Lucene search
+L

68549 matches found

Kitploit
Kitploit
added 2026/09/14 6:14 a.m.7 views

CVE-2018-6389-FIX

This repository does not have a README...

7.5CVSS7.5AI score0.72671EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/14 5:51 a.m.8 views

credssp

credssp This is a poc code for exploiting CVE-2018-0886. It should be used for educational purposes only. It relies on a fork of the rdpy projecthttps://github.com/preempt/rdpy, allowing also credssp relay. Written by Eyal Karni, Preempt [email protected] Build Instructions Linux If you are...

7.6CVSS7.7AI score0.8197EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/14 5:50 a.m.6 views

Multi-threaded-mass-exploiter-CVE-2018-13379-POC

CVE-2018-13379 — Mass Exploit for Fortinet FortiOS SSL VPN A tool for mass exploitation of the CVE-2018-13379 path traversal vulnerability in Fortinet FortiOS SSL VPN. Allows reading session files and extracting logins and passwords in cleartext. Features Exploitation of CVE-2018-13379 via the...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/14 5:44 a.m.2540 views

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 Exploitation Tool, You can use this tool to check the vulnerability in your FortiGate SSL-VPN. This vulnerability affects the following versions: • FortiOS 6.0 - 6.0.0 to 6.0.4 • FortiOS 5.6 - 5.6.3 to 5.6.7 • FortiOS 5.4 - 5.4.6 to 5.4.12...

9.8CVSS8.6AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/14 5:42 a.m.6 views

EXP_CVE-2018-19518

CVE-2018-19518 Disclaimer This program should only be used for authorized security testing and research. Please use it in compliance with network security laws. The author is not responsible for any illegal attacks or other unlawful actions resulting from the use of this tool. Usage root@kitploit...

8.5CVSS6.9AI score0.9523EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/14 5:40 a.m.7 views

perwendel__spark_CVE-2018-9159_2_7_2_fixed

Spark - a tiny web framework for Java 8 NEWS : Spark 2.7.1 is out. Please try it out and report any bugs. root@kitploit: com.sparkjava spark-core 2.7.1 Important - There is a vulnerability in older versions of Spark versions lower than 2.5.2. Please upgrade to the latest version. For documentatio...

5.3CVSS6.6AI score0.04445EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 5:38 a.m.7 views

ble_norton_core

PoC command injection in BLE service of Norton Core Secure WiFi Router CVE-2018-5234 For more information read paper. To demonstrate the exploitation, we will use: OS GNU/Linux; Bluetooth dongle adapter; BlueZ utility for testing Bluetooth connection. In order to use the script, we will need to s...

8.3CVSS7.6AI score0.1639EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/14 5:36 a.m.8 views

CVE-2018-17144_POC

This repository does not have a README...

7.5CVSS7.5AI score0.06749EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 5:19 a.m.8 views

CVE-2018-7211-PoC

CVE-2018-7211-PoC The PoC||GTFO of CVE-2018-7211 Reference: https://membership.backbox.org/idashboards-9-6b-multiple-vulnerabilities/ Requirements None, only Python Usage Run the script root@kitploit: $ git clone https://github.com/bowline90/CVE-2018-7211-PoC.git $ cd CVE-2018-7211-PoC $ chmod +x...

8.1CVSS7.7AI score0.00742EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.30 views

Lokomedia CMS - Local File Inclusion

A Local File Inclusion LFI vulnerability exists in Lokomedia CMS. The application allows an attacker to include files on the server that should not be accessible, potentially exposing sensitive information. id: CVE-2010-2018 info: name: Lokomedia CMS - Local File Inclusion author: r3Y3r53 severit...

5CVSS5.8AI score0.03258EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.113 views

Drupal avatar_uploader v7.x-1.0-beta8 - Local File Inclusion

In avataruploader v7.x-1.0-beta8 the view.php program doesn't restrict file paths, allowing unauthenticated users to retrieve arbitrary files. id: CVE-2018-9205 info: name: Drupal avataruploader v7.x-1.0-beta8 - Local File Inclusion author: daffainfo severity: high description: In avataruploader...

7.5CVSS7.3AI score0.55079EPSS
SaveExploits6References5
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.83 views

Adiscon LogAnalyzer <4.1.7 - Cross-Site Scripting

Adiscon LogAnalyzer before 4.1.7 contains a cross-site scripting vulnerability in the 'referer' parameter of the login.php file. id: CVE-2018-19877 info: name: Adiscon LogAnalyzer 4.1.7 - Cross-Site Scripting author: arafatansari severity: medium description: | Adiscon LogAnalyzer before 4.1.7...

6.1CVSS6.2AI score0.18563EPSS
SaveExploits5References4
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.93 views

SugarCRM 3.5.1 - Cross-Site Scripting

SugarCRM 3.5.1 is vulnerable to cross-site scripting via phprint.php and a parameter name in the query string aka a $key variable. id: CVE-2018-5715 info: name: SugarCRM 3.5.1 - Cross-Site Scripting author: edoardottt severity: medium description: SugarCRM 3.5.1 is vulnerable to cross-site...

6.1CVSS6.2AI score0.06914EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.78 views

DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 contains a cross-site scripting vulnerability via /admin/ssl-fields/add.php Display Name, Description & Notes field parameters. id: CVE-2018-19751 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 contains...

4.8CVSS6AI score0.03316EPSS
SaveExploits6References4
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.94 views

Zoho ManageEngine OpManager - SQL Injection

Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL...

7.5CVSS7.2AI score0.66347EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.48 views

WordPress SagePay Server Gateway for WooCommerce <1.0.9 - Cross-Site Scripting

WordPress SagePay Server Gateway for WooCommerce before 1.0.9 is vulnerable to cross-site scripting via the includes/pages/redirect.php page parameter. id: CVE-2018-5316 info: name: WordPress SagePay Server Gateway for WooCommerce 1.0.9 - Cross-Site Scripting author: daffainfo severity: medium...

6.1CVSS6.2AI score0.03685EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.36 views

ASUSTOR ADM 3.1.0.RFQ3 - SQL Injection

ASUSTOR ADM version 3.1.0.RFQ3 is vulnerable to SQL injection via the albumid parameter in the /photo-gallery/api/album/treelists/ endpoint. An attacker can exploit this vulnerability to execute arbitrary SQL commands on the database, potentially leading to information disclosure or further...

9.8CVSS8.4AI score0.11176EPSS
SaveExploits7References2
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.70 views

SolarWinds Database Performance Analyzer 11.1.457 - Cross-Site Scripting

SolarWinds Database Performance Analyzer 11.1.457 contains a reflected cross-site scripting vulnerability in its idcStateError component, where the page parameter is reflected into the HREF of the 'Try Again' Button on the page, aka a /iwc/idcStateError.iwc?page= URI. id: CVE-2018-19386 info: nam...

6.1CVSS6.2AI score0.09044EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.40 views

WordPress Ninja Forms <3.3.18 - Cross-Site Scripting

WordPress Ninja Forms plugin before 3.3.18 contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in includes/Admin/Menus/Submissions.php via the begindate, enddate, or formid parameters. This can allow an attacker to steal cookie-based authentication credentials a...

6.1CVSS6.3AI score0.08863EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.83 views

DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD through version 4.11.01 is vulnerable to cross-site scripting via the /assets/add/category.php CatagoryName and StakeHolder parameters. id: CVE-2018-20011 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD through version...

4.8CVSS6AI score0.04428EPSS
SaveExploits6References4
Rows per page
Query Builder