Lucene search
+L

12801 matches found

Kitploit
Kitploit
•added 2026/09/24 10:38 p.m.•14 views

0-click-RCE-Exploit-for-CVE-2024-9932

CVE-2024-9932 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858329238153072668 This repository contains a proof-of-concept exploit for CVE-2024-9932, an unauthenticated arbitrary file upload vulnerability in the Wux Blog Editor WordPress plugin, leading to...

9.8CVSS6.5AI score0.36395EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/24 10:34 p.m.•10 views

CVE-2017-12542-Exploit

HP iLO Authentication Bypass CVE-2017-12542 This repository contains a proof-of-concept exploit for CVE-2017-12542 , an authentication bypass vulnerability affecting certain versions of HP Integrated Lights-Out iLO firmware. The vulnerability allows unauthenticated access to the iLO REST API, whi...

10CVSS8.4AI score0.99294EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/09/24 10:32 p.m.•13 views

wp-mhn

wp-mhn Integrates your Modern Honeypot Network Server and your Wordpress Blog via MHN's REST API and WP's shortcodes Installation and Usage 1. Download wp-mhn as a zip file, or clone the repo and compress it. 2. Edit config.sample.php with information corresponding to your MHN server. 3...

6AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/24 10:30 p.m.•9 views

CVE-2025-24000-exploit

CVE-2025-24000 — Post SMTP Privilege Escalation Exploit Overview This script exploits CVE-2025-24000 , a high-severity broken access control vulnerability in the Post SMTP WordPress plugin versions ≤ 3.2.0. It allows any authenticated user with a low-privilege account e.g. Subscriber to access th...

8.8CVSS8.2AI score0.00595EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/24 10:24 p.m.•46 views

iac-scan-runner

IaC Scan Runner Service that scans your Infrastructure as Code for common vulnerabilities...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/24 10:12 p.m.•66 views

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 10:12 p.m.•10 views

trape

trape estable v2.0 Rastreador de personas en Internet: Aprende a rastrear el mundo para evitar ser rastreado. Trape es una herramienta de análisis e investigación OSINT que permite a las personas rastrear y ejecutar ataques inteligentes de ingeniería social en tiempo real. Fue creada con el...

6.2AI score
SaveExploits0
CVE
CVE
•added 2026/09/24 9:59 p.m.•12 views

CVE-2026-87720

A vulnerability exists in Gerrit Code Review versions 2.16.0 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 due to Incorrect Authorization (CWE-863) . The flaw stems from project name normalization in ProjectUtil.stripGitSuffix and eviction logic in ProjectCacheImpl. Specificall...

7.6CVSS5.8AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/24 9:40 p.m.•14 views

CVE-2021-22986-Poc

CVE-2021-22986-Poc This is a Poc for BIGIP iControl unauth RCE POC : curl -ksu admin:redacted https://192.168.123.134/mgmt/tm/access/bundle-install-tasks -d '"filePath":"id"' | jq . curl -ksu : https://192.168.123.134/mgmt/shared/authn/login -d...

10CVSS8.7AI score0.99898EPSS
SaveExploits20
Kitploit
Kitploit
•added 2026/09/24 9:25 p.m.•12 views

git-remote-gcrypt

================= git-remote-gcrypt GNU Privacy Guard-encrypted git remote :Manual section: 1 Description git-remote-gcrypt is a git remote helper to push and pull from repositories encrypted with GnuPG, using a custom format. This remote helper handles URIs prefixed with gcrypt::. Supported...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 9:13 p.m.•12 views

REST-Attacker

REST-Attacker REST-Attacker is an automated penetration testing framework for APIs following the REST architecture style. The tool's focus is on streamlining the analysis of generic REST API implementations by completely automating the testing process - including test generation, access control...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 9:09 p.m.•11 views

bmcweb

OpenBMC webserver This component attempts to be a "do everything" embedded webserver for OpenBMC. Features The webserver implements a few distinct interfaces: DBus event websocket. Allows registering for changes to specific dbus paths, properties, and will send an event from the websocket if thos...

6.2AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/24 8:56 p.m.•18 views

hoverfly

API simulations for development and testing Hoverfly is a lightweight, open source API simulation tool. Using Hoverfly, you can create realistic simulations of the APIs your application depends on. Replace slow, flaky API dependencies with realistic, re-usable simulations Simulate network latency...

6.3AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/24 8:48 p.m.•7 views

CVE-2025-67923

CVE-2025-67923 Exploitation Report JetEngine = 3.7.7 — Unauthenticated Stored Cross-Site Scripting via CCT REST API Date: March 11, 2026 CVSS Score: 7.1 High CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L Affected Plugin: JetEngine = 3.7.7 Plugin Slug: jet-engine Fixed In: 3.7.8 CVE:...

7.1CVSS5.8AI score0.00295EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 8:36 p.m.•16 views

grafeo

ACT Platform is now called grafeo! Grafeo is a versatile platform to create custom data models, collect and share knowledge. It is a flexible, well-rounded solution that can be used for any purpose. Developed as part of the ACT research project, it remains at the core of ACT and powers the ACT...

6AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/24 8:36 p.m.•16 views

Cortex

Cortex tries to solve a common problem frequently encountered by SOCs, CSIRTs and security researchers in the course of threat intelligence, digital forensics and incident response: how to analyze observables they have collected, at scale , by querying a single tool instead of several? Cortex, an...

5.8AI score
SaveExploits0References13
Kitploit
Kitploit
•added 2026/09/24 7:03 p.m.•13 views

freki

Freki is a free and open-source malware analysis platform. Goals 1. Facilitate malware analysis and reverse engineering; 2. Provide an easy-to-use REST API for different projects; 3. Easy deployment via Docker; 4. Allow the addition of new features by the community. Current features Hash...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/24 6:54 p.m.•13 views

CVE-2025-8625

CVE-2025-8625 Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution 🛡️ Copypress Rest API 1.1 - 1.2 RCE Exploit 📝 Description The Copypress Rest API plugin for WordPress versions 1.1 to 1.2 is vulnerable to Remote Code...

9.8CVSS6.2AI score0.00601EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/24 6:54 p.m.•8 views

burp-rest-api

burp-rest-api ⚠️ WARNING: This project is no longer actively maintained. While the repository will remain available for reference, no further updates, bug fixes, or support will be provided. Overview A REST/JSON API to the Burp Suite security tool. Since the first commit back in 2016, burp-rest-ap...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/24 6:07 p.m.•14 views

FACT_core

The Firmware Analysis and Comparison Tool FACT Contents Why FACT? Setup Usage Documentation Contribute Additional plugins Analysis Import/Export Presentations Social Acknowledgments License Why FACT? Firmware analysis can be used to achieve several interesting goals. Chief among those are...

6.2AI score
SaveExploits0References12
Rows per page
Query Builder