Lucene search
+L

174425 matches found

Kitploit
Kitploit
added 2026/08/31 10:34 p.m.31 views

ansvif

ansvif A Not So Very Intelligent Fuzzer Marshall Whittaker oxagast [email protected] As the complexity of a system rises, as does the potential for problems within that system. --Whittaker's Law Compile Dependancies: automake autoconf-archive zlib1g-dev g++ gcc and libgtk2.0-dev if you want...

5.4AI score
SaveExploits0
NVD
NVD
added 2026/08/31 10:17 p.m.5 views

CVE-2026-82957

A vulnerability was found in hyperledger-firefly firefly up to 1.4.0. The impacted element is the function ValidateOptions of the file internal/events/webhooks/webhooks.go of the component Webhook Subscription. Performing a manipulation of the argument url results in server-side request forgery...

7.5CVSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/31 10:12 p.m.136 views

buster

Description Buster is an advanced OSINT tool used to: Get social accounts of an email using multiple sourcesgravatar,about.me,myspace,skype,github,linkedin,previous breaches Get links to where the email was found using google,twitter,darksearch and paste sites Get breaches of an email Get domains...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 10:04 p.m.4 views

CVE-2023-33253

CVE-2023-33253 LabCollector 6.0 though 6.15 allows remote code execution An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The vulnerability is in the message function, and is due to insufficient validation of the file such as...

8.8CVSS7.7AI score0.02507EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 10:02 p.m.10 views

CVE-2023-36664-Ghostscript-command-injection

Ghostscript command injection vulnerability PoC CVE-2023-36664 Vulnerability disclosed in Ghostscript prior to version 10.01.2 leads to code execution CVSS score 9.8. Official vulnerability description: Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the...

7.8CVSS7.5AI score0.04345EPSS
SaveExploits4References2
Kitploit
Kitploit
added 2026/08/31 9:57 p.m.2 views

CVE-2024-46635

CVE-2024-46635 Antecedentes El sistema GongZhiDao es una plataforma desarrollada por GongZhiDao. Proporciona soluciones empresariales que incluyen gestión de usuarios, análisis de datos y funcionalidades operativas. Sin embargo, se descubrió una vulnerabilidad de seguridad en uno de los endpoints...

5.9CVSS5.9AI score0.00256EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 9:24 p.m.6 views

SCANNER-INURLBR

New repository Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found. https://github.com/MrCl0wnLab/SCANNER-INURLBR...

5.9AI score
SaveExploits0References1
CVE
CVE
added 2026/08/31 9:22 p.m.11 views

CVE-2026-77353

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0 , authenticated users could inject arbitrary iCalendar properties and events into their exported .ics feed by embedding raw CRLF sequences in subscription names or notes. The root cause is that the input...

4.6CVSS5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/31 9:22 p.m.4 views

CVE-2019-9745

Autor: Arn Vollebregt Introducción La creatividad está en el núcleo de las pruebas de penetración, lo que mantiene nuestro trabajo interesante. Sin embargo, un escollo es la tendencia a 'sobreingeniería' de escenarios de ataque y centrarse únicamente en bugs condiciones de error. Los fallos...

7.8CVSS7.1AI score0.0047EPSS
SaveExploits2
NVD
NVD
added 2026/08/31 9:17 p.m.7 views

CVE-2026-82392

pnpm is a package manager. Prior to 10.34.5 and from 11.0.0 until 11.11.0, pnpm parses the package name from attacker-controlled pnpm-lock.yaml packages keys with dp.parsedepPath.name and uses it without validation in deps/graph-builder/src/lockfileToDepGraph.ts and...

7.1CVSS
SaveExploits0References7
NVD
NVD
added 2026/08/31 9:17 p.m.6 views

CVE-2026-81888

@hono/oauth-providers is Authentication middleware for Hono. Prior to version 0.8.6, the built-in social login providers accept an OAuth callback even when the state value is absent on both sides, so the anti-CSRF check passes for a callback that never came from a genuine login attempt. This...

5.4CVSS
SaveExploits0References4
NVD
NVD
added 2026/08/31 9:17 p.m.7 views

CVE-2026-81779

Improper Validation of Specified Quantity in Input vulnerability in Silk Themes Newspapers X allows Malicious Software Implanted. This issue affects Newspapers X: from 1.0.46 through 1.0.48...

10CVSS
SaveExploits0References1
NVD
NVD
added 2026/08/31 9:17 p.m.6 views

CVE-2026-75458

The teacher-end interface POST /api/teacher/user/delete/id in XueZhiSi Open Source Exam System = 3.9.0 contains a vertical privilege escalatio vulnerability. This interface accepts a user ID and then executes getUserByIdid, setDeletedtrue, updateByIdFilter in sequence, without any validation of...

8.1CVSS
SaveExploits0References1
NVD
NVD
added 2026/08/31 9:17 p.m.3 views

CVE-2026-54599

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, login.php generates an OIDC state nonce stored in $SESSION'oidcstate', but checksession.php dispatches the OIDC callback without comparing the incoming state against the session value. An attacker can...

7.5CVSS
SaveExploits0References2
NVD
NVD
added 2026/08/31 9:17 p.m.5 views

CVE-2026-54179

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.37, the src/app/Library/Uploaders/SingleBase64Image.php methods SingleBase64Image::uploadFiles and...

4.4CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/31 9:05 p.m.6 views

CVE-2024-32444

CVE-2024-32444 As of 24/01/25 this vulnerabiltiy does not have a patch hence this is simply a product detection template as all products associated with the RealHome wordpress theme are vulnerable. The theme allows users to register new accounts via the inspiryajaxregister function, however, it...

9.8CVSS7.4AI score0.00694EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 9:01 p.m.3 views

recollapse

REcollapse REcollapse 是一个辅助工具,用于黑盒正则表达式模糊测试,以绕过验证并发现 Web 应用程序中的标准化行为。 它也可以帮助绕过 WAF 和弱漏洞缓解措施。更多信息,请查看 REcollapse 博客文章。 此工具的目标是生成用于测试的 payload。实际的模糊测试应使用其他工具进行,如 Burp(intruder)、Caido(automate)、ffuf 等。 安装 要求 :Python 3 pip3 install recollapse 或 python3 setup.py install 或 pip3 install . Docker docker...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/31 8:51 p.m.6 views

json-sanitizer

json-sanitizer Dado contenido similar a JSON, JSON Sanitizer lo convierte en JSON válido. Primeros pasos - Contacto Esto puede conectarse en cualquiera de los extremos de una tubería de datos para ayudar a satisfacer el principio de Postel: sé conservador en lo que haces, sé liberal en lo que...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 8:50 p.m.3 views

CVE-2023-43144

CVE-2023-43144 Descripción Assets Management System 1.0 es vulnerable a inyección SQL a través del parámetro id en delete.php PoC root@kitploit: sqlmap -u 'http://localhost/delete.php?id=4' --cookie="PHPSESSID=SESSID" --dbms=MySQL --dbs --batch Revisión de código delete.php root@kitploit: ?php...

9.8CVSS7.3AI score0.00911EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 8:49 p.m.6 views

CVE-2024-56331

CVE-2024-56331 Uptime-Kuma : Inclusión de Archivos Locales LFI mediante Manejo Incorrecto de URL en el monitor Real-Browser Resumen Una Vulnerabilidad de Manejo Incorrecto de URL permite a un atacante acceder a archivos locales sensibles en el servidor explotando el protocolo file:///. Esta...

6.8CVSS6AI score0.01829EPSS
SaveExploits0
Rows per page
Query Builder