Lucene search
+L

129319 matches found

EUVD
EUVD
added 2026/09/20 12:30 a.m.5 views

EUVD-2026-83616

QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. Attackers can supply relative path sequences in the email parameter to bypass directory restrictions and access sensitive...

7.1CVSS
SaveExploits0References7
CVE
CVE
added 2026/09/19 10:58 p.m.11 views

CVE-2026-93988

QloApps versions through 1.7.0 contain a path traversal vulnerability in the getEmailHTML action of admin/ajax.php. An authenticated back-office user can supply relative path sequences in the email parameter to bypass directory restrictions and read arbitrary files , including database credential...

7.1CVSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/19 10:52 p.m.7 views

CVE-2025-25257

CVE-2025-25257 Exploit de CVE-2025-25257 en FortiWeb https://pwner.gg/blog/2025-07-10-fortiweb-fabric-rce exp.py: exploit funcional/completo. signed.py: solo una PoC de lectura/escritura de archivos. versión inicial del exploit...

9.8CVSS8.6AI score0.99775EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/19 10:51 p.m.205 views

tplmap

Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/19 10:47 p.m.8 views

CVE-2026-37066

CVE-2026-37066 Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Manager Project 4.4.9 allows and authenticated attacker with super administrator role to disclose sensitive information via two specially crafted http requests POST...

6.5CVSS5.8AI score0.00403EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/19 10:45 p.m.8 views

CVE-2025-52688

CVE-2025-52688 Productos afectados Alcatel AP13161 - Punto de acceso WiFi empresarial Resumen Hay 2 vulnerabilidades principales que se abordan aquí: Falta de saneamiento de entrada en múltiples parámetros web JSON que permite inyectar caracteres maliciosos como ; para causar un ataque de inyecci...

9.8CVSS6.7AI score0.27363EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/19 10:42 p.m.7 views

ViteVulScan

ViteVulScan Introducción a las vulnerabilidades Este proyecto cubre 3 vulnerabilidades: CVE-2025-30208 / CVE-2025-31125 / CVE-2025-31486, todas relacionadas con la lectura arbitraria de archivos en el servidor de desarrollo de Vite. Estas tres vulnerabilidades tienen una amplia cobertura y son...

7.5CVSS6.8AI score0.74969EPSS
SaveExploits35
Kitploit
Kitploit
added 2026/09/19 10:40 p.m.6 views

CVE-2024-23897

PoC para explotar la vulnerabilidad CVE-2024-23897 en versiones 2.441 o anteriores de Jenkins, mediante la cual podremos leer archivos internos del sistema. En primer lugar, comprobamos la versión de Jenkins para asegurarnos de que sea vulnerable: A continuación, podremos utilizar el exploit:...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits50
Kitploit
Kitploit
added 2026/09/19 10:35 p.m.8 views

EXP-CVE-2017-75

EXP-CVE-2017-75 This Python script is designed to check for and exploit a specific vulnerability in NGINX servers referred to as CVE-2017-75. This was developed for a public vulnerability disclosure program, I recently submitted a report to. It uses a crafted Range header to potentially trigger a...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/19 10:33 p.m.12 views

CVE-2025-2539

POC - CVE-2025-2539 File Away Aviso : Esta prueba de concepto POC se ha realizado únicamente con fines educativos y de pruebas éticas. El uso de esta herramienta para atacar objetivos sin consentimiento mutuo previo es ilegal. Es responsabilidad del usuario final cumplir con todas las leyes...

7.5CVSS8.2AI score0.01624EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/19 10:33 p.m.9 views

CVE-2024-4040-CrushFTP-File-Read-vulnerability

CVE-2024-4040: Vulnerabilidad de Lectura de Archivos en CrushFTP Resumen El 19 de abril de 2024, se divulgó una nueva vulnerabilidad de día cero que afecta a las versiones de CrushFTP anteriores a 10.7.1 y 11.1.0, así como a las versiones heredadas 9.x, a una lista de correo privada por parte del...

10CVSS7.4AI score0.99539EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/19 10:32 p.m.10 views

CVE-2024-4040

CVE-2024-4040 - escáneres de exploit Este repositorio contiene archivos relacionados con CVE-2024-4040 escape de VFS de CrushFTP. scanhost.py Este script intenta usar la vulnerabilidad para leer archivos fuera del sandbox. Si tiene éxito, el script escribe Vulnerable en la salida estándar y retor...

10CVSS7.8AI score0.99539EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/19 10:30 p.m.5 views

CVE-2026-85706

CVE-2026-85706 Unauthenticated path traversal / arbitrary file read in GitLab CE and EE. CVSS 10.0. Verified against a self-managed 19.3.1 instance in a local lab. Affected GitLab CE/EE: 18.7 up to 19.1.7 19.2.0 up to 19.2.5 19.3.0 up to 19.3.1 Precondition: the instance has at least one public...

10CVSS8.3AI score0.14563EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/19 10:29 p.m.11 views

MicroburstSecretsHunter

MicroBurst Secrets Hunter A PowerShell scanner that combs through MicroBurst Get-AzDomainInfo output for plaintext passwords, keys, connection strings, and other secrets that should never sit unencrypted in an Azure environment. Built for read-only audit workflows : you collect a domain dump with...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/19 10:27 p.m.8 views

CVE-2022-0847-Container-Escape

CVE-2022-0847 CVE-2022-0847 used to achieve container escape overwrite any read-only files on host Slides in Chinese available here 利用CVE-2022-0847 Dirty Pipe 实现容器逃逸(效果为覆写宿主机上任意只读文件) 中文汇报PPT在这里 Introduction If the kernel is vulnerable to CVE-2022-0847, the attacker can overwrite read-only files...

7.8CVSS7.5AI score0.89721EPSS
SaveExploits102References1
Kitploit
Kitploit
added 2026/09/19 10:24 p.m.11 views

CVE-2024-41713POC

CVE-2024-41713POC Mitel MiCollab Enterprise Collaboration Platform Arbitrary File Read Vulnerability CVE-2024-41713 Due to an authentication bypass vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab software, and insufficient input validation, an unauthenticated remote...

9.1CVSS8.4AI score0.9811EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/19 10:16 p.m.12 views

CVE-2025-27817

Descargo de responsabilidad: Las vulnerabilidades descritas en este documento y los pasos para su reproducción se proporcionan únicamente con fines de investigación y educación en seguridad cibernética. Nadie debe utilizar la información proporcionada en este documento para fines ilegales o prueb...

7.5CVSS7.5AI score0.68776EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/19 10:15 p.m.15 views

binary-ninja-headless-mcp

Binary Ninja Headless MCP Un servidor Binary Ninja sin interfaz gráfica que habla MCP Model Context Protocol, dando a los agentes de IA acceso completo a flujos de trabajo profundos de ingeniería inversa: desensamblado, IL, parcheo, tipos, referencias cruzadas y más, sin GUI. Diseñado para...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/19 10:12 p.m.10 views

nginx-CVE-2017-7529

Vulnerabilidad de lectura fuera de límites en la caché de Nginx CVE-2017-7529 Principio de la vulnerabilidad Lectura de referencia: https://cert.360.cn/detailnews.html?id=b879782fbad4a7f773b6c18490d67ac7...

7.5CVSS7.2AI score0.62597EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/19 10:03 p.m.11 views

pwnkit_safety_check

What is PwnKit PwnKit exploits a vulnerability in the SUID-root program /usr/bin/pkexec, allowing unprivileged users to gain full root privileges on Linux systems. This vulnerability has existed since 2009 and was publicly disclosed in January 2022. pwnkitsafetycheck.c PwnKit CVE-2021-4034 Safe...

7.8CVSS7AI score0.94921EPSS
SaveExploits155
Rows per page
Query Builder