Lucene search
+L

96055 matches found

Kitploit
Kitploit
added 2026/09/09 10:16 a.m.243 views

versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 10:14 a.m.5 views

CVE-2019-19369

CVE-2019-19369 - FusionPBX = 4.5.10 Authenticated RCE Authenticated attackers can use PHP-Editor function in FusionPBX versions = 4.5.10 to edit one of the existing PHP pages to insert a PHP payload. By navigating to the changed file we are able to gain a shell as www-data. Discovered by...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 9:48 a.m.6 views

CVE-2026-17544-PoC

CVE-2026-17544 — PHP bcmath bccomp Out-of-Bounds Write Stack Smashing CVSS 9.8 Critical · CWE-787 · GHSA-x692-q9x7-8c3f Summary bcstr2num in ext/bcmath/libbcmath/src/str2num.c vendored libbcmath, PHP 8.4+ contains an off-by-N out-of-bounds write. When the user-supplied scale is smaller than the...

9.8CVSS5.9AI score0.00426EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 9:46 a.m.5 views

CVE-2020-24186

CVE-2020-24186 This script exploits the CVE-2020-24186 vulnerability in WordPress to upload a camouflaged PHP payload and obtain a shell on the target system. There are three modes of operation: 1. Interactive Shell: Uploads the basic webshell and enters an interactive mode, allowing you to send...

10CVSS8.2AI score0.94616EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/09 9:43 a.m.4 views

CVE-2025-29017

CVE-2025-29017 - Internet Banking System 2.0.0 Remote Code Execution via Profile Picture Upload Description A Remote Code Execution RCE vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the profilepic parameter within pagesviewclient.php...

8.8CVSS5.9AI score0.00884EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 9:42 a.m.4 views

CVE-2018-16763_FuelCMS-1.4.1_RCE

CVE-2018-16763 FuelCMS - 1.4.1 - RCE PoC FuelCMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution. Exploit This works by exploiting the PHP filter parameter which allows you to use the system...

9.8CVSS8.1AI score0.82937EPSS
SaveExploits19References1
Kitploit
Kitploit
added 2026/09/09 9:40 a.m.6 views

Python-CVE-2020-25213

Python-CVE-2020-25213 Python Interactive Exploit for WP File Manager Vulnerability. The File Manager wp-file-manager plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php...

10CVSS8.4AI score0.97328EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/09 9:39 a.m.5 views

CVE-2024-4577

CVE-2024-4577 Argument injection vulnerability in PHP INSTALL git clone https://github.com/didarul342/CVE-2024-4577.git cd CVE-2024-4577 pip3 install -r requirements.txt USAGE root@kitploit: Scan A Target python3 CVE-2024-4577.py -t https://160.153.61.66/ -c "" Scan a list of Targets python3...

9.8CVSS7.4AI score0.99987EPSS
SaveExploits68References1
Kitploit
Kitploit
added 2026/09/09 9:39 a.m.6 views

SEPM-EoP

Summary Product Name : Symantec Endpoint Protection Manager Version 14 14 MP1 .2 build 1023 14.2.1023.0100 - older versions may also be affected Impact : High. A standard windows user not an admin can escalate to NT SERVICE\semwebsrv . With this user role he has access to many of the SEPM...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 9:38 a.m.4 views

CVE-2022-22909

CVE-2022-22909 Hotel Druid 3.0.3 - Remote Code Execution RCE Exploit by kaal Exploits 1. HotelDruidExploit.py This Exploit will create new room with our PHP payload as a room name . Usage : $ ./HotelDruidExploit.py -h $ ./HotelDruidExploit.py -u http://127.0.0.1/hoteldruid 2...

8.8CVSS7.8AI score0.45434EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/09 9:38 a.m.5 views

drupalgeddon-2

Drupalgeddon-2 Vuln checker for Drupal v7.x + v8.x Usage : root@kitploit: php drupalgeddon.php Target http://example.com :...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 9:32 a.m.9 views

CVE-2023-49544

CVE-2023-49544 Customer Support System 1.0 - Local File Inclusion Description : Customer Support System 1.0 is vulnerable to Local File Inclusion. An authenticated user has the capability to access and read PHP files from the operating system by exploiting a Local File Inclusion LFI vulnerability...

4.9CVSS5.9AI score0.00766EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 9:23 a.m.11 views

CVE-2026-58025

CVE-2026-58025 — MediaWiki PHP Deserialization RCE via Log Entry Import WikiImporter → LogEntryBase::extractParams → unserialize user-controlled logparams → RCE Overview CVE-2026-58025 is a critical CVSS 9.8 deserialization of untrusted data vulnerability in MediaWiki Wikimedia Foundation. The...

9.8CVSS7.3AI score0.00503EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 9:13 a.m.4 views

CVE-2019-6340

CVE-2019-6340 For educational purposes only Run root@kitploit: $ docker run --rm -p 8080:80 knqyf263/cve-2019-6340 Exploit GET root@kitploit: $ curl -XGET -H "Content-Type: application/hal+json" "http://localhost:8080/node/1?format=haljson" -d ' "link": "value": "link", "options":...

8.1CVSS8AI score0.92017EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/09 9:10 a.m.6 views

CVE-2024-4577-RCE

PHP CGI Argument Injection CVE-2024-4577 RCE 📜 Description...

9.8CVSS7.4AI score0.99987EPSS
SaveExploits68References1
Kitploit
Kitploit
added 2026/09/09 9:10 a.m.82 views

msmap

MSMAP Msmap is a Memory WebShell Generator. Compatible with various Containers, Components, Encoder, WebShell / Proxy / Killer and Management Clients. 简体中文 The idea behind I, The idea behind II, The idea behind III Feature WIP Function Dynamic Menu Automatic Compilation Generate Script...

5.5AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/09 9:06 a.m.5 views

Magento-CVE-2016-4010

Analysis and Exploitation of Magento Unauthenticated Remote Code Execution Vulnerability CVE-2016-4010 0x00 Preface On May 17, foreign security researcher Netanel Rubin publicly disclosed an unauthenticated remote code execution vulnerability in Magento CVE-2016-4010. This vulnerability actually...

9.8CVSS8.2AI score0.92869EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/09 9:05 a.m.5 views

CVE-2024-7954

CVE-2024-7954 - SPIP 4.2.8 Remote Command Execution RCE Exploit This script exploits a Remote Code Execution vulnerability in SPIP version 4.2.8 via the porteplumeprevisu endpoint. The vulnerability allows unauthenticated attackers to inject PHP code through preview rendering of crafted image tag...

9.8CVSS8.2AI score0.90053EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/09 9:03 a.m.4 views

CVE-2020-8813-Cacti-RCE-in-graph_realtime

CVE-2020-8813 - RCE through graphrealtime.php in Cacti 1.2.8 Features RCE through graphrealtime.php in Cacti 1.2.8 Live mode Execute a single command Verbose mode Description...

9.3CVSS6.8AI score0.73779EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/09/09 8:58 a.m.8 views

CVE-2009-4623

CVE-2009-4623 Advanced Comment System 1.0 Reverse Shell Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the ACSpath parameter to 1 index.php and 2 admin.php in advancedcommentsystem/. NOTE: this...

7.5CVSS7.4AI score0.09847EPSS
SaveExploits2
Rows per page
Query Builder