Lucene search
+L

58703 matches found

Kitploit
Kitploit
added 2026/09/15 10:31 a.m.9 views

CVE-2024-41640

Description AML Surety Eco up to version 3.5 is affected by an un-authenticated reflected cross-site scripting. The target web application handles error in a dedicated error page accessible without any authentication containing a URL parameter that is not sanitizing user input. The provided...

6.1CVSS6.2AI score0.00624EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/15 9:30 a.m.4 views

EUVD-2026-78298

The Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.1.23. This is due to the PermissionManager::managepermissions function being registered as a callback on WordPress core's...

7.5CVSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/15 9:15 a.m.5 views

CVE-2017-1000117

CVE-2017-1000117 PoC Repository for VulApps Fork from joernchen/CVE-2017-1000117 git clone --recursive https://github.com/VulApps/CVE-2017-1000117.git will write the output of id to a file vul in /var/www/html. See More at VulApps...

8.8CVSS7.2AI score0.77823EPSS
SaveExploits9References2
Kitploit
Kitploit
added 2026/09/15 8:27 a.m.11 views

IkeAbuser

IkeAbuser A simple tool wrapper to automate the enumeration, fingerprinting, and PSK extraction of an IPSec VPN gateway. Nothing fancy here, just a script I put together to save time during CTFs and while studying for the CPENT. It chains together ike-scan, nmap and hashcat so I don't have to typ...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 7:59 a.m.8 views

FOXCMS-CVE-2025-29306-POC

FOXCMS Parameter Injection RCE – CVE-2025-29306 This repository contains a Python-based PoC for a Remote Code Execution RCE vulnerability affecting FOXCMS v1.2, a Chinese open-source content management system. CVE-ID: CVE-2025-29306 Affects: FOXCMS v1.2 Type: Service Parameter Injection → Code...

9.8CVSS8.2AI score0.46583EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/15 7:56 a.m.783 views

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

5.9AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/15 7:44 a.m.10 views

DFIR-O365RC

Table of contents: 1. Module description 2. Installation and prerequisites 1. Using Docker 2. Manual Installation 3. Managing the DFIR-O365RC application 1. Creating the application 2. Updating the application 3. Removing the application 4. Permissions and license requirements 5. Functions includ...

6.1AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/15 7:41 a.m.8 views

iDictPy

iDictPy A salty-ass 100% verified hacker status python script to turn apple id's into apple crisp nicememe I initially made this as a better alternative to this piece of shit: https://github.com/Pr0x13/iDict/ but then i forgot i'm a little bit drunk and then this happened. prerequisites are...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 7:31 a.m.10 views

BrowserBox

BrowserBox by DOSAYGO Secure, modern Remote Browser Isolation RBI with a clientless experience 🔐 NEW in v18.0.1 — Passkey authentication on macOS: sign in to websites with real passkeys inside your remote browser. Passkeys are created and stored on your Mac's Secure Enclave and unlocked with Touc...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/15 7:18 a.m.4 views

CVE-2014-3466_PoC

Proof of Concept for CVE-2014-3466 GnuTLS buffer overflow: session id length check Information See: https://bugzilla.redhat.com/showbug.cgi?id=1101932 This is not a weaponized exploit. be warned: this python code is ugly, I pretty much handcrafted the ServerHello and spent only about five fifteen...

6.8CVSS8AI score0.11221EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 6:43 a.m.11 views

AzureRedOps

AzureRedOps A Swiss Army tool for Azure / Entra ID red teaming. Author: Mr.Un1k0d3r TrueCyber Inc Version: 0.1 Language: Python 3.12+ Overview AzureRedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID and Azure tenants. It wraps the most common red-team...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 6:13 a.m.36 views

offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...

5.8AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/09/15 6:09 a.m.9 views

BadZure

BadZure BadZure is a Python tool that automates the creation of misconfigured Azure environments, enabling security teams to simulate adversary techniques, develop and test detection controls, and run purple team exercises across Entra ID and Azure infrastructure. It uses Terraform to populate...

5.8AI score
SaveExploits0References7
CVE
CVE
added 2026/09/15 6:07 a.m.11 views

CVE-2026-75983

The Eventin WordPress plugin (≤ 4.1.23 ) contains a privilege escalation vulnerability in PermissionManager::manage_permissions(), which is hooked into WordPress's map_meta_cap filter and unconditionally returns an always-true primitive for user ID 1 without scoping to plugin-specific capabilitie...

7.5CVSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/15 6:00 a.m.4 views

EUVD-2026-78283

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /deletefaculty1.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to th...

7.5CVSS
SaveExploits0References6
CVE
CVE
added 2026/09/15 6:00 a.m.9 views

CVE-2026-91004

A SQL injection vulnerability exists in SourceCodester Online Faculty Clearance System 1.0 , specifically in the /delete_faculty1.php file. An unauthenticated remote attacker can manipulate the ID parameter to inject arbitrary SQL, potentially leading to low-impact confidentiality, integrity, and...

7.5CVSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/15 5:48 a.m.6 views

CVE-2024-23747

CVE-2024-23747 The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure Direct Object Reference IDOR vulnerability. PoC This vulnerability resides in the system's handling of user data access through a /Modernanet/LAUDO/LAU0000100/Laudo?id= URL. Bymanipulating...

7.5CVSS7.4AI score0.00694EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.192 views

ThinVNC - Authentication Bypass

ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via a specific command, potentially leading to unauthorized access and code execution. id: CVE-2022-25226 info: name: ThinVNC - Authentication Bypass author: ritikchaddha severity: critical description: |...

10CVSS8AI score0.10989EPSS
SaveExploits2
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.105 views

InstaWP Connect < 0.1.0.86 - Local PHP File Inclusion

The InstaWP Connect - 1-click WP Staging & Migration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.1.0.85 via the 'instawp-database-manager' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files ...

8.1CVSS8.4AI score0.10422EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.96 views

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

5.4CVSS5.8AI score0.01331EPSS
SaveExploits1References2
Rows per page
Query Builder