Lucene search
+L

3495 matches found

Cvelist
Cvelist
added 2026/09/16 8:32 p.m.23 views

CVE-2026-92761 WebVirtCloud Missing Authorization on Instance Control Actions

WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions. Attackers with read-only grants can power off virtual machines, reset root passwords, install SSH keys, and manage ISO images by exploiting the getinstance gate...

8.8CVSS0.00444EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/16 7:29 p.m.8 views

geiger

geiger A Geiger counter for AI agents. One read-only command that inventories every AI agent, harness, MCP server, plugin, and AI extension on a machine — and tells you, in plain language, what each one can touch. root@kitploit: npx geiger-scan No install. No account. No telemetry. Reads configs...

6.1AI score
SaveExploits0References6
Patchstack
Patchstack
added 2026/09/16 5:54 p.m.5 views

WordPress Tutor LMS plugin < 4.0.8 - Read-Only API Key Privilege Escalation vulnerability

Read-Only API Key Privilege Escalation vulnerability discovered by Charles Vosburgh in WordPress Plugin Tutor LMS versions 4.0.8...

7.2CVSS0.0043EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/09/16 5:25 p.m.9 views

CVE-2016-5195

This record is for learning purposes only; any illegal use is prohibited. Principle The vulnerability works by concurrently flushing dirty pages, causing the content of a file that was originally read-only to be modified. If the modified file is owned by root and has the SUID permission, it can b...

7.2CVSS7.3AI score0.83524EPSS
SaveExploits92
Kitploit
Kitploit
added 2026/09/16 11:05 a.m.9 views

glpi-logbleed

glpi-logbleed Inyección SQL ciega en el filtro del historial de registros de GLPI. CVE-2026-53629, corregida en 11.0.8 y 10.0.26, vulnerable desde 9.4.0. Requiere cualquier cuenta con el permiso de lectura logs. El perfil estándar de solo lectura lo tiene. Aviso: GHSA-cpcj-x335-5cmh Análisis: cóm...

7.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 10:38 a.m.7 views

dirtyCow

Dirtycow también conocido como CVE-2016-5195 y es una vulnerabilidad muy popular del pasado. En primer lugar, elige la versión de Linux adecuada para esa vulnerabilidad. luego instálala o ejecútala en VBOX o VMWare. Después de instalarlo, sigue estas instrucciones. 1. Crea un usuario sin tener...

7.2CVSS7.2AI score0.83524EPSS
SaveExploits92
NVD
NVD
added 2026/09/16 6:16 a.m.8 views

CVE-2026-85569

The Tutor LMS WordPress plugin before 4.0.8 does not correctly determine whether an incoming request is addressed to its own REST API, and does not enforce the permission recorded against an API credential, allowing the holder of a read-only key to act as the administrator account that issued it...

7.2CVSS0.0043EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 2:51 a.m.8 views

CVE-2022-0847

CVE-2022-0847 Vulnerabilidad en el kernel de Linux desde 5.8 que permite sobrescribir datos en archivos de solo lectura arbitrarios. Esto conduce a una escalada de privilegios porque los procesos no privilegiados pueden inyectar código en procesos root. Para compilar: gcc poc.c -o poc Usage: ./po...

7.8CVSS7.3AI score0.89721EPSS
SaveExploits102
Kitploit
Kitploit
added 2026/09/16 2:50 a.m.9 views

openclaw-hardening-check

Este script solo lee. No arregla nada y no garantiza que estés seguro. La salida verde significa solo que las comprobaciones listadas a continuación pasaron—y nada más. Comprobación de endurecimiento de OpenClaw openclaw-hardening-check.mjs es una pequeña revisión sin dependencias y fuera de líne...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 9:26 p.m.14 views

linux-privilege-escalation

Escalada de Privilegios en Linux Script de Bash para comprobar y explotar la vulnerabilidad CVE-2022-0847 "Dirty Pipe" de Linux Acerca de esta Prueba de Concepto Este script permite a un usuario sin privilegios en un sistema vulnerable hacer lo siguiente: Modificar/sobrescribir archivos de solo...

7.8CVSS7.2AI score0.89721EPSS
SaveExploits102
Kitploit
Kitploit
added 2026/09/15 8:11 p.m.14 views

CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing

CVE-2026-9090 – Escritura Modbus TCP a Bobinas de Solo Lectura mediante Suplantación de Código de Función Código del Programa Python con simulación pymodbus root@kitploit: modbusplcsim.py - Simulated Modbus PLC with read‑only coils from pymodbus.server.sync import StartTcpServer from...

9.1CVSS8.5AI score0.00216EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 8:11 p.m.9 views

Exploit-Dirty-Cow

Exploit - Dirty Cow CVE-2016-5195 Escalamiento de Privilegios | Exploit de Kernel Linux 📋 Descripción Laboratorio práctico donde se reproduce la vulnerabilidad DirtyCow CVE-2016-5195, una condición de carrera crítica encontrada en el kernel de Linux que permite a usuarios sin privilegios obtener...

7.2CVSS7AI score0.83524EPSS
SaveExploits92
Kitploit
Kitploit
added 2026/09/15 6:04 p.m.9 views

CVE-2022-0847-dirty-pipe-checker

CVE-2022-0847-dirty-pipe-checker Script Bash para comprobar CVE-2022-0847 Dirty Pipe Resumen Esta es la historia de CVE-2022-0847, una vulnerabilidad en el kernel de Linux desde la versión 5.8 que permite sobrescribir datos en archivos de solo lectura arbitrarios. Esto conduce a una escalada de...

7.8CVSS7.4AI score0.89721EPSS
SaveExploits102
Kitploit
Kitploit
added 2026/09/15 5:21 p.m.10 views

dirtypipe

Referencia: https://access.redhat.com/security/vulnerabilities/RHSB-2022-002 Diagnóstico Se ha desarrollado un script de detección de vulnerabilidades para determinar si su sistema se ve afectado actualmente por esta falla. Para verificar la autenticidad del script, también puede descargar la fir...

5.7AI score
SaveExploits0
NVD
NVD
added 2026/09/15 4:17 p.m.5 views

CVE-2026-91985

Vikunja before 2.6.0 fails to properly restrict access to the link-share hash field in single-share read endpoints, allowing read-only members to obtain the share's secret credential. Attackers can exchange the disclosed hash for a link-share JWT at the share's permission level to escalate...

8.7CVSS0.00381EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/15 3:18 p.m.12 views

CVE-2026-91985

Vikunja before 2.6.0 contains an access-control flaw in its single-share read endpoints: the link-share hash field is not properly restricted, allowing read-only members to obtain the share's secret credential. An attacker can then exchange that hash for a link-share JWT at the share's permission...

8.7CVSS5.7AI score0.00381EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/15 3:16 p.m.6 views

CVE-2026-54076 ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)

ArcadeDB is a Multi-Model DBMS. Prior to 26.6.1, the fix for CVE-2026-44221 added an UPDATESCHEMA authorization check only to LocalDocumentType.createProperty, while the remaining public schema mutators in engine/src/main/java/com/arcadedb/schema/LocalDocumentType.java and...

8.1CVSS5.7AI score
SaveExploits0References6
CVE
CVE
added 2026/09/15 3:16 p.m.35 views

CVE-2026-54076

ArcadeDB (Multi-Model DBMS) versions prior to 26.6.1 suffer from an incomplete authorization fix for CVE-2026-44221. The UPDATE_SCHEMA permission check was added only to LocalDocumentType.createProperty, leaving other public schema mutators in LocalDocumentType.java and LocalProperty.java unprote...

8.1CVSS5.7AI score0.00406EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/15 2:27 p.m.6 views

CVE-2026-54168 Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution

Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, a GitHub App installation token created during webhook processing is not scoped to the repository that triggered the event when the App is installe...

6.5CVSS5.7AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/15 1:32 a.m.9 views

CVE-2022-0847

CVE-2022-0847 Original link https://dirtypipe.cm4all.com/ Usage gcc exploit.cpp -o exploit ./exploitIt will spawn a root shell Vulnerability description This is CVE-2022-0847, a vulnerability in the Linux kernel since version 5.8 that allows overwriting data in arbitrary read-only files. This lea...

7.8CVSS7AI score0.89721EPSS
SaveExploits102
Rows per page
Query Builder