Lucene search
+L

343222 matches found

Kitploit
Kitploit
added 2026/09/21 4:22 p.m.18 views

vex8s

Vex8s this logo is not AI generated Vex8s generates VEX documents by correlating container vulnerabilities with Kubernetes settings to determine which CVEs are actually exploitable in your cluster. Please note, this is an experimental project. Things might change quickly. How It Works The project...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/21 3:20 p.m.12 views

http-vuln-cve2019-14322.nse

http-vuln-cve2019-14322.nse Nmap NSE script to detect CVE-2019-14322 of Pallets Werkzeug path traversal via SharedDataMiddleware mishandles drive names such as C: in Windows pathnames Description CVE-2019-14322 - A vulnerability was found in Pallets Werkzeug up to 0.15.4. It has been declared as...

7.5CVSS7AI score0.55803EPSS
SaveExploits7References2
Kitploit
Kitploit
added 2026/09/21 3:14 p.m.188 views

cve-collector

CVE-Collector Simple Latest CVE Collector Written in Python There are various methods for collecting the latest CVE Common Vulnerabilities and Exposures information. This code was created to provide guidance on how to collect, what information to include, and how to code when creating a CVE...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 12:09 p.m.11 views

gentlemen-decryptor

The Gentlemen Ransomware Decryptor The first publicly available decryption method for The Gentlemen ransomware. The Gentlemen also known as hastalamuerte is currently the most active ransomware-as-a-service RaaS operation globally, with 320+ confirmed victims as of Q1 2026. Until now, every major...

6.1AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/21 11:33 a.m.33 views

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install root@kitploit: $ pip install hsecscan Usage root@kitploit: $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 10:20 a.m.13 views

CVE-2020-2034-POC

CVE-2020-2034-POC Determine the Version Running on the Palo Alto Network Firewall for the Global Protect Portal Recently a lot of critical vulnerabilities were announced by Palo Alto Networks here: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date This is a PoC to...

9.3CVSS7.7AI score0.07152EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/21 10:04 a.m.14 views

lpe-toolkit

Linux LPE Toolkit Multi-architecture privilege escalation toolkit with 24 exploits amd64 pre-built; other architectures compiled via gcc at runtime. Supports amd64, arm64, 386, mips, mipsle, mips64, and mips64le. Detects kernel version, filters patched exploits, and tries each in order until root...

8.8CVSS7.6AI score0.03153EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/21 9:22 a.m.14 views

CVE-2026-0047-poc

CVE-2026-0047: Missing Permission Check in ActivityManagerService Heap of bitmaps stolen from every running app — zero permissions, zero user interaction. A missing enforceCallingOrSelfPermissionDUMP check in ActivityManagerService.dumpBitmapsProto allows any installed app to exfiltrate UI bitmap...

8.4CVSS6.3AI score0.00138EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/21 8:46 a.m.7 views

CVE-2026-21858

CVE-2026-21858 n8n Workflow Automation Platform - Remote Code Execution A security research tool for detecting CVE-2026-21858, a critical remote code execution vulnerability in the n8n workflow automation platform. Table of Contents Vulnerability Summary Affected Versions Technical Analysis...

10CVSS9.3AI score0.78447EPSS
SaveExploits24References3
Kitploit
Kitploit
added 2026/09/21 8:37 a.m.11 views

CVE-2026-2587-Exploit-POC

CVE-2026-2587 Exploit PoC — Eclipse GlassFish EL Injection RCE Validator Safe PoC validator for CVE-2026-2587, a critical EL Injection / RCE issue affecting Eclipse GlassFish admin console gadget handling via /common/gadgets/gadget.jsf. This tool helps security teams validate GlassFish...

9.6CVSS5.9AI score0.00646EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/21 8:23 a.m.15 views

cwe-tool

cwe-tool A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration. Official OWASP CWE Toolkit Page Install...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/21 7:54 a.m.13 views

CVE-2025-65320

CVE-2025-65320 Title Cleartext Storage of Sensitive Licensing Material in Process Memory in Abacre Restaurant Point of Sale POS Overview A vulnerability exists in Abacre Restaurant Point of Sale POS versions = 15.0.0.1656 where sensitive licensing data is stored in cleartext in process memory...

7.5CVSS6AI score0.00245EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/21 7:40 a.m.15 views

CVE-2026-26980-Ghost-CMS-Api

CVE-2026-26980 Ghost CMS SQL Injection PoC This repository contains a Go-based proof-of-concept tool for demonstrating and validating the Ghost CMS Content API SQL injection vulnerability described by CVE-2026-26980. The implementation is based on the exploit flow implemented in the main Go sourc...

9.4CVSS8.4AI score0.70208EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/21 6:16 a.m.8 views

Craftcms-PoC-CVE-2026-31266

CVE-2026-31266 - Craft CMS Missing Authorization CVE Information Field| Value ---|--- CVE ID| CVE-2026-31266 Vendor| Pixel & Tonic Product| Craft CMS Affected Versions| self::ALLOWANONYMOUSLIVE | self::ALLOWANONYMOUSOFFLINE, ; Proof of Concept root@kitploit: With allowAdminChanges=false curl -X...

7.3CVSS6AI score0.00283EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/21 6:02 a.m.8 views

CVE-2025-27893

CVE-2025-27893: External Control of Assumed-Immutable Web Parameter in Archer Platform Description In Archer Platform 6 through 6.14.00202.10024, an authenticated user with record creation privileges can manipulate immutable fields, such as the creation date, by intercepting and modifying a Copy...

4.3CVSS5.9AI score0.00392EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/21 4:42 a.m.9 views

CVE-2025-66802

CVE-2025-66802 Sourcecodester Covid-19 Contact Tracing System 1.0 – Unrestricted File Upload Leading to Remote Code Execution Description Sourcecodester Covid-19 Contact Tracing System version 1.0 contains a vulnerability classified as Unrestricted Upload of File with Dangerous Type CWE-434. The...

9.8CVSS7.2AI score0.009EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/21 4:40 a.m.9 views

CVE-2026-47883

CVE-2026-47883: Spring Framework UrlHandlerFilter Open Redirect PoC This repository is a minimal reproduction PoC for CVE-2026-47883, published as an official Spring security advisory. Official advisory: https://spring.io/security/cve-2026-47883/ Official title: Spring Framework Open Redirect in...

6.1CVSS5.9AI score0.00187EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 4:22 a.m.7 views

CVE-2026-67183-Unauthenticated-Memory-Leak-Leads-To-Memory-Exhaustion-TinyWeb-

Security Advisory: Unauthenticated Memory Leak Leads To Memory Exhaustion TinyWeb Assigned CVE ID: CVE-2026-67183 Summary TinyWeb allocates several objects while parsing each request and never frees them. The request and header structures have no destructors, and nothing deletes them after the...

8.7CVSS5.9AI score0.00367EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/21 4:20 a.m.8 views

cve-2017-5941-poc-docker-lab

CVE-2017-5941 — node-serialize Untrusted Deserialization RCE PoC ⚠️ For lab / self-assessment only. Use only on systems you own or are authorized to test. This repository provides: A minimal PoC script to reproduce CVE-2017-5941 against a vulnerable Node.js app that uses node-serialize = 0.0.4. Tw...

9.8CVSS8.4AI score0.61025EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/21 3:51 a.m.14 views

maswe

OWASP Mobile Application Security Weakness Enumeration MASWE The OWASP Mobile Application Security Weakness Enumeration MASWE is a list of common security and privacy weaknesses in mobile applications. It is intended to be used as a reference for developers, security researchers, and security...

5.9AI score
SaveExploits0References7
Rows per page
Query Builder