Lucene search
+L

205 matches found

Kitploit
Kitploit
added 2026/09/04 7:37 a.m.3 views

WPTaskScheduler_CVE-2024-49039

Persistencia de WPTaskScheduler y CVE-2024-49039, como una superficie de ataque dentro del Programador de tareas. WPTaskScheduler.dll es un componente del Programador de tareas desde Windows 10 1507. Probablemente se trata de una herramienta de puerta trasera utilizada para la persistencia, que f...

8.8CVSS8.8AI score0.14179EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/03 10:42 p.m.5 views

CVE-2020-1066-EXP

引用 这个漏洞属于Windows CardSpace服务未正确处理符号链接对象导致的任意文件替换的本地权限提升漏洞 申明 作者poc仅供研究目的,如果读者利用本poc从事其他行为,与本人无关 目录 toc 分析 漏洞影响范围 适用于Windows7和Windows Server 2008 R2的普通用户和开启特殊配置的IIS用户 漏洞原理分析 笔者是漏洞的提交者,漏洞更新于2020年5月.漏洞来自于Windows7和Windows Server 2008 R2的Windows...

7.8CVSS7.1AI score0.02445EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/30 3:26 p.m.4 views

DiagTrackEoP

DiagTrackEoP 这只是滥用 SeImpersonate 权限的另一种方式。 本 PoC 基于 @crisprss 的这篇博客。 在这篇博客中,@crisprss 展示了一种使用 AzureAttestService 滥用 SeImpersonate 权限的有趣方法,AzureAttestService 随近期版本的 SQL Server 一起提供,相关 PoC 可在此处找到:https://github.com/crisprss/magicAzureAttestService。 在同一篇博客中,他还展示了另一种利用 DiagTrack 服务滥用 SeImpersonate...

5.9AI score
SaveExploits0References4
Nuclei
Nuclei
added 2026/08/29 10:07 a.m.223 views

VMware VRealize Network Insight - Remote Code Execution

VMWare Aria Operations for Networks vRealize Network Insight is vulnerable to command injection when accepting user input through the Apache Thrift RPC interface. This vulnerability allows a remote unauthenticated attacker to execute arbitrary commands on the underlying operating system as the ro...

9.8CVSS8AI score0.98281EPSS
SaveExploits7References5
Kitploit
Kitploit
added 2026/08/29 6:01 a.m.5 views

Kernelhub

Benvenuto in Kernelhub Premessa L'intenzione originale della realizzazione del progetto è per imparare, analizzare e ricercare le ultime vulnerabilità del kernel senza dover guardare il sistema e i contenuti correlati. Questo progetto è una raccolta proprietaria, ad eccezione dei test falliti o n...

5.9AI score
SaveExploits0References10
NVD
NVD
added 2026/08/14 4:16 p.m.11 views

CVE-2026-57472

Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the file management functionality of the XML-RPC management interface of KUNBUS RevPiPyLoad in version 0.11.0 that allows a local unauthenticated attacker to...

6.9CVSS0.00124EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/14 3:04 p.m.33 views

CVE-2026-57472

CVE-2026-57472 affects the KUNBUS RevPiPyLoad 0.11.0 XML-RPC management interface. A CWE-22 path traversal in the file management functionality enables a local unauthenticated attacker to delete arbitrary files with the RevPiPyLoad daemon privileges, leading to loss of configuration integrity and...

6.9CVSS5.4AI score0.00124EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/14 3:04 p.m.35 views

CVE-2026-57472 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in KUNBUS RevPiPyLoad

Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the file management functionality of the XML-RPC management interface of KUNBUS RevPiPyLoad in version 0.11.0 that allows a local unauthenticated attacker to...

6.9CVSS0.00124EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/14 3:04 p.m.42 views

CVE-2026-57471

CVE-2026-57471 affects KUNBUS RevPiPyLoad 0.11.0 via the XML-RPC management interface. A path traversal flaw in the file management component allows a local unauthenticated attacker to read arbitrary files with the RevPiPyLoad daemon’s privileges by sending crafted requests to the local managemen...

6.8CVSS5.4AI score0.00124EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/14 3:04 p.m.16 views

EUVD-2026-58677

Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the file management functionality of the XML-RPC management interface of KUNBUS RevPiPyLoad in version 0.11.0 that allows a local unauthenticated attacker to rea...

6.8CVSS5.5AI score0.00124EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/25 12:17 a.m.14 views

CVE-2026-9782

Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing...

8.8CVSS0.00946EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/24 9:35 p.m.21 views

EUVD-2026-39107

Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, Appsmith's bundled supervisord exposes an XML-RPC interface on port 9001, reachable from outside the container via a Caddy reverse-proxy route at /supervisor/ on the public ingress. Combined with the...

8.9CVSS6.1AI score0.00494EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/06/15 3:00 a.m.16 views

EUVD-2026-36686

A vulnerability has been found in hcengineering Huly Platform up to 0.7.0. Affected is the function getMailboxSecret of the file server/account/src/operations.ts of the component RPC Interface. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit h...

5.3CVSS5AI score0.00207EPSS
SaveExploits0References4
CVE
CVE
added 2026/06/15 3:00 a.m.36 views

CVE-2026-12212

The CVE concerns hcengineering Huly Platform (up to v0.7.0). It affects the RPC Interface component, specifically the getMailboxSecret function in server/account/src/operations.ts. The issue is an improper access control vulnerability that could be triggered remotely. Public disclosure of the exp...

5.3CVSS5AI score0.00207EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/06/09 5:34 p.m.58 views

CVE-2026-50636 LimeSurvey RemoteControl invite_participants/remind_participants SQL Injection

The RemoteControl API methods inviteparticipants and remindparticipants pass a caller-supplied token-ID array into TokenDynamic::findUninvited, which concatenates the values directly into a tid IN '...' SQL clause without parameterization or input validation. A remote, authenticated attacker...

8.8CVSS0.00358EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/05/12 8:20 a.m.17 views

CVE-2025-40948

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.17.1, RUGGEDCOM ROX MX5000RE All versions V2.17.1, RUGGEDCOM ROX RX1400 All versions V2.17.1, RUGGEDCOM ROX RX1500 All versions V2.17.1, RUGGEDCOM ROX RX1501 All versions V2.17.1, RUGGEDCOM ROX RX1510 All versions V2.17.1...

6.8CVSS5.9AI score0.00397EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/12 8:20 a.m.13 views

CVE-2025-40948

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.17.1, RUGGEDCOM ROX MX5000RE All versions V2.17.1, RUGGEDCOM ROX RX1400 All versions V2.17.1, RUGGEDCOM ROX RX1500 All versions V2.17.1, RUGGEDCOM ROX RX1501 All versions V2.17.1, RUGGEDCOM ROX RX1510 All versions V2.17.1...

6.8CVSS5.9AI score0.00397EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/08 12:00 a.m.80 views

CVE-2025-69691

Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.execphp. NOTE: the Supplier disputes this because the API call is only available to admins and they are intentionally allowed to execute PHP code...

0.00677EPSS
SaveExploits4References2
NVD
NVD
added 2026/04/23 9:16 p.m.16 views

CVE-2026-6942

radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the command filter through shell metacharacters in user-controlled input passed to r2cmdstr. Attackers can inject shell metacharacters throu...

9.8CVSS0.0192EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2026/01/07 9:42 a.m.12 views

CVE-1999-0656

The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names...

5CVSS7AI score0.01551EPSS
SaveExploits0References1
Rows per page
Query Builder