Lucene search
+L

96049 matches found

CVE
CVE
added 2026/09/09 2:27 a.m.5 views

CVE-2026-15667

The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is affected by a Local File Inclusion vulnerability in all versions up to and including 4.1.22 , exploitable via the event_layout parameter. Because the etn_manage_event capability is assigned to...

7.5CVSS
SaveExploits0References7
EUVD
EUVD
added 2026/09/09 2:27 a.m.3 views

EUVD-2026-74568

The Eventin – Event Calendar, Event Registration, Tickets & Booking AI Powered plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.1.22 via the 'eventlayout' parameter parameter. This makes it possible for authenticated attackers, with custom-level...

7.5CVSS6.3AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/09 2:23 a.m.7 views

CVE-2019-15813

CVE-2019-15813 This container was made to explain and demonstrate how CVE-2019-15813 Sentrifugo works Sentrifugo V3.2 Sentrifugo is a Human Resource Management System How to Install docker-compose up Default crentials to test ----Super Admin---- Username : empp0001 Password : 5faa7bdf3d7af...

8.8CVSS7.9AI score0.33236EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/09 2:22 a.m.8 views

CVE-2023-36845

CVE-2023-36845 Description CVE-2023-36845 represents a notable PHP environment variable manipulation vulnerability that impacts Juniper SRX firewalls and EX switches. While Juniper has categorized this vulnerability as being of medium severity, in this article, we will elucidate how this singular...

9.8CVSS7.6AI score0.9507EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/09 2:17 a.m.7 views

CVE-2024-4577

This is POC of CVE 2024-4577 This exploit allows attacker to perform RCE in PHP Versions such as PHP 8.3 8.3.8 PHP 8.2 8.2.20 PHP 8.1 8.1.29 Arguments you can check from code! To read more about this particular exploit check nist.gov...

9.8CVSS7.4AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/09 2:12 a.m.4 views

CVE-2022-30887

CVE-2022-30887 Pharmacy Management System 1.0 Shell Upload This application built by Mayurik Pharmacy management system project in PHP has been developed to improve the accuracy and efficiency of pharmaceutical stores through security and management. In short, it is a product inventory applicatio...

9.8CVSS8.1AI score0.2583EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 2:09 a.m.7 views

DolibabyPhp

DolibabyPhp An authenticated RCE exploit for Dolibarr ERP/CRM CVE-2023-30253. Installation You can either install the package from the PyPi repository with pip or git clone the source directly from GitHub. root@kitploit: pip install dolibabyphp Usage root@kitploit: Usage: dolibabyphp OPTIONS...

8.8CVSS7.5AI score0.82094EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/09 2:05 a.m.7 views

juniper-rce_cve-2023-36844

CVE-2023-36844 , CVE-2023-36845 , CVE-2023-36846 , CVE-2023-36847 A Proof of Concept for chaining the CVEs CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 developed by @watchTowr to achieve Remote Code Execution in Juniper JunOS within SRX and EX Series products. Follow the watchTo...

9.8CVSS7.5AI score0.95101EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/09 2:05 a.m.5 views

Karkinos

Disclaimer This is an OLD project I did in university... all code was improvised as I progressed, and hardly anything was planned. This tool should be used on applications/networks that you have permission to attack only. Any misuse or damage caused will be solely the users’ responsibility. What ...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 2:05 a.m.6 views

CVE-2024-4577

CVE-2024-4577 A Proof of Concept developed by @watchTowr exploiting the PHP CGI Argument Injection vulnerability CVE-2024-4577 to obtain RCE on a vulnerable PHP version running in a Windows environment. Detailed technical analysis for this vulnerability Orange Tsi 🍊 This vulnerability was found b...

9.8CVSS7.5AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/09 2:05 a.m.7 views

ASST

ASST BETA OWASP ASST Automated Software Security Toolkit | A Novel Open Source Web Security Scanner. Note: AWSS is the older name of ASST Introduction Web applications have become an integral part of everyday life, but many of these applications are deployed with critical vulnerabilities that can...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 2:03 a.m.6 views

CVE-2024-4577

Orange Tsi 🍊 This vulnerability was found by Orange Tsai @orange8361 of DEVCORE @d3vc0r3. Make sure to follow his outstanding research, our role was to only recreate and develop the exploit for this issue. Security Alert: CVE-2024-4577 PHP CGI Argument Injection Vulnerability Overview CVE-2024-45...

9.8CVSS7.6AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/09 2:01 a.m.9 views

progpilot

progpilot Pruebas de seguridad de aplicaciones estáticas SAST para PHP Instalación Hay muchas opciones disponibles, selecciona la que mejor se adapte a tu caso de uso...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 1:55 a.m.7 views

exploit-CVE-2017-6090

CVE-2017-6090 explotable en contenedor Este proyecto construye un contenedor que ejecuta PhpCollab 2.5.1, que contiene una vulnerabilidad de ejecución remota de código según se detalla en CVE-2017-6090. Además, hay un archivo docker-compose para iniciar ese contenedor y mysql para mostrar la demo...

8.8CVSS7.9AI score0.96234EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/09 1:54 a.m.37 views

rengine

reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner 🚀 reNgine 2.2.0 is released! reNgine 2.2.0 comes with bounty hub where you can sync and import your hackerone programs, in app notifications, chaos as subdomain e...

6AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/09 1:52 a.m.6 views

CVE-2024-4577

🚀 CVE-2024-4577: PHP CGI Argument Injection Scanner and Exploit 🛡️ Overview CVE-2024-4577 is a critical vulnerability affecting PHP applications that utilize the Common Gateway Interface CGI. This tool serves as both a scanner and an exploit , enabling cybersecurity professionals to: Detect PHP CG...

9.8CVSS7.5AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/09 1:48 a.m.3 views

exploit_cve-2023-26326_using_cve-2024-2961

Explotar BuddyForms CVE-2023-26326 usando Iconv CVE-2024-2961 Este trabajo fue realizado por mí, Omar Elshopky, y Nour El Dien Bassiouny. Este repositorio contiene un exploit para el plugin BuddyForms de WordPress CVE-2023-26326, reportado inicialmente en el aviso por Joshua Martinelle. El exploi...

9.8CVSS7.1AI score0.8833EPSS
SaveExploits20References4
Kitploit
Kitploit
added 2026/09/09 1:47 a.m.7 views

ctf-cve-2019-11043

Task Management APP CVE-2019-11043 Lab Minimal PHP app with intentionally vulnerable Nginx/PHP-FPM setup for reproducing CVE-2019-11043. Includes a tiny task manager, login/admin, and DB config UI. Build & Run Docker root@kitploit: build docker build -t cve-2019-11043-lab:app . run docker run --r...

9.8CVSS7.4AI score0.9978EPSS
SaveExploits57
Kitploit
Kitploit
added 2026/09/09 1:46 a.m.5 views

Roundcube-1.6.10-Post-Auth-RCE-CVE-2025-49113-

🚨 Reporte de Vulnerabilidad: CVE-2025-49113 en Roundcube Webmail ⚠️ AVISO IMPORTANTE — USO RESPONSABLE Este material es únicamente para fines educativos y de investigación. Se prohíbe estrictamente el uso de la información y las herramientas aquí descritas para cualquier actividad ilegal o...

9.9CVSS8.1AI score0.98897EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/09/09 1:45 a.m.7 views

CVE-2024-34832

CubeCart - Directory Traversal May Lead To RCE CVE-2024-34832 TL;DR In the admin panel, parameters such as g and node are used to construct the path to include .inc.php files and execute PHP code. A malicious user with the ability to upload .inc.php files anywhere on the server can exploit a path...

9.8CVSS5.9AI score0.05012EPSS
SaveExploits1
Rows per page
Query Builder