Lucene search
+L

271963 matches found

Kitploit
Kitploit
added 2026/09/09 10:57 a.m.7 views

OpenSTAManager_RCE_Exploit-CVE-2026-38751-

OpenSTAManager RCE Exploit CVE-2026-38751 Overview This Python script exploits a Remote Code Execution vulnerability in OpenSTAManager version 2.10, identified as CVE-2026-38751. The exploit allows authenticated users to upload a malicious module and execute arbitrary commands on the target syste...

7.2CVSS6.5AI score0.00464EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/09 10:57 a.m.11 views

CVE-2023-21608

CVE-2023-21608 Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit Blog https://medium.com/@Kushagra007/adobe-acrobat-reader-resetform-cagg-uaf-rce-exploit-cve-2023-21608-652624346c8f DEMO...

7.8CVSS7.7AI score0.61475EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/09 10:57 a.m.7 views

CVE-2023-34362

CVE-2023-34362 POC for CVE-2023-34362 affecting MOVEit Transfer Technical Analysis A technical root cause analysis of the vulnerability can be found on the blog: Summary This POC abuses an SQL injection to obtain a sysadmin API access token and then uses that access to abuse a deserialization cal...

9.8CVSS8.8AI score0.99934EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/09 10:57 a.m.10 views

CVE-2017-0199

Exploit toolkit CVE-2017-0199 Exploit toolkit CVE-2017-0199 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victi...

9.3CVSS7.5AI score0.99933EPSS
SaveExploits30
Kitploit
Kitploit
added 2026/09/09 10:56 a.m.7 views

CVE-2024-47176-Scanner

Quick Start Example usage: python3 cupsscanner.py --targets 10.0.0.0/24 --callback 10.0.0.1:1337 CVE-2024-47176 Vulnerability Scanner cups-browsed What is CUPS And Why Does It Matter? CUPS Common Unix Printing System is an open-source framework for managing and controlling printers on UNIX and...

9.8CVSS8.5AI score0.77644EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/09 10:55 a.m.10 views

CVE-2023-22527-POC

CVE-2023-22527: Atlassian Confluence Vulnerability Introduction The CVE-2023-22527 vulnerability is a critical security flaw in Atlassian Confluence, a widely used collaboration and documentation platform. This vulnerability exists in both Confluence Data Center and Confluence Server, which are...

10CVSS8.7AI score0.99984EPSS
SaveExploits34
Kitploit
Kitploit
added 2026/09/09 10:54 a.m.11 views

OffensivePascal-CVE-2010-2075

CVE-2010-2075 FreePascal implementation of CVE-2010-2075 Vulnerability UnrealIRCd 3.2.8.1 RCE by sending "AB; command" to any listening service. Any command you send is executed by the same user as UnrealIRCD runs as. This implementation launches a reverse shell to your listener. Step 1 Start a...

7.5CVSS5.9AI score0.83534EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/09 10:54 a.m.7 views

CVE-2022-22954-Testi

CVE-2022-22954-Testing Testing the CVE-2022-22954 Vulnerability VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result ...

10CVSS9AI score0.99997EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/09 10:54 a.m.7 views

CVE-2019-16759-Vbulletin-rce-exploit

This repository does not have a README...

9.8CVSS8.4AI score0.99728EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/09 10:54 a.m.9 views

nmap-vulnerability-scan-scripts

Synopsys CyRC Vulnerability Advisory: https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps.html CVE-2022-45477, CVE-2022-45479, CVE-2022-45482, CVE-2022-45481...

9.8CVSS8.3AI score0.0232EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 10:54 a.m.7 views

PoC-CVE-2025-3914-Aeropage-WordPress-File-Upload

CVE-2025-3914 - Arbitrary File Upload in Aeropage Sync for Airtable WordPress Description The Aeropage Sync for Airtable WordPress plugin ≤ v3.2.0 is vulnerable to authenticated arbitrary file uploads due to insufficient file type validation in the aeropagemediadownloader function. Attack Vector ...

8.8CVSS8.5AI score0.15121EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 10:52 a.m.7 views

CVE-2022-22965

Spring4Shell Vulnerability - CVE-2022-22965 📕 Introduction The spring4shell vulnerability was named this way due to 2 vulnerabilities found and widely exploited by attackers in early 2022. One of these vulnerabilities is in the framework component called "Spring Cloud Functions" less critical and...

9.8CVSS8.2AI score0.99638EPSS
SaveExploits105
Kitploit
Kitploit
added 2026/09/09 10:48 a.m.11 views

CVE-2026-16723

CVE-2026-16723 Fastjson RCE ★ CVE-2026-16723 Fastjson @JSONType RCE PoC ★ Overview CVE-2026-16723 is a Remote Code Execution RCE vulnerability in Fastjson 1.x 1.2.68 – 1.2.83. When Fastjson parses attacker-controlled JSON, a crafted @type value is turned into a class-resource lookup inside...

9CVSS8.7AI score0.15989EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/09 10:48 a.m.4 views

Langflow-cve-2026-33017-exploit

Langflow RCE Exploitation Framework CVE-2026-33017 · Authorized security testing for Langflow remote code execution Research & red-team tooling for validating CVE-2026-33017 against Langflow instances you are explicitly authorized to assess. Not for unauthorized use. Disclaimer This project is...

9.8CVSS8.9AI score0.96177EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/09 10:48 a.m.9 views

CVE-2024-4309-Analysis

🛡️ CVE-2024-4309 Xiaomi HyperOS System Updater — OTA Signature Verification Bypass & RCE...

8.1CVSS5.8AI score0.0045EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 10:44 a.m.9 views

CVE-2023-46604_ActiveMQ_RCE_Recurrence

Enter activemq/bin, select x64 or x32, and run activemq.bin with administrator privileges. Access admin at port 8161, admin/admin If it cannot be started, check whether the port is occupied and modify activemq.xml in conf. In my machine, the MQTT port was occupied, so I modified it. 2. Start an...

10CVSS7.6AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/09 10:43 a.m.5 views

CVE-2019-0708

CVE-2019-0708 The Crashing Part BSOD has been removed intentionally! A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This...

10CVSS8.5AI score0.99999EPSS
SaveExploits126References4
Kitploit
Kitploit
added 2026/09/09 10:43 a.m.7 views

CVE-2025-32433

CVE-2025-32433 A critical vulnerability in Erlang/OTP SSH server allows unauthenticated remote code execution RCE. The flaw exists in the SSH protocol message handling mechanism, enabling attackers to execute arbitrary commands without requiring authentication credentials. Impact Critical severit...

10CVSS8.9AI score0.98754EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/09/09 10:43 a.m.6 views

CVE-2020-15227

CVE-2020-15227 DISCLAIMER! I take no responsibility of using it in wild life environment so please do NOT do it. This thingy is just to demonstrate and for test things for sysadmins I made this exploit according to publishing a CVE of David Grudl The founder of Nette foundation As a security...

9.8CVSS8.3AI score0.34424EPSS
SaveExploits3
CVE
CVE
added 2026/09/09 10:43 a.m.15 views

CVE-2026-41870

Apache Nutch Server (Nutch REST API) is vulnerable to unauthenticated remote code execution (RCE) via JEXL injection , stemming from missing authorization and unsafe reflection of externally-controlled input. This affects Apache Nutch versions 1.11 through 1.22 . The vulnerability carries a CVSS ...

8.8CVSS5.7AI score0.00694EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder