Lucene search
+L

59113 matches found

OSV
OSV
added 2026/09/08 8:16 a.m.4 views

BIT-JENKINS-2026-84646

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

4.3CVSS0.00243EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/09/08 8:12 a.m.2 views

WordPress SureCart plugin < 4.7.0 - Unauthenticated Account Creation with Automatic Login vulnerability

Unauthenticated Account Creation with Automatic Login vulnerability discovered by Jakub Herman in WordPress Plugin SureCart versions 4.7.0...

6.5CVSS0.00164EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/09/08 6:40 a.m.7 views

CVE-2023-2437

CVE-2023-2437 Hello, ALL , i m RxR I Coded Tool For Exploit vulnerability UserPro = 5.1.1 – Authentication Bypass to Administrator The Exploit get the user of the admin , then login with his access , to create new admin The Best way for exploit this vulnerability is create new admin for Run TooL...

9.8CVSS7.9AI score0.06746EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/08 5:45 a.m.5 views

CVE-2026-8181

CVE-2026-8181 This vulnerability allows unauthenticated attackers who know a valid administrator username to impersonate that admin during REST API requests by using any incorrect password in a Basic Authentication header. Attackers could abuse this flaw to create a new administrator account...

9.8CVSS5.9AI score0.14608EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/08 5:25 a.m.12 views

CVE-2020-8635

¿Qué es esto? Wing FTP Server 6.2.3 - Escalada de Privilegios Exploit Introducción Wing FTP Server v6.2.3 para Linux, macOS y Solaris establece permisos inseguros en los directorios de instalación y archivos de configuración. Esto permite a los usuarios locales crear arbitrariamente usuarios FTP...

7.8CVSS7.3AI score0.00807EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/08 5:14 a.m.5 views

confluence-hack

Confluence Hack CVE-2023-22515 exploit.py Exploit to create a new admin user Compromised audit log: As a reverence served: https://packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.html and https://github.com/Chocapikk/CVE-2023-22515 pluginshellplug.j...

10CVSS8.5AI score0.99156EPSS
SaveExploits40References1
Kitploit
Kitploit
added 2026/09/08 4:56 a.m.4 views

CVE-2025-65640

CVE-2025-65640 1. Vulnerability Information CVE ID: CVE-2025-65640 Currently RESERVED Vulnerability Type: Stored Cross-Site Scripting XSS CVSSv3 score: 6.3 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N Vendor: Arket/Bluenext S.r.l. Product: Globe Document Intelligence Affected Version: 5.0.0.559 Discoverer...

6.3CVSS5.9AI score0.00216EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 4:23 a.m.4 views

CVE-2025-43921

CVE-2025-43921: Unauthenticated Mailing List Creation in GNU Mailman 2.1.39 cPanel/WHM Bundle Discovered by: Firudin Davudzada & Musazada Aydan Disclosure Date: April 2025 CVE ID: CVE-2025-43921 Severity: 5.3 Medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Attack Type: Remote Affected Softwar...

8.1CVSS6.2AI score0.00562EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/08 4:18 a.m.6 views

CVE-2015-9357-POC

CVE-2015-9357 wordpress smiley/emoticon parser stored xss, admin user creation via forged nonce request. breaks out of attribute context through the emoticon regex, lands js in an onerror handler. no script tag needed, survives wpkses filtering on the affected field. chain: submit payload to any...

6.1CVSS6.5AI score0.00971EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 1:33 a.m.7 views

CVE-2019-16097

CVE-2019-16097 Harbor Unauthorized Admin Creation Vulnerability Principle docker and poc based on pocsuite framework...

6.5CVSS6.3AI score0.22443EPSS
SaveExploits5
Patchstack
Patchstack
added 2026/09/08 12:00 a.m.6 views

WordPress Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation vulnerability

Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation vulnerability discovered by Wordfence PRISM in WordPress Plugin WP Event SOlution versions = 4.1.22...

5.3CVSS0.00238EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/09/07 11:24 p.m.4 views

CVE-2025-64446-Exploit

CVE-2025-64446-Exploit CVE-2025-64446 exploit on fortiweb waf whit this exploit you can crate user and password . hwo to runing ? root@kitploit: python3 exploitforti.py targets.txt python3 exploitforti.py 192.168.1.1 python3 exploitforti.py 192.168.1.1:8443 python3 exploitforti.py...

9.8CVSS8.5AI score0.91838EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/07 8:57 p.m.4 views

CVE-2026-20253

🚨 CVE-2026-20253 - Critical Splunk Enterprise Unauthenticated File Creation Vulnerability Unauthenticated arbitrary file creation and truncation vulnerability affecting Splunk Enterprise and Splunk Cloud Platform. 📖 Executive Summary CVE-2026-20253 is a critical vulnerability in Splunk Enterprise...

9.8CVSS6.2AI score0.96939EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/07 8:25 p.m.4 views

CVE-2026-65891

CVE-2026-65891 — Joomla JCE Rename PoC Proof-of-concept scanner for CVE-2026-65891 in the Joomla Content Editor JCE extension. Improper input validation in the JCE file manager rename function allows an authenticated user with file-management permissions to: create hidden files dot-prefixed names...

6.5CVSS6.7AI score0.00254EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 6:30 p.m.4 views

CVE-2026-20253

CVE-2026-20253 — Laboratorio de RCE sin autenticación previa en Splunk Enterprise Creación y truncado arbitrario de archivos sin autenticación a través del sidecar de PostgreSQL CVSS 9.8 · Crítico · CWE-306 · Explotado activamente CISA KEV ⚠️ Aviso legal Este repositorio está destinado...

9.8CVSS6.2AI score0.96939EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/07 6:09 p.m.5 views

CVE-2025-64446-FortiWeb-CGI-Bypass-PoC

CVE-2025-64446 Exploit Tool Exploit tool for CVE-2025-64446 vulnerability verification and exploitation in FortiWeb devices. Description This tool tests for and exploits a path traversal vulnerability CVE-2025-64446 in FortiWeb web application firewalls. It can be used to verify vulnerability...

9.8CVSS8.5AI score0.91838EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/07 5:46 p.m.6 views

CVE-2026-63030

CVE-2026-63030 WordPress REST API batch route confusion + SQL injection leading to unauthorized admin creation → Remote Code Execution RCE complete exploit chain PoC. For authorized security testing, vulnerability reproduction, and research only. Do not use against unauthorized targets...

9.8CVSS8.4AI score0.97271EPSS
SaveExploits76
Kitploit
Kitploit
added 2026/09/07 5:39 p.m.5 views

log4shell-poc-lab

Log4Shell POC Demo This repository contains a submodule, clone it with: root@kitploit: git clone --recurse-submodules [email protected]:obscuritylabs/log4shell-poc-lab.git Then to start the demo execute: root@kitploit: docker compose up To view the exploit creating a file on the victim serve...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 3:54 p.m.5 views

CVE-2021-38699

CVE-2021-38699 TastyIgniter 3.0.7 allows XSS via the name field during user-account creation. A Stored Cross Site Scripting Vulnerability exists in multiple pages of TastyIgniter v3.0.7 that allows for arbitrary execution of JavaScript. https://vulners.com/cve/CVE-2021-38699 Vulnerable Pages:...

5.4CVSS6AI score0.07977EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/07 3:27 p.m.2 views

CVE-2025-31161

CVE-2025-31161 - CrushFTP User Creation Authentication Bypass Exploit 📌 Description This Python exploit targets CrushFTP servers vulnerable to CVE-2025-31161. The vulnerability allows unauthenticated user account creation by sending a crafted XML payload to the WebInterface, potentially resulting...

9.8CVSS8.5AI score0.99976EPSS
SaveExploits18References1
Rows per page
Query Builder