Lucene search
+L

96050 matches found

Kitploit
Kitploit
added 2026/09/09 7:04 a.m.318 views

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/09 6:57 a.m.5 views

Php-unit-CVE-2017-9841

phpunit Remote Code Execution Vulnerability CVE-2017-9841 Composer is a PHP package management tool. Using Composer to install extension packages will create a vendor folder in the current directory and place all files in it. Usually this directory should be placed outside the web root so that...

9.8CVSS7.8AI score0.99999EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/09 6:55 a.m.203 views

snuffleupagus

Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features • Download • Examples • Documentation • License • Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...

6.3AI score
SaveExploits0References12
Kitploit
Kitploit
added 2026/09/09 6:55 a.m.8 views

snuffleupagus

Snuffleupagus Módulo de seguridad para php7 y php8: ¡eliminando clases de bugs y aplicando parches virtuales al resto!...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/09 6:47 a.m.5 views

Door404

Door404 Door404 is Open Source Project Developed ByMrSqar & Rizer This Project Developed For 2 Reasons First " Help Beginners to learn coding . " Second " Help Newbie Servers Managers To Learn New Protection Tricks " Requirements PHP PHP CUrl OS Linux Screen Shots Video : License DWTFPL...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/09 6:47 a.m.5 views

CVE-2022-27414

CVE-2022-27414 - SQL-Injection College Website CMS v1.0 - CVE-2022-27414 - SQL Injection CVE url root@kitploit: https://vulners.com/cve/CVE-2022-27414 PoC below Vulnerable Code starts from line 9 in "cwms\departments\index.php" root@kitploit: query"SELECT FROM departmentlist where deleteflag = 0...

6AI score
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 6:37 a.m.6 views

WeBaCoo

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ | | | | | \ / \ | | | | | | / / | / / | |/| |/ \ / | | / \ / \ \ /\ / / | / / | | /\ | | / / / ,| // / root@kitploit: Web Backdoor Cookie Script-Kit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Written by: Anestis Bechtsoudis @ bechtsoudis.com Copyright ...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:30 a.m.8 views

CVE-2026-29861

CVE-2026-29861 🛡️ CVE Disclosure: CVE-2026-29861 — SQL Injection in PHP-MYSQL-User-Login-System Disclosure Date: 10 April 2026 CVE ID: CVE-2026-29861 Severity: CRITICAL CVSS 9.8 🧩 Summary A critical SQL Injection vulnerability exists in PHP-MYSQL-User-Login-System v1.0, specifically within the...

9.8CVSS5.9AI score0.00607EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/09 6:29 a.m.6 views

CVE-2025-7384

CVE-2025-7384 — PHP Object Injection to RCE Plugin: Database for Contact Form 7 contact-form-entries ≤ 1.4.3 CVSS: 9.8 Critical CWE: CWE-502 — Deserialization of Untrusted Data Authentication Requirement: None Unauthenticated Impact: Remote Code Execution Table of Contents 1. Vulnerability Overvi...

9.8CVSS6.2AI score0.01281EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 6:23 a.m.6 views

OpenEMR_Vulnerabilities

OpenEMR Remote Code Execution Vulnerability OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious php codes. PoC root@kitploit: git clone https://github.com/EmreOvunc/OpenEMRVulnerabilities.git cd OpenEMRVulnerabilities python3 openemrrcepoc.py -t http://127.0.0.1/openemr...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:22 a.m.6 views

CVE-2026-22200

CVE-2026-22200: osTicket PDF File Read + CNEXT RCE Proof of concept exploit for osTicket CVE-2026-22200 which abuses PHP filters to exfiltrate files through the mPDF library and can be chained to RCE via CVE-2024-2961 CNEXT. Blog Post Deep-dive here: Horizon3.ai - Ticket to Shell: Exploiting PHP...

8.7CVSS6.1AI score0.73606EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/09 6:17 a.m.10 views

webhandler

WebHandler A handler for PHP system functions & also an alternative 'netcat' handler Info WebHandler tries to simulate a 'Linux bash prompt' to handle and process: root@kitploit: - PHP program execution functions e.g. system, passthru, exec, etc - Bind shell connections - Reserve shell connection...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:17 a.m.11 views

RCE

CVE-2022-31814 WebApp bug root@kitploit: import argparse import requests import time import sys import urllib.parse from requests.packages.urllib3.exceptions import InsecureRequestWarning requests.packages.urllib3.disablewarningsInsecureRequestWarning parser =...

9.8CVSS8.2AI score0.91881EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/09 6:16 a.m.4 views

CVE-2025-34085-Multi-target

CVE-2025-34085 Escáner RCE Multiobjetivo Escáner de explotación masiva para CVE-2025-34085 — una vulnerabilidad de ejecución remota de código no autenticada en el plugin Simple File List de WordPress. Esta herramienta sube un payload PHP disfrazado como imagen, lo renombra mediante un motor de...

6AI score
SaveExploits9
Kitploit
Kitploit
added 2026/09/09 6:09 a.m.113 views

vboxdie-cracker

Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 5:57 a.m.6 views

CVE-2024-9441

Nortek Linear eMerge E3 Pre-Auth RCE PoC CVE-2024-9441 Description: This repository contains a Proof of Concept PoC exploit for Nortek Linear eMerge E3 CVE-2024-9441, which is vulnerable to Remote Code Execution RCE in a pre-authentication state. The vulnerability is triggered via a flaw in the...

9.8CVSS6AI score0.53472EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/09 5:47 a.m.7 views

CVE-2021-43503

Warning The vulnerability has been revoked Override This is Abount CVE-2021-43503, I can not replicate this vulnerability through exp Requirement PHP 7.1. Composer registrar=$b; namespace Illuminate\Queue\Capsule class Manager protected $manager; public function construct$c $this-manager-method=$...

6AI score
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/09 5:47 a.m.9 views

php_hack

This tool exploits a vulnerability called CVE-2019-11043, an instance of insecure pointer arithmatic, to gain access to poorly configured PHP servers. It can be downloaded here you will need to run it from the command line Usage: phphack target IP target port...

9.8CVSS7.3AI score0.9978EPSS
SaveExploits57References1
Kitploit
Kitploit
added 2026/09/09 5:45 a.m.9 views

CVE-2018-16763-FuelCMS-1.4.1-RCE

CVE-2018-16763 - FuelCMS = 1.4.1 RCE Exploit to trigger RCE for CVE-2018-16763 on FuelCMS = 1.4.1 and interactive shell. Features Automatically uploads a php webshell API in FuelCMS using CVE-2018-16763. Execute system commands via an API with ?action=exec. Download files from the remote system t...

9.8CVSS8.2AI score0.82937EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/09 5:45 a.m.11 views

kurukshetra

Kurukshetra Kurukshetra es un framework web desarrollado con el objetivo de ser el primer framework de código abierto que proporciona una base sólida para alojar desafíos de codificación segura razonablemente complejos, al tiempo que ofrece la capacidad de ejecutar cada desafío de manera eficient...

6AI score
SaveExploits0References4
Rows per page
Query Builder