Lucene search
+L

6034 matches found

Kitploit
Kitploit
added 2026/08/26 6:37 a.m.1 views

CVE-2026-5173

🦊 CVE-2026-5173: GitLab WebSocket अनधिकृत विधि निष्पादन PoC 🛠️ अवलोकन CVE-2026-5173 निम्न-विशेषाधिकार वाले प्रमाणित हमलावर को GitLab के WebSocket /-/cable एंडपॉइंट के माध्यम से, विशेष रूप से GraphqlChannel के ज़रिए, प्रतिबंधित बैकएंड विधियों को कॉल करने की अनुमति देता है।...

8.5CVSS7.9AI score0.00425EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 6:13 a.m.1 views

CVE-2025-57520-Stored-XSS-in-Decap-CMS-3.8.3-

CVE-2025-57520 – Decap CMS में संग्रहीत XSS चरण 1. कंट्रीब्यूटर/एडिटर कम विशेषाधिकार के रूप में लॉगिन करें।...

6.1CVSS0.00318EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 9:36 p.m.3 views

CVE-2021-31762

CSRF-to-RCE ..| CVE-2021-31762 |.. Descrição : Explorando um ataque de Cross-site request forgery CSRF para criar um usuário privilegiado através do recurso de adicionar usuários do Webmin, obtendo então um shell reverso através do recurso de processos em execução do Webmin Versão Testada : Webmi...

8.8CVSS8.1AI score0.0878EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/25 4:47 p.m.2 views

CheeseTools

CheeseTools Este repositório foi criado com base no já existente MiscTool, então um grande agradecimento ao rasta-mouse por ter lançado essas ferramentas e por me dar a motivação certa para trabalhar nelas. CheeseExec Execução de comandos / Movimentação lateral através de funcionalidade semelhant...

5.8AI score
SaveExploits0References15
Kitploit
Kitploit
added 2026/08/25 11:22 a.m.4 views

CVE-2024-3183-POC

CVE-2024-3183-POC إثبات مفهوم لـ CVE-2024-3183 FreeIPA Rosting التأثير: يمكن لمستخدم ذي صلاحيات منخفضة الحصول على تجزئة hash لكلمات مرور جميع مستخدمي المجال وتنفيذ هجوم قوة عمياء غير متصل kerberoasting. تصحيح impacket-getTGT: 1. أضف decoder.decode.defaultErrorState = stGetValueDecoderByTag إلى...

8.1CVSS7.8AI score0.02053EPSS
SaveExploits1
CVE
CVE
added 2026/08/25 9:00 a.m.14 views

CVE-2026-77137

CVE-2026-77137 is a SQL injection vulnerability in the TYPO3 extension "Forms Export" (extension key: frp_form_answers ). The extension fails to properly sanitize user input before using it in a database query, allowing a low-privileged backend user to inject arbitrary SQL through a URL parameter...

7.7CVSS6AI score0.00234EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/25 9:00 a.m.5 views

EUVD-2026-65339

The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parameter within the "Forms Export" backend module. Exploitation requires a low-privileged backend user and read access to the...

7.7CVSS6AI score0.00234EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/25 9:00 a.m.18 views

CVE-2026-77137 SQL Injection in extension "Forms Export" (frp_form_answers)

The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parameter within the "Forms Export" backend module. Exploitation requires a low-privileged backend user and read access to the...

7.7CVSS0.00234EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 8:34 a.m.2 views

CVE-2024-22120-RCE-with-gopher

उपयोग root@kitploit: python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime उदाहरण परिदृश्य आपने IP 192.168.1.100 पर चल रहे एक Zabbix सर्वर की पहचान की है, और आपके पास निम्नलिखित विवरण वाले निम्न-विशेषाधिकार वाले उपयोगकर्ता तक पहुंच है: सत्र आईडी sid: d82bf6715e1d3c1f25 होस्ट आई...

9.1CVSS8.7AI score0.76618EPSS
SaveExploits5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.49 views

W&B Weave Server - Remote Arbitrary File Leak

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin. id:...

8.8CVSS9.3AI score0.04974EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/24 4:14 p.m.1 views

CVE-2026-34213

CVE-2026-34213 Um usuário do Docmost com baixos privilégios poderia fornecer um attachmentId de uma vítima para o endpoint genérico de upload e sobrescrever um anexo armazenado de outra página dentro do mesmo workspace. Introdução Identifiquei, divulguei de forma responsável e reproduzi uma falha...

5.4CVSS5.5AI score0.00221EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/22 2:03 p.m.1 views

CVE-2021-32160

..| XSS से विशेषाधिकार प्राप्त उपयोगकर्ता |.. विवरण : एक प्रतिबिंबित क्रॉस-साइट स्क्रिप्टिंग XSS हमले का उपयोग करके Webmin के उपयोगकर्ता जोड़ें सुविधा के माध्यम से एक विशेषाधिकार प्राप्त उपयोगकर्ता बनाना और फिर Webmin की चल रही प्रक्रिया सुविधा के माध्यम से एक रिवर्स शेल प्राप्त करना परीक्षित...

6.1CVSS0.02001EPSS
SaveExploits1
EUVD
EUVD
added 2026/08/22 11:12 a.m.10 views

EUVD-2026-64248

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser...

8.6CVSS5.5AI score0.00466EPSS
SaveExploits1References1
CVE
CVE
added 2026/08/22 11:12 a.m.17 views

CVE-2026-66917

JoomGallery (a Joomla extension) versions prior to 4.3.1 are affected by a Stored Cross-Site Scripting (XSS) vulnerability. An authenticated user with privileged access can embed an XSS payload in any image, resulting in JavaScript execution in the browser of every visitor who views the affected ...

8.6CVSS5.5AI score0.00466EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/08/22 11:12 a.m.27 views

CVE-2026-66917 Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser...

8.6CVSS0.00466EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/08/22 11:12 a.m.7 views

CVE-2026-66917 Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser...

8.6CVSS5.4AI score0.00466EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/08/21 4:09 a.m.16 views

EUVD-2026-63810

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free even...

5.3AI score0.00149EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 4:01 a.m.15 views

EUVD-2026-63809

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...

5.2AI score0.0015EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/21 12:00 a.m.13 views

PT-2026-79296

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free even...

5.2AI score0.00149EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/21 12:00 a.m.14 views

PT-2026-79295

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...

5.1AI score0.0015EPSS
SaveExploits0References2
Rows per page
Query Builder