Lucene search
+L

1776 matches found

Kitploit
Kitploit
added 2026/09/22 3:37 p.m.16 views

wodat

wodat Инструмент для атак на базы данных Oracle под Windows Простая переработка популярного инструмента для атак на базы данных Oracle ODAT https://github.com/quentinhardy/odat на C .Net Framework. Благодарность https://github.com/quentinhardy/odat, так как большая часть функциональности перенесе...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/22 9:22 a.m.192 views

evtx

EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...

5.6AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/22 7:25 a.m.132 views

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/22 5:31 a.m.13 views

Invoke-SessionHunter

Invoke-SessionHunter Получает и отображает информацию об активных пользовательских сессиях на удаленных компьютерах. Административные привилегии не требуются. Инструмент использует службу удаленного реестра для запроса куста реестра HKEYUSERS на удаленных компьютерах. Он находит и извлекает...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 8:39 p.m.10 views

zBang

zBang — это специальный инструмент оценки рисков, который выявляет потенциальные угрозы для привилегированных учетных записей в сканируемой сети. Организации и участники красных команд могут использовать zBang для выявления потенциальных векторов атак и повышения уровня безопасности сети...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/21 8:02 p.m.9 views

CVE-2020-0665

CVE-2020-0665 - SID 필터 우회 CVE-2020-0665에 대한 개념 증명으로, Active Directory 포리스트에서 SID 필터링을 우회할 수 있게 합니다 교차 포리스트 공격. 공격 요구 사항 대상 도메인 컨트롤러 머신은 2020년 2월 이후에 패치되지 않아야 합니다. 신뢰하는 포리스트의 도메인 컨트롤러를 사전에 장악해야 합니다 이 공격은 SYSTEM 사용자와 같은 높은 권한이 필요합니다. 신뢰하는 포리스트와 양방향 전이 신뢰 관계가 설정되어 있어야 합니다. 장악된 DC에 python2.7이 설치되어 있어...

8.1CVSS7.1AI score0.04382EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/18 2:41 a.m.9 views

GlobalUnProtect

GlobalUnProtect Windows 클라이언트 설치에서 GlobalProtect 구성, 쿠키 및 HIP 파일을 복호화하고 수집하기 위한 PoC 도구입니다. 블로그 게시물: https://rotarydrone.medium.com/4a1d8fc7773e 사용법 독립 실행형 또는 execute-assembly 또는 이에 상응하는 방식으로 메모리 내에서 실행합니다. 모든 콘텐츠를 메모리 내 zip으로 수집하여 지정된 위치에 씁니다. root@kitploit: GlobalUnProtect.exe Usage:...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 5:06 a.m.10 views

CVE-2024-3495-POC

CVE-2024-3495-POC Country State City Dropdown CF7 WordPress 플러그인2.7.2 이하 버전은 'cnt' 및 'sid' 매개변수를 통한 SQL 인젝션에 취약합니다. SQL 쿼리의 불충분한 이스케이프 처리와 준비 부족으로 인해 인증되지 않은 공격자가 쿼리를 추가하여 잠재적으로 민감한 데이터베이스 정보를 추출할 수 있습니다...

9.8CVSS5.8AI score0.13618EPSS
SaveExploits1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.8 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: SELinux: The use of both GFPKERNEL and GFPATOMIC in convertcontext was enabled. The following warning was triggered in a hardware environment: SELinux: Converting 162 SID table entries... BUG: The sleeping function was called...

6AI score0.002EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Networking: dsa: mv88e6xxx: Fix –ENOENT when deleting VLANs and MST is not supported. Russell King reported that on version ZII dev rev B, deleting a bridge VLAN from a user port results in the error –ENOENT:...

5.5CVSS6.2AI score0.00271EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.11 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: An out-of-bounds access issue in parsesecdesc has been fixed. If osidoffset, gsidoffset, and dacloffset can be greater than smbntsdstruct.size. If they are smaller, it could lead to an out-of-bounds situation. Additionally...

8.8CVSS6.3AI score0.00483EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.14 views

PT-2026-90354

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS strips those bits and issues a setattr with ATTR KILL SUID/ATTR KILL...

5.8AI score0.0017EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/08/31 9:28 p.m.11 views

NPM: Socket.IO: Engine.IO WebTransport SID DoS

NPM: Socket.IO: Engine.IO WebTransport SID DoS vulnerability discovered by ? in WordPress Npm engine.io versions = 6.5.0, 6.6.7...

7.5CVSS5.9AI score0.00609EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2026/08/27 10:16 a.m.18 views

CVE-2026-81576

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

7.7CVSS0.00326EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/27 7:14 a.m.37 views

CVE-2026-81576 Improper Authentication of Session Handles

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

7.7CVSS0.00326EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/27 7:14 a.m.16 views

EUVD-2026-66983

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

7.7CVSS5.3AI score0.00326EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/27 7:14 a.m.12 views

CVE-2026-81576 Improper Authentication of Session Handles

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

7.7CVSS5.3AI score0.00326EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/27 7:14 a.m.35 views

CVE-2026-81576

CodeMeter Runtime (WIBU), when configured as a server in versions before 8.41a and 9.10 , issues a per-connection session handle and relies on a cryptographically weak SID as the sole authenticator. An attacker with network access can brute-force the SID , recover another session's handle number,...

7.7CVSS5.3AI score0.00326EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/08/17 12:00 a.m.9 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099718)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099718 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SID length parsing posixinfosidsize reads sid1 to obtain the subauthori...

8.2CVSS5.5AI score0.00443EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/17 12:00 a.m.10 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100498)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100498 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active,...

7.1CVSS5.4AI score0.00309EPSS
SaveExploits0References4
Rows per page
Query Builder