Lucene search
+L

358157 matches found

EUVD
EUVD
added 2026/09/12 6:31 a.m.1 views

EUVD-2026-76796

The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one of the actions it makes available to unauthenticated users, and it takes both the option name and the option value from the request, allowing unauthenticated attackers to overwrite any of the site'...

SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 6:28 a.m.10 views

AzureRedOps

AzureRedOps A Swiss Army tool for Azure / Entra ID red teaming. Author: Mr.Un1k0d3r TrueCyber Inc Version: 0.1 Language: Python 3.12+ Overview AzureRedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID and Azure tenants. It wraps the most common red-team...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 6:28 a.m.11 views

box-js

box.js A utility to analyze malicious JavaScript. Installation Simply install box-js from npm: root@kitploit: npm install box-js --global box-js is also available: as a Cuckoo module see the integrations directory and Nwinternights/CuckooBoxjs; as a Dockerfile see integrations/README.md; as a...

5.7AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/12 6:27 a.m.6 views

Podroid

Podroid Run Linux containers and a full Linux desktop on your Android phone. No root. A real Alpine Linux VM with its own kernel - not a chroot or proot trick - so Podman, Docker and LXC behave exactly like they do on a server. Website · Documentation · Download APK What you get Podman, Docker an...

6AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/12 6:17 a.m.7 views

CVE-2025-65791

CVE-2025-65791 — Command Injection in ZoneMinder Overview A critical Command Injection vulnerability exists in ZoneMinder v1.36.34 due to improper input validation in the web/views/image.php component. Unsanitized user-controlled input is passed directly to the PHP exec function, allowing remote...

9.8CVSS5.9AI score0.01649EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 6:16 a.m.8 views

CVE-2023-36845-POC

CVE-2023-36845 PoC Automation Script This script provides an automated Proof of Concept PoC for the vulnerability identified as CVE-2023-36845, which affects the J-Web component of Juniper Networks Junos OS on EX and SRX Series devices. It demonstrates the potential for remote modification of the...

9.8CVSS7.4AI score0.9507EPSS
SaveExploits24References1
NVD
NVD
added 2026/09/12 6:16 a.m.4 views

CVE-2026-85681

The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one of the actions it makes available to unauthenticated users, and it takes both the option name and the option value from the request, allowing unauthenticated attackers to overwrite any of the site'...

SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 6:13 a.m.8 views

lsarelayx

lsarelayx Introduction lsarelayx is system wide NTLM relay tool designed to relay incoming NTLM based authentication to the host it is running on. lsarelayx will relay any incoming authentication request which includes SMB. Since lsarelayx hooks into existing application authentication flows, the...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 6:06 a.m.14 views

leakish

Leakish Browser privacy-leak detector — eight detection modules, risk scoring, and per-account history, all in your browser. Built withVerdent — an agentic coding assistant. Every detection module, the analytics dashboard, the API-key auth flow, the bilingual UI and the Kubernetes-ready Docker...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 6:05 a.m.7 views

CVE-2022-34715-POC

CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys version 10.0.20348.825 root@kitploit: 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9...

9.8CVSS8.1AI score0.80431EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 6:04 a.m.9 views

CVE-2025-43529

CVE-2025-43529 TL; DR Apple recently shipped iOS 26.2 and iPadOS 26.2, along with a security advisory that includes fixes for WebKit vulnerabilities. One bug in the DFG JIT compiler CVE-2025-43529 stood out, so I decided to dig into it. The JIT compiler correctly recognized that a Phi node where...

8.8CVSS7.9AI score0.08891EPSS
SaveExploits8References2
Kitploit
Kitploit
added 2026/09/12 6:02 a.m.5 views

Crassus

Crassus Windows privilege escalation discovery tool Quick start 1. In Process Monitor, select the Enable Boot Logging option. 2. Reboot. 3. Once you have logged in and Windows has settled, run Process Monitor once again. 4. When prompted, save the boot log, e.g., to raw.PML. 5. Reset the default...

5.9AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/12 6:00 a.m.4 views

CVE-2026-85681 WP Component <= 2.2.4 - Unauthenticated Privilege Escalation via Arbitrary Blog Option Update

The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one of the actions it makes available to unauthenticated users, and it takes both the option name and the option value from the request, allowing unauthenticated attackers to overwrite any of the site'...

SaveExploits0References1
CVE
CVE
added 2026/09/12 6:00 a.m.3 views

CVE-2026-85681

The WP Component WordPress plugin through version 2.2.4 lacks any capability or nonce checks on an action exposed to unauthenticated users. The action accepts both the option name and option value directly from the request, allowing an unauthenticated attacker to overwrite any site option . On a ...

SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 5:51 a.m.5 views

Cve-2024-38063

CVE-2024-38063 Description This repository contains details and potential exploit code for CVE-2024-38063, a critical Windows TCP/IP Remote Code Execution RCE vulnerability. The vulnerability allows an unauthenticated attacker to execute arbitrary code on the target system through specially craft...

9.8CVSS8.1AI score0.70564EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/12 5:49 a.m.6 views

vbox_cve_2017_10235

CVE-2017-10235: VirtualBox E1000 device buffer overflow Introduction The following document details a bug found in VirtualBox v5.1.22 now fixed in v5.1.24, in the guest device emulation component DevE1000 Intel 82540EM Ethernet Controller Emulation, in the function e1kFallbackAddToFrame, which...

6.7CVSS7.3AI score0.00833EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/12 5:48 a.m.6 views

CVE-2021-42261

CVE-2021-42261 Suggested description Revisor Video Management System VMS before 2.0.0 has a directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file system to access files or directories that are outside of restricted directory on the remote server...

7.5CVSS7.4AI score0.02279EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 5:41 a.m.90 views

toothpicker

ToothPicker ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically targets iOS's Bluetooth daemon bluetoothd and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This...

5.8AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/12 5:35 a.m.12 views

CVE-2023-27163-POC

CVE-2023-27163 CVE-2023-27163 Request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request. This POC utilizes the...

6.5CVSS6.7AI score0.06591EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/09/12 5:33 a.m.175 views

hate_crack

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

5.7AI score
SaveExploits0References4
Rows per page
Query Builder