Lucene search
+L

3974 matches found

Kitploit
Kitploit
added 2026/09/22 10:00 p.m.12 views

CVE-2020-35391

CVE-2020-35391 Tenda f3 Malformed HTTP Request Header Processing Vulnerability. Run root@kitploit: python3 CVE-2020-35391.py --help python3 CVE-2020-35391.py python3 CVE-2020-35391.py -i http://127.0.0.1:8080 python3 CVE-2020-35391.py -l ip.txt Tenda F3 Shodan Dork Exploitation...

9.6CVSS8.1AI score0.35248EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/22 8:39 p.m.15 views

CVE-2025-48799-

CVE-2025-48799 – Apache Tomcat Remote Code Execution PoC This repository contains a proof-of-concept exploit for CVE-2025-48799, a remote code execution vulnerability discovered in Apache Tomcat 9.0.48. The flaw stems from an integer overflow in the HTTP header parser, which can be triggered by a...

7.8CVSS8AI score0.0109EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/21 8:48 p.m.13 views

CVE-2025-60876

CVE-2025-60876: busybox wget request-target injection fix A behavior-preserving fix for CVE-2025-60876, an HTTP header-injection vulnerability in BusyBox wget, plus the proof-of-concept that demonstrates it and the artifacts for submitting the fix upstream to BusyBox. The vulnerability BusyBox wg...

6.8AI score0.00291EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/21 4:42 p.m.13 views

boa-detector

boa-detector This Zeek package detects the Boa web server string in HTTP headers. All Boa versions are considered vulnerable: https://www.microsoft.com/en-us/security/blog/2022/11/22/vulnerable-sdk-components-lead-to-supply-chain-risks-in-iot-and-ot-environments/ When the /^Boa/./ server string i...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 1:58 p.m.10 views

Imperva_gzip_bypass

Imperva Web Application Firewall WAF POST Request Bypass Imperva Cloud WAF was vulnerable to a bypass that allows attackers to evade WAF rules when sending malicious HTTP POST payloads, such as log4j exploits, SQL injection, command execution, directory traversal, XXE, etc. Remediation The Imperv...

5.9AI score
SaveExploits0
NVD
NVD
added 2026/09/21 1:17 p.m.6 views

CVE-2026-94216

A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This vulnerability affects the function authorize of the file /usr/sbin/webserver of the component HTTP Header Handler. Executing a manipulation of the argument Success can lead to...

5.3CVSS0.00336EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/21 12:45 p.m.10 views

CVE-2026-94216

An open redirect vulnerability affects ST Engineering iDirect Evolution and Velocity WebServer Evolution (up to build 20260717). The flaw resides in the authorize function of the file /usr/sbin/webserver, specifically in the HTTP Header Handler component. Manipulating the Success argument allows ...

5.3CVSS5AI score0.00336EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/21 12:45 p.m.5 views

EUVD-2026-83907

A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This vulnerability affects the function authorize of the file /usr/sbin/webserver of the component HTTP Header Handler. Executing a manipulation of the argument Success can lead to...

5.3CVSS5AI score0.00336EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/21 12:45 p.m.32 views

CVE-2026-94216 ST Engineering iDirect Evolution/Velocity WebServer Evolution HTTP Header webserver authorize redirect

A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This vulnerability affects the function authorize of the file /usr/sbin/webserver of the component HTTP Header Handler. Executing a manipulation of the argument Success can lead to...

5.3CVSS0.00336EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/20 9:57 p.m.9 views

CVE-2017-5638

CVE-2017-5638 This script is intended to validate Apache Struts 2 vulnerability CVE-2017-5638, AKA Struts-Shock. This is a completely harmless as it does not inject any malicious payload, only inject an HTTP header named 'STRUTS2-VALIDATION' in order to be able to validate whether is vulnerable...

10CVSS8.5AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/09/20 9:46 a.m.11 views

CVE-2017-5638

CVE-2017-5638 The Apache Struts 2 versions 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 have a flaw in their Jakarta Multipart parser. This flaw causes incorrect handling of exceptions and generation of error messages when attempting to upload files. As a result, attackers can remotely execute...

10CVSS8.6AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/09/20 5:24 a.m.13 views

CVE-2026-8181-PoC

🚨 CVE-2026-8181 | Burst Statistics Authentication Bypass -brightgreen.svg?style=for-the-badge !CAUTION CRITICAL ALERT: This vulnerability allows an unauthenticated remote attacker to bypass authentication and gain full Administrator privileges on the target WordPress site by simply injecting a...

9.8CVSS6AI score0.14608EPSS
SaveExploits13References1
Kitploit
Kitploit
added 2026/09/20 5:17 a.m.12 views

log4jcheck

Northwave Log4j CVE-2021-44228 checker Friday 10 December 2021 a new Proof-of-Concept 1 addressing a Remote code Execution RCE vulnerability in the Java library 'log4j' 2 was published. This vulnerability has not been disclosed to the developers of the software upfront. The vulnerability is being...

10CVSS7.5AI score0.99999EPSS
SaveExploits375References1
Kitploit
Kitploit
added 2026/09/20 4:59 a.m.9 views

JEFAZO-CVE-2025-55182-Checker

JEFAZO-CVE-2025-55182-Checker Description JEFAZO-CVE-2025-55182-Checker is a passive analysis tool designed to identify indicators related to CVE-2025-55182 in applications built with Next.js and React Server Components RSC. The tool performs safe and non-intrusive checks, without attempting to...

10CVSS7.7AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/19 6:55 p.m.9 views

CVE-2022-46169

CVE-2022-46169 Exploit for CVE-2022-46169 Cacti versions before 1.2.3 Here remoteclientauthorized checks the clients hostname in poller table for entry root@kitploit: function remoteclientauthorized // ... $clientaddr = getclientaddr; // ... $clientname = gethostbyaddr$clientaddr; // ... $pollers...

9.8CVSS8.9AI score0.99826EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/19 5:52 a.m.7 views

CVE-2022-1388

CVE-2022-1388 - F5 BIG-IP iControl REST Authentication Bypass RCE This Python script exploits CVE-2022-1388, a critical vulnerability in F5 BIG-IP iControl REST that allows unauthenticated remote command execution via improper access control and HTTP header handling. ⚠️ For educational and...

9.8CVSS9.3AI score0.99958EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/18 3:37 p.m.10 views

CVE-2026-66753-HTTP-Header-Injection-via-Unvalidated-CR-and-LF-in-Header-Values-tiny_http-

Security Advisory: HTTP Header Injection via Unvalidated CR and LF in Header Values tinyhttp Assigned CVE ID: CVE-2026-66753 Summary tinyhttp does not reject carriage return or line feed inside HTTP header values, in either direction. On the request side, readnextline ends a header line only on...

6.3CVSS5.9AI score0.00218EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/18 7:53 a.m.13 views

cve-2025-29927-lab

CVE-2025-29927 Lab Minimal reproduction lab for CVE-2025-29927 — Next.js middleware authorization bypass CVSS 9.1. Companion to: N-Day Analysis writeup on Medium What this is A Next.js 15.2.2 app vulnerable with a cookie-gated /dashboard route. The middleware auth check can be bypassed by sending...

9.1CVSS7.7AI score0.99225EPSS
SaveExploits59
Kitploit
Kitploit
added 2026/09/18 5:05 a.m.10 views

CVE-2026-35616-check

CVE-2026-35616 Vulnerability Assessment Tool Safely detect whether a FortiClient EMS server is vulnerable to CVE-2026-35616 without causing any disruption. See the full write-up on the Bishop Fox blog. Description CVE-2026-35616 is a pre-authentication API bypass in FortiClient EMS 7.4.5 and 7.4....

9.8CVSS8.5AI score0.90749EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/18 4:11 a.m.12 views

CVE-2017-5638

CVE-2017-5638 Apache Struts 2 Introduction: Apache Struts 2 is an open source web application framework for developing Java EE Web applications,It is the second generation of the struts framework first released on 10th Oct 2006. Struts Framework is designed in a way that it helps creating Web...

10CVSS8.1AI score0.99999EPSS
SaveExploits46
Rows per page
Query Builder