Lucene search
+L

59121 matches found

Kitploit
Kitploit
added 2026/09/09 11:43 a.m.6 views

CVE-2025-48129

🚨 CVE-2025-48129 - Privilege Escalation in WordPress Spreadsheet Price Changer Plugin 🛡️ Vulnerability Summary Plugin Affected : Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light Vulnerable Versions : Classified under: OWASP A7 – Identification and Authentication Failures 🧪...

9.8CVSS5.8AI score0.00516EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 11:42 a.m.6 views

CVE-2025-3102

🔐 CVE-2025-3102 – Authentication Bypass in SureTriggers WordPress Plugin 🚨 CVE-2025-3102 is a critical authentication bypass vulnerability affecting the SureTriggers: All-in-One Automation Platform WordPress plugin, which is actively installed on over 100,000 websites. Due to the nature of the fl...

8.1CVSS8.1AI score0.759EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/09 11:42 a.m.5 views

CVE-2023-42793

Usage: save it as teamcity-admin-creation.nse and run: nmap -p 8111 --script teamcity-admin-creation --script-args url=https://target-url...

9.8CVSS8.3AI score0.99979EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/09 11:41 a.m.5 views

CVE-2024-10629

🛠️ GPX Viewer Exploit CVE-2024-10629 This repository contains a proof-of-concept exploit for the GPX Viewer plugin for WordPress, which is vulnerable to arbitrary file creation CVE-2024-10629. The vulnerability allows authenticated attackers with subscriber-level access and above to create...

8.8CVSS8.2AI score0.01666EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/09 11:39 a.m.4 views

Drupalgeddon-Python3

Drupalgeddon Python3 Edition An rewritten POC on the CVE-2014-3704, done as part of my CPTS training on HackTheBox. https://nvd.nist.gov/vuln/detail/CVE-2014-3704 CVE-2014-3704 known as Drupalgeddon, affects versions 7.0 up to 7.31 and was fixed in version 7.32. This was a pre-authenticated SQL...

7.5CVSS7.1AI score0.99974EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/09 11:36 a.m.4 views

CVE-2024-22274-RCE

CVE-2024-22274 Exploit This repository contains an exploit for CVE-2024-22274. The exploit creates a new user on a remote machine via SSH and then provides a root shell. Requirements Go Golang installed on your machine. You can download it from here. A remote machine with SSH access. Compilation ...

7.2CVSS7.3AI score0.02509EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/09 11:09 a.m.6 views

CVE-2022-30190

CVE-2022-30190 Usage Windows only Create docx file: $ PoC.py docx your-host-ip Run server directly: $ PoC.py host...

9.3CVSS7.8AI score0.99234EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/09 10:59 a.m.5 views

CVE-2021-31762

..| CVE-2021-31762 |.. Description : Exploiting a Cross-site request forgery CSRF attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021...

8.8CVSS7.9AI score0.0878EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/09 10:36 a.m.7 views

CVE-2019-17382-EXPLOIT

CVE-2019-17382 - Zabbix Authentication Bypass A critical vulnerability discovered in Zabbix versions up to 4.4. The issue exists within the zabbix.php file when accessing the dashboard.view action with dashboardid=1. It enables attackers to bypass the login page, granting unauthorized access to t...

9.1CVSS8.2AI score0.5415EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/09 10:18 a.m.9 views

CVE-2022-24924

Improper access control vulnerability in LiveWallpaperService CVE-2022-24924SVE-2021-24089 Windows version tested: Windows 10 20H2 Build 19042.1348 64bit Live Wallpaper Version: 3.0.9.0 or earlier There is a LiveWallpaperService that works by default in Samsung laptops, but there was a...

5.3CVSS6.1AI score0.00747EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/09 10:07 a.m.6 views

CVE-2020-18326

Subrion CMS 4.2.1 - Cross Site Request Forgery CSRF Add Administrator user Description Subrion CMS is easy to install and simple to manage. Use it as a stand-alone application or in conjunction with other applications to create entry level sites, mid-sized or large sites. Cross Site Request Forge...

8.8CVSS7.8AI score0.02243EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 10:05 a.m.5 views

CVE-2024-57523.

CVE-2024-57523 - CSRF Vulnerability in Users.php - SourceCodester Packers and Movers Management System 1.0 Description This repository contains a Proof of Concept PoC for a Cross-Site Request Forgery CSRF vulnerability in the Packers and Movers Management System 1.0 by SourceCodester. The...

4.5CVSS5.9AI score0.00498EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 10:01 a.m.6 views

Grav-CMS-RCE-Authenticated

Grav CMS Remote Code Execution Authenticated - CVE-2024-28116 Info This code is an adaptation fromGraver Github repository with some improvements based on this video. Exploit against Grav CMS for versions below 1.7.45 based on SSTI + RCE vulnerabilities, labeled as CVE-2024-28116. This script...

8.8CVSS8AI score0.0576EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/09 9:40 a.m.6 views

Blackash-CVE-2025-31161

Blackash-CVE-2025-31161 CVE-2025-31161 Proof of Concept for CVE-2025-31161 / CVE-2025-2825 This POC will exploit the authbypass vulnerability to create a new user account with Admin level permissions. The Auth Bypass requires the username targetuser of an existing user on the CrushFTP server. The...

9.8CVSS8.3AI score0.99976EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/09 9:10 a.m.4 views

CVE-2022-21587-POC

CVE-2022-21587-POC- CVE-2022-21587 POC root@kitploit: file exploit.py will overwrite to file .pl not recommended for use, will affect the system file EBS not overwrite, will create a new shell file install slipit: git clone https://github.com/usdAG/slipit root@kitploit: cd slipit python3 setup.py...

9.8CVSS8.5AI score0.98342EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/09 8:46 a.m.5 views

CVE-2023-30943

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2023-30943...

6.5CVSS6.3AI score0.06583EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/09 8:43 a.m.10 views

CVE-2023-22515-Scan

CVE-2023-22515-Scan About This is simple scanner for CVE-2023-22515, a critical vulnerability in Atlassian Confluence Data Center and Server that is actively being exploited in the wild by threat actors in order "to create unauthorized Confluence administrator accounts and access Confluence...

10CVSS8.5AI score0.99156EPSS
SaveExploits40
Kitploit
Kitploit
added 2026/09/09 8:40 a.m.5 views

CVE-2021-31762

CSRF-to-RCE ..| CVE-2021-31762 |.. Description : Exploiting a Cross-site request forgery CSRF attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version...

8.8CVSS7.8AI score0.0878EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/09 8:22 a.m.6 views

cve-2023-40000

cve-2023-40000 That's a PoC of cve-2023-40000. Wordpress LiteSpeed Cache exploit. The CVE could be applied to all LiteSpeed Cache --------------------+"; echo "+----------------------------------------------------------------------+";...

8.3CVSS7.3AI score0.54872EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/09 8:19 a.m.6 views

CVE-2025-10352-POC

CVE-2025-10352 POC - Admin Account Creation 🛠️ POC for CVE-2025-10352: An unauthenticated endpoint in Melis Platform melis-core that allows creation of an administrator account via a crafted HTTP request to a specific admin endpoint. 🔗 References 📄 CVE-2025-10352 on MITRE 📄 Melis Platform Warning...

9.3CVSS6AI score0.00327EPSS
SaveExploits3
Rows per page
Query Builder