Lucene search
+L

911 matches found

Kitploit
Kitploit
β€’added 2026/09/09 6:49 p.m.β€’6 views

CVE-2023-29357

Recreation of the SharePoint PoC for CVE-2023-29357 in C with lots of help from ChatGPT. Build with .Net Version 4.7.2 in Visual Studio 2017 Use NuGet Package manager to install any missing packages Yara rules for detection below Usage: root@kitploit: CVE-2023-29357.exe https://yoursharepoint.lol...

9.8CVSS8.4AI score0.99984EPSS
SaveExploits10References2
Kitploit
Kitploit
β€’added 2026/09/09 6:43 p.m.β€’5 views

CVE-2021-44077

CVE-2021-44077 Proof of Concept Exploit for CVE-2021-44077: PreAuth RCE in ManageEngine ServiceDesk Plus msiexec.exe pip install the requirements file or make sure you've got the requests package. If you're trying to catch a reverse shell, run your listener first, e.g. root@kitploit: nc -l 4444...

9.8CVSS8.5AI score0.93298EPSS
SaveExploits6
Kitploit
Kitploit
β€’added 2026/09/09 6:35 p.m.β€’5 views

CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE

Ivanti EPMM pre-auth RCE Dummy Target A simple demo application that shows how to reproduce the Ivanti EPMM pre-auth RCE vulnerability CVE-2026-1281 / CVE-2026-1340 for educational and security research purposes. Vulnerability Overview This vulnerability exploits Bash arithmetic expansion behavio...

9.8CVSS8.4AI score0.862EPSS
SaveExploits6
Kitploit
Kitploit
β€’added 2026/09/09 6:33 p.m.β€’12 views

CVE-2026-20131-POC

CVE-2026-20131---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-Day CVE-2026-20131 Exploited Since 2023 for Admin Access. This repository contains a working proof-of-concept exploit for CVE-2026-20131, a critical pre-authentication vulnerability in Cisco Catalyst SD-WAN Controller formerly vSmart and...

10CVSS8.4AI score0.31231EPSS
SaveExploits4
Kitploit
Kitploit
β€’added 2026/09/09 6:19 p.m.β€’7 views

CVE-2025-32433-Detection

CVE-2025-32433 Detection Author: te0rwx Created: 2025-08-27 Upt. 2026-08-16 Description A custom YARA rule for detecting known artifacts associated with CVE-2025-32433 , an Erlang/OTP SSH pre-authentication remote code execution RCE vulnerability. The rule was developed and validated against publ...

10CVSS7.7AI score0.98594EPSS
SaveExploits38
Kitploit
Kitploit
β€’added 2026/09/09 4:38 p.m.β€’9 views

CVE-2019-7192_QNAP_Exploit

QNAP Pre-Auth Root RCE CVE-2019-7192 CVE-2019-7195 Exploit for now, you can read system files /etc/shadow, ssh private key, etc. Usage: root@kitploit: pip install -r requirements.txt or just pip install requests python3 gundy.py https://vulnerableurl:port Sample Output Vulnerability The...

9.8CVSS8.2AI score0.89681EPSS
SaveExploits10
Kitploit
Kitploit
β€’added 2026/09/09 4:28 p.m.β€’7 views

CVE-2024-21762

CVE-2024-21762 - FortiGate SSL VPN RCE Detection & Exploitation Tool Detection and exploitation tool for CVE-2024-21762 - Critical FortiGate SSL VPN vulnerability ⚠️ LEGAL DISCLAIMER : This tool is for authorized test environments only. Unauthorized use on systems is ILLEGAL and may result in...

9.8CVSS8.4AI score0.84285EPSS
SaveExploits13
Kitploit
Kitploit
β€’added 2026/09/09 4:02 p.m.β€’3 views

CVE-2023-0297_Pre-auth_RCE_in_pyLoad

CVE-2023-0297: Pre-auth RCE in pyLoad The Story of Finding Pre-auth RCE in pyLoad TL;DR A code injection vulnerability in pyLoad versions prior to 0.5.0b3.dev31 leads to pre-auth RCE by abusing js2py's functionality. You can find the report here and exploit code here. Details pyLoad is an OSS...

9.8CVSS7.9AI score0.95915EPSS
SaveExploits13References4
Kitploit
Kitploit
β€’added 2026/09/09 3:15 p.m.β€’5 views

CVE-2026-39987

⚠️ CVE-2026-39987 β€” Unauthenticated Shell in marimo 0.23.0 A reactive Python notebook tool gave attackers a full shell in one WebSocket request. πŸ“Œ Overview CVE-2026-39987 is a critical pre-auth RCE vulnerability in marimo β€” a popular open-source reactive notebook for Python modern Jupyter...

9.8CVSS8AI score0.98945EPSS
SaveExploits24References3
Kitploit
Kitploit
β€’added 2026/09/09 2:54 p.m.β€’5 views

CVE-2023-38646

CVE-2023-38646-exploit "This vulnerability, designated as CVE-2023–38646, allowed attackers to execute arbitrary commands on the server without requiring any authentication." A quick reverse shell exploit script for cve-2023-38646. I did not find this vulnerability, just made the script. Usage...

9.8CVSS8.4AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
β€’added 2026/09/09 2:39 p.m.β€’6 views

CVE-2018-16763

CVE 2018-16763 Exploit Introduction PreAuth-RCE on FUEL CMS 1.4.1 Demo Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-16763 https://www.exploit-db.com/exploits/47138...

9.8CVSS8.1AI score0.82937EPSS
SaveExploits19
Kitploit
Kitploit
β€’added 2026/09/09 2:27 p.m.β€’3 views

CVE-2026-20131

🚨 CVE-2026-20131 | Cisco FMC Critical RCE Unauthenticated Remote Code Execution in Cisco Secure Firewall Management Center πŸ“Œ Overview A critical pre-authentication Java deserialization vulnerability allowing remote attackers to achieve root-level code execution on Cisco FMC appliances. Key...

10CVSS8.5AI score0.31231EPSS
SaveExploits4
Kitploit
Kitploit
β€’added 2026/09/09 1:28 p.m.β€’8 views

CVE-2025-51458-exp

CVE-2025-51458-exp Pre-Auth SQL Injection in DB-GPT --sql "SELECT VERSION" Dump tables python3 exp.py http://target:5670 --dump-tables Dump schema python3 exp.py http://target:5670 --dump-db DuckDB bypass python3 exp.py http://target:5670 --duckdb-bypass --sql "SELECT CURRENTSETTING'accessmode'"...

6.5CVSS8.2AI score0.00325EPSS
SaveExploits2References2
Kitploit
Kitploit
β€’added 2026/09/09 12:11 p.m.β€’9 views

CVE-2026-66066

🚨 CVE-2026-66066 β€” KindaRails2Shell Pre-Authentication Remote Code Execution RCE in Ruby on Rails Active Storage Educational security research repository for CVE-2026-66066 "KindaRails2Shell". This repository is intended for security research, vulnerability analysis, detection, and defensive...

9.5CVSS8.4AI score0.27861EPSS
SaveExploits10
Kitploit
Kitploit
β€’added 2026/09/09 11:59 a.m.β€’10 views

CVE-2023-38646

CVE-2023-38646 Python script to exploit CVE-2023-38646 Metabase Pre-Auth RCE via SQL injection The script will GET /api/session/properties to get the setup token and assess exploitability of the target. If it's vulnerable will then print the setup token, else it will quit after an error message. ...

9.8CVSS8.4AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
β€’added 2026/09/09 11:37 a.m.β€’4 views

CVE-2023-24488-SIEM-Sigma-Rule

Sigma Rule: Detection of Pre-Auth XSS CVE-2023-24488 Detect Citrix Gateway Pre-Auth XSS CVE-2023-24488 vulnerability exploitation attempts. This Sigma rule looks for XSS attack patterns in the postlogoutredirecturi query parameter. Rule Description The provided Sigma rule is designed to identify...

6.1CVSS6.9AI score0.80907EPSS
SaveExploits3
Kitploit
Kitploit
β€’added 2026/09/09 11:30 a.m.β€’12 views

Blackash-CVE-2025-61882

πŸ›‘οΈπŸš¨ CVE‑2025‑61882 β€” Critical Pre‑Auth Remote Code Execution in Oracle E‑Business Suite EBS πŸš¨πŸ›‘οΈ Short summary: Critical pre‑auth remote code execution in Oracle E‑Business Suite EBS β€” affects 12.2.3 β†’ 12.2.14, CVSS 9.8 , actively exploited in the wild ransom/ extortion activity reported...

9.8CVSS7.9AI score0.99732EPSS
SaveExploits16
Kitploit
Kitploit
β€’added 2026/09/09 11:02 a.m.β€’8 views

sxwp2shell

root@kitploit: / / / / / / | |/ / \ / / / / / / / / | / / / / / / / // / / / / / // | //// ///// /////|| sxwp2shell β€” Pre-auth RCE exploit for WordPress via REST API batch-route confusion CVE-2026-63030 + SQL injection CVE-2026-60137. Affected: WP 6.9.0–6.9.4 / 7.0.0–7.0.1 Install...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/09 10:42 a.m.β€’6 views

CVE-2026-63030

CVE-2026-63030 - WordPress REST API Batch Route Confusion PoC Description Proof-of-concept exploit for CVE-2026-63030, a pre-authentication vulnerability in WordPress versions 6.9.0 through 7.0.1. It chains: REST API batch route confusion validation vs dispatch mismatch SQL injection via...

9.8CVSS8.5AI score0.97271EPSS
SaveExploits77
Kitploit
Kitploit
β€’added 2026/09/09 10:29 a.m.β€’8 views

wp2shell-checker

root@kitploit: \ \ / / \ / || | | | | | | | \ \ /\ / /| | | \ | || | | | | | | \ V V / | // / | | || || | // || ||/|| ||||| wp2shell-checker | WordPress Batch API Desync Detector Checker detector for the WordPress Core REST Batch API pre-auth RCE Created by 0xjessie21 β€” Cybersecurity ILCS...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder