Lucene search
+L

303810 matches found

Kitploit
Kitploit
added 2026/08/22 11:47 p.m.1 views

CVE-2025-66478-Exploit-PoC

CVE-2025-66478 Exploit PoC Questo repository contiene il codice proof of concept PoC per la riproduzione e la ricerca della vulnerabilità Next.js CVE-2025-66478. Include un'applicazione Next.js vulnerabile e uno script di exploit in Node.js per testare la vulnerabilità. English · 中文 Cos'è...

7.5AI score
SaveExploits111References1
Kitploit
Kitploit
added 2026/08/22 8:46 p.m.1 views

CVE-2025-32433-PoC-Analysis

FAQ - CVE-2025-32433 1. Che cos'è Erlang OTP? Erlang è un linguaggio di programmazione generico. OTP Open Telecom Platform è una raccolta di middleware, librerie e principi di progettazione utilizzati per la tolleranza ai guasti tramite la BEAM VPN. 2. Perché questa versione di Erlang è...

10CVSS8.2AI score0.98594EPSS
SaveExploits38
Wolfi
Wolfi
added 2026/08/22 8:25 p.m.12 views

CVE-2026-73566 vulnerabilities

Vulnerabilities for packages: renovate, prism, saf, sqlpad, kubeflow-centraldashboard, npm, pulumi, code-server, lerna, opensearch-dashboards, node-gyp...

7.5CVSS5.1AI score0.0038EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/22 7:11 p.m.2 views

MouseServer-1.7.8.5-RCE

WiFi Mouse Server 1.7.8.5 - RCE Um exploit de Prova de Conceito PoC otimizado em Python 3 para WiFi Mouse Server v1.7.8.5. Este script aproveita uma vulnerabilidade inerente do protocolo para obter Execução Remota de Código RCE por meio de injeção automatizada de teclas. Esta versão foi...

9.8CVSS8.7AI score0.74016EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/22 4:59 p.m.4 views

westone-CVE-2021-21972-scanner

westone-CVE-2021-21972-scanner Vulnerabilidade de execução remota de código no VMware vCenter Server. Um invasor malicioso com acesso à porta 443 pode enviar uma requisição cuidadosamente construída ao vCenter Server, o que eventualmente causará execução remota arbitrária de código. Instalação e...

10CVSS9AI score0.99865EPSS
SaveExploits48References1
Kitploit
Kitploit
added 2026/08/22 3:34 p.m.2 views

MSSQL-Analysis-Coerce

MSSQL Analysis Services - Autenticazione forzata Una tecnica per forzare un SQL Server Windows ad autenticarsi su una macchina arbitraria. Questa proof of concept è co-scritta da: Podalirius: Worty: Prova di concetto Per innescare l'autenticazione come account della macchina locale, dobbiamo...

5.8AI score
SaveExploits0
NVD
NVD
added 2026/08/22 2:16 p.m.8 views

CVE-2026-75866

Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them. Punk::OAuth2::Server::Store registers scopes and granttypes per client and documents both as client registration. token dispatches...

9.1CVSS0.00526EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/08/22 2:12 p.m.8 views

CVE-2026-63311

NLTK before 3.10.0 affected versions = 3.9.4 contains a server-side request forgery SSRF vulnerability in the validatenetworkurl function in nltk/pathsec.py. The resolvehostname helper catches OSError and ValueError during socket.getaddrinfo and returns an empty list; when DNS resolution fails, t...

6.9CVSS5.5AI score0.00249EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/22 1:52 p.m.8 views

EUVD-2026-64293

Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them. Punk::OAuth2::Server::Store registers scopes and granttypes per client and documents both as client registration. token dispatches...

5.8AI score0.00526EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/22 1:52 p.m.32 views

CVE-2026-75866 Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them

Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them. Punk::OAuth2::Server::Store registers scopes and granttypes per client and documents both as client registration. token dispatches...

0.00526EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/22 1:52 p.m.24 views

CVE-2026-75866

Punk::OAuth2::Server for Perl (versions through 0.03 ) issues access tokens outside a client's registered scopes and grant types because no authorization path validates them against the client registration. Specifically, the token endpoint dispatches on the grant_type from the request body withou...

9.1CVSS5.8AI score0.00526EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/22 11:22 a.m.2 views

R2SAE

R2SAE - React2Shell Auto-Exploit Eine Firefox-Erweiterung zur Erkennung und Ausnutzung von CVE-2025-55182 Prototype-Pollution-Schwachstelle in React Server Actions Funktionen • Installation • Verwendung • Haftungsausschluss ⚠️ Haftungsausschluss Dieses Tool ist ausschließlich für autorisierte...

10CVSS7.7AI score0.99802EPSS
SaveExploits385References4
Kitploit
Kitploit
added 2026/08/22 6:14 a.m.2 views

My-Presentation-Slides

Le Mie Slide di Presentazione Le slide delle presentazioni pubbliche di Orange Tsai. Puoi trovarmi su: Blog: https://blog.orange.tw/ Email: [email protected] Twitter: @orange8361 2024 WorstFit: Svelare i Transformer nascosti in Windows ANSI! Black Hat Europe DEVCORE CONF 2025 Confusion...

5.4AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/22 6:13 a.m.2 views

JuicyPotatoNG

JuicyPotatoNG Solo un'altra escalation di privilegi locali di Windows da account di servizio a System. Dettagli completi su -- https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/ Utilizzo root@kitploit: JuicyPotatoNG by decoderit & splintercode Mandatory args: -t...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/22 6:09 a.m.2 views

SQLRecon

SQLRecon SQLRecon एक Microsoft SQL Server टूलकिट है जिसे आक्रामक टोही और पोस्ट-एक्सप्लॉइटेशन के लिए डिज़ाइन किया गया है। प्रत्येक तकनीक का उपयोग कैसे करें, इसके बारे में विस्तृत जानकारी के लिए विकि देखें। आप SQLRecon की एक प्रति रिलीज़ पृष्ठ से डाउनलोड कर सकते हैं। वैकल्पिक रूप से, आप सोल्यूशन को...

6AI score
SaveExploits0References20
Kitploit
Kitploit
added 2026/08/22 6:08 a.m.2 views

XSLeaker

XSLeaker XSLeaker é uma ferramenta que ajuda a encontrar XS-Leaks em websites. A ferramenta compara valores de recursos para os quais uma técnica de vazamento é conhecida ex.: número de iframes entre diferentes estados. XSLeaker consiste em dois componentes: uma extensão do Chrome que é usada par...

5.2AI score
SaveExploits0References2
CVE
CVE
added 2026/08/22 6:00 a.m.29 views

CVE-2026-77002

The SmilePass Selfie Login WordPress plugin through version 1.0.2 lacks any server-side verification of the identity it is asked to authenticate. This allows unauthenticated users to log in as any registered account, including administrators , resulting in full compromise of confidentiality, inte...

9.8CVSS5.5AI score0.00341EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/22 3:38 a.m.2 views

ghe-push-option-rce-scanner

CVE-2026-3854 — RCE no GitHub Enterprise Server via Injeção de Opção de Push Visão Geral Neutralização inadequada de valores de opções de push no GHE. Atacante com acesso de push obtém RCE na instância. Campo| Valor ---|--- CVE| CVE-2026-3854 Gravidade| CRÍTICA Produto| GitHub Enterprise Server...

8.8CVSS8.5AI score0.40027EPSS
SaveExploits5
CVE
CVE
added 2026/08/21 10:54 p.m.59 views

CVE-2026-49360

Recce (a data-validation toolkit for dbt PR review) versions prior to 1.50.0 are vulnerable to unauthenticated SQL execution through the query run API when deployed with a DuckDB-backed project and exposed to an untrusted network without authentication. An attacker can leverage DuckDB filesystem ...

7.8CVSS6.2AI score0.00449EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/21 10:50 p.m.1 views

CVE-2022-36804-Bitbucket-RCE-Analysis

CVE-2022-36804: Bitbucket Remote Command Execution RCE Analisi Tecnica & Sfruttamento in Laboratorio dell'Argument Injection tramite Null-Byte Riepilogo della Vulnerabilità CVE-2022-36804 è una vulnerabilità di Argument Injection ad alta gravità/critica all'interno dell'API REST di Atlassian...

8.8CVSS8.6AI score0.99077EPSS
SaveExploits25
Rows per page
Query Builder