Lucene search
+L

7087 matches found

Kitploit
Kitploit
added 2026/09/12 2:54 p.m.5 views

CVE-2023-0297

CVE-2023-0297 pyload 0.5.0b3.dev31 之前的版本中存在RCE漏洞。 免责声明:此脚本可能导致对远程系统的未授权访问或控制;仅在获得系统所有者明确许可后方可使用。...

9.8CVSS8.1AI score0.95915EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/12 2:48 p.m.50 views

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/12 2:45 p.m.7 views

CVE-2022-35914

CVE-2022-35914 PoC Referencias https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr https://github.com/cosad3s/CVE-2022-35914-poc Créditos a Sébastien Copin por el PoC que adapté aquí Consulta mi análisis completo aquí: https://link.medium.com/tBwDlpQl3Ib Uso root@kitploit...

9.8CVSS8.5AI score0.99662EPSS
SaveExploits16References2
Kitploit
Kitploit
added 2026/09/12 2:38 p.m.7 views

CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 远程命令执行脚本 更多脚本文件另参:https://github.com/zhzyker/exphub Readme root@kitploit: +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-10204 Nexus...

9CVSS7.6AI score0.38166EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/12 1:08 p.m.6 views

CVE-2024-39248

漏洞标题: SimpCMS v0.1 - 跨站脚本攻击 XSS CVE: CVE-2024-39248 漏洞利用作者: Jason Jacobs 0xjasonjacobs - Twitter 供应商主页: https://sourceforge.net/projects/simpcms/ 脆弱端点: /SimpCMS/admin.php SimpCMS v0.1 中存在一个跨站脚本 XSS 漏洞,攻击者可以通过在 /admin.php 的标题字段中注入构造的有效载荷,执行任意 Web 脚本或 HTML。 针对 SourceForge 上最新 SimpCMS 版本更新的 cURL 命令参...

5.4CVSS5.8AI score0.00743EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/12 12:58 p.m.5 views

CVE-2023-38831

CVE-2023-38831 Exploit - Generador de Archivos Cebo y Cambio Resumen Este script de Python está diseñado para generar un archivo de tipo "bait and switch" cebo y cambio. Está destinado únicamente a fines educativos y de hacking ético. Asegúrate de tener los permisos necesarios antes de utilizar...

7.8CVSS7AI score0.97894EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/12 12:33 p.m.5 views

CVE-2023-33977

CVE-2023-33977 kiwitcms/kiwi 中通过 SVG 上传导致的存储型 XSS - 作者:M Nadeem Qazi 描述 本仓库针对在 kiwitcms/kiwi 应用中发现并被分配了 CVE-2023-33977 标识符的存储型 XSS 漏洞进行了说明。该漏洞允许通过 SVG 文件上传执行恶意脚本。当上传包含恶意载荷的 SVG 文件时,脚本会在受害者浏览器的上下文中执行,可能导致数据窃取、账户失陷以及恶意软件的传播。 概念验证 有关此漏洞的详细概念验证可参阅以下视频: 影响 该漏洞影响重大,对 kiwitcms/kiwi...

8.1CVSS6.8AI score0.0087EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/12 12:26 p.m.8 views

CVE-2022-32132

针对 osTicket 的 CVE-2022-32132 | 支持工单系统 反射型 XSS: root@kitploit: Payload: " onmouseover="alert1 http://localhost/scp/directory.php?&&order=DESCE%22%20onmouseover=%22alert1%22%20style=%22position:fixed;top:0px;right:0;bottom:0px;left:0px;&sort=name...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 11:27 a.m.5 views

CVE-2024-22120-RCE

CVE-2024-22120 Kit de herramientas Versión/es afectadas root@kitploit: 6.0.0 - 6.0.27 6.4.0 - 6.4.12 7.0.0alpha1 Crédito https://x.com/mf0cuz https://support.zabbix.com/browse/ZBX-24505 https://packetstormsecurity.com/files/137454/Zabbix-3.0.3-Remote-Command-Execution.html Premisa un usuario de...

9.1CVSS8.2AI score0.76618EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/12 10:53 a.m.4 views

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test root@kitploit: python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory,...

7.8CVSS7.1AI score0.97894EPSS
SaveExploits49References1
Kitploit
Kitploit
added 2026/09/12 10:42 a.m.5 views

CVE-2025-25612

CVE-2025-25612: Switch FS S3150-8T2F Vulnerabilidad de Cross Site Scripting XSS Almacenado CVE-2025-25612 FS Inc S3150-8T2F anterior a la versión S3150-8T2F2.2.0D135103 es vulnerable a Cross Site Scripting XSS en la funcionalidad de Configuración de Rango de Tiempo de la interfaz de administració...

7.1CVSS5.9AI score0.00958EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 8:21 a.m.6 views

CVE-2023-38831-winrar-exploit

Generador de exploits CVE-2023-38831 para WinRAR Prueba rápida del PoC Genera el PoC por defecto para la prueba root@kitploit: python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Personalizado 1. Coloca el archivo señuelo bait y el...

7.8CVSS7.1AI score0.97894EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/12 7:33 a.m.8 views

CVE-2023-49983

CVE-2023-49983 School Fees Management System v1.0 - "/management/class" 上 “name” 字段/参数中的跨站脚本(XSS)漏洞 描述 :School Fees Management System v1.0 的 “/management/class” 组件中存在一个跨站脚本(XSS)漏洞,攻击者可通过向 name 参数注入特制负载来执行任意 Web 脚本或 HTML。 受影响产品版本 :School Fees Management System v1.0 CVE 作者 :Geraldo Alcântara 日期 :20...

6.8CVSS5.9AI score0.00574EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 6:49 a.m.8 views

CVE-2002-0346

CVE-2002-0346 Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to 1 service.cgi or 2 alert.cgi. Packetstorm publication at https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html...

7.5CVSS6.7AI score0.06479EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 5:26 a.m.5 views

CVE-2021-36747

CVE-2021-36747 Blackboard Learn hasta la versión 9.1 permite XSS por parte de un usuario autenticado a través del formulario Feedback to Learner. Descubierto: 11 de mayo de 2018 El equipo de seguridad de Blackboard ha sido notificado de este problema. Reconocieron la vulnerabilidad el 14 de mayo ...

5.4CVSS6AI score0.0062EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 2:37 a.m.11 views

CVE-2023-49984

CVE-2023-49984 School Fees Management System v1.0 - Vulnerabilidad de Cross-Site Scripting XSS en el campo/parámetro "name" en "/management/settings" Descripción : Una vulnerabilidad de cross-site scripting XSS en el componente "/management/settings" de School Fees Management System v1.0 permite ...

6.1CVSS5.9AI score0.00483EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 2:35 a.m.8 views

CVE-2023-49985

CVE-2023-49985 School Fees Management System v1.0 - Vulnerabilidad de Cross-Site Scripting XSS en el parámetro "cname" en "newclass" Descripción : Una vulnerabilidad de cross-site scripting XSS en el componente "newclass" de School Fees Management System v1.0 permite a los atacantes ejecutar...

6.5CVSS5.9AI score0.00468EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 2:29 a.m.10 views

shlol

SHLOL 这是一个可通过快捷键触发的菜单,用于为你执行基础操作 非常易于使用 即时创建监听器 无需复制粘贴 选择类型、IP 和端口即可完成! 轻松运行远程脚本 反向 Shell 生成器 https://user-images.githubusercontent.com/35298550/119257747-47abd500-bbcf-11eb-934e-29ec617b9435.mp4 轻松提供脚本并远程运行...

6AI score
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.27 views

VDO.Ninja - DOM-Based Cross-Site Scripting

VDO.Ninja 28.0 to 28.3 contains a reflected XSS caused by improper sanitization of the room parameter in examples/control.html, letting remote attackers execute scripts, exploit requires crafted URL. id: CVE-2025-62613 info: name: VDO.Ninja - DOM-Based Cross-Site Scripting author: 0xAkoko severit...

6.9CVSS6AI score0.01083EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.31 views

Liferay Portal & DXP - Cross-Site Scripting

Liferay Portal 7.4.0 through 7.4.3.133 and Liferay DXP 2024.Q1.1 through 2025.Q1.4 contain a reflected XSS caused by improper sanitization in entrycoverimagecaption.jsp, letting remote non-authenticated attackers inject JavaScript. id: CVE-2025-4576 info: name: Liferay Portal & DXP - Cross-Site...

6.9CVSS5.8AI score0.00588EPSS
SaveExploits0References2
Rows per page
Query Builder