service synchronizes Gitea template repositories to disk without sanitizing entry names,...

9.9CVSS6.1AI score0.02353EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/09/28 12:49 a.m.•12 views

CVE-2025-2304-CamaleonCMS-PoC

PoC: CVE-2025-2304 - Camaleon CMS Privilege Escalation Technical Overview This repository contains a Functional Proof of Concept PoC for a Mass Assignment vulnerability in Camaleon CMS versions prior to 2.8.1. The vulnerability resides in the updatedajax endpoint of the User Management module,...

9.4CVSS6.3AI score0.00616EPSS
SaveExploits17
Rows per page
Query Builder