Lucene search
+L

519094 matches found

Kitploit
Kitploit
added 2026/09/07 12:00 p.m.5 views

CVE-2025-21298

content This is a proof-of-concept for CVE-2025-21298 - Windows OLE Remote Code Execution Vulnerability CVSS 9.8. This is a memory corruption PoC , not an exploit. Full patch diff via ghidriff: LINK vulnerability The vulnerability is located in ole32.dll!UtOlePresStmToContentsStm. The purpose of...

9.8CVSS8.1AI score0.80912EPSS
SaveExploits6References3
Kitploit
Kitploit
added 2026/09/07 12:00 p.m.8 views

CVE-2023-3519

Citrix ADC RCE CVE-2023-3519 This exploit uses addresses and shellcode for Citrix VPX 13.1-48.47. For the full writeup, click here. Usage NASM is required to build the shellcode. root@kitploit: $ sudo apt install nasm The included shellcode will download and run a shell script from a remote https...

9.8CVSS8.4AI score0.99749EPSS
SaveExploits16
RedhatCVE
RedhatCVE
added 2026/09/07 11:50 a.m.7 views

CVE-2026-83534

A flaw was found in PostgreSQL Anonymizer. This vulnerability, located in the anon.anonymizedatabaseparallel function, allows an authenticated table owner to execute arbitrary code with superuser privileges. This could lead to a complete compromise of the database system. Mitigation If the...

6.4CVSS0.00191EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/07 11:50 a.m.7 views

CVE-2026-19634

A flaw was found in PostgreSQL Anonymizer. A SQL injection vulnerability exists in the importdatabaserules and importrolesrules functions. A malicious user can craft a JSON document with specially designed object names. If a superuser then imports this document, the malicious code within it can b...

6.4CVSS0.00185EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/07 11:48 a.m.7 views

CVE-2025-60787_PoC

CVE-2025-60787 - MotionEye RCE Authenticated RCE in MotionEye = 0.43.1b4 via client-side validation bypass on the imagefilename field. Usage root@kitploit: nc -lvnp 4444 python exploit.py -t http://127.0.0.1:8765 -p password -lh IP -lp 4444 Flags...

7.2CVSS5.8AI score0.18462EPSS
SaveExploits17
RedhatCVE
RedhatCVE
added 2026/09/07 11:43 a.m.6 views

CVE-2026-19633

A flaw was found in PostgreSQL Anonymizer. This vulnerability allows unprivileged masked users to execute arbitrary code. By manipulating operators, domain casts, or view subqueries that contain untrusted expressions, an attacker can cause malicious code to run with elevated privileges within the...

8.8CVSS0.00362EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/07 11:38 a.m.6 views

CVE-2025-57833

CVE-2025-57833: Django SQL Injection Vulnerability This repository demonstrates and explains CVE-2025-57833, a critical SQL injection vulnerability in Django's ORM that affects versions 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. 🚨 Vulnerability Overview CVSS Score : 9.8 Critical...

8.1CVSS7.7AI score0.15656EPSS
SaveExploits4
NCSC
NCSC
added 2026/09/07 11:34 a.m.4 views

Vulnerability was concealed in N-central of N-able

N-able discovered a vulnerability in N-central versions prior to 2026.3.1.14. The vulnerability involves a pre-authentication remote code execution flaw. An attacker can execute arbitrary code on the affected system remotely, without any form of authentication. All installations running on...

10CVSS0.00411EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/07 11:29 a.m.8 views

CVE-2019-17147

CVE-2019-17147: TP-Link TL-WR841N Exploitation Overview This repository documents the comprehensive reverse engineering and exploitation of CVE-2019-17147 , a critical remote code execution RCE vulnerability in the TP-Link TL-WR841N router MIPSEL architecture. The vulnerability resides in the htt...

9.3CVSS7.9AI score0.13651EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/07 11:28 a.m.7 views

CVE-2026-33017

CVE-2026-33017 - Langflow Unauthenticated RCE ⚠️ DISCLAIMER: This repository is for authorized security testing and educational purposes only. Use only on systems you own or have explicit permission to test. The author is not responsible for any misuse or damage caused by this tool. Overview...

9.8CVSS8.4AI score0.96177EPSS
SaveExploits32References1
Kitploit
Kitploit
added 2026/09/07 11:17 a.m.8 views

Explotacion-CVE-2023-32315-Openfire

🔍 CVE-2023-32315 Description: The CVE-2023-32315 vulnerability affects Openfire servers, allowing an attacker to bypass the web admin panel login without valid credentials. The exploit adds an administrative user, allowing the attacker to upload a malicious plugin and obtain a web shell. ⚙️ How it...

8.6CVSS7.8AI score0.99999EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/07 11:13 a.m.4 views

Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit

CVE-2025-54123 — Hoverfly Middleware API Remote Code Execution Authenticated RCE via OS Command Injection in Hoverfly ≤ 1.11.3 Vulnerability Overview...

9.8CVSS8.1AI score0.10543EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/07 11:01 a.m.6 views

wyze-bulb-color-pwned

wyze-bulb-color-pwned Wireless exploit for the Wyze WLPA19CV2 color bulb Overview The Wyze Color WLPA19CV2 bulbs have a factory test mode which allows a custom OTA image to be flashed wirelessly through a specific sequence of power cycling. This project provides An implementation and guide to...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/07 10:50 a.m.4 views

POC-CVE-2025-55182

CVE-2025-55182 - React RSC RCE PoC for the deserialization vulnerability in the Flight protocol of React Server Components. What is it? Next.js 14+ and React 19 use a proprietary protocol "Flight" to communicate between client and server. The problem: the server loads any module without...

10CVSS7.5AI score0.99802EPSS
SaveExploits390
Kitploit
Kitploit
added 2026/09/07 10:47 a.m.7 views

CVE-2025-59528-PoC

CVE-2025-59528 PoC Script de prueba de concepto en Python para desencadenar la ruta RCE CustomMCP de Flowise a través de POST /api/v1/node-load-method/customMCP. ⚠️ Solo para fines educativos e investigación de seguridad autorizada. Ejecutar esta herramienta contra sistemas que no posee o para los...

10CVSS7.9AI score0.8737EPSS
SaveExploits23References1
Kitploit
Kitploit
added 2026/09/07 10:47 a.m.8 views

CVE-2021-27876

CVE-2021-27876 Unauthenticated RCE exploit for Veritas Backup Exec Agent CVE-2021-27876/77/78 — SHA auth bypass to SYSTEM via NDMP CVEs CVE| Description| CVSS 3.1 ---|---|--- CVE-2021-27876| Authentication bypass via SHA hash manipulation in the NDMP protocol| 9.8 Critical CVE-2021-27877|...

9.8CVSS8AI score0.6491EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/07 10:46 a.m.8 views

CVE-2026-54420

CVE-2026-54420 LiteSpeed cPanel ⚡ Uso Simple Utilice este proyecto únicamente en entornos seguros y autorizados, tales como: Máquinas virtuales locales Contenedores Docker Configuraciones de laboratorio aisladas Entornos de pruebas de penetración autorizados Configuración de ejemplo: root@kitploi...

8.5CVSS6.3AI score0.01439EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/07 10:41 a.m.11 views

CVE-2024-37054

CVE-2024-37054 — MLflow pyfunc Deserialization RCE Severity: Critical Affected: MLflow 0.9.0 – 2.14.1 Type: Arbitrary code execution via Python pickle deserialization Description mlflow.pyfunc.loadmodel deserializes pythonmodel.pkl from the artifact store without any sanitization. An attacker who...

8.8CVSS8.2AI score0.00703EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/07 10:37 a.m.6 views

CVE-2025-43300

📚 CVE-2025-43300 - Detailed Vulnerability Analysis 🎯 Summary CVE-2025-43300 is a buffer overflow vulnerability in DNG Digital Negative file processing caused by an inconsistency between TIFF metadata and JPEG data , allowing remote code execution RCE. 🔍 1. DNG FILE ANATOMY Layered Structure:...

10CVSS8.1AI score0.21994EPSS
SaveExploits9
OSV
OSV
added 2026/09/07 10:31 a.m.4 views

USN-8732-1 minetest vulnerability

It was discovered that Minetest did not properly sanitize the Lua sandbox environment when using LuaJIT. A malicious mod could escape the sandbox to execute arbitrary code and gain full file system access on the server. An attacker could use this issue to compromise the server...

10CVSS0.00374EPSS
SaveExploits0References2
Rows per page
Query Builder