Lucene search
+L

9460 matches found

Kitploit
Kitploit
added 2026/09/22 2:48 a.m.10 views

CVE-2019-12725

CVE-2019-12725 ZeroShell has a command execution vulnerability that allows attackers to execute arbitrary commands Tool Usage python3 CVE-2019-12725.py -u http://127.0.0.1:1111 Single URL test python3 CVE-2019-12725.py -c http://127.0.0.1:1111 cmdshell mode python3 CVE-2019-12725.py -f url.txt...

10CVSS8.7AI score0.78749EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/21 11:27 p.m.11 views

CVE-2022-1388-Exploit-POC

CVE-2022-1388 ЭКСПЛОИТ POC F5 BIG IP root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: REDACTED:8083 Content-Length: 45 Connection: Keep-Alive,X-F5-Auth-Token Cache-Control: max-age=0 X-F5-Auth-Token: SherlockSecure Content-Type: application/json Authorization: Basic YWRtaW46aG9yaXpvbjM=...

9.8CVSS8.6AI score0.99958EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/21 9:11 p.m.8 views

CVE-2023-28324

CVE-2023-28324 POC для CVE-2023-28324, затрагивающего Ivanti EPM. Технический анализ Технический анализ первопричины уязвимости можно найти в нашем блоге: https://www.horizon3.ai/attack-research/attack-blogs/cve-2023-28324-deep-dive/ Краткое описание Этот POC эксплуатирует уязвимость в...

9.8CVSS8.7AI score0.12904EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/21 8:25 p.m.14 views

CVE-2025-26264

CVE-2025-26264 CVE-2025-26264 — GeoVision GV-ASWeb версии 6.1.2.0 или ниже содержит уязвимость удалённого выполнения кода RCE в функции «Настройки уведомлений» Notification Settings. Аутентифицированный злоумышленник с привилегиями «Системные настройки» в ASWeb может использовать эту уязвимость д...

8.8CVSS6.5AI score0.23032EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/21 7:56 p.m.10 views

CVE-2023-38646

Metabase Pre-Auth RCE POC - CVE-2023-38646 Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server. I have written the script directly to gain reverse shell on the attacker's machine. Usage The script require the...

9.8CVSS9AI score0.98677EPSS
SaveExploits37References1
Kitploit
Kitploit
added 2026/09/21 6:48 p.m.7 views

CVE-2007-2447

CVE-2007-2447 Samba 3.0.0 - 3.0.25rc3 are subject for Remote Command Injection Vulnerability CVE-2007-2447, allows remote attackers to execute arbitrary commands by specifying a username containing shell meta characters...

6CVSS8.6AI score0.49759EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/21 6:38 p.m.9 views

evil-rmi-server

evil-rmi-server An evil RMI server that can launch an arbitrary command. May be useful for CVE-2021-44228 in a local privesc scenario Build ./gradlew bootJar Run root@kitploit: Usage: java -jar build/libs/evilRMIServer-1.0-SNAPSHOT.jar -hV -p= An evil RMI Server to help construct and run an...

10CVSS7.8AI score0.99999EPSS
SaveExploits375
CVE
CVE
added 2026/09/21 5:19 p.m.10 views

CVE-2026-93012

Email::Sender::Transport::Sendmail versions before 2.602 for Perl allow arbitrary command execution on Windows sending a message whose envelope address reaches the shell in sendmailpipe. On MSWin32 the envelope sender and every recipient go into a single command string, which open passes to a...

9.8CVSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/09/21 5:19 p.m.4 views

CVE-2026-93012 Email::Sender::Transport::Sendmail versions before 2.602 for Perl allow arbitrary command execution on Windows sending a message whose envelope address reaches the shell in _sendmail_pipe

Email::Sender::Transport::Sendmail versions before 2.602 for Perl allow arbitrary command execution on Windows sending a message whose envelope address reaches the shell in sendmailpipe. On MSWin32 the envelope sender and every recipient go into a single command string, which open passes to a...

SaveExploits0References2
Kitploit
Kitploit
added 2026/09/21 4:58 p.m.9 views

CVE-2021-3317

Information Exploit Title: Klog Server 2.4.1 - Command Injection Authenticated Date: 26.01.2021 Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.klogserver.com/ Version: 2.4.1 Description: https://docs.unsafe-inline.com/0day/klog-server-authenticated-command-injection CVE:...

8.8CVSS8AI score0.41394EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/21 4:00 p.m.11 views

CVE-2015-3224

CVE-2015-3224 Ruby-On-Rails Web Console RCE What is this? This is a metasploit module for Metasploit. I already have this module. Yes, this is packaged into metasploit. But with that module you can't get arbitrary command execution. I mean, you can only establish reverse/bind shell payloads with...

4.3CVSS6.5AI score0.44708EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/21 3:12 p.m.12 views

git-clean-filter

This is a documented known issue, but I found this during my research & its pretty useful for RT/PT. Summary: The filter..clean directive in .git/config points at a script and .gitattributes binds that filter to a tracked file. Whenever git renders a real git diff of that file it runs the worktre...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/21 1:39 p.m.6 views

CVE-2024-29269-EXPLOIT

CVE-2024-29269 - Telesquare TLR-2005KSH Remote Code Execution RCE An issue has been identified in Telesquare TLR-2005Ksh versions 1.0.0 and 1.1.4 that may allow attackers to execute arbitrary system commands by exploiting the Cmd parameter. This vulnerability could potentially enable unauthorized...

8.8CVSS7.2AI score0.06294EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/21 12:55 p.m.7 views

privesc-CVE-2010-0426

Sudo 1.6.x=1.6.9p21 and 1.7.x=1.7.2p4 Local Privilege Escalation Sudo su "do" allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all commands and arguments. Vulnerable environment To setup a vulnerable environment f...

6.9CVSS7.6AI score0.01082EPSS
SaveExploits2
CVE
CVE
added 2026/09/21 12:07 p.m.11 views

CVE-2026-84285

An OS Command Injection vulnerability in Tuleap Enterprise Edition (versions 17.3 through 17.5) allows a network-based attacker with low privileges to execute arbitrary commands on the server , rated CVSS 8.8 (HIGH) with full impact to confidentiality, integrity, and availability. The vulnerabili...

8.8CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/21 12:07 p.m.5 views

EUVD-2026-83901

An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server...

8.8CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/21 12:07 p.m.37 views

CVE-2026-84285 OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5

An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server...

8.8CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 10:22 a.m.8 views

smb_usermap

smbusermap A simple exploit for CVE-2007-2447, present in Samba 3.0.20. You can exploit this vuln with even less than this, for instance, with smbclient, but I think it's tough to do complex commands, since a lot of special chars probably get eaten, but a simple command reboot in this case can be...

6CVSS8.2AI score0.49759EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/21 8:11 a.m.9 views

CVE-2022-23935

CVE-2022-23935 The Exiftool software program, in versions prior to 12.38, has a security vulnerability that can be exploited through a specially crafted filename. This vulnerability allows for command injection, where an attacker can execute arbitrary commands on the system by appending a pipe...

7.8CVSS7.7AI score0.07575EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/21 7:07 a.m.15 views

CVE-2024-42448-RCE

CVE-2024-42448-RCE Veeam Service Provider Console VSPC remote code execution. Download link here Details: is a critical vulnerability identified in the Veeam Service Provider Console VSPC with a CVSS score of 9.9. This vulnerability allows for remote code execution RCE. About: files.zip here you'...

9.9CVSS9AI score0.19932EPSS
SaveExploits1
Rows per page
Query Builder