Lucene search
+L

16669 matches found

Kitploit
Kitploit
•added 2026/09/25 10:19 a.m.•11 views

asclepius

Asclepius Asclepius validates backup integrity by restoring files and actively testing their recoverability. Instead of trusting metadata, it attempts to parse real file formats documents, images, videos, archives, emails to confirm backups can actually be read and are safe to use. Installation...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 8:37 a.m.•12 views

CVE-2026-44963

CVE-2026-44963 — Veeam Backup & Replication RCE Research repository bySentinelX — for authorized security testing and defensive purposes only. Overview Field| Detail ---|--- CVE ID| CVE-2026-44963 Vendor| Veeam Product| Backup & Replication Affected Versions| 12.3.2.4854 all v12 builds Fixed...

9.4CVSS9.1AI score0.00612EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/25 5:49 a.m.•13 views

CVE-2023-6553

CVE-2023-6553 PHP File Inclusion Leading to RCE — Backup Migration Plugin Plugin: Backup Migration backup-backup ≤ 1.3.7 CVSS: 9.8 Critical CWE: CWE-98 — Improper Control of Filename for Include/Require Statement Authentication Requirement: None Impact: Remote Code Execution 1. What is this...

9.8CVSS8.2AI score0.97846EPSS
SaveExploits16
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•70 views

QNAP HBS 3 - Broken Access Control

An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to...

10CVSS8.1AI score0.7825EPSS
SaveExploits0References4
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•61 views

Veeam Backup & Replication - Unauthenticated

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution RCE. id: CVE-2024-40711 info: name: Veeam Backup & Replication - Unauthenticated author: rootxharsh,iamnoooob,DhiyaneshDK severity: critical description: | A deserializati...

9.8CVSS8.9AI score0.90369EPSS
SaveExploits3References3
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•131 views

WordPress BackupGuard <1.6.0 - Authenticated Arbitrary File Upload

WordPress Backup Guard plugin before 1.6.0 is susceptible to authenticated arbitrary file upload. The plugin does not ensure that imported files are in SGBP format and extension, allowing high-privilege users to upload arbitrary files, including PHP, possibly leading to remote code execution. id:...

7.2CVSS7.8AI score0.84112EPSS
SaveExploits9References5
Kitploit
Kitploit
•added 2026/09/24 10:49 p.m.•7 views

CVE-2026-32238_RemoteCodeExecutionOpenEMR8.0.0

CVE-2026-32238 - Remote Code Execution in OpenEMR Weakness CWE-78 : Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize...

9.1CVSS8.3AI score0.02578EPSS
SaveExploits3References1
Kitploit
Kitploit
•added 2026/09/24 10:46 p.m.•12 views

CVE-2023-27532-RCE-Only

Forked Version RCE Only Forked repository and removed the credential leak part. Applied fixes for compilation. CVE-2023-27532 Proof of Concept code to exploit CVE-2023-27532 and either leak plaintext credentials or perform remote command execution. Overview For a detailed analysis of the...

7.5CVSS8.4AI score0.81326EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/24 9:18 p.m.•14 views

CVE-2026-21857

CVE-2026-21857: Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read Overview...

8.3CVSS5.9AI score0.00543EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/24 8:50 p.m.•13 views

Wubes

Wubes Architecture Prerequisites Usage Tricks Firefox sandbox References Wubes Wubes is like Qubes but for Windows. The idea is to leverage the Windows Sandbox technology to spawn applications in isolation. We currently support spawning a Windows Sandbox for the following applications: Firefox...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 8:18 p.m.•10 views

backup_dc_registry

Copia de seguridad del registro de Backup Operator para comprometer el dominio Un POC simple que abusa de los privilegios de Backup Operator para volcar de forma remota las hives SAM, SYSTEM y SECURITY. Créditos de la investigación: @filipdragovic Portado del PoC de Windows de @mpgn Uso Esta prue...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/24 7:12 p.m.•9 views

CVE-2024-38077-POC

CVE-2024-38077-POC 伪代码,备份用,非原创,请关注原文作者: 漏洞作者已经发布分析文章第一篇:https://sites.google.com/site/zhiniangpeng/blogs/MadLicense...

9.8CVSS8.4AI score0.84232EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/24 7:06 p.m.•11 views

veritas-backup

This repository does not have a README...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 7:04 p.m.•16 views

halo-2.25.4-backup-write-CVE-2026-67920

Halo CMS Backup Restore Arbitrary File Write Vulnerability Summary A critical arbitrary file write vulnerability exists in the backup restoration functionality of Halo CMS versions up to 2.25.4. The restoreWorkdir method in MigrationServiceImpl.java copies the workdir/ directory from a...

6.1AI score0.00941EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 7:01 p.m.•14 views

HTB-Snapped-Writeup

HTB-Snapped-Writeup HTB Snapped — Hard Linux machine writeup. CVE-2026-27944 Nginx UI unauthenticated backup disclosure chained with CVE-2026-3888 snapd race condition LPE to achieve full system compromise. HTB: Snapped — Writeup Difficulty: Hard OS: Linux Ubuntu 24.04 Release Date: 23 Mar 2026...

9.8CVSS7.9AI score0.01014EPSS
SaveExploits18
Kitploit
Kitploit
•added 2026/09/24 7:01 p.m.•15 views

CVE-2026-27944

CVE-2026-27944 A proof of concept script for CVE-2026-27944, a critical exploit allowing nginx-ui backups to be decrypted DISCLAIMER This Proof of Concept is for educational and ethical security testing purposes only. It was developed to demonstrate the technical root cause of CVE-2026-27944 as...

9.8CVSS8.1AI score0.01014EPSS
SaveExploits13
Kitploit
Kitploit
•added 2026/09/24 6:09 p.m.•22 views

CVE-2026-30345

CVE-2026-30345 Proof of Concept Arbitrary file write vulnerability in CTFd 3.8.2 backup import functionality. Quick Start Before running cve202630345bashrcpoc.py Make sure to update the values accordingly for your exploit. Values such as RHOST, ATTACKER IP or PORT, and the credentials used for th...

7.5CVSS6.2AI score0.00513EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 6:09 p.m.•11 views

BACkupCVE-2026-29971

This repository does not have a README...

5.8AI score0.00359EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/24 4:59 p.m.•13 views

CVE-2026-27944

CVE-2026-27944 POC: Nginx UI Unauthenticated Backup Download + Dashboard Access This repository contains an enhanced Proof of Concept POC exploit for CVE-2026-27944 , a critical vulnerability in Nginx UI. The vulnerability allows an unauthenticated attacker to download system backups via the...

9.8CVSS8AI score0.01014EPSS
SaveExploits13
Kitploit
Kitploit
•added 2026/09/24 4:58 p.m.•16 views

CVE-2026-33032-nginx-ui-vuln-lab

CVE-2026-27944 + CVE-2026-33032 — nginx-ui Zero-Credential RCE Lab Disclaimer: This repository is intended for educational and authorised security research purposes only. All techniques demonstrated here should only be used against systems you own or have explicit written permission to test. The...

9.8CVSS8.2AI score0.02523EPSS
SaveExploits16
Rows per page
Query Builder