Lucene search
+L

1210032 matches found

The Hacker News
The Hacker News
added 2026/08/27 9:33 a.m.1 views

GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address

Threat actors linked by Arctic Wolf to Dark Caracal with medium confidence deployed a previously undocumented Go-based malware framework, GoCaracal , during a June 2026 intrusion at an unnamed communications organization in Venezuela. GoCaracal provides operators with remote shell access and...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 9:23 a.m.2 views

loki

Loki: like Prometheus, but for logs. Loki is a horizontally-scalable, highly-available, multi-tenant log aggregation system inspired by Prometheus. It is designed to be very cost effective and easy to operate. It does not index the contents of the logs, but rather a set of labels for each log...

5.5AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/27 9:22 a.m.1 views

CVE-2025-4476-Exploit

CVE-2025-4476-Exploit A small Python test client to send HTTP GET requests with an oversized Authorization: Basic header. This tool is intended for lab testing and research into header-parsing issues e.g., null-dereference / crash bugs such as CVE-2025-4476 in libsoup. It demonstrates how a...

4.3CVSS6AI score0.00385EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 9:21 a.m.1 views

CVE-2026-39324

CVE-2026-39324 Exploit PoC Rack::Session::Cookie decrypt failure falls back to accepting unencrypted cookies | ---|--- Advisory| GHSA-33qg-7wpp-89cq Package| rack-session RubyGems Affected| = 2.1.1 Patched| 2.1.2 Summary Rack::Session::Cookie with secrets: should only accept encrypted cookies. Bu...

9.8CVSS6.4AI score0.0027EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/27 9:20 a.m.1 views

CVE-2026-31431

CVE-2026-31431 — "Copy Fail" Local Privilege Escalation in the Linux Kernel crypto algifaead subsystem. Overview CVE-2026-31431, dubbed "Copy Fail", is a logic bug in the Linux kernel's authencesn cryptographic template algifaead. It allows an unprivileged local user to perform a controlled 4-byt...

7.8CVSS5.7AI score0.99907EPSS
SaveExploits238
Kitploit
Kitploit
added 2026/08/27 9:19 a.m.1 views

CVE-2026-29781

Architectural vulnerability in the Sliver C2 server allows for Reverse-C2 Weaponization. By extracting credentials from a captured implant, a defender can weaponize the C2 relationship to trigger a remote Infrastructure Kill-Switch. This exploitation targets a systemic lack of nil-pointer...

6.5CVSS8.5AI score0.00504EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 9:19 a.m.1 views

CVE-2026-22038

CVE-2026-22038 — AutoGPT Stagehand Blocks Log API Keys in Plaintext CVE ID: CVE-2026-22038 Product: AutoGPT Platform Stagehand integration Affected Versions: All versions up to and including autogpt-platform-beta-v0.6.45 Patched In: autogpt-platform-beta-v0.6.46 Vulnerability Type: CWE-532 —...

8.1CVSS5.5AI score0.00433EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/08/27 9:17 a.m.1 views

CVE-2025-56801

CVE-2025-56801 AES-CFB IV Generation Vulnerability in Reolink Desktop Application 1. Overview Name : Reolink Desktop Application Version : 8.18.12 Vendor : Reolink CWE : CWE-1204: Generation of Weak Initialization Vector IV, CWE-321: Use of Hard-coded Cryptographic Key CVSS : 5.1 MEDIUM Vector...

5.1CVSS5.6AI score0.00132EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/08/27 9:16 a.m.1 views

CVE-2025-56799

CVE-2025-56799 OS Command Injection Vulnerability via Cache Clearing Scheduler in Reolink Desktop Application 1. Overview Name : Reolink Desktop Application Version : 8.18.12 Vendor : Reolink CWE : CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...

6.5CVSS5.9AI score0.01219EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/27 9:15 a.m.1 views

Pack2TheRoot

CVE-2026-41651 - Pack2TheRoot Vulnerability Overview CVE-2026-41651, also known as the Pack2TheRoot vulnerability, is a critical security flaw affecting certain Linux systems. It allows an attacker to escalate privileges, potentially gaining root access or compromising the system. This...

8.8CVSS8AI score0.0046EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/08/27 9:15 a.m.1 views

PoC_CVE-2025-11579

PoC CVE-2025-11579 Overview rardecode versions = 2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash. Exploit We craft a RAR file with an...

6.5CVSS8.5AI score0.00349EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 9:14 a.m.1 views

CVE-2025-32463

CVE-2025-32463 Vulnerable: sudo 1.9.14, 1.9.15, 1.9.16, 1.9.17 - Patched in: sudo 1.9.17p1 and later - Legacy versions older than 1.9.14 are not affected, as they don't support the --chroot option. root@kitploit: getroot.sh and getroot.py do the same thing. git clone...

9.3CVSS7.6AI score0.58759EPSS
SaveExploits71
Kitploit
Kitploit
added 2026/08/27 9:13 a.m.2 views

MicroburstSecretsHunter

MicroBurst Secrets Hunter A PowerShell scanner that combs through MicroBurst Get-AzDomainInfo output for plaintext passwords, keys, connection strings, and other secrets that should never sit unencrypted in an Azure environment. Built for read-only audit workflows : you collect a domain dump with...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/27 9:12 a.m.1 views

CVE-2026-20127

CVE-2026-20127 Overview An exploit for the Cisco Catalyst SD-WAN Controller authentication bypass vulnerability, CVE-2026-20127. This exploit targets the vbondprocchallengeackack handler. It sends a forged CHALLENGEACKACK message msgtype=10 with an attacker-controlled verifystatus=1 byte, directl...

10CVSS9.2AI score0.88243EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/08/27 9:09 a.m.1 views

CVE-2026-31281

CVE-2026-31281 Description Totara LMS is vulnerable to HTLM Injection. An attacker can inject malicious HTLM code in a message and send it to all the users in the application, resulting in executing the code and may lead to session hijacking and executing commands on the victim's browser CVSS 3...

8CVSS5.6AI score0.00302EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 9:09 a.m.1 views

ApplicationInspector v1.10.1

Introduction Microsoft Application Inspector is a software source code characterization tool that helps identify coding features of first or third party software components based on well-known library/API calls and is helpful in security and non-security use cases. It uses hundreds of rules and...

5.8AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/08/27 9:08 a.m.2 views

ExploitVeer

CVE-2025-5777: The Ultimate Scanner 🚀 🔐 CVE: CVE-2025-5777 🚨 Severity: Critical 👨‍💻 Author: Virendra Kumar & CyberLeelawat 📜 License: MIT An advanced, powerful, and easy-to-use tool designed to detect and exploit CVE-2025-5777 aka CitrixBleed 2. This script not only identifies the memory leak...

9.3CVSS8.9AI score0.99962EPSS
SaveExploits19References1
Kitploit
Kitploit
added 2026/08/27 9:07 a.m.3 views

CVE-2025-8088-Winrar-Tool-Gui

🚨 CVE-2025-8088 WinRAR Exploit Tool ⚠️ FOR EDUCATIONAL AND RESEARCH PURPOSES ONLY ⚠️ 🌐 Language / Dil 🇺🇸 English 🇹🇷 Türkçe English 📋 Table of Contents Overview Features Requirements Installation Usage Technical Details Screenshots Disclaimer Contributing 🎯 Overview CVE-2025-8088 is a fictional...

8.8CVSS7.6AI score0.94551EPSS
SaveExploits35References2
Kitploit
Kitploit
added 2026/08/27 9:05 a.m.1 views

copyfail-rs

copyfail-rs Copy Fail exploit CVE-2026-31431 but in Rust, a critical vulnerability chaining AFALG and splice to achieve a 4-byte page cache write, leading to local privilege escalation on major Linux distributions. Based on the research and PoC by Xint Code. Disclaimer !CAUTION This project is fo...

7.8CVSS5.9AI score0.99907EPSS
SaveExploits238
Kitploit
Kitploit
added 2026/08/27 9:04 a.m.3 views

CVE-2024-6387-how-to-fix

CVE-2024-6387-how-to-fix Vulnerability remediation and mitigationCVE-2024-6387 CVE-2024-6387: Critical RCE Vulnerability in OpenSSH 'regreSSHion' My LinkedIn article CVE Details Description Qualys Threat Research Unit TRU has detailed a severe security flaw named 'regreSSHion' that leaves million...

8.1CVSS8AI score0.99506EPSS
SaveExploits71References1
Rows per page
Query Builder