Lucene search
+L

171921 matches found

Kitploit
Kitploit
added 2026/08/27 2:44 a.m.3 views

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 python3 check 0708 Esiste una vulnerabilità di esecuzione di codice in remoto in Remote Desktop Services – precedentemente noti come Servizi Terminal – quando un utente malintenzionato non autenticato si connette al sistema di destinazione utilizzando RDP e invia...

10CVSS8AI score0.99999EPSS
SaveExploits126
Kitploit
Kitploit
added 2026/08/27 2:44 a.m.3 views

CVE-2023-46805_CVE-2024-21887

CVE-2023-46805 Una vulnerabilità di bypass dell'autenticazione nel componente web di Ivanti ICS 9.x, 22.x e Ivanti Policy Secure consente a un attaccante remoto di accedere a risorse limitate bypassando i controlli. usage: ./CVE-2023-46805.sh https://fqdn:port ./CVE-2023-46805.sh...

9.1CVSS8.9AI score0.99999EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/08/27 2:43 a.m.4 views

CVE-2026-41940

CVE-2026-41940: Bypass de Autenticação do cPanel/WHM Alvo Único e Múltiplos Alvos Aviso Legal: Este documento e o script associado exploit.py são fornecidos estritamente para fins educacionais, pesquisa de segurança e testes de penetração autorizados. Não use este software contra sistemas que voc...

9.8CVSS8.9AI score0.98527EPSS
SaveExploits74
Kitploit
Kitploit
added 2026/08/27 2:42 a.m.2 views

CVE-2024-30851-jasmin-ransomware-path-traversal-poc

Jasmin-Ransomware-Webpanel: Path-Traversal-PoC EducationalPurposes https://github.com/codesiddhant/Jasmin-Ransomware Ich habe eine Pre-Auth-Pfad-Traversal-Schwachstelle im Jasmin-Ransomware-Webpanel CVE-2024-30851 entdeckt, die es einem Angreifer ermöglicht, Panel-Betreiber zu deanonymisieren und...

6.5CVSS5.3AI score0.04611EPSS
SaveExploits6References2
Kitploit
Kitploit
added 2026/08/27 2:40 a.m.2 views

sipcheck

SIPCheck v.3.0 Introduzione SIPCheck è uno strumento che controlla l'autenticazione degli utenti di Asterisk e banna automaticamente se un utente o bot tenta di registrarsi o effettuare chiamate utilizzando password errate. A differenza di Fail2Ban, SIPCheck gestisce non solo l'attaccante, ma anc...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 2:39 a.m.2 views

CVE-2022-33891

CVE-2022-33891 - Apache Spark कमांड इंजेक्शन भेद्यता ⚠️ केवल शैक्षिक और अधिकृत सुरक्षा अनुसंधान उद्देश्यों के लिए मूल एक्सप्लॉइट लेखक मूल PoC लेखक AkbarTrilaksana के बहुत आभारी हैं विवरण Apache Spark UI, कॉन्फ़िगरेशन विकल्प spark.acls.enable के माध्यम से ACLs सक्षम करने की संभावना प्रदान करता है।...

8.8CVSS8.2AI score0.93076EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/08/27 2:36 a.m.2 views

CVE-2026-5229

CVE-2026-5229 CVE-2026-5229: Form Notify Auth Bypass via LINE OAuth Callback CVSS 9.8 Form Notify — Сканер обхода аутентификации LINE OAuth Плагин: Form Notify form-notify Тип уязвимости: Неаутентифицированный обход аутентификации LINE OAuth → Захват учетной записи Оценка CVSS: 9.8 критический...

9.8CVSS5.2AI score0.0073EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 2:34 a.m.5 views

CVE-2026-29000

Script semplice che sfrutta CVE-2026-29000. Tutto ciò di cui hai bisogno è la chiave pubblica in formato PEM e puoi usarlo. Per maggiori informazioni sulla vulnerabilità leggi: https://www.codeant.ai/security-research/pac4j-jwt-authentication-bypass-public-key...

9.3CVSS7.3AI score0.05856EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/27 2:34 a.m.8 views

telnet_scan

Scanner de vulnérabilités Telnet CVE-2026-24061 & CVE-2026-32746 Un outil d'évaluation de sécurité basé sur Python qui détecte et le cas échéant exploite deux vulnérabilités critiques dans GNU InetUtils telnetd : CVE-2026-24061 – Contournement d'authentification par injection de variable...

9.8CVSS8.8AI score0.97878EPSS
SaveExploits73References1
Kitploit
Kitploit
added 2026/08/27 2:34 a.m.6 views

CVE-2018-10933

CVE-2018-10933 libssh Server-Authentifizierungs-Bypass-Schwachstelle CVE-2018-10933 root@kitploit: libssh是一个提供ssh相关接口的开源库,包含服务端、客户端等。其服务端代码中存在一处逻辑错误,攻击者可以在认证成功前发送MSGUSERAUTHSUCCESS消息,绕过认证过程,未授权访问目标SSH服务器。 0x00 docker für libssh-Schwachstelle...

9.1CVSS7.5AI score0.91789EPSS
SaveExploits13References1
Kitploit
Kitploit
added 2026/08/27 2:34 a.m.3 views

CVE-2020-1958

CVE-2020-1958 PoC CVE-2020-1958 è una vulnerabilità di iniezione LDAP ad alta gravità in Apache Druid 0.17.0. Consente a un attaccante di aggirare il filtro di ricerca LDAP e di recuperare qualsiasi valore degli attributi LDAP degli utenti presenti sul server LDAP. Dal bollettino ufficiale di...

6.5CVSS6.3AI score0.04565EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/27 2:33 a.m.2 views

CVE-2025-29927

Einführung Durch das Fälschen des x-middleware-subrequest-Anfrageheaders wird der Next.js-Middleware-Authentifizierungsmechanismus umgangen, was einen unbefugten Zugriff auf geschützte Routen ermöglicht. Umgebungseinrichtung Der Projektquellcode stammt von P神, Next.js-Version 15.2.2 Für Next.js...

9.1CVSS7.2AI score0.99203EPSS
SaveExploits58References2
Kitploit
Kitploit
added 2026/08/27 2:30 a.m.2 views

CVE-2022-40684

CVE-2022-40684 利用漏洞 CVE-2022-40684 的工具(FortiOS / FortiProxy / FortiSwitchManager - 管理界面认证绕过)...

9.8CVSS8.7AI score0.99984EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/08/27 2:27 a.m.5 views

CVE-2025-24071-msfvenom

CVE-2025-24071: Perdita di hash NTLM tramite file .library-ms Modulo Metasploit Questo repository contiene un modulo Metasploit per sfruttare CVE-2025-24071, una vulnerabilità in Esplora file di Windows che perde hash NTLM quando un file .library-ms dannoso viene estratto da un archivio ZIP...

6.5CVSS7.3AI score0.24638EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/08/27 2:27 a.m.2 views

Drupalgeddon-Python3

Drupalgeddon Édition Python3 Un POC réécrit pour le CVE-2014-3704, réalisé dans le cadre de ma formation CPTS sur HackTheBox. https://nvd.nist.gov/vuln/detail/CVE-2014-3704 Le CVE-2014-3704, connu sous le nom de Drupalgeddon, affecte les versions 7.0 à 7.31 et a été corrigé dans la version 7.32. ...

7.5CVSS8AI score0.99974EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/08/27 2:26 a.m.5 views

CVE-2017-5689-Checker

CVE-2017-5689-जाँचकर्ता यह CVE-2017-5689 भेद्यता के लिए एक स्वचालित जाँचकर्ता-शोषण है। यह भेद्यता Intel AMT पैनल में प्रमाणीकरण को दरकिनार करने से संबंधित है। लेख: https://habr.com/ru/post/328232 हमारा टेलीग्राम = t.me/anarchysquad Shodan dork: root@kitploit: port: "16992" intel पी.एस.: IP पतों क...

10CVSS7.3AI score0.92189EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/27 2:26 a.m.3 views

poc-cve-2025-55182

CVE-2025-55182 React2Shell - Prova di concetto ⚠️ ATTENZIONE: Questo repository è destinato esclusivamente a scopi educativi e di ricerca sulla sicurezza. Non utilizzare questo exploit contro sistemi di cui non sei proprietario o per i quali non hai esplicita autorizzazione al test. Panoramica...

10CVSS7.4AI score0.99802EPSS
SaveExploits385
Kitploit
Kitploit
added 2026/08/27 2:25 a.m.2 views

cve-2026-23550-poc

CVE-2026-23550 PoC Um pequeno testador em Bash para CVE-2026-23550. Ele consulta o endpoint de login do conector modular WordPress afetado, verifica se um cookie wordpressloggedin é emitido e tenta confirmar o acesso ao painel de administração. Aviso: Use esta ferramenta apenas em sistemas que vo...

9.8CVSS5.7AI score0.20631EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/27 2:24 a.m.1 views

CVE-2025-60188-Atarim-Plugin-Exploit

CVE-2025-60188-Atarim-Plugin-Exploit CVE-2025-60188: تجاوز المصادقة في إضافة Atarim عبر تزوير HMAC نظرة عامة يحتوي هذا المستودع على إثبات المفهوم PoC وتحليل فني للثغرة CVE-2025-60188، وهي ثغرة حرجة تم اكتشافها في إضافة Atarim الخاصة بووردبريس. تسمح هذه الثغرة للمستخدمين غير المصادق عليهم بتجاوز...

7.5CVSS5.2AI score0.03485EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/27 2:23 a.m.2 views

CVE-2023-51764

CVE-2023-51764 Postfix SMTP Smuggling - POC Script Expect invia un'email legittima, ma all'interno dell'email ci sono molte altre email mittenti, destinatari, oggetto, ecc. diversi. L'email iniziale viene controllata per SPF/DKIM/DMARC, le altre all'interno non lo sono! uso: ./cve-2023-51764.sh...

5.3CVSS5.3AI score0.02598EPSS
SaveExploits4
Rows per page
Query Builder