Lucene search
+L

1796 matches found

Kitploit
Kitploit
added 2026/09/03 11:25 a.m.4 views

CVE-2022-4896

CVE-2022-4896 PoC & exploits for CVE-2022-4896 "Control de Ciber" is a Cybercafe management software. Multiple Denial-of-Service DoS vulnerabilities in versions prior to 1.650. An unauthenticated remote attacker can send a carefully crafted request that lead to a service crash. Spooler DoS Spoole...

8.2CVSS7.2AI score0.01036EPSS
SaveExploits1References4
CVE
CVE
added 2026/09/03 11:25 a.m.8 views

CVE-2026-80465

CVE-2026-80465 affects the Mendix SAML module across multiple compatibility lines: Mendix 10 (all versions < V4.2.3), Mendix 11 (all versions < V4.2.3), and Mendix 9.24 (all versions

8.8CVSS5.9AI score
SaveExploits0References1
CVE
CVE
added 2026/09/03 10:47 a.m.5 views

CVE-2026-85150

CVE-2026-85150 is a NULL pointer dereference in GStreamer's RTSP support library, specifically in gst_rtsp_message_parse_auth_credentials() (part of gst-plugins-base). A specially crafted whitespace placement in a Digest Authorization or WWW-Authenticate header causes an internal length calculati...

7.5CVSS5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/03 8:57 a.m.5 views

CVE-2025-24071-PoC

CVE-2025-24071 - Prueba de Concepto de Vulnerabilidad de Suplantación en el Explorador de Archivos de Windows Resumen CVE-2025-24071 es una vulnerabilidad de suplantación en el Explorador de Archivos de Windows que permite a un atacante no autenticado exponer información sensible a través de una...

6.5CVSS7AI score0.24638EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/03 8:50 a.m.9 views

CVE-2023-34839

CVE-2023-34839 — Issabel PBX 4.0.0-6: CSRF a Escalada de Privilegios Tabla de Contenidos Descripción General Detalles de la Vulnerabilidad Software Afectado Puntuación CVSS Escenario de Ataque Prueba de Concepto PoC Pasos para Reproducir Impacto Remediación Referencias Aviso Legal Descripción...

6.8CVSS6.8AI score0.00659EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/03 8:26 a.m.4 views

CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit

CVE-2026-56158 — Exploit PoC de ejecución remota de código RCE en .NET Framework Crítico CVSS 9.8 — Deserialización de datos no confiables CWE-502 en Microsoft .NET Framework y .NET Runtime Parcheado: 14 de julio de 2026 | Atribuido a: Positive Technologies PT-2026-60174 Tabla de contenido...

6.5AI score
SaveExploits1
Cvelist
Cvelist
added 2026/09/03 8:15 a.m.4 views

CVE-2026-68860

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Launch of phishing attacks...

6.8CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 5:40 a.m.4 views

CVE-2024-9822

CVE-2024-9822 Pedalo Connector = 2.0.5 - Authentication Bypass to Administrator Description The Pedalo Connector plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.5. This is due to insufficient restriction on the 'loginadminuser' function. This make...

9.8CVSS5.8AI score0.00939EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/09/03 2:10 a.m.63 views

WPMobile.App <= 11.56 - Open Redirect

The WPMobile.App plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 11.56. This is due to insufficient validation on the redirect URL supplied via the 'redirect' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially...

7.2CVSS7.2AI score0.00745EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/03 2:10 a.m.79 views

Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change

The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.2. This is due to the plugin not properly checking for an empty token value prior updating their details like password. This makes it...

9.8CVSS7.5AI score0.02342EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/03 1:52 a.m.6 views

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat CVE-2025-59287 is a critical RCE vulnerability in Windows Server Update Services WSUS caused by unsafe deserialization of untrusted data. It allows remote attackers to execute arbitrary code without authentication. Urgent...

9.8CVSS7.3AI score0.99979EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/02 11:08 p.m.5 views

CVE-2026-31402

🛡️ CVE-2026-31402 – Desbordamiento de montículo en la caché de repetición de LOCK NFSv4 CVE-2026-31402: un bug de NFS en Linux oculto durante 23 años 📌 Descripción general CVE-2026-31402 es una vulnerabilidad de desbordamiento de montículo en la caché de repetición de LOCK de NFSv4.0 del kernel de...

9.8CVSS6.2AI score0.00949EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 6:10 p.m.4 views

ADZero

Descripción El protocolo de cifrado vulnerable se implementa en lugar del mecanismo de autenticación en el protocolo Netlogon. Un atacante no autenticado puede establecer la contraseña de la cuenta de computadora del Domain Controller en nulo null utilizando la vulnerabilidad Zerologon NT hash =...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 5:59 p.m.7 views

CVE-2020-28415

CVE-2020-28415 Descripción sugerida Existe una vulnerabilidad de cross-site scripting XSS reflejado en TranzWare Payment Gateway 3.1.12.3.2. Un atacante remoto no autenticado puede ejecutar código HTML arbitrario mediante una URL manipulada un vector diferente al de CVE-2020-28414. Tipo de...

6.1CVSS6.4AI score0.0109EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 5:47 p.m.4 views

CVE-2020-28414

CVE-2020-28414 Descripción sugerida Existe una vulnerabilidad de Cross-Site Scripting XSS reflejado en TranzWare Payment Gateway 3.1.12.3.2. Un atacante remoto no autenticado puede ejecutar código HTML arbitrario mediante una URL manipulada. Tipo de vulnerabilidad Cross-Site Scripting XSS Vendedo...

6.1CVSS6.4AI score0.0109EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/09/02 4:14 p.m.24 views

CVE-2026-20355 Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of messa...

5.9CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/02 3:17 p.m.2 views

CVE-2026-2811

The Ajaxify Comments WordPress plugin before 3.2 is vulnerable to HTTP Header Injection due to insufficient input sanitization and output escaping on user-supplied data. This makes it possible for unauthenticated attackers to inject arbitrary HTTP headers...

5.4CVSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/02 2:16 p.m.5 views

CVE-2026-2688 CM HIPAA Forms < 3.2.0 - Unauthenticated Authorization Bypass

The HIPAA FORMS WordPress plugin before 3.2.0 contains a hardcoded authentication bypass via a hardcoded parameter alongside all AJAX requests. The server explicitly checks for this value to skip nonce validation entirely. This allows unauthenticated attackers to access protected AJAX endpoints...

6.5CVSS5.9AI score
SaveExploits0References1
F5 Networks
F5 Networks
added 2026/09/02 1:48 p.m.5 views

K000162602: NGINX ngx_http_js_module vulnerability CVE-2026-78689

Security Advisory Description NGINX JavaScript njs has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n method. An unauthenticated remote attacker can trigger it when an affected NGINX configuration passes an externally controlled XML...

9.2CVSS6.1AI score
SaveExploits0Affected Software1
Kitploit
Kitploit
added 2026/09/02 11:40 a.m.5 views

CVE-2026-21962-o

CVE-2026-21962 ¡Es mi primer CVE con CVSS 10.0! 👍✅💯㊗️🀄️🈵 Resumen Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de HTTP comprometa Oracle HTTP Server y el complemento de proxy de Oracle WebLogic Server. IMPORTANTE: Mensaje del...

10CVSS7.3AI score0.4202EPSS
SaveExploits6
Rows per page
Query Builder