Lucene search
+L

479570 matches found

Kitploit
Kitploit
added 2026/08/30 2:08 p.m.4 views

CVE-2022-24087

CVE-2022-24087-RCE and CVE-2022-24086-RCE CVE description CVE-2022-24086 and CVE-2022-24087 - improper Input Validation vulnerability in contact form Magento Open Source and Adobe Commerce - has received a CVSS score of 9.8 out of 10, it is classified as a pre-authentication issue which means tha...

10CVSS7.4AI score0.99199EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/30 2:06 p.m.2 views

GenCrushSSTIExploit

RU GenCrushSSTIExploit — это PoC-инструмент для эксплуатации уязвимости SSTI Server-Side Template Injection в CrushFTP CVE-2024-4040. Данный инструмент демонстрирует способы эксплуатации этой уязвимости исключительно в образовательных и этических целях. Возможности Устанавливает сессию с сервером...

10CVSS7AI score0.99539EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/08/30 2:04 p.m.3 views

CVE-2020-9495

CVE-2020-9495 PoC CVE-2020-9495 is medium severity LDAP injection vulnerability in Apache Archiva versions before 2.2.5. It allows an attacker to retrieve any LDAP attribute values of users that exist on the LDAP server. From the official Apache Archiva advisory: By providing special values to th...

5.3CVSS6AI score0.08004EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/30 2:04 p.m.4 views

SQLPad-RCE-Exploit-CVE-2022-0944

작동 방식: 이 PHP 코드는 SQLPad 의 원격 코드 실행RCE 취약점CVE-2022-0944을 악용하도록 설계되었습니다. 악성 코드를 SQLPad 애플리케이션에 주입하여 시스템 명령을 실행하도록 강제함으로써 공격자가 취약한 시스템을 원격으로 제어할 수 있는 리버스 셸 연결을 만듭니다. 사전 요구 사항: PHP CLI – sudo apt-get install php-cli cURL PHP cURL library – sudo apt-get install php-curl 사용법: 1. 리스너 설정 공격자 머신에서 리버스 셸...

9.1CVSS7.1AI score0.08669EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/08/30 2:01 p.m.2 views

CVE-2022-22947

CVE-2022-22947 Memory Shell Injection Supports injection of three types of memory shells root@kitploit: Usage: usage -t -u Options: -h, --help show this help message and exit -t TYPE switch one : spring, netty, godzilla -u URL url Taking Godzilla shell injection as an example root@kitploit: pytho...

10CVSS7AI score0.98253EPSS
SaveExploits54
Kitploit
Kitploit
added 2026/08/30 1:58 p.m.7 views

CVE-2019-10708

Scms - SQL Injection exploit.py is a PoC for the CVE-2019-10708 vulnerability, implementing multiprocessing for injection to obtain the database name and backend administrator credentials recommended for versions before 20190401 Usage root@kitploit: 測試是否可注入 python3 exploit.py...

9.8CVSS7.3AI score0.02638EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/30 1:55 p.m.2 views

VMWare_CVE-2022-22954

VMWareCVE-2022-22954 CVE-2022-22954 is a server-side template injection vulnerability in the VMware Workspace ONE Access and Identity Manager Shodan Search result PoC Follow Youtube Twitter...

10CVSS7.4AI score0.99997EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/08/30 1:54 p.m.5 views

TeamsImplant

TeamsImplant Este proyecto es un implante sigiloso para Teams que actúa como proxy de la urlmon.dll que Teams utiliza. Compila y coloca este archivo en el directorio de Teams como urlmon.dll y tendrás una puerta trasera persistente cada vez que Teams se ejecute por un usuario o al inicio...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/30 1:54 p.m.3 views

GenGravSSTIExploit

GenGravSSTIExploit — это PoC-скрипт на Python, эксплуатирующий аутентифицированную уязвимость Server-Side Template Injection SSTI в Grav CMS версий = 1.7.44 CVE-2024-28116. Эта уязвимость позволяет пользователю с правами редактора выполнять команды ОС на удаленном сервере. Примечание : Для работы...

8.8CVSS7.3AI score0.0576EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/30 1:52 p.m.5 views

CVE-2024-4040

CVE-2024-4040 A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform...

10CVSS7AI score0.99539EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/08/30 1:51 p.m.3 views

MalwareForge---Advanced-Static-Malware-Analyzer

🛡️ MalwareForge - Advanced Static Malware Analyzer MalwareForge is a powerful static malware analysis tool that detects malicious behavior without executing the file. ✨ Features 🦠 Behavior Analysis : Process Injection, Persistence, Network, Stealer, Evasion 💉 8 Injection Techniques : Process...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/30 1:50 p.m.4 views

CVE-2023-33538-msf

CVE-2023-33538 – TP-Link TL-WR940N/841N Command Injection Metasploit module This Metasploit auxiliary module targets an authenticated command injection vulnerability in TP-Link TL-WR940N V2/V4 and TL-WR841N V8/V10 routers. The issue lies in the vulnerable ssid1 parameter used in WlanNetworkRpm.ht...

8.8CVSS7.4AI score0.41874EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/30 1:43 p.m.2 views

CVE-2025-5287

CVE-2025-5287 PoC Unauthenticated SQL Injection exploit for WordPress Likes and Dislikes Plugin ≤ 1.0.0 📖 Description This Python script is a proof-of-concept PoC exploit for CVE-2025-5287 , targeting a vulnerability in the WordPress Likes and Dislikes Plugin ≤ 1.0.0. The vulnerability allows...

7.5CVSS5.9AI score0.02355EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/30 1:39 p.m.5 views

CVE-2021-42663

CVE-2021-42663 CVE-2021-42662 - HTML Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: A HTML injection vulnerability exists in the Online Event Booking and Reservation System version 2.3.0. An attacker can leverage this vulnerability...

5.4CVSS5.9AI score0.03852EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/30 1:27 p.m.3 views

PhantomEvasion

PHANTOM EVASION 3.0 Phantom-Evasion is an antivirus evasion tool written in python both compatible with python and python3 capable to generate almost fully undetectable executable even with the most common x86 msfvenom payload. The following OSs officialy support automatic setup: 1. Kali Linux 2...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/30 1:25 p.m.5 views

RustyInjector

⚠️ Disclaimer: For Research and Educational Purposes Only This project is a Proof of Concept PoC demonstrating Bluetooth keystroke injection, re-implemented in Rust. It is intended strictly for educational and security research purposes. Do not use this code to compromise systems without explicit...

6.3CVSS6.8AI score0.07879EPSS
SaveExploits10References2
Kitploit
Kitploit
added 2026/08/30 1:24 p.m.4 views

CVE-2024-4577

PHP CGI Argument Injection CVE-2024-4577 RCE 📜 Description In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command...

9.8CVSS6.9AI score0.99987EPSS
SaveExploits68References3
Kitploit
Kitploit
added 2026/08/30 1:21 p.m.4 views

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 Cacti remoteagent.php Unauthenticated Command Injection. This script checks only the conditions of CVE-2022-46169. What is Cacti? Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. ...

9.8CVSS7.4AI score0.99826EPSS
SaveExploits48References2
Kitploit
Kitploit
added 2026/08/30 1:21 p.m.4 views

ContentHistory

Joomla! 3.2 到 3.4.4 - SQL 注入 expl.php Checker.pl joomlacontenthistorysqli.rb www.sec4ever.com...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/30 1:18 p.m.4 views

CVE-2020-35713

Description Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page. How to use Step 1: Modify the IP address in cve-2020-35713.py file to the target address Step 2: Run the...

10CVSS7.2AI score0.32704EPSS
SaveExploits2
Rows per page
Query Builder