Lucene search
+L

548 matches found

Kitploit
Kitploit
added 2026/09/13 10:28 a.m.6 views

CVE-2020-8254

CVE-2020-8254: Zip Slip in Pulse Secure VPN Windows Client A vulnerability in the Pulse Secure Desktop Client 9.1R9 has Remote Code Execution RCE if users can be convinced to connect to a malicious server. Vendor Disclosure: The vendor's disclosure and fix for this vulnerability can be found here...

8.8CVSS6.5AI score0.02123EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 4:44 a.m.9 views

CVE-2019-11510-poc

CVE-2019-11510-poc Pulse Secure SSL VPN pre-auth file reading Reference 1. https://hackerone.com/reports/591295 2. https://github.com/projectzeroindia/CVE-2019-11510/blob/master/CVE-2019-11510.sh 3...

10CVSS8.2AI score0.99999EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/09/13 4:34 a.m.9 views

pulsexploit

pulsexploit Automated script for Pulse Secure SSL VPN exploit CVE-2019-11510 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. root@kitploit: CentOS & Fedora yum install git...

10CVSS8.3AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/13 3:37 a.m.9 views

CVE-2020-8250

CVE-2020-8250: Privilege Escalation via Command Injection in Pulse Secure VPN Linux Client The root SUID executable pulsesvc, has a function “doupload” that unsafely passes the “HOME” environmental variable to “system”. By altering the “HOME” variable to contain special shell characters Ex: “” or...

7.8CVSS6.9AI score0.00483EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 3:32 a.m.6 views

pulse-exploit

pulsexploit Automated script for Pulse Secure SSL VPN exploit CVE-2019-11510 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. root@kitploit: CentOS & Fedora yum install git...

10CVSS8.3AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/13 12:50 a.m.7 views

CVE-2019-11510

CVE-2019-11510 Exploit for Arbitrary File Read on Pulse Secure SSL VPN CVE-2019-11510 You can use a single domain, either a list of domains. You must include https:// in front of the domain. Usage : cat targetlist.txt | bash CVE-2019-11510.sh / bash CVE-2019-11510.sh -d https://vpn.target.com/ If...

10CVSS8.2AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/13 12:11 a.m.6 views

CVE-2020-8249

CVE-2020-8249: Buffer Overflow in Pulse Secure VPN Linux Client The root SUID executable pulsesvc, has a function “doupload” that unsafely calls a “sprintf” which can result in a buffer overflow. Because the “sprintf” writes the values on the stack, if a big enough string is passed to it, then it...

7.8CVSS6.8AI score0.00503EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 9:40 p.m.16 views

CVE-2023-38041-POC

CVE-2023-38041-POC Ivanti Pulse Secure Client Connect Local Privilege Escalation CVE-2023-38041 Proof of Concept...

7.8CVSS7.4AI score0.00672EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 3:15 p.m.6 views

CVE-2019-11510_poc

CVE-2019-11510 PoC Python script to exploit CVE-2019-11510 and read '/etc/passwd' file Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure vulnerability root@kitploit: USAGE: python3 CVE-2019-11510.py...

10CVSS8.3AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/12 12:23 p.m.8 views

CVE-2020-8248

CVE-2020-8248: Privilege Escalation via Zip Wildcard Exploit in Pulse Secure VPN Linux Client The root SUID executable pulsesvc, has a function “doupload” that unsafely calls a zip command with wildcards “”. By writing files with specifically crafted names, in a user- controlled folder...

7.8CVSS6.8AI score0.00488EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 9:17 a.m.7 views

CVE-2019-11510-1

CVE-2019-11510-1 Exploit para lectura arbitraria de archivos en Pulse Secure SSL VPN CVE-2019-11510 uso de python: python CVE-2019-11510.py https://x.x.x.x Enlaces de referencia: https://hackerone.com/reports/591295 https://github.com/projectzeroindia/CVE-2019-11510...

10CVSS8.2AI score0.99999EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/09/10 11:52 p.m.9 views

CVE-2021-22893_HoneyPoC2

CVE-2021-22893 THIS IS NOT A REAL EXPLOIT IT IS A HONEYPOC https://blog.zsec.uk/cve-2020-1350-honeypoc/ Proof-of-Concept PoC script to exploit Pulse Secure CVE-2021-22893. DO NOT RUN THIS. Usage Achieves RCE on Pulse Secure VPNs root@kitploit: chmod +x exploit.sh ./exploit.sh 10.0.0.1 ./exploit.s...

10CVSS8.5AI score0.47172EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/10 11:52 p.m.7 views

check-your-pulse

check-your-pulse This utility can help determine if indicators of compromise IOCs exist in the log files of a Pulse Secure VPN Appliance for CVE-2019-11510. The Cybersecurity and Infrastructure Security Agency CISA has seen many organ izations breached despite patching their appliance because of...

10CVSS6AI score0.99999EPSS
SaveExploits22References5
Kitploit
Kitploit
added 2026/09/10 11:33 a.m.4 views

CVE-2024-7593

CVE-2024-7593 Description: CVE-2024-7593 is a critical vulnerability affecting multiple Pulse Secure products, including Pulse Secure VPN. This vulnerability allows an authenticated attacker with access to the management interface to execute arbitrary commands on the affected server. This can lea...

9.8CVSS8.3AI score0.9999EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/10 12:59 a.m.11 views

CVE-2023-46805

19/01/2024 Update Updated with the latest info based on Assetnote's blog. Now three checks are executed before a status is shown, this also to better detect older versions of Avanti Blogs with analysis of the CVE: https://attackerkb.com/topics/AdUh6by52K/cve-2023-46805/rapid7-analysis...

8.2CVSS8.1AI score0.99986EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/09 2:23 a.m.8 views

pulse-secure-vpn-mitm-research

pulse-secure-vpn-mitm-research Pulse Secure mitm research Release date Joint release date with vendor: 26 Oct 2020 Author David Kierznowski, @withdk Credits Sahil Mahajan from the Pulse Secure PSIRT Team for support throughout the disclosure process. Alyssa Herrera, Justin Wagner, and Mimir, and...

9.8CVSS6.5AI score0.02022EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/08 9:20 p.m.5 views

tu-TOCTOU-kaiu-TOCMEU-CVE-2020-13162-

Pulse Secure Windows Client https://www.redtimmy.com/privilege-escalation/pulse-secure-windows-client/ and https://www.redtimmy.com/privilege-escalation/pulse-secure-client-for-windows-9-1-6-toctou-privilege-escalation-cve-2020-13162/...

7CVSS7.1AI score0.00793EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/08 8:39 p.m.7 views

CVE-2019-11510-PulseVPN

CVE-2019-11510-PulseVPN In Pulse Secure Pulse Connect Secure PCS 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability. exploit.sh = Exploring Vulnerability...

10CVSS8.2AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/08 7:23 p.m.6 views

CVE-2021-22893

CVE-2021-22893 Proof-of-Concept PoC script to exploit Pulse Secure CVE-2021-22893. Usage Achieves RCE on Pulse Secure VPNs root@kitploit: chmod +x exploit.sh ./exploit.sh 10.0.0.1 ./exploit.sh -l ./exploit.sh -l IPList.txt...

10CVSS8.5AI score0.47172EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/08 7:07 p.m.8 views

Pulse

Hi this is script to check IP address from shodan that vulnerable to Pulse Secure exploit CVE-2019-11510 Thanks to Rakesh Parchuri for helping in writing the script After you get the IP's from the output use metasploit module to further exploit https://www.exploit-db.com/exploits/47297...

10CVSS8.1AI score0.99999EPSS
SaveExploits22
Rows per page
Query Builder