Lucene search
+L

778065 matches found

Kitploit
Kitploit
added 2026/09/01 10:32 a.m.4 views

CVE-2025-52914

CVE-2025-52914 ¿Cómo funciona este método de detección? Las versiones se extraen de los hosts objetivo, específicamente de la respuesta HTML SVRVER en el cuerpo, y luego se comparan con versiones anteriores a 9.3.1 y versiones desde 10.0.26 hasta 10.1.101 inclusive. ¿Cómo ejecuto este script? 1...

8.8CVSS8.5AI score0.00649EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/01 10:30 a.m.6 views

cve-2023-45612_exploit

cve-2023-45612exploit CVE-2023-45612 は、2023 年に修正された、Ktor の XML シリアライゼーションに対する XXE XML 外部エンティティ 攻撃を可能にする深刻度の高いセキュリティ問題です。 セキュリティ問題の再現 以下は、この問題を再現した詳細な方法です。 IntelliJ IDEA プロジェクト まず、XML ファイルを処理するサーバーが必要です。IntelliJ IDEA から Kotlin プロジェクトを作成し、必要な Ktor の依存関係とシリアライゼーションプラグインを使用するために build.gradle.kts...

9.8CVSS8.7AI score0.00595EPSS
SaveExploits6
NVD
NVD
added 2026/09/01 10:17 a.m.11 views

CVE-2026-59680

An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, getpasswordterm in src/include/users/dialogs.rb read the shadowLastChange and shadowExpire fields with GetString, which performs no numeric validation, and passed the resulting...

8.6CVSS0.02339EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 10:17 a.m.8 views

CVE-2026-59681

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

8.8CVSS0.01149EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 10:17 a.m.8 views

CVE-2026-15101

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

6.4CVSS0.00317EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/01 10:06 a.m.8 views

CVE-2026-D0cker

CVE-2026-Pending: runC maskPaths 脆弱性によるコンテナエスケープ 深刻度: クリティカル CVSS 9.8 コンポーネント: opencontainers/runc libcontainer 脆弱性タイプ: CWE-59: ファイルアクセス前のリンク解決の不備 'Link Following' 🚨 エグゼクティブサマリー runc の maskPaths 関数に重大な脆弱性が存在します。コンテナ内の機密パス 例: /proc/kcore をマスクする際、runc は os.OpenFilepath, OPATH, 0 を ONOFOLLOW...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 10:05 a.m.1 views

Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device

Este repositorio documenta la implementación de Microsoft Defender for Endpoint en un dispositivo Windows 11, incluida la incorporación mediante script local, la habilitación de la detección de dispositivos, la configuración de la detección de Log4j2 CVE-2021-44228 y la validación de los flujos d...

10CVSS7.3AI score0.99999EPSS
SaveExploits367
SUSE Linux
SUSE Linux
added 2026/09/01 10:04 a.m.6 views

Security update for python-sqlparse

This update for python-sqlparse fixes the following issues: CVE-2026-54284: TokenList.init materializes Osubtree value per group, causing CPU DoS before depth/token caps trigger bsc1275459. CVE-2026-59893: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS bsc1275461...

8.7CVSS5.9AI score0.00279EPSS
SaveExploits0References16
Kitploit
Kitploit
added 2026/09/01 10:01 a.m.4 views

CVE-2012-2122-Home-Lab

INGLÉS ABAJO CVE-2012-2122 Laboratorio Local de Omisión de Autenticación de MySQL Este laboratorio es un ejemplo de demostración de la vulnerabilidad CVE-2012-2122 - MySQL Authentication Bypass Se debe a un error en la comparación de los valores de las contraseñas en MySQL versión 5.5.23 o inferi...

5.1CVSS8.1AI score0.965EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/01 9:50 a.m.8 views

wBlock v3.0.0

wBlock The end of Safari ad-blocking B.S. A Safari content blocker for macOS, iOS, iPadOS, and visionOS. 750,000 rules across 5 extensions, Protocol Buffer storage, LZ4 compression, and iCloud sync. !NOTE Looking for a detailed comparison? Check out my comparison guide to see how wBlock stacks up...

6AI score
SaveExploits0References12
GithubExploit
GithubExploit
added 2026/09/01 9:46 a.m.16 views

Exploit-dev-sandbox

MSAK Web Vulnerability Scanner A from-scratch, command-line w...

5.9AI score
SaveExploits0
CVE
CVE
added 2026/09/01 9:38 a.m.32 views

CVE-2026-59681

CVE-2026-59681 is an OS command injection in yast2-auth-client (SUSE/YaST). The vulnerable code in Auth::AuthConf (src/lib/auth/authconf.rb) interpolates unsanitized Active Directory configuration values—Organizational Unit , dnsHostName , AD user name, and AD domain name—directly into net ads jo...

8.8CVSS6.1AI score0.01149EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 9:38 a.m.44 views

CVE-2026-59681 yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD join

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

8.8CVSS0.01149EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/01 9:38 a.m.8 views

EUVD-2026-69001

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

8.8CVSS6.1AI score0.01149EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/01 9:38 a.m.7 views

CVE-2026-59681 yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD join

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

8.8CVSS6.1AI score0.01149EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 9:34 a.m.4 views

react2shell-poc-CVE-2025-55182

React2Shell PoC CVE-2025-55182 Un script de prueba de concepto PoC para React2Shell CVE-2025-55182, una vulnerabilidad crítica de ejecución remota de código RCE que afecta a aplicaciones Next.js que utilizan Server Actions. !WARNING Aviso legal : Esta herramienta es solo para fines educativos y d...

10CVSS7.4AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/01 9:28 a.m.2 views

polkit-CVE-2021-3560_writeup

Try Hack Me - Polkit:CVE-2021-3560 Autor: Atharva Bordavekar Dificultad: Info Puntos: 32 Vulnerabilidad: CVE-2021-3560 Primero verificaremos la versión de polkit instalada para tener una mejor idea. root@kitploit: apt list --installed | grep policykit-1 policykit-1/focal,now 0.105-26ubuntu1 amd64...

7.8CVSS8AI score0.22193EPSS
SaveExploits37
Cvelist
Cvelist
added 2026/09/01 9:28 a.m.41 views

CVE-2026-15101 WPBakery Page Builder <= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

6.4CVSS0.00317EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/01 9:28 a.m.11 views

EUVD-2026-69000

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

6.4CVSS6AI score0.00317EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/09/01 9:28 a.m.20 views

CVE-2026-15101 WPBakery Page Builder <= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

6.4CVSS6AI score0.00317EPSS
SaveExploits0References5
Rows per page
Query Builder