Lucene search
+L

253706 matches found

Kitploit
Kitploit
added 2026/09/17 11:50 a.m.5 views

Patch-the-Path-CVE-2025-55234-Detection-Defense

Patch-the-Path-CVE-2025-55234-Detection-Defense This playbook outlines detection, containment, and remediation strategies for CVE-2025-55234, a critical Windows SMB privilege escalation flaw. By Mark Mallia Introduction In today’s constantly shifting cyber-risk landscape, the ability to pivot fro...

9.8CVSS7.5AI score0.20092EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/17 11:49 a.m.9 views

CVE-2026-11518-XSS

Stored XSS in Inventory System using PHP and MySQL Vulnerability Details...

5.3CVSS5.7AI score0.00388EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 11:44 a.m.9 views

CVE-2025-61246

CVE-2025-61246 - SQL Injection Vulnerability in Online Shopping System Overview This repository contains a Proof of Concept PoC for CVE-2025-61246 , a critical SQL Injection vulnerability discovered in the Online Shopping System PHP application. The vulnerability allows an unauthenticated attacke...

9.8CVSS6AI score0.0044EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/17 10:45 a.m.9 views

CVE-2025-4632_POC

Samsung MagicINFO 9 服务器漏洞利用工具 CVE-2025-4632 本仓库包含针对 CVE-2025-4632 的 Python 复制脚本,该漏洞是 Samsung MagicINFO 9 服务器(版本低于 21.1052)中的一个未认证远程代码执行(RCE)漏洞。 该漏洞源于 SWUpdateFileUploader servlet 对路径名限制不当。通过使用路径遍历(../../),未认证的攻击者可以以 SYSTEM 权限写入任意文件,从而导致服务器完全沦陷。 致谢与鸣谢 原始发现与模板作者: s4e-io(来自 ProjectDiscovery Nuclei...

9.8CVSS8.7AI score0.24295EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/17 9:40 a.m.11 views

CVE-2024-21545-PoC

CVE-2024-21545-PoC Proxmox VE Arbitrary File Read - Full System Compromise . Not Testeted yet... will test them this week...

8.2CVSS7.8AI score0.00363EPSS
SaveExploits1
NVD
NVD
added 2026/09/17 9:16 a.m.10 views

CVE-2026-50610

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged service. An authenticated local user may be able to access the service and perform unauthorized registry modifications,...

9.3CVSS0.00091EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/17 9:16 a.m.8 views

CVE-2026-50608

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handshake process does not properly require authentication before allowing connections to the service. Under certain circumstances, unauthorized access to service...

5.1CVSS0.00142EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/17 9:16 a.m.9 views

CVE-2026-50609

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, thi...

9.3CVSS0.00091EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/17 8:26 a.m.8 views

EUVD-2026-81402

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged service. An authenticated local user may be able to access the service and perform unauthorized registry modifications,...

9.3CVSS0.00091EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/17 8:26 a.m.29 views

CVE-2026-50610 Improper Access control Vulnerability in NitroSense and PredatorSense Software

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged service. An authenticated local user may be able to access the service and perform unauthorized registry modifications,...

9.3CVSS0.00091EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/17 8:26 a.m.16 views

CVE-2026-50610

CVE-2026-50610 affects the Acer System Monitoring component bundled with NitroSense and PredatorSense software. The root cause is insufficient access controls in a privileged service , allowing an authenticated local user to access the service and perform unauthorized registry modifications , pot...

9.3CVSS0.00091EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/17 8:21 a.m.27 views

CVE-2026-50609 Unauthorized Registry Modification Vulnerability in NitroSense and PredatorSense Software

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, thi...

9.3CVSS0.00091EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/17 8:21 a.m.6 views

EUVD-2026-81401

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, thi...

9.3CVSS0.00091EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/17 8:17 a.m.8 views

CVE-2026-50606

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key ...

5.1CVSS0.00072EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/17 8:17 a.m.7 views

CVE-2026-50607

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service was configured to listen on all network interfaces, which may expose the service to unintended network access...

6.9CVSS0.00253EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/17 8:15 a.m.7 views

EUVD-2026-81399

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handshake process does not properly require authentication before allowing connections to the service. Under certain circumstances, unauthorized access to service...

5.1CVSS0.00142EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/17 8:15 a.m.27 views

CVE-2026-50608 Authentication Vulnerability in NitroSense and PredatorSense Software

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handshake process does not properly require authentication before allowing connections to the service. Under certain circumstances, unauthorized access to service...

5.1CVSS0.00142EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/17 8:15 a.m.14 views

CVE-2026-50608

CVE-2026-50608 affects the Acer System Monitoring component shipped with NitroSense and PredatorSense software. The root cause is an improperly implemented WebSocket handshake that does not require authentication before permitting connections to the local service, potentially allowing unauthorize...

5.1CVSS0.00142EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/17 8:05 a.m.29 views

CVE-2026-50607 WebSocket Exposure Vulnerability in NitroSense and PredatorSense Software

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service was configured to listen on all network interfaces, which may expose the service to unintended network access...

6.9CVSS0.00253EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/17 8:05 a.m.8 views

EUVD-2026-81398

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. A WebSocket service was configured to listen on all network interfaces, which may expose the service to unintended network access...

6.9CVSS0.00253EPSS
SaveExploits0References1
Rows per page
Query Builder