Lucene search
+L

908 matches found

Kitploit
Kitploit
added 2026/09/02 12:28 a.m.8 views

Pi-Zero-2W-Bad-USB

Raspberry Pi Zero 2 W BadUSB HID Toolkit A programmable BadUSB / HID attack platform built on a Raspberry Pi Zero 2 W. The Pi enumerates as a USB composite device keyboard plus an optional read-only mass-storage volume and executes Ducky-Script-style payloads against the host it's plugged into...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/01 7:43 p.m.4 views

piraterf

🏴‍☠️ PIrateRF - Plataforma de Transmisión Radioeléctrica Definida por Software PIrateRF transforma tu Raspberry Pi Zero W en un generador de señales RF portátil que crea su propio punto de acceso WiFi. Controla desde emisiones FM hasta modos digitales a través de tu navegador: ¡hackea las ondas...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 7:34 p.m.36 views

prowler

Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...

5.6AI score
SaveExploits0References1
Nuclei
Nuclei
added 2026/09/01 10:50 a.m.51 views

W&B Weave Server - Remote Arbitrary File Leak

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin. id:...

8.8CVSS7.5AI score0.05015EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/01 10:24 a.m.4 views

omae-wa-cheese-da

omae-wa-cheese-da Image L/E física arbitraria de GPU CVE-2025-21479 - filtración de KASLR - SELinux permisivo - servidor root de gancho de inicio seguro de RKP & bypass de DEFEX ejecución de binario personalizado LDPRELOAD Tarda unos 6 minutos.. Ten paciencia. Lo optimizaré después. Dispositivos...

8.6CVSS7.3AI score0.00809EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/08/31 11:58 a.m.5 views

badspin

Bad Spin: LPE de Android Binder Autor: Moshe Kol Exploit de escalada de privilegios desde unstrustedapp para la vulnerabilidad de Android Binder CVE-2022-20421. La vulnerabilidad fue parcheada en el Boletín de Seguridad de Android de octubre de 2022. El exploit funciona en dispositivos que ejecut...

7.8CVSS6.7AI score0.00673EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/29 5:49 a.m.3 views

multicast_bytecopy

multicastbytecopy Questo codice è pubblicato per i ricercatori di sicurezza, non utilizzare questo codice per alcuno scopo se non sai cosa stai facendo. multicastbytecopy è un exploit di lettura/scrittura del kernel per iOS 15.0 - 15.1.1 di @jaakerblom ed è il successore spirituale di...

9.3CVSS7.2AI score0.1796EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/08/27 12:36 a.m.6 views

CVE-2025-66678

CVE-2025-66678 In Hardware Read & Write Utility v1.25.11.26, il driver esponeva lettura e scrittura arbitrarie dei registri MSR, oltre a lettura e scrittura della memoria fisica tramite MmMapIoSpace, entrambe le quali consentono l'esecuzione di codice nel kernel. Dettagli del PoC Il PoC sostituir...

9.8CVSS5.2AI score0.00641EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/24 9:01 a.m.4 views

stealth_call

Cos'è? Libreria header-only per Windows x64 che consente di invocare qualsiasi syscall NT senza toccare gli import di ntdll, senza lasciare stringhe nel binario e senza i soliti campanelli d'allarme che fanno impazzire gli EDR. Niente CRT. Niente STL. Niente IAT. L'intero progetto compila a circa...

5.5AI score
SaveExploits0
OSV
OSV
added 2026/07/27 8:13 a.m.8 views

MINI-68HV-GH7R-XP8W

Bulletin has no description...

6.5CVSS5.8AI score0.00279EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/07/24 7:44 a.m.6 views

CVE-2026-56391

GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w --check-chars option is used. The findfield function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input,...

6.1CVSS5.5AI score0.00131EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/22 8:16 p.m.10 views

CVE-2026-13077

A missing bounds check in the BSON CodeWScope element accessors allows an attacker to trigger an out-of-bounds heap read via a crafted aggregation pipeline. The vulnerability can be exploited by an authenticated user by generating a malformed BSONColumn data containing a CodeWScope element,...

7.1CVSS0.00277EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/22 1:33 p.m.6 views

MINI-8QMC-F3HR-W62C

Bulletin has no description...

7.5CVSS4.9AI score0.00549EPSS
SaveExploits0
OSV
OSV
added 2026/06/25 6:53 a.m.11 views

MINI-464W-FR2W-JPRG

Bulletin has no description...

6.1CVSS5.7AI score0.00223EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.38 views

PT-2026-48200

Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthWhiteID parameter of the formModifyWebAuthWhiteUser function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

5.9AI score0.00309EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.21 views

Tenda W3 缓冲区错误漏洞

The Tenda W3 is a wireless access point device produced by the Chinese company Tenda. Version 1.0.0.32204 of the Tenda W3 Wireless Router contains a security vulnerability. This vulnerability stems from a stack overflow in the param1 parameter within the formSetCfm function, which could allow...

6.5CVSS6AI score0.00218EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/05 4:52 p.m.15 views

MINI-G7J4-CMRH-W899

Bulletin has no description...

5.3CVSS5.2AI score0.0037EPSS
SaveExploits0
NVD
NVD
added 2026/05/31 5:16 p.m.22 views

CVE-2026-10192

A vulnerability was identified in Tenda W12 3.0.0.74763. The affected element is the function setlocaltime0 of the file /bin/httpd. Such manipulation of the argument Time leads to stack-based buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used...

9CVSS0.00503EPSS
SaveExploits0References6
OSV
OSV
added 2026/05/11 9:47 a.m.12 views

MINI-QCMF-5Q35-F56W

Bulletin has no description...

7.5CVSS5.7AI score0.00798EPSS
SaveExploits0
OSV
OSV
added 2026/04/18 5:31 p.m.16 views

MINI-JC72-RF4W-99MP

Bulletin has no description...

7.1CVSS5.6AI score0.00261EPSS
SaveExploits0
Rows per page
Query Builder