Lucene search
+L

126506 matches found

Kitploit
Kitploit
added 2026/09/09 7:16 p.m.5 views

CVE-2020-15368

How to exploit a vulnerable windows driver Exploit and Proof of Concept PoC for CVE-2020-15368. Asrock repackaged rweverything driver for their RGB controller configuration tool and signed it. They "protect" it by encrypting their ioctls...lol. We found this CVE by accident last summer, and afaik...

6.1CVSS6.3AI score0.0136EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/09 7:15 p.m.10 views

cve-2019-1003000-jenkins-rce-poc

PoC: Jenkins RCE SECURITY-1266 / CVE-2019-1003000 Script Security, CVE-2019-1003001 Pipeline: Groovy, CVE-2019-1003002 Pipeline: Declarative A proof of concept to allow users with Overall/Read permission and Job/Configure and optional Job/Build to bypass the sandbox protection and execute arbitra...

8.8CVSS7AI score0.98375EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/09 7:00 p.m.6 views

CVE-2024-52806-PoC

POC for CVE-2024-52596 / CVE-2024-52806 - SimpleSAMLphp pre-auth XXE file read...

8.3CVSS5.8AI score0.00432EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 6:59 p.m.5 views

CVE-2026-39363

CVE-2026-39363 — Vite Dev Server Arbitrary File Read PoC A drop-in PoC for GHSA-p9ff-h696-f583. It reads arbitrary files from the machine running the dev server by calling fetchModule over an unauthenticated HMR WebSocket, bypassing the HTTP-layer server.fs.allow restriction. Affected Versions...

8.2CVSS5.7AI score0.03396EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/09 6:55 p.m.173 views

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/09 6:42 p.m.5 views

CVE-2023-26360-adobe-coldfusion-rce-exploit

Critical vulnerabilities in Adobe Coldfusion CVE-2023-26359, CVE-2023-26360 and CVE-2023-26359 On March 8, 2023, Adobe released security updates to address critical vulnerabilities in Adobe ColdFusion, a popular web application development platform. These vulnerabilities, classified as improper...

9.8CVSS7.2AI score0.97339EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/09 6:36 p.m.5 views

CVE-2024-23897

CVE-2024-23897 This repository presents a proof-of-concept of CVE-2024-23897 Discovered by sonarsource CVE-2024-23897 | File read in jenkins Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on confluence instances they don't own. This tool has been...

9.8CVSS8.1AI score0.99999EPSS
SaveExploits50
Kitploit
Kitploit
added 2026/09/09 6:33 p.m.6 views

CVE-2023-40028

CVE-2023-40028 POC for CVE-2023-40028: Ghost CMS Arbitrary File Read Description Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an...

6.5CVSS6.8AI score0.68737EPSS
SaveExploits12
Rockylinux
Rockylinux
added 2026/09/09 6:08 p.m.7 views

qt6-qt5compat security update

An update is available for qt6-qt5compat. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt6 - Qt 5 Compatibility Libraries. Security Fixes: qt: Qt: Denial of...

6.3CVSS0.00524EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:06 p.m.8 views

Meltdown

Meltdown PoC for Meltdown in linux CVE-2017-5754 Useage root@kitploit: cd meltdown make ./meltdown address size Example Refer http://zzado.tistory.com/category/Report...

5.6CVSS7AI score0.84172EPSS
SaveExploits3
Github Security Blog
Github Security Blog
added 2026/09/09 6:06 p.m.9 views

weasyprint Has Server-Side Request Forgery (SSRF)

Summary urlfetcher is WeasyPrint's documented mechanism for restricting resource loading - applications use it to block file://, internal hosts, etc. when rendering untrusted input. Two writepdf channels ignore the document's urlfetcher and build a fresh default URLFetcher instead. A restrictive...

SaveExploits0References3Affected Software1
OSV
OSV
added 2026/09/09 6:06 p.m.4 views

GHSA-JF6Q-CHMF-3H3V weasyprint Has Server-Side Request Forgery (SSRF)

Summary urlfetcher is WeasyPrint's documented mechanism for restricting resource loading - applications use it to block file://, internal hosts, etc. when rendering untrusted input. Two writepdf channels ignore the document's urlfetcher and build a fresh default URLFetcher instead. A restrictive...

6.2CVSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/09 6:01 p.m.7 views

dirtypipez-exploit

CVE-2022-0847 DirtyPipe Exploit. Credit: Max Kellermann [email protected] A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits. Today, security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe'...

7.8CVSS7AI score0.89721EPSS
SaveExploits102
Kitploit
Kitploit
added 2026/09/09 5:50 p.m.10 views

CVE-2026-65343

CVE-2026-65343 — AppleKeyStore OOB Read KASLR Defeat Component: AppleKeyStore kernel extension — LibSerSEPControlDeserialize Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds read in SEP control message deserialization Impact: Kernel pointer lea...

7.5CVSS6AI score0.00374EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 5:48 p.m.11 views

Grafana-CVE-2021-43798

CVE-2021-43798 Grafana Unauthorized arbitrary file reading vulnerability 8.3.1 2021-12-07 Security: Fixes CVE-2021-43798 . For more information, see our blog https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/ Example: get db password...

7.5CVSS8.1AI score0.88503EPSS
SaveExploits45References2
Kitploit
Kitploit
added 2026/09/09 5:45 p.m.5 views

CVE-2024-26160

CVE-2024-26160 cldflt.sys information disclosure vulnerability There's small writeup about CVE-2024-26160 , what can be found in the February patch KB5034765 , Windows 11 22H2, Windows 11 23H2. The vulnerability has been closed in the March patch KB5035853. Analysis The vulnerability is located i...

5.5CVSS6.7AI score0.11368EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 5:35 p.m.7 views

CVE-2022-45451

Introduction System Specs: Windows 10 1809 x64 EN Target: Acronis Home Cyber Protect Acronis Cyber Protect Vulnerability Description The Acronis "ngscan" anti-malware scan driver suffers from incorrect / improper access control placed on the filter communication port. The minifilter driver suppor...

8.8CVSS7.5AI score0.00512EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 5:34 p.m.6 views

CVE-2020-1938-MSF-MODULE

CVE-2020-1938-MSF-MODULE Modified version of auxiliary/admin/http/tomcatghostcat, Read any file Overwrite the file/metasploit-framework/modules/auxiliary/admin/http/tomcatghostcat.rb and restart msfconsole to execute reloadall. Then you can use the module...

9.8CVSS7.5AI score0.9927EPSS
SaveExploits51
Kitploit
Kitploit
added 2026/09/09 5:33 p.m.7 views

CVE-2026-3576

CVE-2026-3576 - Wordpress Plugin Planyo Online Reservation System = 3.0 - Arbitrary File Read via SSRF This repo contains a python based Proof of ConceptPoC exploit for CVE-2026-3576. It can also be found in Exploit-DB here. I have also developed a Metasploit module for this exploit which can be...

7.2CVSS6AI score0.12943EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/09 5:29 p.m.6 views

CVE-2024-23897

CVE-2024-23897 Jenkins CI Authenticated Arbitrary File Read Through the CLI Leads to Remote Code Execution RCE Jenkins is a self-contained open source continuous integration/continuous delivery and deployment CI/CD automation software DevOps tool written in the Java programming language. It is us...

9.8CVSS8AI score0.99999EPSS
SaveExploits50References1
Rows per page
Query Builder