Lucene search
+L

63781 matches found

Kitploit
Kitploit
โ€ขadded 2026/09/09 11:54 p.m.โ€ข6 views

ConditionalAccessDocumentation

Document Conditional Access with PowerShell This PowerShell script documents your Microsoft Entra Conditional Access policies. The script exports all data as a csv file which can be pretty formatted as excel workbook. To ensure all policies can be retrieved and documented the script uses the...

5.9AI score
SaveExploits0
Github Security Blog
Github Security Blog
โ€ขadded 2026/09/09 11:47 p.m.โ€ข2 views

Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients

Public Runtime Config Exposes Ollama API Key to Browser Clients Summary [email protected] unconditionally merges all module options โ€” including apikey โ€” into Nuxt's public runtime config runtimeConfig.public.ollama. Nuxt serializes runtimeConfig.public into the SSR HTML response inside a payload...

SaveExploits0References2Affected Software1
Kitploit
Kitploit
โ€ขadded 2026/09/09 11:39 p.m.โ€ข9 views

cve-2021-45232-exp

apisixdashboardrce Don't be evil...

9.8CVSS8.1AI score0.85943EPSS
SaveExploits5
Kitploit
Kitploit
โ€ขadded 2026/09/09 11:24 p.m.โ€ข9 views

CVE-2024-4577-checker

CVE-2024-4577 Vulnerability Checker The CVE-2024-4577 Vulnerability Checker is a Bash script designed to scan multiple domains for the CVE-2024-4577 vulnerability in PHP-CGI. This tool allows security researchers and system administrators to quickly assess whether their systems or a list of domai...

9.8CVSS7.4AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
โ€ขadded 2026/09/09 11:21 p.m.โ€ข5 views

CVE-2026-25049

๐Ÿšจ CVE-2026-25049 โ€“ n8n Unauthenticated Settings Disclosure ๐Ÿ“Œ Overview CVE ID: CVE-2026-25049 Affected Software: n8n Severity: Critical Category: Improper Access Control / Information Disclosure This vulnerability allows unauthenticated access to internal configuration data via a REST API endpoint...

9.9CVSS8.4AI score0.01451EPSS
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/09 11:08 p.m.โ€ข7 views

CVE-2026-0770

CVE-2026-0770 Overview This tool is used to test the vulnerability CVE-2026-0770 in the Langflow application. It leverages the /api/v1/validate/code endpoint to perform Remote Code Execution RCE. Developer: Ohang Thanks to: @C4p333 Purpose: Security Research & Educational Use Installation Termux...

9.8CVSS8.2AI score0.63417EPSS
SaveExploits9
Kitploit
Kitploit
โ€ขadded 2026/09/09 11:05 p.m.โ€ข7 views

CVE-2026-25513

CVE-2026-25513: FacturaScripts has SQL Injection in API ORDER BY Clause Overview...

8.8CVSS6.1AI score0.00491EPSS
SaveExploits3
Kitploit
Kitploit
โ€ขadded 2026/09/09 10:58 p.m.โ€ข8 views

Doozer

Doozer Doozer is an extensible, automated hash cracking utility used to automate the parsing, cracking, and organization of password hashes. Currently, Doozer supports nt/lm, ntlmv1, and ntlmv2 hashes from Responder or SAM, but sports a modular architecture that allows other hash types to be...

6AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/09 10:37 p.m.โ€ข6 views

CVE-2017-12542-Exploit

HP iLO Authentication Bypass CVE-2017-12542 This repository contains a proof-of-concept exploit for CVE-2017-12542 , an authentication bypass vulnerability affecting certain versions of HP Integrated Lights-Out iLO firmware. The vulnerability allows unauthenticated access to the iLO REST API, whi...

10CVSS8.2AI score0.99294EPSS
SaveExploits9
Kitploit
Kitploit
โ€ขadded 2026/09/09 10:35 p.m.โ€ข4 views

CVE-2021-22986

CVE-2021-22986 F5 BIG-IP/BIG-IQ iControl Rest API SSRF to RCE Usage: root@kitploit: python CVE-2021-22986.py...

10CVSS8.5AI score0.99898EPSS
SaveExploits20
Kitploit
Kitploit
โ€ขadded 2026/09/09 10:28 p.m.โ€ข9 views

CVE-2026-4484

CVE-2026-4484 Masteriyo LMS = 2.1.6 - Missing Authorization to Authenticated Student+ Privilege Escalation to Administrator ๐Ÿ”ด Vulnerability Overview CVE-2026-4484 โ€” Authenticated Privilege Escalation Student โ†’ Administrator Description: The Masteriyo LMS plugin for WordPress is vulnerable to...

9.8CVSS6AI score0.00353EPSS
SaveExploits1References1
Kitploit
Kitploit
โ€ขadded 2026/09/09 10:27 p.m.โ€ข5 views

CVE-2026-33340

CVE-2026-33340: SSRF in lollms-webui Overview Field| Detail ---|--- CVE ID| CVE-2026-33340 Vulnerability| Server-Side Request Forgery SSRF Affected Product| ParisNeo/lollms-webui LoLLMs WEBUI Severity| Critical โ€” CVSS 9.1 CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-918:...

9.1CVSS6.1AI score0.21629EPSS
SaveExploits3References5
Kitploit
Kitploit
โ€ขadded 2026/09/09 10:17 p.m.โ€ข10 views

CVE-2025-8625

CVE-2025-8625 Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution ๐Ÿ›ก๏ธ Copypress Rest API 1.1 - 1.2 RCE Exploit ๐Ÿ“ Description The Copypress Rest API plugin for WordPress versions 1.1 to 1.2 is vulnerable to Remote Code...

9.8CVSS5.9AI score0.00601EPSS
SaveExploits2
Kitploit
Kitploit
โ€ขadded 2026/09/09 10:15 p.m.โ€ข3 views

cve-2018-7600-drupalgeddon2-lab

CVE-2018-7600 Drupalgeddon2 Vulnerability Lab Educational lab demonstrating exploitation of CVE-2018-7600 Drupalgeddon2 using a vulnerable Drupal 7.56 environment deployed with Docker. This project simulates a real-world vulnerability assessment workflow, including: Vulnerable environment setup...

9.8CVSS7.9AI score0.99991EPSS
SaveExploits49
Kitploit
Kitploit
โ€ขadded 2026/09/09 10:08 p.m.โ€ข6 views

CVE-2026-41091-PoC-Exploit

โ˜€๏ธ CVE-2026-41091 - RedSun SolarFlare - Microsoft Defender LPE Exploit Microsoft Defender Link Following Vulnerability - Local Privilege Escalation to NT AUTHORITY\SYSTEM The vulnerability is known as "RedSun" ๐ŸŽฏ, "SolarFlare" is the name I gave to my exploit. โœ… ๐Ÿ“Œ Overview This repository contains...

7.8CVSS7.9AI score0.08202EPSS
SaveExploits3References3
Kitploit
Kitploit
โ€ขadded 2026/09/09 9:57 p.m.โ€ข9 views

M365Pwned

M365Pwned Red Team tooling for Microsoft 365 exploitation via Microsoft Graph API. Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens โ€” no user interaction required. Tool| Target| What it does ---|---|---...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
โ€ขadded 2026/09/09 9:31 p.m.โ€ข6 views

CVE-2025-49619

CVE-2025-49619 PoC This script exploits CVE-2025-49619 in Skyvern to execute a reverse shell command. Author Name: Cristian Branet GitHub: cristibtz Usage 1. Start a listener root@kitploit: nc -lvnp 2. Run the exploit root@kitploit: python3 exploit.py -u "http://:" -k "" -i -p : Skyvern server IP...

8.5CVSS7.8AI score0.19972EPSS
SaveExploits6References1
Kitploit
Kitploit
โ€ขadded 2026/09/09 8:52 p.m.โ€ข9 views

CVE-2023-23752

CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023-23752 Vulnerability Description Joomla is an open-source content management system CMS, written in PHP, supporting multiple database systems such as MySQL, MSSQL, and PostgreSQL. Improper access restrictions lead to unauthorized...

5.3CVSS7AI score0.99827EPSS
SaveExploits43
Kitploit
Kitploit
โ€ขadded 2026/09/09 8:44 p.m.โ€ข7 views

CVE-2022-1442

CVE-2022-1442 WordPress Plugin Metform = 2.1.3 - Improper Access Control Allowing Unauthenticated Sensitive Information Disclosure Description The is vulnerable to sensitive information disclosure due to improper access control in the /core/forms/action.php file which can be exploited by an...

7.5CVSS7.3AI score0.08772EPSS
SaveExploits2
Kitploit
Kitploit
โ€ขadded 2026/09/09 8:29 p.m.โ€ข5 views

CVE-2026-63030-Wp2Shell

CVE-2026-63030 wp2shell โ€” WordPress Core Pre-Auth RCE REST API batch route confusion chained with CVE-2026-60137 SQL injection TL;DR โ€” An unauthenticated attacker can chain a WordPress REST API batch-routing bug with a SQL injection in WPQuery to reach full remote code execution on a stock...

9.8CVSS8.4AI score0.97271EPSS
SaveExploits76
Rows per page
Query Builder