Lucene search
+L

270740 matches found

Kitploit
Kitploit
added 2026/09/07 2:04 p.m.6 views

unomi_exploit

Disclaimer The vulnerability detection methods, files, and other content provided here are strictly limited to use by security professionals under legal authorization, for the purpose of testing the security of authorized servers. Security professionals must comply with legal regulations and are...

10CVSS8.1AI score0.68398EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/07 2:02 p.m.13 views

rschunter

RSC Hunter Una herramienta potente de escaneo y explotación multi-hilo para vulnerabilidades en React Server Component RSC. Esta herramienta está diseñada para identificar y explotar vulnerabilidades RCE en implementaciones de RSC, con soporte para diversas técnicas y estrategias de bypass. Nota ...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 2:01 p.m.4 views

ripple20-digi-connect-exploit

Ripple20 Exploit: Digi Connect ME 9210 Authors: Moshe Kol, Shlomi Oberman This repository contains a PoC exploit for CVE-2020-11896, a critical heap-based buffer overflow vulnerability in the Track TCP/IP stack part of the Ripple20 vulnerability suite. The exploit achieves remote code execution R...

10CVSS8.6AI score0.36852EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/07 2:01 p.m.2 views

CVE-2020-13945-EXPLOIT

CVE-2020-13945 - Ejecución Remota de Código RCE en Apache APISIX Este repositorio contiene un exploit de prueba de concepto PoC para una vulnerabilidad en Apache APISIX. La vulnerabilidad surge cuando la API de Administración está habilitada y se eliminan las reglas de restricción de IP de acceso...

6.5CVSS7.2AI score0.72976EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/07 2:01 p.m.5 views

CVE-2024-7627-PoC

CVE-2024-7627-PoC Background This Proof-of-Concept PoC script is for WordPress plugin Bit File Manager version 6.0 - 6.5.5 Unauthenticated Remote Code Execution via Race Condition CVE-2024-7627 vulnerability. Information Description: The Bit File Manager plugin for WordPress is vulnerable to Remo...

8.1CVSS7.7AI score0.02802EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/07 1:59 p.m.7 views

metasploitable2-vsftpd-writeup

Metasploitable2 — vsftpd 2.3.4 Backdoor Exploitation A hands-on lab demonstrating discovery and exploitation of a known backdoor vulnerability in vsftpd 2.3.4, using an isolated Kali Linux ↔ Metasploitable2 environment. Objective Practice the core penetration testing workflow — reconnaissance,...

10CVSS7.8AI score0.96184EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/07 1:59 p.m.4 views

CraftCMS_CVE-2023-41892

Craft CMS CVE-2023-41892 Hay una Ejecución Remota de Código RCE sin autenticación que afecta a CraftCMS 4.0.0-RC1 - 4.4.14. Uso root@kitploit: python3 craft-cms.py http://target Requisitos El exploit hace uso de requests. Instálalo con : root@kitploit: python3 -m pip install requests...

10CVSS8.2AI score0.92555EPSS
SaveExploits10References2
Kitploit
Kitploit
added 2026/09/07 1:58 p.m.4 views

CVE-2020-10673

CVE-2020-10673 CVE-2020-10673:jackson-databind RCE...

8.8CVSS7.1AI score0.08028EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 1:57 p.m.7 views

CVE-2020-8958

CVE-2020-8958 CVE-2020-8958 : Authenticated Remote Code Execution Exploit for NetLink Routers using boa server. CVSS Score: 7.2 Vulnerability Types: OS Command Injection Authentication: Required Affected Models: HG323 Description The /boaform/admin/formPing resource in Netlink routers allows remo...

9CVSS7.9AI score0.46642EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/07 1:55 p.m.4 views

CVE-2023-43208-EXPLOIT

CVE-2023-43208 - Exploit de ejecución remota de código RCE en Mirth Connect 🚨 Introducción 📖 Este repositorio contiene un exploit de Prueba de Concepto PoC para una vulnerabilidad crítica en NextGen Healthcare Mirth Connect versiones anteriores a 4.4.1. La vulnerabilidad, registrada como...

9.8CVSS8.7AI score0.82708EPSS
SaveExploits21
Nuclei
Nuclei
added 2026/09/07 1:52 p.m.59 views

Langflow < 1.9.0 - Remote Code Execution

Langflow versions prior to 1.9.0 are vulnerable to unauthenticated remote code execution RCE via the buildpublictmp endpoint. Attackers can submit a manipulated flow JSON containing Python code that is executed during the build process without proper sandboxing. id: CVE-2026-33017 info: name:...

9.8CVSS8.5AI score0.96177EPSS
SaveExploits32References3
Kitploit
Kitploit
added 2026/09/07 1:52 p.m.7 views

CVE-2026-41089

CVE-2026-41089 root@kitploit: ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════...

9.8CVSS8.6AI score0.79622EPSS
SaveExploits34
Kitploit
Kitploit
added 2026/09/07 1:49 p.m.6 views

CVE-2022-22909

CVE-2022-22909 Description A Code Injection vulnerability has been found on the Hotel Druid v3.0.3 application, which an attacker could exploit to execute remote code on the server. For a successful exploitation, an attacker should have the privilege to add a new room. Vulnerability description T...

8.8CVSS7.9AI score0.45434EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/07 1:46 p.m.8 views

CVE-2022-37042

CVE-2022-37042 Usage View vulnerability information. root@kitploit: go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / // // / / / | |/ / /// // // / // /// / / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution. You are responsible...

9.8CVSS8.8AI score0.91893EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/07 1:45 p.m.6 views

CVE-2023-34468

CVE-2023-34468: Remote Code Execution via DB Components in Apache NiFi The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code...

8.8CVSS8.1AI score0.61869EPSS
SaveExploits10References2
Kitploit
Kitploit
added 2026/09/07 1:45 p.m.6 views

cve-2020-11060-poc

CVE-2020-11060 This script is a Python 3.x based exploit for CVE-2020-11060 in GLPI versions 0.85-9.4.5. Original implementation: 0xdreadnaught Python3 refactoring: n3rada The original PoC in ExploitDB is now deprecated since it used Python 2.x. The new version has been submitted, and a link will...

9CVSS7.9AI score0.10949EPSS
SaveExploits7References3
Kitploit
Kitploit
added 2026/09/07 1:44 p.m.5 views

CVE-2025-31324

Info ░█▄█░█▀█░█░█░█░█░█░█░▀█▀░█▀█░█▀█░█▀▄░█░█ ░█░█░█▀▀░█░█░█░█░█▄█░░█░░█░█░█░█░█▀▄░░█░ ░▀░▀░▀░░░▀▀▀░▀▀▀░▀░▀░▀▀▀░▀░▀░▀░▀░▀░▀░░▀░ N U L L T R A C E // NullTrace :: No logs. No noise. Just signal. // ----- SIGNATURE----- Key: ssh-rsa AAAAB3...NullKey...KFA== Fingerprint:...

10CVSS8AI score0.99512EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/07 1:44 p.m.5 views

CVE-2021-41773

RCE exploit both for Apache 2.4.49 CVE-2021-41773 and 2.4.50 CVE-2021-42013: IMHO only "special" setups will be vulnerable to this RCE. Same happens for the "arbitrary file read" exploits you have seen. Both CVEs are indeed almost the same path-traversal vulnerability 2nd one is the uncomplete fi...

9.8CVSS7.7AI score0.99992EPSS
SaveExploits164
Kitploit
Kitploit
added 2026/09/07 1:44 p.m.6 views

CVE-2024-25641

CVE-2024-25641 RCE for Cacti 1.2.26 This repository automates the process of exploiting CVE-2024-25641 on Cacti 1.2.26. When a user is authenticated, An arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates"...

9.1CVSS8.4AI score0.86303EPSS
SaveExploits17References1
Kitploit
Kitploit
added 2026/09/07 1:43 p.m.3 views

exploit-CVE-2022-24780

iTop RCE via SSTI - CVE-2022-24780 exploit iTop --debug exploit.rb light --debug exploit.rb -h | --help full: exploit with an emulated browser, execute JavaScript, preserve original user profile information light: just parse HTML and send requests, no JavaScript, DESTRUCTIVE reset user informatio...

8.8CVSS8.2AI score0.05698EPSS
SaveExploits4
Rows per page
Query Builder