Lucene search
+L

497 matches found

Kitploit
Kitploit
added 2026/09/04 10:02 p.m.7 views

CVE-2019-9653

CVE-2019-9653 Дата Раскрытие: 03/11/2019 Последнее обновление: 03/15/2019 Краткое описание NUUO Inc. — компания, предоставляющая решения для видеонаблюдения. У них есть множество продуктов NVR Network Video Recorder — сетевой видеорегистратор для разных заказчиков с различными требованиями. Эти N...

10CVSS9.6AI score0.11488EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/04 6:23 p.m.5 views

CVE-2019-3396_EXP

CVE-2019-3396EXP CVE-2019-3396 confluence SSTI RCE 1、placez le fichier cmd.vm sur votre site web doit utiliser ftp ou https, http ne fonctionne pas 2、modifiez RCEexp.py ,changez le nom de fichier = 'ftp://1.1.1.1/cmd.vm' (python -m pyftpdlib -p 21) 3、python RECexp.py http://test.wikitest.cc:8080...

10CVSS9.1AI score0.99913EPSS
SaveExploits20
NVD
NVD
added 2026/09/04 4:17 p.m.2 views

CVE-2026-44402

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a...

9.8CVSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/09/04 3:31 p.m.14 views

CVE-2026-44402 Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgi

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a...

9.8CVSS
SaveExploits1References3
CVE
CVE
added 2026/09/04 3:31 p.m.33 views

CVE-2026-44402

Voltronic Power SNMP Web Pro 1.1 suffers from an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint. The backend fails to validate session cookies (a single Cookie: -http-session-=NOT_VALID header bypasses authentication), and the firmware install proce...

9.8CVSS6.7AI score
SaveExploits1References3
EUVD
EUVD
added 2026/09/04 3:31 p.m.4 views

EUVD-2026-71267

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a...

9.8CVSS6.7AI score
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/04 2:48 p.m.6 views

CVE-2022-36446-Webmin-RCE

CVE-2022-36446 — Webmin 1.997 RCE Authenticated Эксплойт для уязвимости Remote Code Execution в Webmin версиях старше 1.997, через модуль Software Package Updates. Как это работает? Модуль Software Package Updates Webmin не санитизирует должным образом параметр u перед передачей его системе...

9.8CVSS8.7AI score0.96049EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/04 11:47 a.m.6 views

CVE-2026-46368-OpenWrt-Exploit

OpenWrt luci-app-https-dns-proxy : Injection de commande authentifiée CVE-2026-46368 Ce dépôt contient l'exploit Proof of Concept PoC pour une vulnérabilité critique d'injection de commande OS dans luci-app-https-dns-proxy qui permet l'exécution arbitraire de commandes en tant que root. Identifia...

8.8CVSS5.9AI score0.06582EPSS
SaveExploits2
EUVD
EUVD
added 2026/09/04 12:31 a.m.7 views

EUVD-2026-70851

Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root...

8.5CVSS6.1AI score0.0013EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/04 12:00 a.m.5 views

EUVD-2026-71454

An issue in the ugw-restart method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 allows a remote authenticated user with the low-privileged Standard role to inject arbitrary code into the dpcheck system utility executed as root...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/03 9:12 p.m.5 views

autopwn

autopwn 대상을 지정하고 해당 대상에 대해 도구 세트를 실행합니다. autopwn은 모의 침투 테스터가 셸에 명령을 입력하거나 스크립트를 작성할 필요 없이 대상에 대해 실행하고 싶은 도구를 지정할 수 있게 하여 작업을 더 쉽고 일관성 있게 만들기 위해 설계되었습니다. 이 도구는 특정 시험 중에도 유용할 것입니다.. 설치 autopwn 클라이언트가 연결할 수 있도록 TCP 5000을 노출하면서 docker 이미지를 사용하는 것이 좋습니다. autopwn docker 이미지에는 이미 도구가 설치되어 올바른 위치에 있기...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 12:49 a.m.4 views

pkwned

pkwned: Proof of Concept для CVE-2021-4034 Этот PoC запустит PAYLOADPATH как определено в constants.h с root привилегиями из уязвимой версии pkexec, работающей на glibc. Каталог "GCONVPATH=." должен содержать исполняемый файл, названный в честь каталога, содержащего модуль gconv. Как указано в...

7.8CVSS6.8AI score0.94921EPSS
SaveExploits154References1
Kitploit
Kitploit
added 2026/09/02 10:43 p.m.3 views

CVE-2024-3094

CVE-2024-3094 — XZ Utils バックドア 教育目的および許可されたセキュリティ研究のみを対象としています。 脆弱性の説明 CVE-2024-3094 は、XZ Utils liblzma のバージョン 5.6.0 および 5.6.1 に導入されたバックドアであり、2024 年 3 月 29 日にセキュリティ研究者 Andres Freund によって発見されました。CVSS スコアは 10.0 Critical に設定されました。 これは、サプライチェーン攻撃 であり、脅威アクター「Jia Tan」JiaT75 によって 2...

10CVSS9.1AI score0.85974EPSS
SaveExploits41
Kitploit
Kitploit
added 2026/09/02 7:15 p.m.6 views

FortiSandbox-RCE-Exploit-CVE-2026-39808

FortiSandbox RCE Scanner — CVE-2026-39808 Неаутентифицированная инъекция OS-команд от имени root в Fortinet FortiSandbox Уязвимость • Установка • Использование • Принцип работы • Конвейер • Shodan Dorks • Отказ от ответственности Уязвимость CVE-2026-39808 — критическая неаутентифицированная...

9.8CVSS9.1AI score0.92819EPSS
SaveExploits7References1
NVD
NVD
added 2026/09/02 5:17 p.m.7 views

CVE-2026-79755

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, the function namespace is interpolated—unvalidated—into a double-quoted docker ps --filter "label=nuclio.io/namespace=" command that is executed via the host...

8CVSS0.00397EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/02 4:39 p.m.4 views

CVE-2026-79755 Nuclio: Unauthenticated OS command injection via function namespace in docker ps --filter label (local Docker platform)

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, the function namespace is interpolated—unvalidated—into a double-quoted docker ps --filter "label=nuclio.io/namespace=" command that is executed via the host...

8CVSS6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/02 2:06 p.m.7 views

CVE-2026-36356

CVE-2026-36356: MeiG Smart FORGESLT711 GoAhead — Неаутентифицированная инъекция OS-команд /action/SetRemoteAccessCfg CVE : CVE-2026-36356 CWE : CWE-78, CWE-306 Исследователь : Daniil Gordeev Раскрыто : 2026-05-03 Краткое описание Веб-сервер GoAhead, поставляемый с 4G LTE CPE-устройствами MeiG Sma...

9.1CVSS5.3AI score0.13549EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/02 10:29 a.m.7 views

CVE-2026-54161

CVE-2026-54161 PoC Résumé upsmon interpole la valeur ups.alarm fournie par le serveur et contrôlable par l'attaquant, non assainie, dans une commande shell qu'il exécute via system. Lorsqu'un périphérique surveillé signale un état ALARM et que l'opérateur a configuré NOTIFYCMD avec EXEC sur...

5.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 5:54 a.m.5 views

CVE-2026-31431

CVE-2026-31431 Введение Запуск: root@kitploit: ansible-playbook -v -i environment/production/inventory --timeout=1 playbook.yml Ссылки https://copy.fail https://vulners.com/cve/CVE-2026-31431 https://access.redhat.com/security/cve/cve-2026-31431...

7.8CVSS5.3AI score0.99907EPSS
SaveExploits242
Kitploit
Kitploit
added 2026/09/02 2:50 a.m.6 views

sdwan-cve-2021-1480

Exploit for CVE-2021-1480 SD-WAN Материалы PoC для эксплуатации CVE-2021-1480 на Cico SD-WAN. Полная публикация доступна на сайте XMCO : https://blog.xmco.fr/wp-content/uploads/2021/08/XMCO-SDWANReport-CVE-2021-1480.pdf Использование: 1. Обновите строки 173 и 176, чтобы задать uid текущего...

7.8CVSS7.8AI score0.01794EPSS
SaveExploits1References1
Rows per page
Query Builder