Lucene search
+L

754 matches found

Kitploit
Kitploit
added 2026/09/24 7:04 a.m.8 views

CVE-2025-43537

CVE-2025-43537 Crédito de Seguridad de Apple Investigador: Al Sadman Awal Oficialmente acreditado por Apple Product Security por la divulgación responsable de CVE-2025-43537. Resumen CVE-2025-43537 es una vulnerabilidad de seguridad identificada durante una investigación de seguridad independient...

5.5CVSS5.9AI score0.00493EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/09/24 2:06 a.m.40 views

GL.iNet <= 4.3.7 - Arbitrary File Write

GL.iNet = 4.3.7 is vulnerable to an arbitrary file write exploit, allowing an attacker to overwrite arbitrary system files. id: CVE-2023-46455 info: name: GL.iNet = 4.3.7 - Arbitrary File Write author: Zierax severity: high description: | GL.iNet = 4.3.7 is vulnerable to an arbitrary file write...

7.5CVSS7.4AI score0.46966EPSS
SaveExploits4References2
Kitploit
Kitploit
added 2026/09/24 1:32 a.m.12 views

CVE-2024-4956

CVE-2024-4956 - Path Traversal no autenticado en Nexus Repository Manager 3 Nexus Repository Manager es un gestor de repositorios que organiza, almacena y distribuye artefactos necesarios para el desarrollo. Se ha descubierto una vulnerabilidad de path traversal en Nexus Repository 3, en versione...

7.5CVSS7.9AI score0.18245EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/23 11:59 p.m.13 views

CVE-2026-0827

CVE-2026-0827 The LdeApi.Server.exe process attempts to write MP27AM7Westimation.json to C:\ProgramData\Lenovo\LDE\SYSTEM without impersonation. This directory does not exist by default. Since C:\ProgramData\ allows standard users to create subdirectories, a low-privileged user can create this pa...

7.1CVSS6.1AI score0.00212EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 10:53 p.m.8 views

CVE-2024-24919

Exploit CVE-2024-24919 Resumen Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2024-24919, una vulnerabilidad crítica descubierta en Check Point SVN. La vulnerabilidad permite leer archivos del sistema. ID de CVE : CVE-2024-24919 Gravedad : Crítica Tabla de contenidos...

8.6CVSS8.2AI score0.99978EPSS
SaveExploits53
Kitploit
Kitploit
added 2026/09/21 3:28 p.m.7 views

LocalPotato_CVE-2023-21746

A local privilege escalation LPE vulnerability in Windows was reported to Microsoft on September 9, 2022, by Andrea Pierini @decoderit and Antonio Cocomazzi @splintercode. The vulnerability would allow an attacker with a low-privilege account on a host to read/write arbitrary files with SYSTEM...

7.8CVSS7.4AI score0.02537EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/20 3:33 p.m.5 views

CVE-2021-36934-export-shadow-volume-POC

CVE-2021–36934 El hash derivado se utiliza para falsificaciones como PTH y tickets. No se proporciona un análisis detallado aquí. Además, dado que se pueden obtener derechos de acceso a la mayoría de los archivos del sistema, debería haber más métodos de explotación además de este, incluidos los...

7.8CVSS7.9AI score0.67252EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/20 2:52 a.m.10 views

SparstanBoogie

SparstanBoogie se probó, según se informa, en iOS/iPadOS 15.2 - 16.7 RC 20H18 y 17.0; sin embargo, las pruebas se han realizado hasta 26.1 26.1. También se agradece cualquier prueba en dispositivos por encima o por debajo de lo informado, ya que podría volver a aparecer en dispositivos más nuevos...

5.9AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/09/18 2:19 a.m.10 views

CVE-2026-93468 HGiga|OAKlouds - Arbitrary File Read

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files...

8.7CVSS5.9AI score0.00461EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/14 8:48 p.m.39 views

CVE-2026-84609

CVE-2026-84609 is a permissions issue in Apple's operating systems, addressed through improved path validation . The vulnerability allows an app to modify protected system files , potentially undermining system integrity. It is fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8,...

5.7AI score0.00612EPSS
SaveExploits0References7Affected Software6
Positive Technologies
Positive Technologies
added 2026/09/14 12:00 a.m.11 views

PT-2026-91687

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

5.7AI score0.00135EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/09 6:30 a.m.6 views

EUVD-2026-74725

The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...

6.9CVSS5.9AI score0.00407EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/08 6:20 p.m.12 views

CVE-2026-78452

Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack...

4.6CVSS0.00468EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:18 p.m.18 views

CVE-2026-78451

CVE-2026-78451 is an untrusted pointer dereference in the Microsoft Windows SCSI Class System File that enables an unauthorized attacker to escalate privileges via a physical attack vector (CVSS AV:P). The vulnerability carries a CVSS 3.1 base score of 6.8 (Medium) with high impact to confidentia...

6.8CVSS5.6AI score0.00439EPSS
SaveExploits0References1Affected Software10
Microsoft CVE
Microsoft CVE
added 2026/09/08 2:00 p.m.22 views

Microsoft Windows SCSI Class System File Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack...

4.6CVSS5.7AI score0.00468EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/09/08 12:00 a.m.12 views

PT-2026-87997

Integer underflow wrap or wraparound in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network...

6.5CVSS5.7AI score0.00922EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
added 2026/09/03 12:00 a.m.14 views

VulnCheck KEV: CVE-2024-4956

Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1...

7.5CVSS7.8AI score0.18245EPSS
SaveIn wildExploits16References2
NVD
NVD
added 2026/09/01 8:17 p.m.14 views

CVE-2026-73741

A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to view some system files. Successful exploitation could allow an attacker to access limited data beyond what is authorized by the user's existing privilege level...

4.3CVSS0.00169EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/01 7:47 p.m.17 views

EUVD-2026-69468

A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to view some system files. Successful exploitation could allow an attacker to access limited data beyond what is authorized by the user's existing privilege level...

4.3CVSS5.9AI score0.00169EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.16 views

PT-2026-84445

A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to view some system files. Successful exploitation could allow an attacker to access limited data beyond what is authorized by the user's existing privilege level...

4.3CVSS5.9AI score0.00169EPSS
SaveExploits0References2
Rows per page
Query Builder