Lucene search
+L

270800 matches found

Kitploit
Kitploit
added 2026/09/07 5:21 p.m.4 views

Elementor-Pro-Unauthenticated-Arbitrary-File-Upload-to-RCE

Exploit Author: Abdualhadi Khalifa https://x.com/absholi7ly Version: Elementor Pro = 4.2.1 Tested on: WordPress + Elementor Pro 4.2.1 Windows / Laragon / Apache CVE: CVE-2026-32475 Credits: Vulnerability discovered by Tin Pham TF1T via Patchstack Bug Bounty Program Category: WebApps Description:...

9CVSS6.2AI score0.02374EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/07 5:21 p.m.6 views

CVE-2026-76904

GeoServer SQL Injection to RCE Zero-Day CVE: CVE-2026-76904 | CVSS: 9.8 Critical CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H This vulnerability has been assigned GHSA-mqjf-5f49-2fjh by the GeoServer/GeoTools team and is actively being exploited in the wild as of August 2026. The vulnerability ha...

9.8CVSS8.2AI score0.01791EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 5:20 p.m.4 views

CVE-2026-39987.py

CVE-2026-39987.py This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell. HOW TO USE : The only change it has to be made is to the change the HOST variable in the script. After changing the HOST variable execute the script in your Terminal like the...

9.8CVSS8AI score0.98945EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/07 5:19 p.m.5 views

CVE-2019-14745

CVE-2019-14745 weaponized radare2 vulnerability CVE-2019-14745 assigned found by @CaptnBanana and blenk92 For details about vulnerability, read https://bananamafia.dev/post/r2-pwndebian/ Usage First of all, you need Python bindings of LIEF https://lief.quarkslab.com/ Then, run script as: python...

7.8CVSS7.4AI score0.04414EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/07 5:16 p.m.5 views

CVE-2021-42013

CVE-2021-42013 Vulnerability Scanner This Python script checks for the Remote Code Execution RCE vulnerability CVE-2021-42013 in Apache 2.4.50. Introduction This script is designed to help identify if a server is vulnerable to the CVE-2021-42013 RCE vulnerability in Apache 2.4.50. It checks the...

9.8CVSS8.5AI score0.99964EPSS
SaveExploits190
Kitploit
Kitploit
added 2026/09/07 5:16 p.m.5 views

CVE-2017-3881

CVE-2017-3881 Cisco IOS remote code execution This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp Description...

10CVSS8.5AI score0.98975EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/07 5:16 p.m.3 views

CVE-2022-26134

CVE-2022-26134 (CVE-2022-26134)an unauthenticated and remote OGNL injection vulnerability resulting in code execution in the context of the Confluence server Require:Python2 or Python3 Usage: root@kitploit: python cve202226134.py -url targeturl -cmd "ls -al" python cve202226134.py -url targeturl...

9.8CVSS8.5AI score0.99999EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/09/07 5:09 p.m.7 views

CVE-2020-8816

CVE-2020-8816 A Python script to exploit CVE-2020-8816, a remote code execution vulnerability on the Pi-hole. This script uses the techniques found by François Renaud-Philippon to achieve remote code execution on a Pi-hole running a web interface version less than 4.3.3. The exploit requires the...

9.1CVSS8.1AI score0.7819EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/07 5:03 p.m.7 views

solrradar

Mass Reconnaissance & Exploitation Framework for Apache Solr Velocity Template Injection → Remote Code Execution 📑 Table of Contents Vulnerability Overview Affected Versions Features Installation Usage Proof of Concept Technical Deep-Dive Detection Methodology Defense & Mitigation Disclaimer...

9.8CVSS7.9AI score0.02892EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/07 5:02 p.m.4 views

RCE

This repository does not have a README...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 4:59 p.m.4 views

CVE-2024-38856

CVE-2024-38856 Apache Ofbiz RCE Scanner Description This script is designed to scan for the CVE-2024-38856 vulnerability in Apache Ofbiz applications, which may allow for remote code execution. It sends HTTP POST requests to specific paths within the Ofbiz application with malicious payloads to...

9.8CVSS8.5AI score0.99427EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/07 4:59 p.m.8 views

CVE-2026-40473

camel-mina MinaConverter.toObjectInput Unsafe Deserialization Reproducer CVE-2026-40473 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-mina component, tracked as CVE-2026-40473. The MinaConverter.toObjectInputIoBuffer type converter wraps the received bytes...

8.8CVSS7.8AI score0.00872EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/07 4:57 p.m.6 views

CVE-2026-4631-cockpit-RCE

CVE-2026-4631 — Cockpit Mass Exploit Tool Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection Cockpit versions 327 – 359 | CVSS 9.8 Critical | CWE-78 Tool mass exploitation untuk CVE-2026-4631 pada Cockpit web service cockpit-ws, port 9090. Mendukung mode vulnerability...

9.8CVSS6.7AI score0.1548EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/07 4:57 p.m.6 views

CVE-2025-34085

CVE-2025-34085 — WordPress Simple File List Unauthenticated RCE Exploit An automated exploit and scanner for CVE-2025-34085 , a critical vulnerability in the WordPress Simple File List plugin, enabling unauthenticated remote code execution through arbitrary file upload and rename functionalities....

5.8AI score
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/07 4:57 p.m.6 views

CVE-2024-8353-PoC

Proof-Of-Concept Code for CVE-2024-8353 This repository contains a script for exploiting the CVE-2024-8353 vulnerability in the GiveWP plugin for WordPress. This vulnerability allows unauthenticated PHP Object Injection, potentially leading to remote code execution. Overview The provided scripts...

10CVSS8.3AI score0.2872EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/07 4:56 p.m.3 views

CVE-2026-61343-poc-librebooking-rce

CVE-2026-61343-poc-librebooking-rce Librebooking Admin RCE PoC CVE-2026-61343...

8.6CVSS5.8AI score0.01018EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 4:50 p.m.5 views

CVE-2023-2877

CVE-2023-2877 Formidable Forms 6.3.1 - Subscriber+ Remote Code Execution Usage root@kitploit: usage: CVE-2023-2877.py -h -w URL -u USERNAME -p PASSWORD -pl PLUGIN -c CMD CVE-2023-2877 - Formidable Forms 6.3.1 - Subscriber+ Remote Code Execution Script options: -h, --help show this help message an...

8.8CVSS7.8AI score0.22452EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/07 4:50 p.m.6 views

gitlab-cve-2020-10977

GitLab CVE2020-10977 Introduction This script provides remote code execution against GitLab Community Edition CE and Enterprise Edition EE. The CVE is an arbitrary file read which allows you to extract the Rails secretkeybase by downloading the GitLab secrets.yaml file. Which in turn, enables you...

5.5CVSS6AI score0.42741EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/07 4:50 p.m.7 views

CVE-2021-41773

CVE-2021-41773 Playground This is a small Docker recipe for setting up a Debian bookworm based container with an instance of the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. CGI has been explicitly enabled so it can be used to test/verify Local file Disclosure behavior as well as...

9.8CVSS7.8AI score0.99992EPSS
SaveExploits164
Kitploit
Kitploit
added 2026/09/07 4:50 p.m.6 views

CVE-2017-10271

Brief Description Command execution with echo output Direct shell upload Tested OK on Linux with WebLogic 10.3.6.0 Usage python weblogicwlswsatexp.py -t 172.16.80.131:7001 root@kitploit: usage: weblogicwlswsatexp.py -h -t TARGET -c CMD -o OUTPUT -s SHELL optional arguments: -h, --help show this...

7.5CVSS8.1AI score0.99993EPSS
SaveExploits45
Rows per page
Query Builder