Lucene search
+L

425 matches found

Kitploit
Kitploit
added 2026/09/12 6:30 p.m.9 views

CVE-2024-24919_POC

CVE-2024-24919POC It's Proof of Concept on CVE-2024-24919-POC , i made it after it's discoverd CVE-2024-24919 Checkpoint security gateway information disclosure vulnerability . U can see it in Notion-CVE-2024-24919POC Shodan dork: title:"Check Point" "Server: Check Point SVN" "X-UA-Compatible:...

8.6CVSS7.9AI score0.99978EPSS
SaveExploits53
Kitploit
Kitploit
added 2026/09/11 9:01 p.m.10 views

CVE-2024-22894

CVE-2024-22894 Descargué la última versión del firmware de la bomba de calor wp2reg-V3.88.0-9015 de https://www.heatpump24.com/DownloadArea.php. Dentro de este firmware hay un archivo llamado : wp2reg-V3.88.0-9015\wp2reg-AlphaInnotech-prod\home.wp2reg-V3.88.0-9015221213\share\shadow Esto contiene...

6.8CVSS7.4AI score0.00731EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 6:01 a.m.5 views

Shadow-Vault

Shadow Vault 🔐 Shadow Vault is a lightweight PHP web tool designed for system administrators to securely add new user credentials to shadow files on shared hosting environments. It automatically detects existing shadow aging format, uses SHA-512 password hashing, supports multiple write fallback...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 1:46 p.m.14 views

public-passwd

!WARNING Úsalo solo en sistemas que poseas o tengas autorización para probar. Se recomienda mantener una shell de root abierta si no podrás reiniciar el sistema en caso de fallo, ya que podrías no ser capaz de limpiar el caché de páginas de /etc/shadow sin root. public-passwd Usa CVE-2026-46333 y...

7.8CVSS6.4AI score0.99907EPSS
SaveExploits248References1
Kitploit
Kitploit
added 2026/09/08 9:49 a.m.7 views

CVE-2024-14027_slop

CVE-2024-14027 - SlopSploit The exploits were tested on 6.6.51 using a Qemu debian install. exploit.c - will leak the shadow file. exploitdc.c - demonstrates the double close method to drop a root shell. WRITEUP.md - LLM generated writeup. This was an experiment using LLM Opus 4.6 to exploit a...

5.5CVSS5.8AI score0.0021EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/06 2:25 p.m.8 views

CVE-2024-50404

CVE-2024-50404 https://www.qnap.com/en/security-advisory/qsa-24-48 https://www.cve.org/CVERecord?id=2024-50404 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 6.8 "Se ha informado de una vulnerabilidad de seguimiento de enlaces que afecta a Qsync Central. Si se explota, la...

8.8CVSS5.9AI score0.01434EPSS
SaveExploits2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.8 views

Astra Linux – Vulnerability in sudo

In Sudo version 1.8.29, the fact that a user has been blocked for example, by using the “!” character in the shadow file instead of a password hash was not taken into consideration. This allows an attacker who has access to a Runas ALL sudoer account to impersonate any blocked user. NOTE: The...

7.5CVSS6.7AI score0.02831EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/15 4:45 p.m.40 views

CVE-2026-19900 LB-LINK X-PRO shadow hard-coded credentials

A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown function of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The...

9.2CVSS0.02243EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/08/07 8:16 p.m.11 views

policycoreutils: policycoreutils: TOCTOU race condition in fixfiles allows arbitrary SELinux label manipulation

A TOCTOU Time-of-Check-Time-of-Use race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles restore, the script used find and chcon commands to locate and relabel unlabeled files under /tmp and other directories. A local attacker...

4.4CVSS5.6AI score0.00082EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/07 8:16 a.m.18 views

CVE-2026-19079

A TOCTOU Time-of-Check-Time-of-Use race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles restore, the script used find and chcon commands to locate and relabel unlabeled files under /tmp and other directories. A local attacker...

4.4CVSS0.00082EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/07 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-19079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A TOCTOU Time-of-Check-Time-of-Use race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles...

4.4CVSS5.4AI score0.00082EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/03 12:00 a.m.14 views

Konica Bizhub Multifunction Printers Insufficiently Protected Credentials (CVE-2022-29588)

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

7.5CVSS7.2AI score0.01711EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/13 9:59 p.m.15 views

MAL-2026-10509 Malicious code in test_adminet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1971734ce6221624b53d3647a5881c1fe0bc7f8ae4d383a5ff2a9f5080da57c The package's package.json declares a preinstall hook that runs index.js. On npm install, index.js uses childprocess.exec to curl-POST installer...

6.1AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/13 12:00 a.m.42 views

CVE-2026-52533

An issue in D-Link DIR-1253 v.1.0.1.250923.142435 allows an attacker to escalate privileges via the etc/shadow component file...

0.00601EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/13 12:00 a.m.8 views

CVE-2026-52533

An issue in D-Link DIR-1253 v.1.0.1.250923.142435 allows an attacker to escalate privileges via the etc/shadow component file...

6.1AI score0.00601EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/13 12:00 a.m.32 views

CVE-2026-52533

CVE-2026-52533 affects D-Link DIR-1253 v1.0.1.250923.142435. The issue enables privilege escalation via the etc/shadow component file. Details across connected sources consistently describe the same affected product and vector; no exploit steps or patches are provided in the supplied documents. T...

9.8CVSS6.1AI score0.00601EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/01 12:21 p.m.33 views

Malicious code in date-fns-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4694a079d83e33dcee7f87140c41737009d9f0b19f351c23f2ae3dbce9a47a51 [email protected] presents as a lightweight date-formatting utility but ships a malicious postinstall.js that runs automatically on npm install. T...

5.9AI score
SaveExploits0References13
RedHat Linux
RedHat Linux
added 2026/06/30 11:30 a.m.29 views

kernel: Read root-owned files as an unprivileged user

A vulnerability was found in the Linux kernel that allows an unprivileged local user to read sensitive files normally restricted to the root user. The flaw occurs during process exit, where a brief window allows an attacker to intercept file access from a privileged process before it fully...

7.8CVSS6.4AI score0.01501EPSS
SaveExploits6References7
NVD
NVD
added 2026/06/18 7:16 p.m.22 views

CVE-2026-47833

setupBpmLogs follows symlink for bpm.log open and chown — container-to-host privilege escalation via /etc/shadow. A compromised process inside a bpm container can cause root to chown an arbitrary host file to vcap and append bpm JSON log lines to it. The chown alone lets the attacker take ownersh...

6.9CVSS0.00167EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/18 6:30 p.m.13 views

CVE-2026-47833

setupBpmLogs follows symlink for bpm.log open and chown — container-to-host privilege escalation via /etc/shadow. A compromised process inside a bpm container can cause root to chown an arbitrary host file to vcap and append bpm JSON log lines to it. The chown alone lets the attacker take ownersh...

6.9CVSS5.4AI score0.00167EPSS
SaveExploits0References2
Rows per page
Query Builder