Lucene search
+L

10657 matches found

Kitploit
Kitploit
added 2026/09/02 5:48 p.m.7 views

CVE-2024-23773

CVE-2024-23773 - Arbitrary File Delete Vulnerability Information will follow in due course...

7.8CVSS5.8AI score0.00376EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 3:09 p.m.4 views

CVE-2024-34471

CVE-2024-34471 Description: An authenticated user can abuse a Path Traversal vulnerability resulting in file deletion if has write permissions in the mliRealtimeEmails.php file. The filename parameter in the export HTML functionality does not properly validate the file location, allowing an...

5.4CVSS5.9AI score0.00737EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 2:15 p.m.4 views

CVE-2024-27630

CVE-2024–27630 Vulnerability Details Overview In Savane v3.12 and prior, a lack of validation on the fileid parameter when deleting a file from /bugs/index.php leads to an Insecure Direct Object Reference IDOR vulnerability that can cause an authenticated administrator of a group with a bug track...

7.5CVSS5.8AI score0.00819EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 12:53 p.m.3 views

CVE-2022-32199

CVE-2022-32199 ScriptCase python CVE-2022-32199.py -t 127.0.0.1 -u admin -p admin -path windows/win.ini Example of deleting file in the root directory...

6.5CVSS6.6AI score0.01664EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 12:08 p.m.5 views

CVE-2024-7856

CVE-2024-7856 ★ CVE-2024-7856 任意ファイル削除 PoC ★ 説明 CVE-2024-7856 : MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar -f python3 CVE-2024-7856.py -u -f -i -p...

8.1CVSS5.9AI score0.19326EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 12:06 p.m.4 views

CVE-2020-26259

CVE-2020-26259 CVE-2020-26259:XStream(1.4.14)は、アンマーシャリング時に、実行プロセスに十分な権限がある限り、ローカルホスト上の任意のファイル削除に対して脆弱です。 https://x-stream.github.io/CVE-2020-26259.html XStream 1.4.14 pom.xml root@kitploit: com.thoughtworks.xstream xstream 1.4.14 PoC https://x-stream.github.io/CVE-2020-26259.html root@kitploit: 0...

6.8CVSS6.6AI score0.82392EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/02 11:54 a.m.6 views

7-Zip.chm-Mitigation

7-Zip.chm-mitigiation 7-Zip Mtigation CVE-2022-29072 説明 : https://user-images.githubusercontent.com/33525376/163654035-d40ca72a-7dbc-425f-ade2-3820cfababb2.mp4 CVE 発見者 : https://github.com/kagancapar/CVE-2022-29072 人気のアーカイブプログラムである 7-zip...

7.8CVSS7.1AI score0.01536EPSS
SaveExploits8References2
Kitploit
Kitploit
added 2026/09/02 11:52 a.m.4 views

CodePath_Week_7-8

CodePath 第7-8周 CodePath 第7 & 8 周作业:CVE-2017-14719、CVE-2019-9787 以及通过 REST API 进行未认证的页面/文章内容修改 项目 7 - WordPress 渗透测试 花费时间:总共 16 小时 目标:查找、分析、复现并记录影响旧版 WordPress 的漏洞 渗透测试报告 1. CVE-2017-14719 摘要:在文件解压代码中发现了一个路径遍历漏洞。 漏洞类型:路径遍历 测试版本:3.8 修复版本:3.8.22 -...

8.8CVSS6.8AI score0.38699EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/02 11:00 a.m.4 views

CVE-2019-10945

Code Conversion to Python 3 This code is taken from Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion and was converted to Python 3 to suit the exercise in Academy for Module "Attacking Commoon Applications" and section "Attacking Joomla". The original code...

9.8CVSS7.2AI score0.38018EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/02 10:56 a.m.4 views

CVE-2022-30206

CVE-2022-30206 これは CVE-2022-30206 の PoC です。 Windows Print Spooler の特権昇格の脆弱性。 はじめに 任意のファイル削除を行うには、以下の操作を実行します: 1. addprinter.exe を実行してプリンタを作成し、C:\Users\Public\tmp\1 に SpoolDirectory を設定します。 2. FileLock.exe TargetFile を実行して .SHD ファイルを TargetFile にリダイレクトし、TargetFile に oplock を設定します。 3. openprinter.e...

7.8CVSS7.3AI score0.02193EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 10:56 a.m.5 views

CVE-2022-30206

CVE-2022-30206 これは CVE-2022-30206 の PoC です。 はじめに 任意のファイル削除を行うには、以下の操作を実行します: 1. addprinter.exe を実行してプリンターを作成し、C:\Users\Public\tmp\1 に SpoolDirectory を設定します。 2. FileLock.exe TargetFile を実行して .SHD ファイルを TargetFile にリダイレクトし、TargetFile に oplock を設定します。 3. openprinter.exe を実行してプリンターを動作させ、oplock...

7.8CVSS7.3AI score0.02193EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 10:50 a.m.5 views

CVE-2019-17234b-Exploit

Wordpress IgniteUp プラグインの脆弱性 Wordpress IgniteUp プラグイン v3.4 以下では、リモートの認証されていないユーザーがターゲットのウェブサーバー上の任意のファイルを削除し、サービス拒否攻撃を引き起こす可能性があります。 CVE-2019-17234 のタイムライン この脆弱性は2019年9月20日に wordpress.org チームに報告され、プラグインの新しいバージョン3.4.1は2019年11月8日にリリースされました。3 背景 IgniteUp...

7.5CVSS7.1AI score0.03248EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 10:34 a.m.3 views

PoC-for-CVE-2020-28948-CVE-2020-28949

POC for CVE-2020-28948 & CVE-2020-28949 The files here contain PoC for CVE-2020-28948 & CVE-2020-28949 to achieve remote exploit The server The server folder contains a simple upload server which uses the vulnerable ArchiveTar library, located in server/Archive. The server accepts a Tar archive...

7.8CVSS7.2AI score0.84554EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/02 10:25 a.m.5 views

CVE-2025-66680

CVE-2025-66680 In Wise Force Deleter 1.5.7.59 and earlier, an attacker with local administrator access can delete arbitrary file in the file system by weaponizing the app. Usage 1. Place WiseDelfile64.sys in C:\Windows 2. Compile the project 3. Create file.txt which contain the a list of files yo...

7.1CVSS5.8AI score0.00204EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 9:40 a.m.3 views

CVE-2024-5932

This post is a research article published by EQSTLab. ❗❗ IMPORTANT ❗❗ There are currently fake PoC github repositories running xmrig. Check out the link below for more information : URL1: https://x.com/win3zz/status/1828704644987511107 URL2: https://x.com/bornunique911/status/1828712791844524453...

10CVSS7.4AI score0.74283EPSS
SaveExploits10References2
Kitploit
Kitploit
added 2026/09/02 8:07 a.m.7 views

CVE-2025-4603

eMagicOne Store Manager for WooCommerce = 1.2.5 - Unauthenticated Arbitrary File Deletion The eMagicOne Store Manager for WooCommerce plugin exposes a remote management protocol endpoint ?connector=bridge that allows file deletion operations on the server. The authentication mechanism relies on a...

9.1CVSS6AI score0.01425EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/02 7:56 a.m.6 views

VEN0m-Ransomware

VEN0m Ransomware https://github.com/user-attachments/assets/5a1fc9b5-a647-41f6-a152-7b9d97381adc This project demonstartes how a legit, and signed driver can be weponized to evade defenses and deploy ransomware simulating a real cyberattack. 🚨 Tested on Windows 11 Pro 24H2. Fully undetectable as ...

7.3CVSS5.9AI score0.00508EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.35 views

Meta Box <= 5.11.1 - Arbitrary File Deletion

The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ajaxdeletefile function. This makes it possible for authenticated attackers with Contributor-level access and above to delete arbitrary files on the server. id: CVE-2026-3946...

7.2CVSS6AI score0.02391EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.50 views

NCBI ToolBox - Directory Traversal

NCBI ToolBox 2.0.7 through 2.2.26 legacy versions contain a path traversal vulnerability via viewcgi.cgi which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string. id: CVE-2018-16716 info: name: NCBI ToolBox -...

9.1CVSS7.3AI score0.0857EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.58 views

Nevma Adaptive Images - Arbitrary File Deletion

Nevma Adaptive Images plugin before 0.6.67 for WordPress contains an arbitrary file deletion caused by unsanitized input in adaptive-images-script.php, letting remote attackers delete arbitrary files, exploit requires sending specific request parameters. id: CVE-2019-14206 info: name: Nevma...

7.5CVSS7.3AI score0.04728EPSS
SaveExploits2References6
Rows per page
Query Builder