Lucene search
+L

269584 matches found

Kitploit
Kitploit
added 2026/08/31 5:58 a.m.4 views

CVE-2026-3300

CVE-2026-3300 - Wordpress ⚡ Uso Simple Usa este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Configuraciones de laboratorio aisladas Entornos de pruebas de penetración autorizados Configuración de ejemplo: root@kitploit: git clone cd Projec...

9.8CVSS6AI score0.39159EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 5:58 a.m.4 views

Spring4Shell-PoC-exploit

Spring4Shell - PoC CVE - 2022 - 22965 Versions affected : Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19 and older versions Java JDK 9 Apache Tomcat versions below 10..0.20, 9.0.62, and 8.5.78 Applications that are packaged as a traditional WAR with spring-webmvc or spring-webflux...

9.8CVSS7AI score0.99638EPSS
SaveExploits110
Kitploit
Kitploit
added 2026/08/31 5:57 a.m.5 views

cve-2010-2075-analysis

CVE-2010-2075 – UnrealIRCd Backdoor Remote Code Execution Overview This repository documents the analysis and exploitation of CVE-2010-2075, a backdoor vulnerability affecting UnrealIRCd 3.2.8.1. The vulnerability was reproduced in a controlled laboratory environment using Metasploitable 2 as the...

7.5CVSS5.9AI score0.83534EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/08/31 5:56 a.m.4 views

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 python3 check 0708 Existe una vulnerabilidad de ejecución remota de código en el Servicio de Escritorio Remoto – anteriormente conocido como Servicios de Terminal – cuando un atacante no autenticado se conecta al sistema objetivo mediante RDP y envía solicitudes...

10CVSS7AI score0.99999EPSS
SaveExploits126
Kitploit
Kitploit
added 2026/08/31 5:55 a.m.5 views

CVE-2024-24945-NGINX-RIFT---TryHackMe-Lab-Walkthrough

CVE-2024-24945-NGINX-RIFT---TryHackMe-Lab-Walkthrough This lab demonstrates the exploitation of CVE-2024-24945, a heap corruption vulnerability affecting NGINX. The objective was to understand how memory corruption can lead to Remote Code Execution RCE and gain practical experience in exploitatio...

6.1CVSS6.5AI score0.00483EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 5:55 a.m.7 views

WebminRCE-exploit

WebminRCE-exploit CVE-2022-0824, CVE-2022-0829 - File Manger privilege exploit Vulnerable application to test this PoC can be found here as a docker image. Prerequisites: Python3 Requests module Description Vulnerability Improper Access Control to Remote Code Execution Safe users Unpriviledged us...

9CVSS6.8AI score0.96977EPSS
SaveExploits14References1
Kitploit
Kitploit
added 2026/08/31 5:54 a.m.8 views

CVE-2024-23995

Beekeeper-Studio PoC A Proof-Of-Concept for CVE-2024-23995 vulnerability. 1.Vunerability Overview: Vulnerability Subject: RCE via XSS Vulnerability Version: = Beekeeper-Studio-4.1.13 Attack Type: Remote Code Execution Attack Vectors: To exploit the vulnerability, one must insert malicious scripts...

6.1CVSS6AI score0.00962EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 5:53 a.m.4 views

react-vuln-scanner

React CVE-2025-55182 Vulnerability Scanner A bash script to scan your server for React applications vulnerable to CVE-2025-55182 — a critical remote code execution vulnerability CVSS 10.0 in React Server Components. ⚠️ About the Vulnerability On December 3, 2025, the React team disclosed a critica...

10CVSS7.5AI score0.99802EPSS
SaveExploits388
Kitploit
Kitploit
added 2026/08/31 5:53 a.m.5 views

jboss-deserialization

JBoss Insecure Deserialization to RCE via CVE-2017-12149. JBoss Insecure Deserialization - RCE Exploitation Lab. The idea here is to setup a lab with an old JBoss version 7.0 in order to exploit the vulnerability. We can use Docker to facilitate all the process. For this, we're gonna need an Orac...

9.8CVSS7.4AI score0.90713EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/08/31 5:51 a.m.3 views

CVE-2024-21683-RCE

Uso python poc.py -u http://localhost:8090 -user admin -pass admin -f exploit.js -n test -p http://127.0.0.1:8080 PoC...

8.8CVSS7.1AI score0.88267EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/31 5:50 a.m.6 views

CVE-2026-6992-PoC

CVE-2026-6992-PoC Vulnerability proof of concept for the bluetooth pin RCE injection CVE-2026-6992 reworked from https://github.com/utmost3/cve/issues/2 I take no credit for discovering the vulnerability. This is for educational and portfolio purposes only. For devices that do not have management...

8.6CVSS7AI score0.07234EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/31 5:50 a.m.2 views

CVE-2025-48703

CVE-2025-48703 CVE-2025-48703 is a critical vulnerability in CentOS Web Panel CWP that allows unauthenticated attackers to perform remote code execution RCE by bypassing authentication and executing system commands. The vulnerability affects CWP versions 0.9.8.1204 and earlier, and has been patch...

9CVSS7.8AI score0.99655EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/31 5:49 a.m.5 views

CVE-2021-42013

CVE-2021-42013 - Apache 2.4.50 Path Traversal & Remote Code Execution RCE ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author Walnut Security Services Pvt. Ltd Description An attacker could use a path traversal attack...

9.8CVSS7.3AI score0.99964EPSS
SaveExploits190References1
Kitploit
Kitploit
added 2026/08/31 5:48 a.m.5 views

CVE-2021-41773

CVE-2021-41773 — PoC: Path Traversal + RCE via modcgi Solo para uso en entornos controlados y propios. No usar contra sistemas sin autorización. Descripción PoC desarrollada para demostrar y entender la vulnerabilidad CVE-2021-41773 , presente en Apache HTTP Server 2.4.49. El fallo reside en la...

9.8CVSS7.3AI score0.99992EPSS
SaveExploits164
Kitploit
Kitploit
added 2026/08/31 5:48 a.m.5 views

CVE-2022-30190

Explotación de Follina CVE-2022-30190 Follina CVE-2022-30190 es una vulnerabilidad crítica de ejecución remota de comandos RCE que afecta a la Herramienta de diagnóstico de soporte de Microsoft MSDT. Esta falla fue descubierta originalmente a través de un archivo malicioso detectado en VirusTotal...

9.3CVSS7.2AI score0.99234EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/08/31 5:47 a.m.4 views

CVE-2026-4253-Scanner

CVE-2026-42530 — Escáner Safe-Check Escáner masivo no destructivo para el use-after-free de NGINX HTTP/3 QUIC Inventario de qué hosts están expuestos — sin desencadenar el fallo. ⚠️ Aviso legal Esta herramienta es solo para pruebas de seguridad autorizadas — tu propia infraestructura o sistemas...

9.2CVSS6.4AI score0.06973EPSS
SaveExploits4References3
Kitploit
Kitploit
added 2026/08/31 5:46 a.m.2 views

PoC-Funcional---CVE-2026-45247-Mirasvit-Full-Page-Cache-Warmer-RCE-

CVE-2026-45247 - Mirasvit Full Page Cache Warmer for Magento 2 - PHP Object Injection → RCE -red 📋 Description CVE-2026-45247 is a critical PHP Object Injection vulnerability in the Mirasvit Full Page Cache Warmer extension for Magento 2 and Adobe Commerce. An unauthenticated attacker can achieve...

9.8CVSS6.1AI score0.27546EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 5:46 a.m.5 views

cve-2019-6340-bits

cve-2019-6340-bits Bits generated while analyzing CVE-2019-6340 Drupal RESTful RCE modsec rule pcap example nginx config example logs example playbook...

8.1CVSS7.3AI score0.92017EPSS
SaveExploits23References5
Kitploit
Kitploit
added 2026/08/31 5:45 a.m.7 views

CVE-2026-12940-Langflow-Unauth-RCE

CVE-2026-12940 — Langflow OSS ≤ 1.10.1 Unauthenticated RCE MCP stdio env-var injection Unauthenticated remote code execution in Langflow OSS through 1.10.1. The environment-variable blocklist that guards MCP stdio server configuration DANGEROUSENVVARS omits SHELLOPTS, BASHOPTS and PS4. Because th...

9.8CVSS6.5AI score0.00684EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/31 5:45 a.m.3 views

CVE-2026-25632

CVE-2026-25632 — Deserialización JSON RCE en API REST Desafío de Corrección Inspirado en una vulnerabilidad real de 2026 CVSS 10.0, explotada activamente Basado en: CVE-2026-25632 — Ejecución remota de código mediante deserialización JSON insegura controlada por type, descubierta en la API REST d...

10CVSS6AI score0.00695EPSS
SaveExploits0
Rows per page
Query Builder