Lucene search
+L

121472 matches found

BDU FSTEC
BDU FSTEC
•added 2026/10/08 1:15 p.m.•31 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

9CVSS6.1AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/08 1:15 p.m.•31 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the use of cryptographic algorithms that contain defects, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to protected information...

6.8CVSS5.5AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/08 1:15 p.m.•33 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

7.5CVSS5.5AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/08 1:15 p.m.•34 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/08 1:15 p.m.•35 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

9CVSS6.3AI score
SaveExploits0References2Affected Software2
Kitploit
Kitploit
•added 2026/10/08 1:15 p.m.•15 views

PasteZort

PasteZort Pastejacking - PasteZort Uso: ./PasteZort.py...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/08 1:14 p.m.•38 views

netattack

NETATTACK The netattack.py is a python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks. The effectiveness and power of this script highly depends on your wireless card. NETATTACK 2 RELEASED https://github.com/chrizator/netattack2/ USAGE EASY...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/08 1:11 p.m.•163 views

bypass-403

Bypass-403 A simple script just made for self use for bypassing 403 It can also be used to compare responses on verious conditions as shown in the below snap Usage ./bypass-403.sh https://example.com admin ./bypass-403.sh website-here path-here Features Use 24 known Bypasses for 403 with the help...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/08 1:09 p.m.•18 views

blindy

Blindy Simple script for running brute-force blind MySql injection Note: this script was created for fun, helpful in some ctf challenges : description The script will run through queries listed in sets in provided file and try to brute-force any place where placeholder is found. GET & POST http...

6.4AI score
SaveExploits0
EUVD
EUVD
•added 2026/10/08 1:09 p.m.•3 views

EUVD-2026-94888

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MediaRon LLC WP Plugin Info Card wp-plugin-info-card allows Stored XSS.This issue affects WP Plugin Info Card: from n/a through 6.3.5...

6.5CVSS5.8AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/08 1:06 p.m.•13 views

EmBomber

EmBomber Python Script for Email Bombing which supports Gmail, Yahoo, Hotmail/Outlook Made with by Mazen Elzanaty Features Support Gmail Support Yahoo Support Hotmail/Outlook Usage EmBomber should work on all Linux distros running Python 2.7 First, clone it by entering the following command in th...

6.4AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/08 1:06 p.m.•21 views

kaboom

About Kaboom is an automatism for penetration tests. It performs several tasks for the first two phases of the test: information gathering and vulnerability assessment. All informations collected are saved into a directory hierarchy very simple to browse also in case of multiple targets. Details...

6.4AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/08 1:06 p.m.•47 views

hardcidr

hardCIDR Background A Linux Bash script to discover the netblocks, or ranges, in CIDR notation owned by the target organization during the intelligence gathering phase of a penetration test. This information is maintained by the five Regional Internet Registries RIRs: ARIN North America RIPE...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/08 1:03 p.m.•160 views

flashsploit

Exploitation Framework for ATtiny85 HID Attacks Twitter - Telegram - Blog Available in Flashsploit is an Exploitation Framework for Attacks using ATtiny85 HID Devices such as Digispark USB Development Board, flashsploit generates Arduino IDE Compatible .ino Scripts based on User Input and then...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/08 1:03 p.m.•13 views

SUID3NUM

SUID3NUM A standalone python2/3 script which utilizes python's built-in modules to find SUID bins, separate default bins from custom bins, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ͡ʘ ͜ʖ ͡ʘ Description A standalone script supporting both python2 &...

6.4AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/10/08 12:58 p.m.•29 views

CVE-2024-0012-POC

This is actual POC, inspired by https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/ Usage like - python3 cve-2024-0012-pan-os-poc.py --url "https://target-system" --no-verify --no-verify if SSL doesn't work or expired else do not use this tag...

9.8CVSS8.3AI score0.99855EPSS
SaveExploits15
Kitploit
Kitploit
•added 2026/10/08 12:53 p.m.•17 views

CloudUnflare

CloudUnflare...

6.3AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/08 12:52 p.m.•18 views

dconstruct

dconstruct Open the source MP4 dconstruct is a reverse engineering tool for the DC-Script files used in The Last of Us Part II. It features a disassembler and a decompiler. It outputs .asm files containing the disassembled structures and bytecode, aswell as .dcpl DC Pseudo Language files containi...

6.3AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/08 12:49 p.m.•17 views

BARK

BARK BARK stands for BloodHound Attack Research Kit. It is a PowerShell script built to assist the BloodHound Enterprise team with researching and continuously validating abuse primitives. BARK currently focuses on Microsoft's Azure suite of products and services. BARK requires no third party...

6.2AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/08 12:46 p.m.•16 views

findwall

FindWall What does it do? FindWall is Python script that allows to understand if your network provider is limiting your access to the Internet by blocking any TCP/UDP port. In order to perform this check FindWall needs to connect a public VPS of your property. FindWall performs the following...

6.2AI score
SaveExploits0
Rows per page
Query Builder