Lucene search
+L

51555 matches found

Kitploit
Kitploit
added 2026/09/13 3:17 p.m.6 views

Estudo-de-Caso-CVE-2024-21413

CVE-2024-21413 — Moniker Link 🔗💀 Microsoft Outlook RCE + NTLM Credential Leak ⚠️ Legal Notice: This repository is exclusively for educational and security research purposes. All demonstrations were carried out in controlled and isolated environments. The use of these techniques against systems...

9.8CVSS8.1AI score0.9466EPSS
SaveExploits24References5
Kitploit
Kitploit
added 2026/09/13 2:44 p.m.8 views

CVE-2024-37383-POC

CVE-2024-37383-POC Proof of concept for CVE-2024-37383 Introduction This repository contains a proof of concept for the XSS vulnerability in roundcube: CVE-2024-37383. More information about this vulnerability can be found: here Steps Start Roundcube If you don't have an instance of roundcube...

6.1CVSS7.3AI score0.73296EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 9:46 a.m.3 views

CVE-2022-24086-RCE

CVE-2022-24086-RCE CVE-2022-24086 RCE Descripción Las versiones 2.4.3-p1 y anteriores y 2.3.7-p2 y anteriores de Adobe Commerce están afectadas por una vulnerabilidad de validación de entrada incorrecta durante el proceso de pago. La explotación de este problema no requiere interacción del usuari...

10CVSS8.4AI score0.99199EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 9:03 a.m.17 views

CVE-2023-35674

Description CVE-2023-35674 is a high-severity zero-day security vulnerability in the Android Framework. This vulnerability allows an attacker to escalate their privileges without requiring user interaction or additional execution permissions. The vulnerability occurs in how the Android Framework...

8.8CVSS7.5AI score0.02782EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 6:01 a.m.11 views

CVE-2024-23700

PoC for CVE-2024-23700, allowing silently obtain permissions to read/write contacts, SMS, calendar, call log and voicemail, make outgoing calls or answer incoming calls, manipulate call settings, access & control notifications sent by other apps, control nearby devices, access microphone to recor...

5.7AI score
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/13 5:57 a.m.8 views

CVE-2022-24086

CVE-2022-24086 CVE-2022-24086 about Magento RCE Description Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result i...

10CVSS8.4AI score0.99199EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 5:47 a.m.10 views

CVE-2024-21689

CVE-2024–21689 RCE Bamboo Data Center and Server Atlassian Puntuación CVSS - 7.6 🔥 Descripción Esta vulnerabilidad RCE Ejecución Remota de Código de alta gravedad CVE-2024-21689 se introdujo en las versiones 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 y 9.6.0 de Bamboo Data Center and Server. Esta...

8CVSS7.3AI score0.02669EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:42 a.m.7 views

CVE-2018-20580

CVE-2018-20580 Una prueba de concepto para la ejecución remota de código en ReadyAPI 2.5.0/2.6.0 con interacciones. Introducción En diciembre de 2018 encontré una nueva vulnerabilidad en ReadyAPI. Permite a un atacante ejecutar código remoto en la máquina local, poniendo en peligro a los usuarios...

9.3CVSS7.9AI score0.09786EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/13 2:06 a.m.11 views

CVE-2025-6218

CVE-2025-6218 | ZDI-CAN-27198 | ZDI-25-409 - WinRAR Path Traversal - Ejecución Remota de Código RCE Prueba de Concepto Más información: https://www.win-rar.com/singlenewsview.html?&L=0 https://www.cvedetails.com/cve/CVE-2025-6218/ https://www.zerodayinitiative.com/advisories/ZDI-25-409/...

7.8CVSS7.9AI score0.90538EPSS
SaveExploits8
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.120 views

Adobe ColdFusion - Cross-Site Scripting

Adobe Coldfusion versions 2016 update 16 and earlier, 2018 update 10 and earlier and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code...

5.4CVSS6.8AI score0.37095EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.22 views

Guten Free Options - Cross Site Scripting

Guten Free Options WordPress plugin = 0.9.5 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in high privilege users' browsers, exploit requires victim to click malicious link. id: CVE-2024-13492 info: name: Guten Free...

6.1CVSS8AI score0.00584EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 12:59 a.m.6 views

CVE-2024-34102

CVE-2024-34102 ★ Thanks to @th3gokul, Sanjaith3hacker, Chocapikk for the original code base. ★ Description CVE-2024-34102 : Adobe Commerce XXE vulnerability description: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External...

9.8CVSS8.4AI score0.99994EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/12 9:57 p.m.6 views

CVE-2017-8759_-SOAP_WSDL

What is CVE-2017-8759 is Remote Code Execution Vulnerability On SOAP WDSL A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take control of an...

9.3CVSS7.8AI score0.88698EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 8:25 p.m.7 views

CVE-2023-38831

CVE-2023-38831 A POC demo on CVE-2023-38831 Brief description of vulnerability CVE-2023-38831 is a software vulnerability. The software that was exploited is WinRAR, which is used widely by almost everyone. It is a software that helps different documents or files to make it into small archives zi...

7.8CVSS7AI score0.98022EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/12 3:58 p.m.7 views

cve-2018-12798

Adobe Acrobat Reader Heap Overflow Remote Code Execution Vulnerability Vulnerability Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Vulnerability Description This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of...

10CVSS8.1AI score0.13467EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 12:51 p.m.7 views

CVE-2025-0411-PoC

Más PoC en: https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Compilar cpp usando MinGW-w64 x8664-w64-mingw32-g++ loader.cpp -o loader.exe -s -static Después de compilar, comprimir el exe con 7z, ejecutar dos veces Debido a que esta vulnerabilidad requiere interacción del usuario, el archivo...

7CVSS7.4AI score0.67071EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/12 3:03 a.m.12 views

CVE-2023-7028

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

10CVSS8.2AI score0.94647EPSS
SaveExploits16References3
Kitploit
Kitploit
added 2026/09/12 1:47 a.m.5 views

cve-2024-30350-research-notes

CVE-2024-30350 Research Notes Overview CVE-2024-30350 is an out-of-bounds read information disclosure vulnerability in Foxit PDF Reader. The issue was published by Trend Micro Zero Day Initiative as ZDI-24-333 and tracked before disclosure as ZDI-CAN-22708. The public advisory describes the...

3.3CVSS0.00474EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/09/11 11:37 a.m.8 views

CVE-2026-76922

A flaw was found in Wireshark. A local attacker could exploit a crash in the Bluetooth BR/EDR FHS protocol dissector, requiring user interaction. This vulnerability could lead to a denial of service, making the application unavailable to users. Mitigation To mitigate this issue, users should avoi...

5.5CVSS0.00101EPSS
SaveExploits1References5
NVD
NVD
added 2026/09/11 9:17 a.m.11 views

CVE-2026-80469

An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution of attacker-controlled code. User interaction is required...

8.3CVSS0.0023EPSS
SaveExploits0References6
Rows per page
Query Builder