Lucene search
+L

515800 matches found

Kitploit
Kitploit
added 2026/08/31 5:13 a.m.5 views

CVE-2025-55182

CVE-2025-55182 React2Shell CVE-2025-55182 React RCE Test Program 🔒 CVE-2025-55182 Interactive RCE Scanner This script is a vulnerability verification tool targeting CVE-2025-55182, a critical remote code execution RCE vulnerability in React 19.x's React Server Components RSC . This tool determine...

10CVSS7.4AI score0.99802EPSS
SaveExploits388
Kitploit
Kitploit
added 2026/08/31 5:12 a.m.7 views

CVE-2026-23744-PoC

CVE-2026-23744-PoC Poc sobre vulnerabilidad en MCP Server. automatizado para la parte del post con el cuerpo correcto. path vulnerable: root@kitploit: /api/mcp/connect metodo por curl: root@kitploit: curl http://evil.com:6274/api/mcp/connect --header "Content-Type: application/json" --data...

9.8CVSS6.1AI score0.45026EPSS
SaveExploits39
Kitploit
Kitploit
added 2026/08/31 5:12 a.m.3 views

CVE-2026-38422

CVE-2026-38422: Remote Code Execution via Combined Buffer Overflows in Tasmota fetchjpg CVE: CVE-2026-38422 Severity: Critical CVSS 9.8 Product: Arendst Tasmota Affected Version: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Function: fetchjpg Author: Saidakbarxon Maxsudxonov...

7.3CVSS6.7AI score0.00813EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/08/31 5:12 a.m.2 views

CVE-2026-42945

CVE-2026-42945 — NGINX Rift Heap Buffer Overflow in NGINXngxhttprewritemodule...

9.2CVSS7.2AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/08/31 5:11 a.m.2 views

cve-2024-0012_9474-panos_authbypass_reproduction

CVE-2024-0012 / CVE-2024-9474 — Bypass de autenticación en PAN-OS → Cadena de escalada de privilegios CVE| Descripción| CVSS ---|---|--- CVE-2024-0012| Bypass de autenticación de la interfaz de gestión de PAN-OS| 9.3 CVE-2024-9474| Escalada de privilegios en PAN-OS| 6.9 Cuando se encadenan, estas...

9.8CVSS7.3AI score0.99718EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/08/31 5:10 a.m.4 views

CVE-2026-5364

CVE-2026-5364 CVE-2026-5364 is a CVSS 8.1 High Unauthenticated Arbitrary File Upload vulnerability in the Drag and Drop File Upload for Contact Form 7 CVE-2026-5364 — CF7 Drag & Drop File Upload RCE Unauthenticated Arbitrary File Upload viasanitizefilename Bypass CVSS 8.1 High | Affected: = 1.1.3...

8.1CVSS5.9AI score0.0106EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 5:10 a.m.4 views

CVE-2026-4883

CVE-2026-4883: Piotnet Forms Pro = 2.1.40 - Unauthenticated Arbitrary File Upload → RCE The vulnerability stems from inadequate file type validation in the piotnetformsajaxformbuilder function. The plugin employs an incomplete extension blacklist blocking only php, phpt, php5, php7, and exe while...

9.8CVSS6AI score0.0081EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 5:09 a.m.3 views

CVE-2026-23744-MCPJAM-RCE-exploit

CVE-2026-23744-MCPJAM-RCE-exploit Esta prueba de concepto en Python tiene como objetivo un servicio MCP Protocolo de Contexto del Modelo vulnerable expuesto por la aplicación objetivo. La vulnerabilidad permite a un atacante proporcionar parámetros de configuración del servidor arbitrarios a trav...

9.8CVSS6.3AI score0.45026EPSS
SaveExploits39
Kitploit
Kitploit
added 2026/08/31 5:09 a.m.3 views

cve-2025-50946

cve-2025-50946 Exploit script for CVE-2025-50946 OliveTin get-theme RCE. The character requirements are finnicky and many commands that include multiple arguments may not be executed properly. I haven't taken the time to run down the root cause or try to make the script more robust. Holler at me ...

6.5CVSS7.2AI score0.013EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/08/31 5:09 a.m.4 views

Rocket-Chat-3.12.1-PoC-CVE-2021-22911-

Rocket-Chat-3.12.1-PoC-CVE-2021-22911- 1. Go login page 2. Register new account, set password as P@$$w0rd!1234 3. Run script -u = Low priv user email No 2fa -a = Administrator email -t = URL Eg: http://rocketchat.local python3 rocketchat.py -u [email protected] -a [email protected] -t...

9.8CVSS7.4AI score0.95242EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/08/31 5:08 a.m.4 views

CVE-2018-5767-AC9

Research and Author David Baker Article: Sometimes Exploits Need Patches Too! Working Through a Change of Address External link CVE-2018-5767-AC9 An implementation of a proof-of-concept for CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 root@kitploit: The following is an actualization of...

9.8CVSS7.1AI score0.47372EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/31 5:08 a.m.5 views

CVE-2025-55182

CVE-2025-55182 — React Server Components Unauthenticated RCE Severity: Critical — CVSS 10.0 CWE: CWE-502 Deserialization of Untrusted Data Vendor: Meta Facebook Disclosed: December 3, 2025 Overview CVE-2025-55182 is a maximum-severity unauthenticated remote code execution RCE vulnerability in Rea...

10CVSS7.7AI score0.99802EPSS
SaveExploits388
Kitploit
Kitploit
added 2026/08/31 5:08 a.m.6 views

CVE-2023-46604-RCE

CVE-2023-46604-RCE Implementación en Python de la ejecución remota de código no autenticada en Apache ActiveMQ Configuración y Explotación nc -lvnp 4444 - Iniciar listener python3 -m http.server 8080 - Servir poc.xml que contiene tu payload python3 CVE-2023-46604-RCE.py -i -p -u...

10CVSS6.9AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/08/31 5:08 a.m.2 views

CVE-2026-23744

CVE-2026-23744 Description MCPJam inspector is a local-first development platform for MCP servers. The versions =1.4.2 are vulnerable to remote code execution vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Fo...

9.8CVSS6.6AI score0.45026EPSS
SaveExploits39
Kitploit
Kitploit
added 2026/08/31 5:08 a.m.2 views

CVE-2023-44764_ConcreteCMS-Stored-XSS---Site_Installation

ConcreteCMS Stored XSS v.9.2.1 Author: Sergio Description: Cross Site Scripting vulnerability in ConcreteCMS v.9.2.1 allows a local attacker to execute arbitrary code via a crafted script to the SITE parameter from installation or in the Settings. Attack Vectors: Scripting A vulnerability in the...

5.4CVSS6.3AI score0.005EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 5:08 a.m.4 views

CVE-2026-48962

Resumen Una vulnerabilidad de inyección en eval en File::GlobMapper::getFiles permite a cualquier atacante que pueda controlar el argumento fileglob de salida pasado a IO::Compress::Gzip::gzip, IO::Compress::Zip::zip, o cualquier función relacionada, ejecutar código Perl arbitrario en el contexto...

7.8CVSS7.1AI score0.00292EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/31 5:07 a.m.5 views

CVE-2026-9082

CVE-2026-9082 Unauthenticated SQL injection in Drupal Core on PostgreSQL via POST /user/login, escalated to remote code execution through PostgreSQL sessionpreloadlibraries. Unlike existing public exploits that target JSON:API, this uses the login endpoint — always available, no modules or...

9.8CVSS7.4AI score0.87892EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/31 5:07 a.m.5 views

apache-cve-2021-42013-lab

Apache HTTP Server 2.4.49 Path Traversal y Ejecución Remota de Código CVE-2021-42013 Sobre el Proyecto En este proyecto mostré la vulnerabilidad CVE-2021-42013 presente en Apache HTTP Server 2.4.49 en un entorno de laboratorio que creé usando Docker. El objetivo es examinar en un entorno controla...

9.8CVSS7.3AI score0.99964EPSS
SaveExploits190
Kitploit
Kitploit
added 2026/08/31 5:07 a.m.8 views

CVE-2026-39023

CVE-2026-39023 RCE poc - RESPONSIVE filemanager v.9.14.0 last version - not patched Github project : https://github.com/trippo/ResponsiveFilemanager Requirements: Nothing is required, this exploit is unauthenticated. The Responsive Filemanager application is a web-based file management tool used ...

6.4AI score
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/31 5:07 a.m.4 views

CVE-2026-23744

CVE-2026-23744 CVE-2026-23744 RCE Mientras analizaba esta vulnerabilidad, descubrí que MCPJam Inspector exponía el endpoint /api/mcp/connect a la red vinculándose a 0.0.0.0. Este endpoint acepta un objeto JSON que contiene serverConfig, incluidos los campos command y args. La aplicación tenía la...

9.8CVSS6.1AI score0.45026EPSS
SaveExploits39
Rows per page
Query Builder