Lucene search
+L

517914 matches found

Kitploit
Kitploit
added 2026/09/04 1:25 p.m.7 views

Mirth-Connect-CVE-2023-43208

CVE-2023-43208: Unauthenticated Remote Code Execution RCE in NextGen Mirth Connect This exploit leverages a critical deserialization vulnerability within Mirth Connect's XStream engine. It stems from an incomplete patch for CVE-2023-37679, enabling unauthenticated arbitrary code execution across...

9.8CVSS8.5AI score0.82708EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/04 1:25 p.m.3 views

Exploiting-a-vulnerability-using-reverse-shell

Fundamentos de Seguridad de la Información — Proyecto Primavera 2026 Puntos Totales: 20 | Fecha Límite: No se aceptan entregas tardías Resumen Este proyecto simula un escenario real de ataque y defensa en dos máquinas virtuales. Explotarás una vulnerabilidad crítica de RCE antes de la autenticaci...

10CVSS7.8AI score0.98594EPSS
SaveExploits38References1
NCSC
NCSC
added 2026/09/04 1:20 p.m.9 views

vulnerabilities present in Google Chrome

Google has identified several vulnerabilities in Google Chrome, particularly in versions for 152.0.7977.82. These vulnerabilities reside in various components of Google Chrome, including DevTools, Network, V8 JavaScript engine, and Transactions Platform on iOS. Attackers can exploit these...

9.6CVSS8.9AI score0.01162EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/04 12:26 p.m.7 views

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Proof-of-concept exploit chain I have discovered assigned as CVE-2026-47301 for Microsoft Configuration Manager SCCM, combining broken access control, CAB extraction-path traversal arbitrary file write, certificate verification bypass, and DLL...

8.8CVSS7.4AI score0.00964EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/04 12:24 p.m.5 views

CVE-2026-5524-PoC

CVE-2026-5524 — RCE no autenticado en Divi Form Builder Kit de explotación masiva para CVE-2026-5524 , una vulnerabilidad de carga arbitraria de archivos no autenticada en el plugin de WordPress Divi Form Builder = 5.1.8 que conduce a la ejecución remota de código...

9.8CVSS6.2AI score0.00922EPSS
SaveExploits0
NVD
NVD
added 2026/09/04 12:17 p.m.4 views

CVE-2026-85610

OpenPanel before 2.3.0 fails to properly validate chart formula expressions, allowing authenticated project members with read access to execute arbitrary code by recovering the native JavaScript Function constructor through mathjs matrix objects. Attackers can use the recovered constructor to loa...

8.8CVSS0.00393EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/04 12:17 p.m.5 views

CVE-2026-85604

Grav before 2.0.18 affected versions = 2.0.17 contains a remote code execution vulnerability in the Twig sort filter. The sortFunc wrapper in GravExtension.php hardcodes Twig's isSandboxed argument to false, so unlike |map/|filter/|reduce, |sort accepts a plain function name inside the sandbox; t...

8.8CVSS0.00477EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/04 12:14 p.m.10 views

htb-labs-connected

HTB: Connected - Staff Pick English | Español 📋 Table of Contents 1. Enumeration 2. Exploitation - CVE-2025-57819 3. Reverse Shell 4. Privilege Escalation 5. Flags 6. Repository Structure 7. Scripts and Tools Used 8. Attack Summary 9. Resources and Credits 10. Additional Notes 1. Enumeration 1.1...

10CVSS8.4AI score0.85463EPSS
SaveExploits30References4
Kitploit
Kitploit
added 2026/09/04 12:13 p.m.9 views

2025-Oracle-SSO-LDAP-Attack-Post-Incident-Written-Report

2025-Oracle-SSO-LDAP-Attack-Post-Incident-Written-Report This post-incident report examines the 2025 supply chain breach targeting Oracle Cloud’s identity and authentication infrastructure. It details how threat actors exploited an unpatched pre-authentication Remote Code Execution vulnerability...

9.8CVSS7.8AI score0.96284EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/04 12:12 p.m.7 views

WSOB

😭 WSOB CVE-2022-29464 😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464. CVE-2022-29464 details: Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a...

10CVSS8.2AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/04 12:11 p.m.14 views

CVE-2026-32475

CVE-2026-32475 — Elementor Pro ≤ 4.2.1 Unauthenticated Arbitrary File Upload → RCE PoC for CVE-2026-32475 CVSS 9.0 Critical, CWE-434: an unauthenticated arbitrary file upload in the Elementor Pro Forms module that leads to remote code execution. Fixed in Elementor Pro 4.2.2 2026-08-19. Reported b...

9CVSS6.3AI score0.02374EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/04 12:11 p.m.12 views

mssharepoint-scanner

MS SharePoint Scanner A single-file, dependency-free defensive tool for Microsoft SharePoint that combines service discovery single or bulk with CVE assessment for two critical on-premises vulnerabilities: CVE-2026-55040 Critical 9.1 — JWT token authentication bypass CVE-2026-63520 High 8.1 —...

9.1CVSS7.8AI score0.39652EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/04 12:03 p.m.4 views

CVE-2026-44403-WingFTP-v8.1.2-POC-Exploit

Wing FTP Server v8.1.2 contiene una vulnerabilidad de Ejecución Remota de Código RCE en el mecanismo de serialización de sesiones. Un administrador autenticado puede inyectar código Lua arbitrario a través del campo mydirectory basefolder del administrador de dominio, que se ejecuta del lado del...

10CVSS8.3AI score0.92823EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/09/04 12:03 p.m.4 views

React2Shell-CVE-2025-55182

CVE-2025-55182 — React2Shell RCE sin autenticación en React Server Components mediante deserialización insegura del protocolo Flight. Una única petición HTTP es suficiente para ejecutar código arbitrario en el servidor: no se necesitan credenciales ni acceso previo. root@kitploit: / / / /| |/ / ...

10CVSS7.6AI score0.99802EPSS
SaveExploits390
Kitploit
Kitploit
added 2026/09/04 12:01 p.m.7 views

POC_CVE-2026-42589

POCCVE-2026-42589 Laboratorio de reproducción local y borrador de plantilla de nuclei para CVE-2026-42589 que afecta a Gotenberg. Resumen CVE-2026-42589 es un problema de ejecución remota de código no autenticado en Gotenberg causado por la inyección de nuevas líneas en la clave de metadatos en:...

9.8CVSS8.2AI score0.03013EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/04 12:01 p.m.8 views

CVE-2026-11561

CVE-2026-11561 — Apinizer SSTI / RCE Version Check Infra Nuclei template to detect Apinizer versions lower than 2026.04.6, which are vulnerable to CVE-2026-11561 Server-Side Template Injection leading to Remote Code Execution, CVSS 9.8. Usage root@kitploit: echo | nuclei -t CVE-2026-11561.yaml Ho...

9.8CVSS5.9AI score0.00449EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/04 11:49 a.m.8 views

FreePBX-CVE-2025-57819

FreePBX CVE-2025-57819 — SQLi no autenticado a RCE como root Gravedad: Crítica Tipo: Inyección SQL no autenticada → Ejecución remota de código Software afectado: FreePBX módulo endpoint Probado en: FreePBX en CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Resumen Existe una vulnerabilidad de inyecció...

10CVSS8.5AI score0.85463EPSS
SaveExploits30References2
Kitploit
Kitploit
added 2026/09/04 11:48 a.m.7 views

pdf.js-CVE-2024-4367

🚨 CVE-2024-4367 - Escáner Universal de Vulnerabilidad PDF.js ⚠️ HERRAMIENTA DE SEGURIDAD CRÍTICA | Detecta CVE-2024-4367 CVSS 9.8 - Vulnerabilidad de Ejecución Remota de Código en PDF.js Funciona en CUALQUIER sitio web - Sin configuración requerida 📋 Tabla de Contenidos 📖 Resumen ⚡ Inicio Rápido 🔍...

8.8CVSS7.9AI score0.7066EPSS
SaveExploits16References6
Kitploit
Kitploit
added 2026/09/04 11:46 a.m.10 views

CVE-2025-24893

CVE-2025-24893 XWiki Platform is a generic wiki platform that provides runtime services for applications built on top of it. Due to a vulnerability in the SolrSearch endpoint, an unauthenticated user can achieve arbitrary remote code execution. This vulnerability affects the confidentiality,...

9.8CVSS8.1AI score0.99864EPSS
SaveExploits52
Kitploit
Kitploit
added 2026/09/04 11:46 a.m.7 views

CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2

CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2 Una vulnerabilidad crítica de ejecución remota de código RCE en MCPJam Inspector 3. Iniciar el exploit root@kitploit: python3 CVE-2026-23744.py -u -i -p 4. Para un mejor uso recomiendo actualizar la terminal a una completamente funcional, de lo...

9.8CVSS6.3AI score0.65845EPSS
SaveExploits41
Rows per page
Query Builder