Lucene search
+L

366254 matches found

Kitploit
Kitploit
added 2026/09/21 10:37 a.m.7 views

CVE-2023-36168

CVE-2023-36168 An issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component Exploit Title: AVG Anti Spyware 7.5 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Idan Malihi Vendor Homepage: https://www.avg.com Software...

6.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 10:17 a.m.11 views

CVE-2019-2215

CVE-2019-2215 The following issue exists in the android-msm-wahoo-4.4-pie branch of https://android.googlesource.com/kernel/msm and possibly others: There is a use-after-free of the wait member in the binderthread struct in the binder driver at /drivers/android/binder.c. As described in the...

7.8CVSS8.1AI score0.72105EPSS
SaveExploits31
Kitploit
Kitploit
added 2026/09/21 10:17 a.m.12 views

CVE-2025-51860

CVE-2025-51860 Vulnerability description TelegAI, a web application for constructing and chatting with AI Characters, is vulnerable to Stored Cross-Site Scripting XSS in its chat component and character container component. An attacker can achieve arbitrary client-side script execution by craftin...

6.1CVSS6.1AI score0.00281EPSS
SaveExploits2
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/21 10:16 a.m.4 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in form-data (CVE-2026-12143)

Summary An HTTP header injection vulnerability in the form-data multipart stream creation library CVE-2026-12143 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 4.0.6. Vulnerability Details CVEID:CVE-2026-12143 DESCRIPTION: form-data is a libra...

8.7CVSS0.00535EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
added 2026/09/21 10:11 a.m.8 views

CVE-2025-47256

CVE-2025-47256 Stack overflow in LibXMP Description A stack-based buffer overflow vulnerability exists in the depackpha function of libxmp, a library for module music playback. The vulnerability is triggered when parsing malformed Pha Packer PHA module files. Improper bounds checking on a local...

5.6CVSS6.9AI score0.00295EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/21 10:10 a.m.9 views

CVE-2021-27285

CVE-2021-27285 浪潮ClusterEngine集群管理平台是专为浪潮天梭系列HPC产品定制的一款作业管理软件。浪潮ClusterEngine存在suid配置不当的问题,导致非管理员用户可以通过部分组件进行提权获得root权限。 浪潮clusterenginev4.0存在组件“/opt/tsce4/torque6/bin/getJobsByShell”suid配置不当问题,非管理员用户能通过suid提权方式获得root权限。 提权过程如下: root@kitploit: inspur@mu01 $ whoami inspur inspur@mu01 $...

8.4CVSS5.9AI score0.00354EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/21 10:05 a.m.7 views

Langflow-CVE-2025-3248-Multi-target

⚠️ Langflow RCE Exploit Scanner CVE-2025-3248 This Python-based scanner automates the detection of unauthenticated Remote Code Execution RCE vulnerabilities in Langflow instances via CVE-2025-3248. It uses a proof-of-concept payload that abuses the /api/v1/validate/code endpoint to execute...

9.8CVSS9.1AI score0.9999EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/21 10:02 a.m.9 views

CVE-2025-27636-Apache-Camel-PoC

Apache Camel CVE-2025–27636 & CVE-2025-29891 PoC CVE-2025–27636 and CVE-2025-29891 are vulnerabilities in Apache Camel that affect versions: 4.10.0-4.10.1, 4.8.0-4.8.4, 3.10.0-3.22.3. Exploitation of these vulnerabilities can enable attackers to execute internal Camel methods. The following is a...

5.6CVSS7.5AI score0.81126EPSS
SaveExploits5
Securelist
Securelist
added 2026/09/21 10:00 a.m.7 views

Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO

Executive summary In April 2026, we at Kaspersky's Global Emergency Response Team GERT responded to a security incident at a manufacturing organization in the Middle East. The threat actor obtained domain admin-equivalent control of the organization's Active Directory environment and authored a...

SaveExploits0
Kitploit
Kitploit
added 2026/09/21 9:57 a.m.10 views

HoneypotBuster

Microsoft PowerShell module designed for red teams that can be used to find honeypots and honeytokens in the network or at the host. CodeExecution Execute code on a target machine using Import-Module. Invoke-HoneypotBuster HoneypotBuster is a tool designed to spot Honey Tokens, Honey Bread Crumbs...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 9:56 a.m.10 views

CVE-2023-40297

CVE-2023-40297 Stakater Forecastle = v1.0.144 allows directory traversal in the website component Vulnerability Type Directory Traversal Vendor of Product Stakater Affected Product Code Base Forecastle = v1.0.144 Affected Component Affected components: URL - https://www.example.com/%5C../etc/pass...

7.5CVSS7.4AI score0.01184EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/21 9:54 a.m.8 views

CVE-2025-55886

CVE-2025-55886 Description An Insecure Direct Object Reference IDOR vulnerability was discovered in ARD. The flaw exists in the feuid parameter of the payment history API endpoint. An authenticated attacker can manipulate this parameter to access the payment history of other users without...

6.5CVSS6AI score0.00358EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/21 9:47 a.m.10 views

CVE-2025-51858

CVE-2025-51858 Vulnerability description ChatPlayground.ai is a popular web application for comparing AI models. A Cross-Site Scripting XSS vulnerability exists in the chat component. This can lead to JWT token theft and remote account hijacking. Additionally, the /api/chat-history endpoint...

6.1CVSS6.3AI score0.00281EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 9:47 a.m.11 views

Complete-google-dorks

Complete-google-sql-dorks root@kitploit: news/news.php?id= -site:php.net -"The PHP Group" inurl:source inurl:url ext:pHp !Host=. intext:encUserPassword= ext:pcf ?action= ?cat= ?id= ?intitle:index.of? mp3 artist-name-here ?intitle:index.of? mp3 name ?page= ?pagerequested= ?pid= " -FrontPage-"...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 9:39 a.m.33 views

geoip-attack-map

Primero y ante todo No tengo mucho tiempo en mi vida en este momento para mantener este proyecto. Acepté este desafío como una forma de aprender JavaScript y mejorar el Python que ya conocía. Estoy seguro de que hay varias cosas que podría haber hecho de manera diferente en mi implementación, y n...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 9:36 a.m.5 views

CVE-2026-42945

CVE-2026-42945 Nginx Rift - PoC Toolkit A comprehensive proof-of-concept toolkit for CVE-2026-42945 Nginx Rift, a critical heap buffer overflow vulnerability in Nginx's ngxhttprewritemodule. Vulnerability Summary Field| Details ---|--- CVE ID| CVE-2026-42945 Name| Nginx Rift Type| Heap Buffer...

9.2CVSS8AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/21 9:36 a.m.12 views

cve-2023-4863-analysis

CVE-2023-4863 libwebp Training and Defense Analysis Project Advisor Information Full Name| GitHub| Email| LinkedIn| Website ---|---|---|---|--- Keyvan Arasteh| Student Information Full Name| Student ID ---|--- Batuhan Seydi Çelik| 25201006 Course Information Course Name| Course Code|...

8.8CVSS7.4AI score0.99979EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/21 9:27 a.m.11 views

TEST-CVE-2023-32233

Use-After-Free in Netfilter nftables when processing batch requests Vulnerability Details The affected code originates from the official Linux kernel from https://kernel.org/ and is part of the Netfilter nftables component net/netfilter/nftablesapi.c. Netfilter nftables allows to update its...

7.8CVSS6.6AI score0.12966EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/21 9:25 a.m.12 views

varlib-cve-2025-66034

fontTools varLib CVE-2025-66034 Exploit This repo doesn't introduce a new vulnerability. This is a Proof-of-concept exploit for CVE-2025-66034 affecting the fontTools varLib variable font generation pipeline. The vulnerability allows attackers to control the output filename inside a crafted...

9.8CVSS7.6AI score0.00547EPSS
SaveExploits9
NVD
NVD
added 2026/09/21 9:17 a.m.8 views

CVE-2026-94150

A security flaw has been discovered in Omega Solution HRM OS up to 20260717. The impacted element is an unknown function of the file /media/view/ of the component SVG File Upload. Performing a manipulation results in cross site scripting. The attack may be initiated remotely. The exploit has been...

4.8CVSS0.00202EPSS
SaveExploits0References5
Rows per page
Query Builder