Lucene search
+L

2415 matches found

Kitploit
Kitploit
added 2026/09/03 6:42 a.m.7 views

CVE-2023-27532

CVE-2023-27532 PoC para CVE-2023-27532 que afecta a Veeam Backup and Replication Análisis técnico En nuestro blog se puede encontrar un análisis técnico de la causa raíz de la vulnerabilidad: https://www.horizon3.ai/veeam-backup-and-replication-cve-2023-27532-deep-dive Resumen Este PoC abusa de u...

7.5CVSS7.3AI score0.7761EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/03 6:34 a.m.4 views

CVE-2022-40684

CVE-2022-40684 por 1vere$k Por ahora es una copia POC de la CVE-2022-40684 que afecta a los dispositivos Fortinet FortiOS, FortiProxy y FortiSwitchManager. Copiado de https://github.com/horizon3ai/CVE-2022-40684 Análisis El exploit utiliza el siguiente payload simple: root@kitploit: PUT...

9.8CVSS7.3AI score0.99984EPSS
SaveExploits25References1
Kitploit
Kitploit
added 2026/09/03 5:12 a.m.4 views

CVE-2023-23752

CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023–23752 This readme file provides information about the Joomla Unauthorized Access Vulnerability CVE-2023–23752 and how to detect. This vulnerability allows an attacker to bypass the Joomla access control system and gain unauthorized...

5.3CVSS6.5AI score0.99827EPSS
SaveExploits43
Kitploit
Kitploit
added 2026/09/03 4:36 a.m.4 views

CVE-2026-57821-PoC-Exploit

🛡️ CVE-2026-57821 – Apache Fineract SQL Injection ⚠️ LEGAL & ETHICAL NOTICE This toolkit is provided strictly for educational, training, and authorized security testing purposes. Unauthorized use against any system without explicit written permission is illegal and violates computer crime laws. The...

8.1CVSS7.2AI score0.00743EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/03 3:37 a.m.10 views

CVE-2023-27163-POC

CVE-2023-27163 CVE-2023-27163 Request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request. This POC utilizes the...

6.5CVSS6.6AI score0.06591EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/09/03 2:24 a.m.6 views

CVE-2026-27944

CVE-2026-27944 Скрипт proof of concept для CVE-2026-27944 — критической уязвимости, позволяющей расшифровать резервные копии nginx-ui ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ Данный Proof of Concept предназначен только для образовательных целей и этичного тестирования безопасности. Он был разработан для...

9.8CVSS7AI score0.22162EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/03 1:45 a.m.7 views

CVE-2023-27163

CVE-2023-27163 This is a PoC for CVE-2023-27163 which is a SSRF vulnerability present in request-baskets upto v1.2.1. This vulnerability allows attackers to access sensitive network resources via /api/baskets/name. The request-baskets contains a functionality where a user can specify another serv...

6.5CVSS6.6AI score0.06591EPSS
SaveExploits29References2
Kitploit
Kitploit
added 2026/09/03 1:07 a.m.10 views

zimaos-cve-2026-28286-arbitrary-file-write

🚨 CVE-2026-28286 — Произвольная запись файлов в ZimaOS От неправильной конфигурации API → Произвольная запись файлов → Возможная компрометация системы ⚡ TL;DR Конечная точка: /v21/files/file Проблема: Отсутствие проверки пути Воздействие: Произвольная запись файлов за пределами целевой директории...

9.9CVSS5.9AI score0.0041EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 11:37 p.m.2 views

CVE-2023-27163

PoC of SSRF on Request-Baskets CVE-2023-27163 This repository contains a Proof-of-Concept PoC for CVE-2023-27163, a Server-Side Request Forgery SSRF vulnerability discovered in request-baskets up to version 1.2.1. This vulnerability allows attackers to access network resources and sensitive...

6.5CVSS6.6AI score0.06591EPSS
SaveExploits29References4
Kitploit
Kitploit
added 2026/09/02 11:28 p.m.4 views

zenml-CVE-2024-2083-POC

CVE-2024-2083 – ZenML Prueba de Concepto de Lectura Arbitraria de Archivos Este repositorio demuestra cómo reproducir CVE-2024-2083 , una vulnerabilidad de Lectura Arbitraria de Archivos en ZenML. El problema permite a un atacante leer archivos del sistema de archivos del servidor abusando del...

9.9CVSS7.2AI score0.37487EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 11:04 p.m.5 views

CVE-2026-25513

CVE-2026-25513: FacturaScripts API ORDER BY 절의 SQL 인젝션 개요...

8.8CVSS6.1AI score0.00473EPSS
SaveExploits3
EUVD
EUVD
added 2026/09/02 8:00 p.m.4 views

EUVD-2026-70279

A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the component API Endpoint. This manipulation causes uncontrolled memory allocation. The attack can be initiated remotely. The exploit has been published and may be used. The vendor...

6.9CVSS5.6AI score
SaveExploits0References5
CVE
CVE
added 2026/09/02 8:00 p.m.7 views

CVE-2026-84857

sigoden aichat (versions up to 0.30.4) is affected by an uncontrolled memory allocation flaw in the API Endpoint component, specifically in the file src/serve.rs. The root cause is linked to request body handling, as indicated by the published report titled AIChat_Serve_Request_Body_DoS_Report . ...

6.9CVSS5.6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/02 5:38 p.m.10 views

CVE-2022-1388_PoC

F5 BIG-IP RCE exploitation CVE-2022-1388 POST 1: root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: :8443 Authorization: Basic YWRtaW46 Connection: keep-alive, X-F5-Auth-Token X-F5-Auth-Token: 0 "command": "run" , "utilCmdArgs": " -c 'id' " curl commandliner: root@kitploit: $ curl -i -s -k -X...

9.8CVSS7.4AI score0.99958EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/02 5:27 p.m.8 views

CVE-2026-7020

CVE-2026-7020 Произвольное чтение файлов в Ollama через path traversal в digest тензора. Похищает SSH host keys и любые другие файлы с доступного хоста Ollama за три неаутентифицированных API-вызова. Writeup: Соисследователь @gouldnicholas Использование root@kitploit: python3 poc.py Перебирает вс...

6.3CVSS5.9AI score0.00908EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/02 4:11 p.m.6 views

CVE-2026-30945-PoC

🗑️ CVE-2026-30945 StudioCMS IDOR — Arbitrary API Token Revocation Leading to Denial of Service NVD • Advisory • CWE-639 Overview The DELETE /studiocmsapi/dashboard/api-tokens endpoint in StudioCMS ≤ 0.3.0 allows any authenticated user with editor privileges or above to revoke API tokens belonging...

7.1CVSS5.8AI score0.00452EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/02 4:05 p.m.2 views

Burp_Collector

Burp Collector Burp Collector es una herramienta multiproceso diseñada específicamente para ayudar a pentesters y cazadores de bugs en pruebas de aplicaciones web/móviles. Con sus potentes capacidades, agiliza el proceso de recopilación y extracción de información de archivos de Burp Suite,...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 4:02 p.m.3 views

CVE-2022-36804

CVE-2022-36804 - Vulnerabilidad de Inyección de Comandos en Atlassian Bitbucket Server y Data Center ⚠️ Solo con fines educativos y de investigación de seguridad autorizada Autores del Exploit Original Muy agradecido al autor original del PoC Walnut Security Services Pvt. Ltd Descripción Varios...

8.8CVSS7.4AI score0.99077EPSS
SaveExploits25References1
Kitploit
Kitploit
added 2026/09/02 3:33 p.m.5 views

CVE-2026-23744-PoC

CVE-2026-23744-PoC MCP RCE Exploit Linux PoC to exploit /api/mcp/connect for remote command execution. Requirements root@kitploit: pip install requests Usage root@kitploit: python3 exploit.py Example: root@kitploit: python3 exploit.py mcp.something.com Configuration edit in script root@kitploit:...

9.8CVSS6.1AI score0.45026EPSS
SaveExploits39
Kitploit
Kitploit
added 2026/09/02 3:00 p.m.6 views

CVE-2026-23520

CVE-2026-23520 MCP API Remote Command Execution RCE PoC 📌 Overview This repository contains a Proof-of-Concept PoC exploit for a Remote Command Execution RCE vulnerability affecting applications that expose a vulnerable MCP API endpoint commonly /api/mcp/connect. The vulnerability allows executio...

9CVSS7.2AI score0.01672EPSS
SaveExploits6
Rows per page
Query Builder