Lucene search
+L

59125 matches found

Kitploit
Kitploit
added 2026/09/09 10:37 p.m.6 views

CVE-2017-12542-Exploit

HP iLO Authentication Bypass CVE-2017-12542 This repository contains a proof-of-concept exploit for CVE-2017-12542 , an authentication bypass vulnerability affecting certain versions of HP Integrated Lights-Out iLO firmware. The vulnerability allows unauthenticated access to the iLO REST API, whi...

10CVSS8.2AI score0.99294EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/09 10:37 p.m.5 views

CVE-2025-6934-PoC

🔓 CVE-2025-6934 Exploit Tool Unauthenticated Administrator Account Creation in WordPress Plugin Opal Estate Pro Created and developed fully by mejbankadir SMH tech and Mejban HackSheild Under NexoAmicus 📋 Description CVE-2025-6934 is a critical vulnerability in the WordPress Opal Estate Pro plugi...

9.8CVSS5.9AI score0.26442EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/09 10:03 p.m.7 views

CVE-2024-4898-Poc

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 1-click WP Staging & Migration = 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation...

9.8CVSS5.9AI score0.04156EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 8:47 p.m.5 views

CVE-2023-3460

CVE-2023-3460 The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary capabilities, effectively allowing attackers to create administrator accounts at will. This script perform an exploit for this vulnerability and scan different...

9.8CVSS8.5AI score0.72306EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/09 8:21 p.m.10 views

CVE-2023-32315-POC

CVE-2023-32315-POC CVE-2023-32315-Openfire-Bypass-Py Overview This code is a Python version POC for CVE-2023-32315. It performs a series of operations to verify whether the target website is affected by the CVE-2023-32315 vulnerability and attempts to execute certain operations on the affected...

8.6CVSS8AI score0.99999EPSS
SaveExploits15References1
Kitploit
Kitploit
added 2026/09/09 8:10 p.m.5 views

CVE-2025-46041

Anchor CMS v0.12.7 - Stored XSS CVE-2025-46041 Anchor CMS v0.12.7 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability in the description field of the /admin/pages/add interface. CVE ID CVE-2025-46041 Summary Type: Stored XSS Location: Page creation interface /admin/pages/add Impact:...

5.4CVSS6AI score0.00576EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/09 8:07 p.m.5 views

CVE-2023-45966

CVE-2023-45966 Blind SSRF in umputun/remark42 leads to Blind SSRF due to missing title field and insufficient filtering of url field in comment creation request. Additional Information Fixed in commit: efceed6 VulnerabilityType Other CWE-918: Server Side Request Forgery Vendor of Product...

7.5CVSS7.4AI score0.00586EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/09 8:06 p.m.7 views

ResponsiveFileManager-CVE-2022-46604

ResponsiveFileManager-CVE-2022-46604 Responsive FileManager v.9.9.5 vulnerable to CVE-2022-46604 File Creation Extension Bypass which leads to RCE. The current exploit is made in Python 3 and exploits the vulnerability to upload a webshell which allows the remote execution of commands in the...

8.8CVSS7.8AI score0.08627EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/09 8:05 p.m.10 views

CVE-2022-34169

Description Checks if CVE-2022-34169 is fixed on your machine. As far as I know, an exploit was found by a Google employee and not published. Since the fix is known, a small test routine was written with this to check whether the fix is available at runtime. Build yourself optional Optional: This...

7.5CVSS7.3AI score0.81039EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/09 7:48 p.m.7 views

CVE-2023-22809

CVE-2023-22809 CVE-2023-22809 is a critical vulnerability that affects the popular sudo software, specifically the sudoedit command. This vulnerability allows an attacker to gain root privileges on a targeted system by exploiting a flaw present in the sudoedit command. Exploiting the CVE-2023-228...

7.8CVSS7.5AI score0.55367EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/09 7:11 p.m.10 views

WP-GDPR-Compliance-Plugin-Exploit

Exploit of Vulnerability CVE-2018-19207 in WP GDPR Compliance Plugin WordPress This python script creates a user with role admin. Change the varbiables baseurl, username, email for your specific case. A working email is needed, because an email is sent to this adress in order to setup a password...

9.8CVSS8.2AI score0.88065EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/09 6:36 p.m.4 views

CVE-2023-22515-Scan.

Escaneo CVE-2023-22515 Acerca de Este es un escáner simple para CVE-2023-22515, una vulnerabilidad crítica en Atlassian Confluence Data Center y Server que está siendo explotada activamente en la naturaleza por actores de amenazas para "crear cuentas de administrador de Confluence no autorizadas ...

10CVSS8.5AI score0.99156EPSS
SaveExploits40
NVD
NVD
added 2026/09/09 4:17 p.m.4 views

CVE-2026-68484

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...

9CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 4:09 p.m.4 views

poc-2025-9074

CVE-2025-9074 | Docker API CVE-2025-9074 PoC Proof-Of-Concept A sophisticated exploitation framework for CVE-2025-9074, targeting unauthenticated Docker API endpoints with an integrated interactive command shell. Overview This tool automates the exploitation of exposed Docker API instances withou...

9.3CVSS8.1AI score0.01629EPSS
SaveExploits15
CVE
CVE
added 2026/09/09 3:49 p.m.16 views

CVE-2026-68484

Cash Collect by Sage contains an improper authorization vulnerability in the Sage AR Automation API . Administrative functions fail to properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and escalate to elevated privileges. The issue is ra...

9CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 3:46 p.m.12 views

CVE-2023-20198-RCE

Fofa root@kitploit: body="window.onload=function url ='/webui';window.location.href=url;" && ishoneypot=false && isfraud=false Usage root@kitploit: usage: CVE-2023-20198-RCE.py -h -u URL -p PROXY -au ADDUSER -ap ADDPASS -du DELUSER -pm PRIVILEGEMODE -em EXPLOITMODE -oc OSCMD -cc CLICMD...

10CVSS7.8AI score0.99571EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/09 3:20 p.m.5 views

CVE-2023-4278

CVE-2023-4278 !\vulnerable.png./vulnerable.png root@kitploit: Exploit Title: Wordpress Plugin Masterstudy LMS = 3.0.17 - Unauthenticated Instructor Account Creation Google Dork: inurl:/user-public-account Vendor Homepage: https://wordpress.org/plugins/masterstudy-lms-learning-management-system/...

7.5CVSS7.4AI score0.06133EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/09 3:12 p.m.7 views

CVE-2023-42793

CVE-2023-42793 description A security vulnerability in JetBrains TeamCity allows an attacker to create a new user given by the attacker with administrative privileges. Usage example ./cve-2023-42793 http://teamcity.examplewebsite.com username password...

9.8CVSS8.4AI score0.99979EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/09 3:11 p.m.6 views

CVE-2025-3102

CVE-2025-3102 🛠️ SureTriggers Exploit Script This script is used to identify and exploit security vulnerabilities in the SureTriggers plugin on WordPress sites using a vulnerable version ≤ v1.0.78. If successful, the script will automatically create a WordPress admin account. ⚙️ Features Detection...

8.1CVSS7.9AI score0.759EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/09 2:50 p.m.5 views

CVE-2024-0204

CVE-2024-0204: Authentication Bypass in GoAnywhere MFT Script to create a new admin user in GoAnywhere MFT. Blog Post More details here: https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive Usage Password must be at least 8 characters long to meet GoAnywhere...

9.8CVSS8.4AI score0.95086EPSS
SaveExploits9
Rows per page
Query Builder