104768 matches found
EXOS < 31.7.4 / 32.0.0 < 32.7.4.15 / 33.0.0 < 33.1.100, 33.7.0 < 33.7.1 Privilege Escalation (SA-2026-088)
The version of EXOS installed on the remote host is missing a security update. It is, therefore, affected by an privilege escalation vulnerability. - ExtremeXOS shell environment utilities fail to safely canonicalize paths and can follow symbolic links from a writable user directory to a privileg...
CVE-2025-8550
CVE-2025-8550 โ atjiu pybbs XSS Exploit Description This repository hosts an automated Proof-of-Concept PoC exploit for CVE-2025-8550 , a reflected CrossโSite Scripting XSS vulnerability in atjiu pybbs โค v6.0.0. It targets the /admin/topic/list endpointโs username parameter, which lacks proper...
CVE-2021-46398
CVE-2021-46398 - Lalie ARNOUD, Gaspard ANDRIEU In this repository, you will find a proof of concept of the exploitation of the CVE-2021-46398 flaw through a docker compose, as well as an analysis of the impacts of this flaw on information systems. root@kitploit: Exploit Title: FileBrowser 2.17.2 ...
CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-
CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability Exploit Author: ugurkarakoc Vendor Homepage https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql Software Link https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826 Overview...
CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC
CVE-2020-29607 โ Pluck CMS Authenticated remote code execution in Pluck CMS before 4.7.13. The admin file manager admin.php?action=files does not validate file extensions, allowing upload of .phar files which Apache executes as PHP. Uploading a webshell through this endpoint results in RCE as the...
CVE-2025-10307
Exploit: Arbitrary File Deletion via Backuply tarfile path traversal Browser Console PoC authenticated admin root@kitploit: async = const page = $location.origin/wordpress/wp-admin/admin.php?page=backuply; // 1 Extract a valid nonce from the Backuply page const html = await fetchpage, credentials...
CVE-2025-39459
CVE-2025-39459 Real Estate 7 = 3.5.2 - Unauthenticated Privilege Escalation ๐งจ CVE-2025-39459 โ Real Estate 7 = 3.5.2 Unauthenticated Privilege Escalation ๐ Overview This repository contains a Python proof-of-concept tool for CVE-2025-39459 , affecting the Real Estate 7 WordPress theme in versions...
CVE-2025-6934-PoC
๐ CVE-2025-6934 Exploit Tool Unauthenticated Administrator Account Creation in WordPress Plugin Opal Estate Pro Created and developed fully by mejbankadir SMH tech and Mejban HackSheild Under NexoAmicus ๐ Description CVE-2025-6934 is a critical vulnerability in the WordPress Opal Estate Pro plugi...
CVE-2017-12542-Exploit
HP iLO Authentication Bypass CVE-2017-12542 This repository contains a proof-of-concept exploit for CVE-2017-12542 , an authentication bypass vulnerability affecting certain versions of HP Integrated Lights-Out iLO firmware. The vulnerability allows unauthenticated access to the iLO REST API, whi...
CVE-2025-15030
CVE-2025-15030 User Profile Builder 3.15.2 - Unauthenticated Arbitrary Password Reset CVE-2025-15030 User Profile Builder โ Unauthenticated Password Reset โ Admin Takeover + Shell Upload root@kitploit: / / \ |/ / / / / / \ / / / \ / \ | / | | //| \ / /| / | / /| \ | || | / | / || / | |...
easyda
EasyDA - Easy Windows Domain Access Script Easy Windows Domain Access Script Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniel Compton, daniel dot compton at nccgroup dot com https://github.com/nccgroup/easyda Released under AGPL see LICENSE for more...
CVE-2025-40554
CVE-2025-40554 Exploitation Suite A comprehensive security testing tool for detecting and exploiting the authentication bypass vulnerability CVE-2025-40554 / CVE-2025-40536 in SolarWinds Web Help Desk. โ ๏ธ Disclaimer FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING PURPOSES ONLY This tool is provide...
SecureConnect-Auth-Bypass
ConnectWise SecureConnect Authentication Bypass Vulnerability An exploit proof of concept for ConnectWise SecureConnect authentication bypass vulnerability. Blog Post More details here: https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/ Usage Running...
CVE-2025-13342
CVE-2025-13342 Frontend Admin by DynamiApps - ----/| |/ ----| \ ||/ / / / //// |// |/...
CVE-2026-24291
๐ Privilege Escalation Bypass Utility v2026 Streamlined Access Elevation for Advanced Windows Workflows ๐ง Conceptual Overview This tool is engineered for power users who require frictionless elevation of system permissions without repetitive manual authentication. Think of it as a digital skeleto...
cups-script-final-project
What it does Two-stage detection tool for CVE-2025-58060, authentication bypass vulnerability in the Common UNIX Printing System CUPS. Rather than relying on version numbers alone, the tool combines a banner-based version check with an active auth bypass probe. This helps confirming real...
cve-2026-86060
CVE-2026-86060 โ MikroTik RouterOS SSH Pre-Authentication Privilege Escalation to Full Administrative Control Field| Value ---|--- CVE| CVE-2026-86060 Product| MikroTik RouterOS SSH service Affected versions| RouterOS 6.x and 7.0.0 โ 7.23.3 inclusive Fixed versions| RouterOS 7.23.4 and later...
CVE-2026-76578
CVE-2026-76578 โ FreeIPA Anonymous Admin Takeover Product: FreeIPA 4.9.x โ 4.13.3 Severity: Critical CVSS 9.8 Fixed: FreeIPA 4.13.4 / 389-ds-base 3.2.0-10.el102 RHSA-2026:64785 Legal Notice This proof-of-concept was developed and executed exclusively within an isolated, privately owned lab...
CVE-2026-82329-JFrog-Artifactory-Auth-Bypass
artifactory.py root@kitploit: โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โ artifactory ยท CVE-2026-82329 unauth admin takeover โ โ mitsec ยท https://x.com/ynsmroztas โ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ CVE-2026-82329 โ JFrog Artifactory self-hosted...
cve-2026-82329-jfrog-artifactory
CVE-2026-82329 โ JFrog Artifactory ๆช่ช่จผใฎ่ช่จผใใคใใน โ ็ฎก็่ ไนใฃๅใ CVSS 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H ยท CWE-287 ยท 2026-08-28 ๅ ฌ้ ยท ๅฎ็ฐๅขใงๆช็จๆธใฟใ ๆช่ช่จผใฎใใใใฏใผใฏ้ฃๆฅๆปๆ่ ใใใใใฉใซใ่จญๅฎใฎใปใซใใในใๅ JFrog Artifactory ใซๅฏพใใฆใใฉใใใใฉใผใ ็ฎก็่ ใขใฏใปในใใผใฏใณ ใ็บ่กใงใใพใใใใฎใใฃใฌใฏใใชใซใฏใๅ็พๅฏ่ฝใช Docker ใฉใใจใURL ใใฉใกใผใฟๅใใใๆค่จผ็จ PoC ใๅซใพใใฆใใพใใ artifactory-oss...