Lucene search
+L

849 matches found

Kitploit
Kitploit
added 2026/09/20 6:29 a.m.9 views

spd_flasher

CVE-2022-38694 Hardened Exploit — RP2350 USB Host Auto Flasher 中文版 README Tutorial UDX710 Boot Chain Reverse Engineering and RP2350 Hardened Boot Tutorial Exploiting CVE-2022-38694 Unisoc BootROM vulnerability via Raspberry Pi RP2350 USB Host to automatically send SPL Loader on boot and start...

7.8CVSS6.6AI score0.00586EPSS
SaveExploits2References10
Kitploit
Kitploit
added 2026/09/20 5:52 a.m.8 views

CVE-2026-59243

CVE-2026-59243 — Apache Airflow FAB Auth Manager JWT signature bypass Korean: README.ko.md Apache advisory: https://lists.apache.org/thread/x4784l7z00tl3gw4tv2dmvoon77rxgpl published 2026-07-29 CVE record: https://vulners.com/cve/CVE-2026-59243 Fixed in: apache-airflow-providers-fab==3.7.3 Class:...

9.8CVSS8.6AI score0.00445EPSS
SaveExploits1References6
Kitploit
Kitploit
added 2026/09/20 5:20 a.m.9 views

opgp-service-cve-2019-9153

CVE-2019-9153 vulnerability reproduce PoC based on setup from BSI investigate vulnerability of opgp-service API to such an attack run tests with: root@kitploit: npm test conclusion: opgp-service is by default setup with AEADprotect=true which protects against the signature bypass attack described...

7.5CVSS7.3AI score0.02013EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 12:53 a.m.8 views

CVE-2025-29775

SAMLStorm CVE-2025-29775 Lab Environment This is a lab environment for demonstrating the SAMLStorm vulnerability CVE-2025-29775 that affects the xml-crypto library and SAML implementations in Node.js. Note: This is not a true exploitation of the vulnerability, just a recreation to demonstrate how...

9.3CVSS8.3AI score0.09509EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 12:10 a.m.10 views

CVE-2025-65945-poc

CVE-2025-65945: node-jws Signature Bypass This is a proof of concept for a signature verification bypass in the node-jws library. The bug lets attackers forge valid JWTs when the server derives HMAC secrets from user-controlled data. What's the bug? The jws.createVerify function doesn't validate...

7.5CVSS5.9AI score0.00215EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/19 11:36 p.m.7 views

CVE-2022-39299_PoC_Generator

Exploiting CVE-2022-39299 Signature bypass via multiple root elements Advisory : https://github.com/node-saml/passport-saml/security/advisories/GHSA-m974-647v-whv7 Patch : https://github.com/node-saml/passport-saml/commit/8b7e3f5a91c8e5ac7e890a0c90bc7491ce33155e Base Payload Example Extracted Fro...

8.1CVSS7.8AI score0.03398EPSS
SaveExploits1References4
Kitploit
Kitploit
added 2026/09/19 10:28 p.m.10 views

cve-2026-25262-sm8450-research

Research Tools In the course of this work, the public tool edl B. Kerler, V3.62 was used, along with modifications based on it. Experimental testbed: To test the hypothesis of CVE-2026-25262 applicability to the SM8450 platform, an experimental tool cvefinalsingle was created on top of edl. It...

7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/19 8:47 p.m.8 views

CVE-2026-9090-poc

CVE-2026-9090 — Casdoor SAML Signature Bypass PoC Proof-of-concept for CVE-2026-9090 CWE-347, Improper Verification of Cryptographic Signature, an authentication bypass in the Casdoor identity platform. Attribution. CVE-2026-9090 was published and coordinated by CERT/CC — see VU780781. This...

9.1CVSS8.4AI score0.00216EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/19 3:14 p.m.10 views

CVE-2021-21239

Technical Report on CVE-2021-21239: Redash SAML Authentication Vulnerability Introduction to SAML Security Assertion Markup Language SAML is an open standard for exchanging authentication and authorization data between parties in a federated identity system. It enables single sign-on SSO across...

6.5CVSS7.3AI score0.01271EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/19 3:03 p.m.8 views

AndroidDriveSignity

AndroidDriveSignity AndroidDriveSignity is a Python script designed for patching Android kernelARMv8.3 files, enabling the loading of drivers without being subject to various verification checks, specifically signature verifications. This tool aims to facilitate the development and testing proces...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/19 2:44 p.m.6 views

Weblogic_Wsat_RCE

WeblogicWsatRCE POC for CVE-2017-10271. Since java.lang.ProcessBuilder was the original vector for RCE, there are multiple signature based rules that block this particular payload. Added java.lang.Runtime and will add others in the future. This is for educational purposes only: I take no...

7.5CVSS8.3AI score0.9999EPSS
SaveExploits45
Kitploit
Kitploit
added 2026/09/19 12:39 p.m.7 views

cve-2013-3900-remediation-report

Remediation Report: CVE-2013-3900 – WinVerifyTrust Vulnerability on Windows Server 2019 Azure VM Overview During a recent authenticated vulnerability assessment conducted using Tenable Nessus, CVE-2013-3900 was detected on a Windows Server 2019 virtual machine hosted in Microsoft Azure. This scan...

8.8CVSS7.7AI score0.44647EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/19 10:46 a.m.7 views

CVE-2024-41107

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ 🚀 CVE-2024-41107...

8.1CVSS8.2AI score0.1776EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/19 9:44 a.m.6 views

CVE-2023-50387

CVE-2023-50387 KeyTrap in DNS CVE-2023-50387 This repository is for educational purposes. The number of keys and signatures has been intentionally kept low to prevent their use in actual attacks, and a script for generating colliding keys are not included. Test Setting up the PoC environment...

7.5CVSS7.3AI score0.99988EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/09/19 7:43 a.m.24 views

CVE-2026-9832 Payment Gateway of Stripe for WooCommerce <= 5.0.8 - Unauthenticated Improper Verification of Cryptographic Signature via woocommerce_api_wt_stripe Webhook Endpoint

The Payment Gateway of Stripe for WooCommerce plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in all versions up to, and including, 5.0.8. This is due to the publicly accessible woocommerceapiwtstripe webhook endpoint EHStripeWebhookHandler::handle wrapping...

5.3CVSS0.00226EPSS
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/19 3:38 a.m.10 views

CVE-2024-52510

Nextcloud X-E2EE-SIGNATURE Bypass POC Summary During normal operation of Nextcloud's E2EEv2 protocol, clients cryptographically sign folder-metadata before uploading to the server. This ensures the metadata has not been tampered with when it is re-fetched for the purposes of file-sharing or synci...

7.5CVSS5.9AI score0.00738EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/19 2:50 a.m.8 views

Remediating-CVE-2013-3900-EnableCertPaddingCheck-

Remediation Report: CVE-2013-3900 on Windows Server 2019 Azure VM Remediating CVE-2013-3900 EnableCertPaddingCheck During an authenticated vulnerability scan using Tenable/ Nessus, I identified CVE-2013-3900 on my Windows Server 2019 Datacenter instance hosted in Microsoft Azure. The scan utilize...

8.8CVSS7.6AI score0.44647EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.198 views

MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the authorization may be invalid, which would mean that as a client you can use any arbitrary secret to upload objects given the user already has prior WRITE permissions on...

8.7CVSS7.2AI score0.02428EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 9:44 p.m.9 views

PowerShell-Obfuscation-Bible

PowerShell Obfuscation Bible A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to bypass signature-based detection, compiled for educational purposes. The contents of this repository are the result of personal research, including reading...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 6:41 p.m.13 views

waf-community-bypasses

WAF community bypasses Web Application Firewalls a.k.a. WAF are garbage. All the vendors, from the cheapest Cloudflare to "enterpise" like Imperva, Akamai, F5, Checkpoint, or Fortinet are just cheating with their customers by delivering 0 actual protection. 99.9% of WAF signatures are just RegExp...

5.8AI score
SaveExploits0
Rows per page
Query Builder