Lucene search
+L

36022 matches found

CVE
CVE
added 2026/09/17 4:11 a.m.5 views

CVE-2026-25261

Memory corruption while processing rear sensor IOCTL calls...

6.7CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/17 4:11 a.m.7 views

CVE-2025-59607

Memory Corruption when copying large input data exceeds normal allocation limits...

7.8CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/17 2:28 a.m.7 views

CVE-2025-24893

PoC for CVE-2025-24893 — XWiki Remote Code Execution Safe PoC PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11 , 16.4.1 and 16.5.0RC1. ⚠️ IMPORTANT — AUTHORIZED TESTING ONLY This repository contains a proof-of-concept PoC project intended for educational...

9.8CVSS8.8AI score0.99864EPSS
SaveExploits52
Kitploit
Kitploit
added 2026/09/17 12:21 a.m.8 views

CVE-2021-23383

CVE-2021-23383 The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source...

9.8CVSS7.7AI score0.04506EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/17 12:18 a.m.10 views

cve-2020-8165-demo

CVE-2020-8165 Demo Yet another demo of CVE-2020-8165, though in a more realistic implementation than most. Background CVE-2020-8165 A deserialization of untrusted data vulnernerability exists in rails 5.2.4.3, rails 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in...

9.8CVSS7.5AI score0.45732EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/16 10:26 p.m.12 views

tetsuo-pulse

Socket Library Maturity Notice : This library is functional and well-tested but newly released. It is appropriate for development, internal tooling, and controlled environments. Production deployment with untrusted network input should wait until the codebase has accumulated several months of...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/16 10:14 p.m.8 views

CVE-2023-4279

CVE ID : CVE-2023-4279 Vulnerability Type : IP Address Spoofing Description : This plugin retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic. Steps to reproduce : root@kitploit: 1...

7.5CVSS7.3AI score0.00976EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/16 8:41 p.m.10 views

CVE-2023-4281

CVE ID: CVE-2023-4281 Vulnerability Type: IP Address Spoofing Description: The Activity Log plugin retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic. Steps to reproduce:...

5.3CVSS6.8AI score0.00713EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/16 8:21 p.m.9 views

feroxbuster

!WARNING セキュリティ通知 – ドメインのなりすまし ドメイン feroxbuster.com は、本プロジェクト、そのメンテナー、および公式の feroxbuster リリースとは一切関係がありません 。 公式の feroxbuster ダウンロードは以下のみ から配布されています: https://github.com/epi052/feroxbuster オープンソース https://www.feroxbuster.pro 商用 この README に記載されたパッケージリポジトリ インストールドキュメントに記載されたパッケージリポジトリ 当プロジェクトは...

5.8AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/16 7:32 p.m.10 views

CVE-2022-46395

Exploit for CVE-2022-46395 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in November 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

8.8CVSS8.1AI score0.02703EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/16 7:21 p.m.13 views

CVE-2026-58025

CVE-2026-58025 — RCE por deserialización de PHP en MediaWiki mediante la importación de entradas de registro WikiImporter → LogEntryBase::extractParams → unserialize de logparams controlados por el usuario → RCE Resumen CVE-2026-58025 es una vulnerabilidad crítica CVSS 9.8 de deserialización de...

9.8CVSS7.8AI score0.00503EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 7:05 p.m.14 views

capsule

Capsule Getting Started • Documentation • Issues • Contributing Overview Capsule is a runtime for executing untrusted code in isolated environments. Each task runs inside its own WebAssembly sandbox, providing: Isolated execution : Each task runs isolated from your host system Resource limits : S...

6.1AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/16 6:48 p.m.9 views

sniffglue

sniffglue sniffglue 是一个用 Rust 编写的网络嗅探器。使用线程池并发解析网络数据包,以利用所有 CPU 核心。项目目标是:你可以在不受信任的网络上安全地运行 sniffglue,并且在处理数据包时不能崩溃。默认输出应尽可能有用。 用法 root@kitploit: 使用默认过滤器嗅探(dhcp,dns,tls,http) sniffglue enp0s25 提高过滤器敏感度(arp) sniffglue -v enp0s25 进一步提高过滤器敏感度(cjdns,ssdp,dropbox,含有效 utf8 的数据包) sniffglue -vv enp0s25 几乎...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/16 6:27 p.m.8 views

CVE-2025-50165-x64-Exploit

CVE-2025-50165 Windows Graphics Component RCE x64 Critical Remote Code Execution via malicious JPEG – Windows 11 24H2 unpatched CVSS 9.8 – No privileges, no interaction required root@kitploit: CVE-2025-50165 - windowscodecs.dll untrusted pointer dereference Discovered by Zscaler ThreatLabz Patche...

9.8CVSS8.7AI score0.09516EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/16 6:25 p.m.17 views

sandboxec

sandboxec A lightweight command sandbox for Linux, built on Landlock. No daemon. No root. No image build step. Use it to run risky commands with a tighter blast radius: third-party CLIs, untrusted scripts, generated code, and one-off tooling. Purpose Running untrusted code is often an...

6.1AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/16 5:33 p.m.10 views

dangerzone

Dangerzone Take potentially dangerous PDFs, office documents, or images and convert them to a safe PDF. | ---|--- Dangerzone works like this: You give it a document that you don't know if you can trust for example, an email attachment. Inside of a sandbox, Dangerzone converts the document to a PD...

6.1AI score
SaveExploits0References12
Kitploit
Kitploit
added 2026/09/16 5:21 p.m.10 views

CVE-2026-44963

CVE-2026-44963 — Veeam Backup & Replication RCE Research repository bySentinelX — for authorized security testing and defensive purposes only. Overview Field| Detail ---|--- CVE ID| CVE-2026-44963 Vendor| Veeam Product| Backup & Replication Affected Versions| 12.3.2.4854 all v12 builds Fixed...

9.4CVSS9.2AI score0.02351EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/16 5:16 p.m.4 views

make-trust-irrelevant

Make Trust Irrelevant The wall doesn't ask what's knocking. TLDR: I built a kernel-level wall for untrusted agents, scripts, and compromised userland processes. The point is to make whole classes of unauthorized privileged effects fail closed under a stated threat model, especially the ones that...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 4:24 p.m.7 views

CVE-2025-32463

CVE-2025-32463 Detection Framework A comprehensive security monitoring and detection framework designed to identify exploitation attempts targeting the sudo chroot privilege escalation vulnerability CVE-2025-32463. This project demonstrates advanced threat detection methodologies, incident respon...

9.3CVSS7.7AI score0.59417EPSS
SaveExploits71
NVD
NVD
added 2026/09/16 4:17 p.m.8 views

CVE-2026-70416

Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

10CVSS
SaveExploits0References1
Rows per page
Query Builder