750 matches found
CVE-2021-46704
OS Command Injection in GenieACS CVE-2021-46704 CVE-2021-46704 Nuclei template Reference : https://github.com/advisories/GHSA-2877-693q-pj33 https://nvd.nist.gov/vuln/detail/CVE-2021-46704 https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-46704...
CVE-2024-44902-env
CVE-2024-44902 - ThinkPHP Insecure Deserialization RCE Vulnerable environment for nuclei-templates validation. Vulnerability Details...
oss-bounty-program
ProjectDiscovery OSS Bounty Program Purpose The ProjectDiscovery OSS Bounty Program exists to democratize security by rewarding meaningful contributions from the global community. Our tools are used by researchers, defenders, and builders worldwide. This program ensures that anyone, anywhere, can...
CVE-2025-31324
CVE-2025-31324 How does this detection method work? The template performs an HTTP GET request to the target's base URL and examines the response headers to identify SAP NetWeaver Application Server instances. This information helps assess whether the system might be susceptible to CVE-2025-31324...
POC_CVE-2024-4322
CVE-2024-4322: LoLLMS WebUI PoC & Nuclei Validation Lab This repository provides Dockerized local labs for reproducing CVE-2024-4322 , a path traversal vulnerability in LoLLMS WebUI v9.6, and for validating that the associated Nuclei template does not match LoLLMS WebUI v9.8. Use this lab only...
CVE-2025-26466
CVE-2025-26466 How does this detection method work? This template matches on the following vulnerable versions: root@kitploit: - "SSH-2.0-OpenSSH9.5p1" - "SSH-2.0-OpenSSH9.6p1" - "SSH-2.0-OpenSSH9.7p1" - "SSH-2.0-OpenSSH9.8p1" - "SSH-2.0-OpenSSH9.9p1" If there is a match, the host is considered t...
CVE-2025-53690-POC
Sitecore Critical Deserialization RCE CVE-2025-53690 POC and Nuclei Template Short summary This repository hosts a detection template and supporting materials for CVE-2025-53690 Sitecore. The included Nuclei template helps scan for Sitecore instances that appear to be configured in a way that cou...
CVE-2025-49113
CVE-2025-49113 Detection NOTE This template has now been implemented into CERT Polska's tool Artemis. I’m deeply honoured to be acknowledged by CERT Polska for this vulnerability detection script. It is a true privilege to play a part in strengthening global cyber security efforts through...
React2Shell
React2Shell CVE-2025-55182 Scanner & Exploit Toolkit for Next.js/React Server Components RCE. Repository Structure root@kitploit: React2Shell/ ├── browser-extension/ Chrome extension for browser-based detection │ ├── manifest.json │ ├── content.js │ ├── popup.html/js │ └── background.js ├── cli/...
CVE-2026-8037-POC
CVE-2026-8037-POC Includes executable command detection and one-click getshell requires server deployment service pco.yaml can be used with nuclei for quick detection Quick Start Interactive Mode root@kitploit: python go.py Enter target URL → select function menu. Detection Target root@kitploit:...
POC_CVE-2026-45185
CVE-2026-45185 Nuclei Template Validation Lab This repository is not a general-purpose exploit PoC repository. It is a local validation lab for reproducing and reviewing the behavior of a CVE-2026-45185 template intended for contribution to projectdiscovery/nuclei-templates. root@kitploit: The...
react2shell-PoC
React2Shell Nuclei template for detecting React2Shell CVE-2025-55182 and CVE-2025-66478...
OmniScan
OmniScan Comprehensive Vulnerability Scanner OmniScan is a lightweight, multi-engine vulnerability scanner based on Python, designed for red team operations and security research. It integrates a lightweight Nuclei engine Lite and Afrog engine, and provides powerful asset collection and result...
lazyrecon
root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...
CVE-2024-23692-EXP
CVE-2024-23692-EXP root@kitploit: bash CVE-2024-23692.sh Nuclei root@kitploit: nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt...
Oneliner-Bugbounty
Oneliner-Bugbounty A collection oneliner scripts for bug bounty List tools Subfinder Naabu httpx Nuclei Waybackurls DNSProbe gf sqlmap qsreplace hakrawler Puredns GauPlus uro Auto scanner root@kitploit: subfinder -d site.com -all | naabu | httpx | nuclei -t nuclei-templates Finding files For...
cent
Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place. Install root@kitploit: go install -v github.com/xm1k3/cent/v2@latest Or download from releases after installation run cent init to initialize cent with the...
CVE-2025-6440
CVE-2025-6440 nuclei tamplate to CVE-2025-6440 BETA VERSION, will be update...
CVE-2025-24893-EXP
CVE-2025-24893-EXP Affected Versions xwiki-platform = 5.3-milestone-2, = 16.0.0-rc-1, 16.4.1 16.0.0-rc-1, 16.4.1 POC https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24893.yaml CVE-2025-24893 - XWiki Platform Exploit usage: python CVE-2025-24893.py -u -c...