Lucene search
+L

270287 matches found

Kitploit
Kitploit
added 2026/09/03 2:35 p.m.8 views

Project-CVE-2026-33017

CVE-2026-33017 Langflow Script — Code Explanation coded by: Xer0TLabs x Persephrak Decentralized Syndicate Purpose of this document This document is a high-level explanation of the supplied Python program for review, incident-response, and defensive analysis. It intentionally does not include...

9.8CVSS8.4AI score0.96177EPSS
SaveExploits32
Kitploit
Kitploit
added 2026/09/03 2:31 p.m.4 views

Inject-PHP-to-JPG-Using-Jhead

Inyectar-PHP-en-JPG-usando-Jhead $ pkg install vim o apt-get install vim $ pkg install jhead o apt-get install jhead $ jhead -h para ayuda $ jhead -purejpg tusarchivos.jpg $ jhead -ce tusarchivos.jpg Pulsa ESC y escribe :x para guardar $ jhead tusarchivos.jpg Ejemplo:...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 2:24 p.m.4 views

CVE-2025-10041

CVE-2025-10041 Flex QR Code Generator = 1.2.5 - Carga Arbitraria de Archivos No Autenticada 🚨 Flex QR Code Generator ≤ 1.2.5 - Carga Arbitraria de Archivos No Autenticada 📝 Descripción El complemento Flex QR Code Generator para WordPress es vulnerable a cargas de archivos arbitrarias debido a la...

9.8CVSS5.9AI score0.00858EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/03 2:24 p.m.4 views

selenium-node-takeover-kit

Metasploit Exploits Este proyecto se ha movido. Para obtener la última versión, haga pull desde https://codeberg.org/JonStratton/selenium-node-takeover-kit Esto combina algunos de los ejemplos siguientes para subir archivos a, descargar archivos de, y ejecutar código en un nodo Selenium a través...

6.1AI score
SaveExploits0References3
NVD
NVD
added 2026/09/03 2:17 p.m.5 views

CVE-2025-12737

The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a malicious actor with administrative privileges to inject and execute arbitrary code remotely. Successful exploitation enables a threat actor with administrative...

8.4CVSS0.00221EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/03 2:17 p.m.9 views

CVE-2026-6071

A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and execute code within the context of the current process. To exploit this vulnerability, a legitimate user must visit a...

7.5CVSS0.00442EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/03 1:10 p.m.9 views

EUVD-2026-70466

A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and execute code within the context of the current process. To exploit this vulnerability, a legitimate user must visit a...

7.5CVSS6.4AI score0.00442EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 1:10 p.m.33 views

CVE-2026-6071

Rockwell Automation Arena® is affected by a remote code execution vulnerability caused by an out-of-bounds write when parsing DOE files . An attacker can craft a malicious DOE file that, when opened by a legitimate user, writes past the end of an allocated object and executes code within the cont...

7.5CVSS6.4AI score0.00442EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/03 1:06 p.m.8 views

CVE-2026-85168

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node reset a fixed list of command-bearing configuration keys before each operation, but that list did not cover the content-filter and merge-driver key families. A repository with...

7.7CVSS0.00368EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/03 1:06 p.m.7 views

CVE-2026-85169

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototyp...

8.7CVSS0.00387EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/03 1:06 p.m.9 views

CVE-2026-76174

Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admininfo endpoint. The application validates files solely based on the name provided by the client, without properly checking their content or securely restricting the permitted file types. This allows ...

9.4CVSS0.00487EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 1:02 p.m.19 views

CVE-2025-12737

CVE-2025-12737 affects WSO2 products via the Carbon Console . Administrative operations within the console do not adequately validate specific user-supplied input, allowing a threat actor with administrative privileges to inject and execute arbitrary code remotely , leading to complete compromise...

8.4CVSS6.2AI score0.00221EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/03 1:02 p.m.9 views

EUVD-2025-210842

The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a malicious actor with administrative privileges to inject and execute arbitrary code remotely. Successful exploitation enables a threat actor with administrative...

8.4CVSS6.2AI score0.00221EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 12:52 p.m.4 views

log4j2-bugmaker

Log4j2-BugMaker CVE-2021-44228 Log4Shell Vulnerability Demonstration Project This is a demonstration project for learning and researching the Log4j2 remote code execution vulnerability Log4Shell. ⚠️ Safety Warning This project is intended for security research and educational purposes only. Do not...

10CVSS7.5AI score0.99999EPSS
SaveExploits368
Kitploit
Kitploit
added 2026/09/03 12:41 p.m.3 views

CVE-2024-55182

CVE-2025-55182 React2Shell Vulnerabilidad 1. Explicación sobre la Vulnerabilidad: CVE-2025-55182 “React2Shell” es una vulnerabilidad crítica de Ejecución Remota de Código RCE dentro de React Server Components RSC — específicamente en la lógica de deserialización del protocolo React Flight. Afecta...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/03 12:40 p.m.5 views

CVE-2021-3007-docker-poc

CVE-2021-3007 — RCE por deserialización HTTP en Laminas/Zend Este repositorio contiene una prueba de concepto totalmente reproducible y una plantilla de exploit de Nuclei para CVE-2021-3007, una vulnerabilidad crítica de deserialización de PHP en Zend\Http\Response\Stream laminas-http plantilla d...

9.8CVSS8.4AI score0.75313EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/03 12:37 p.m.5 views

Rust_CVE-2025-55182

CVE-2025-55182 Exploit Tool Rust Version Project Overview This project is a security research tool developed in Rust, targeting the Remote Code Execution RCE vulnerability present in [email protected]. The vulnerability allows an attacker to execute arbitrary code on a target server without...

10CVSS7.3AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/03 12:37 p.m.4 views

CVE-2021-21220

Exploitation of CVE-2021-21220 From Incorrect JIT Behavior to Remote Code Execution Overview This presentation explains the exploitation of CVE-2021-21220 , a vulnerability in Google Chrome’s V8 JavaScript engine caused by incorrect JIT compiler assumptions during optimization. The presentation...

8.8CVSS8.2AI score0.70435EPSS
SaveExploits6
Ubuntu
Ubuntu
added 2026/09/03 12:37 p.m.9 views

USN-8722-1: libssh2 vulnerabilities

It was discovered that libssh2 incorrectly handled certain SFTP server responses. A remote attacker controlling an SSH server could use this issue to cause libssh2 to crash or possibly execute arbitrary code. CVE-2026-66032 It was discovered that libssh2 incorrectly handled AES-GCM cipher...

8.8CVSS7.4AI score0.00583EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 12:28 p.m.4 views

Sandbox-Challenge-Spring4Shell-CVE-2022-22965-

Sandbox de Amenaza Spring4Shell CVE-2022-22965 Resumen Este tutorial documenta la finalización del Desafío Sandbox centrado en CVE-2022-22965, comúnmente conocido como Spring4Shell — una vulnerabilidad crítica CVSS 9.8/10 de ejecución remota de código que afecta versiones específicas del framewor...

9.8CVSS7.6AI score0.99638EPSS
SaveExploits105
Rows per page
Query Builder