Lucene search
+L

269397 matches found

Kitploit
Kitploit
added 2026/08/31 3:21 a.m.3 views

CVE-2025-3248

CVE-2025-3248 ★ CVE-2025-3248 Langflow RCE PoC ★ Lab Setup root@kitploit: docker pull langflowai/langflow:1.2.0 docker run -d --name CVE-2025-3248 -p 7860:7860 langflowai/langflow:1.2.0 localhost:7860 Description Langflow versions prior to 1.3.0 are susceptible to code injection in the...

9.8CVSS7.7AI score0.99996EPSS
SaveExploits36
Kitploit
Kitploit
added 2026/08/31 3:21 a.m.6 views

CVE-2025-7441

CVE-2025-7441 StoryChief 1.0.42 - Subida de archivos arbitraria Vulnerabilidad CVE-2025-7441 - Resumen técnico Componente afectado: Plugin StoryChief para WordPress Tipo de vulnerabilidad: Subida de archivos arbitraria no autenticada Endpoint vulnerable: /wp-json/storychief/webhook Causa raíz: El...

9.8CVSS6.4AI score0.39494EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/08/31 3:20 a.m.5 views

CVE-2026-41089

🚨 CVE-2026-41089 - Critical Windows Netlogon Remote Code Execution RCE ⚠️ A critical Windows Netlogon vulnerability allowing unauthenticated remote code execution on domain controllers. 📖 Overview CVE-2026-41089 is a critical vulnerability affecting the Windows Netlogon service. The flaw originate...

9.8CVSS8.2AI score0.79622EPSS
SaveExploits34
Kitploit
Kitploit
added 2026/08/31 3:20 a.m.5 views

CVE-2020-14008

CVE-2020-14008 - Ejecución Remota de Código en ManageEngine Applications Manager Ejecución remota de código autenticada mediante carga arbitraria de archivos en Zoho ManageEngine Applications Manager versiones = 14720. Resumen de la vulnerabilidad...

7.2CVSS7.1AI score0.40056EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/31 3:20 a.m.4 views

python-log4rce

Python Log4RCE Un PoC prueba de concepto integral en Python puro para CVE-2021-44228. Ejemplo root@kitploit: python3 log4rce.py --target "linux" --payload "PAYLOAD" http -X POST --url "http://localhost:8080/" --data "address=" root@kitploit: INFO:HTTP:Running on local port 1337 INFO:HTTP:Remote...

10CVSS6.9AI score0.99999EPSS
SaveExploits365
Kitploit
Kitploit
added 2026/08/31 3:19 a.m.5 views

React-Server-Components-RCE

React Server Components Remote RCE Exploitation Tool 📖 Tool Introduction React Server Components Remote RCE Exploitation Tool is a security testing tool specifically designed for remote code execution vulnerabilities in React Server Components and Next.js frameworks. It provides a graphical user...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 3:19 a.m.4 views

CVE-2025-8110

Gogs RCE Exploit CVE-2025-8110 A Proof of Concept PoC for CVE-2025-8110 , a critical vulnerability in Gogs that allows Remote Code Execution RCE via .git/config manipulation using symbolic link bypasses and sshCommand injection. 📖 Overview This exploit targets a Path Traversal flaw in the Gogs AP...

8.8CVSS7.4AI score0.82693EPSS
SaveExploits21
RedHat Linux
RedHat Linux
added 2026/08/31 3:18 a.m.5 views

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

7.7CVSS7.6AI score0.00238EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/31 3:18 a.m.4 views

-Limesurvey-RCE-CVE-2021-44967

🚀 LimeSurvey RCE CVE-2021-44967 - Ejecución Remota de Código Autenticada Este repositorio contiene un exploit funcional para CVE-2021-44967 , una vulnerabilidad de Ejecución Remota de Código autenticada en LimeSurvey. 🎯 Compatibilidad Probado y confirmado funcionando en: LimeSurvey 5.2.x LimeSurv...

9CVSS7.4AI score0.13502EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/31 3:18 a.m.6 views

xerteonlinetoolkits-rce

Xerte Online Toolkits = 3.15 Remote Code Execution Xerte Online Toolkits versions 3.15 and earlier suffer from 3 vulnerabilities in the /editor/elfinder/php/connector.php component, which may be chained together by an unauthenticated attacker to achieve Remote Code Execution RCE. Affected Version...

8.8CVSS5.9AI score0.0311EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 3:17 a.m.5 views

CVE-2022-41852

Prueba de concepto de ejecución remota de código en la librería JXPath CVE-2022-41852 CVE-2022-41852 permite a los atacantes ejecutar código en el servidor de aplicaciones. Puedes leer más sobre esta vulnerabilidad aquí:...

7.5AI score
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/31 3:17 a.m.3 views

PaperCut-Authentication_Bypass_and_RCE

CVE-2023-27350 — Omisión de Autenticación y RCE en PaperCut NG/MF Exploit independiente en Python para la vulnerabilidad crítica de omisión de autenticación y ejecución remota de código en PaperCut NG/MF. CVSS 9.8. Descripción CVE-2023-27350 afecta a PaperCut NG y MF en versiones anteriores a...

9.8CVSS7.9AI score0.99999EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/08/31 3:17 a.m.3 views

CVE-2022-21445

CVE-2022-21445 Exploit - PoC This toolkit generates exploit payloads for CVE-2022-21445, a critical Java deserialization vulnerability affecting Oracle WebLogic Server 12.2.1.x running Oracle ADF Faces. The flaw exists in the RemoteApplicationResourceLoader component and allows an attacker to sen...

9.8CVSS6.9AI score0.62478EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 3:17 a.m.3 views

CVE-2026-14266

CVE-2026-14266 — 7-Zip XZ Decoder Heap Buffer Overflow Critical Severity | CVSS: 8.8 High | CWE-122: Heap-based Buffer Overflow Affected: 7-Zip ≤ 26.01 | Patched: 7-Zip 26.02 2026-06-25 Discovered & Analyzed by: Li Yuxuan liyuxuan504-byte and team Executive Summary A heap buffer overflow exists i...

7.8CVSS7.5AI score0.00742EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/08/31 3:16 a.m.3 views

CVE-2026-34197

CVE-2026-34197 - Apache ActiveMQ RCE via Jolokia 1. Overview...

8.8CVSS6.7AI score0.9722EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/08/31 3:15 a.m.5 views

Rasa-cve-exp

Rasa-cve-exp CVE-2021-42556 server-1.py Ejecútalo directamente root@kitploit: python server-1.py Carga arbitraria de archivos root@kitploit: PUT /model "modelserver":"url":"http://192.168.244.128:5000/stage1","waittimebetweenpulls":0 El resultado es el siguiente: CVE-2021-41127 server-1.py El...

7.3CVSS6.2AI score0.0096EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 3:14 a.m.4 views

PrestaShop-CVE-2018-19126

PrestaShop Back Office Remote Code Execution CVE-2018-19126 This is the PoC for CVE-2018-19126, chaining multiple vulnerabilities in PrestaShop Back Office to trigger deserialization via phar to achieve remote code execution. Prerequisite: PrestaShop 1.6.x before 1.6.1.23 or 1.7.x before 1.7.4.4...

9.8CVSS7.5AI score0.22535EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/31 3:12 a.m.2 views

CVE-2025-32433-Exploit-edited

Exploit CVE-2025-32433 Compatible con Windows Ejecución Remota de Código No Autenticada en SSH de Erlang/OTP Descripción Este repositorio contiene un exploit para CVE-2025-32433, una vulnerabilidad crítica de ejecución remota de código no autenticada en el servidor SSH de Erlang/OTP...

10CVSS7.7AI score0.98594EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/08/31 3:11 a.m.3 views

FreePBX-SQLi-RCE

FreePBX CVE-2025-57819 - Unauthenticated SQLi to RCE PoC Educational & Security Research Only - See Legal Notice Below Exploitation proof of concept for CVE-2025-57819, a critical unauthenticated SQL injection vulnerability in FreePBX that allows remote code execution. This PoC is published after...

10CVSS7.5AI score0.88269EPSS
SaveExploits28References1
Kitploit
Kitploit
added 2026/08/31 3:11 a.m.4 views

CVE-2021-41773

Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Fixed Version Descripción Este es un exploit para la vulnerabilidad de Apache HTTP Server 2.4.49 identificada como CVE-2021-41773. La versión original del exploit publicada en Exploit-DB contenía errores de sintaxis y...

9.8CVSS7.3AI score0.99992EPSS
SaveExploits164
Rows per page
Query Builder