Lucene search
+L

2782 matches found

Kitploit
Kitploit
added 2026/08/31 3:19 p.m.5 views

CVE-2023-0669

CVE-2023-0669 GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. 0x00 Dork shodan root@kitploit: title:"GoAnywhere" FOFA root@kitploit: title="GoAnywhere" 0x01 Use Java...

7.2CVSS7.1AI score0.99999EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/08/31 3:09 p.m.4 views

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Tomcat versions before 9.0.1 Beta, 8.5.23, 8.0.47 a...

8.1CVSS7.5AI score0.99988EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/08/31 2:09 p.m.3 views

OracleOTM

OracleOTM Python tool for exploiting CVE-2021-35616 The script works in modules, which I implemented in the following order: ► Username enumeration ► Search for default credentials ► Run an SQL query using DBXML servlet ► Full exploitation and JSP execution The syntax of the script is as follows:...

5.5CVSS6.4AI score0.27974EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 1:19 p.m.5 views

CVE-2023-0669

CVE-2023-0669 GoAnywhere MFT 反序列化 - Je Yiuwai's Blog CVE-2023-0669 CVE-2023-0669是一个GoAnywhere MFT反序列化漏洞,由于反序列化一个任意攻击者控制的对象,在License Response Servlet中存在一个预先认证的命令注入漏洞。攻击者可以利用该漏洞在受影响的系统上执行任意代码,从而导致系统被完全控制。该漏洞影响版本为7.1.2之前,不包括7.1.2。 CVE-2023-0669 is a GoAnywhere MFT deserialization vulnerability that...

7.2CVSS7.3AI score0.99999EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/08/31 12:39 p.m.1 views

CVE-2025-10035

CVE-2025-10035 — Fortra GoAnywhere MFT License Servlet Deserialization RCE Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. A perfect-10 deserialization chain in Fortra GoAnywhere MFT: a forged license response signature lets an...

10CVSS9.1AI score0.99799EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/31 11:24 a.m.2 views

CVE-2022-36537-EXPLOIT

CVE-2022-36537 Summary R1Soft Server Backup Manager uses the ZK framework as the main framework. Its security requires all Web3 project parties to pay more attention to the security vulnerabilities of various Web3 infrastructures and patch them in time to avoid potential security risks and digita...

7.5CVSS7.3AI score0.95335EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/31 10:50 a.m.2 views

Confluence-EvilJar

aaaademo/Confluence-EvilJar Use CVE-2023-22515 to upload a jar package via the backend to achieve RCE. root@kitploit: git clone https://github.com/aaaademo/Confluence-EvilJar cd Confluence-EvilJar mvn package CMDshell root@kitploit: http://confluence.local/plugins/servlet/testbin/cmServlet Godzil...

10CVSS7.4AI score0.99156EPSS
SaveExploits40
Kitploit
Kitploit
added 2026/08/31 10:33 a.m.1 views

POC-CVE-2025-48988-CVE-2025-48976

CVE-2025-48988 & CVE-2025-48976 About This project runs a simple file upload endpoint with Tomcat 10.1.41 and a Jakarta Servlet. The exploit runs, by default, 1000 parallelized multipart requests with 1000 parts and 50 headers by part, from 50 workers. Run POC Build and run the Docker container:...

7.5CVSS6.9AI score0.67821EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 10:08 a.m.3 views

CVE-2012-4431

Welcome to Apache Tomcat! What Is It? The Apache Tomcat® software is an open source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. The Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket specifications are...

4.3CVSS7.4AI score0.09146EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 9:38 a.m.5 views

CVE-2025-4632_POC

Samsung MagicINFO 9 Server Exploit CVE-2025-4632 This repository contains a Python replication script for CVE-2025-4632, an Unauthenticated Remote Code Execution RCE vulnerability in Samsung MagicINFO 9 Server versions prior to 21.1052. The vulnerability exists due to an improper limitation of a...

9.8CVSS7.5AI score0.24295EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/08/31 9:20 a.m.3 views

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected. Tomcat versions before 9.0.1 Beta, 8.5.23, 8.0.47 a...

8.1CVSS7AI score0.99988EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/08/31 6:28 a.m.4 views

CVE-2019-8451

CVE-2019-8451 Jira Unauthenticated SSRF Vulnerability python usage python CVE-2019-8451.py http://www.jas502n.com:8080 root@kitploit: root@kali:/CVE-2019-8451 python CVE-2019-8451.py http://www.jas502n.com:8080 SSRF URL: www.baidu.com Send poc Success! X-AUSERNAME= anonymous vulnurl=...

6.5CVSS6.8AI score0.94453EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 6:02 a.m.4 views

CVE-2019-0232

CVE-2019-0232 Vulnerability analysis and PoC for the Apache Tomcat - CGIServlet enableCmdLineArguments Remote Code Execution RCE Video PoC available at https://www.youtube.com/watch?v=RA7kzuHOWqA Details Apache Tomcat has a vulnerability in the CGI Servlet, which can be exploited to achieve remot...

9.3CVSS7.3AI score0.99652EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/31 5:52 a.m.4 views

CVE-2019-0232

CVE-2019-0232 Exploit Remote Code Execution RCE in CGI Servlet – Apache Tomcat on Windows Refference : https://wwws.nightwatchcybersecurity.com/2019/04/30/remote-code-execution-rce-in-cgi-servlet-apache-tomcat-on-windows-cve-2019-0232/ root@kitploit: Apache Tomcat has a vulnerability in the CGI...

9.3CVSS7.6AI score0.99652EPSS
SaveExploits11
Cvelist
Cvelist
added 2026/08/31 5:45 a.m.8 views

CVE-2026-82621 Soarkey StudentManagement/学生信息管理系统 Administrative Servlet AdminDao.java AdminDao.doGet authorization

A weakness has been identified in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This impacts the function AdminDao.doGet of the file code/src/service/AdminDao.java of the component Administrative Servlet. Executing a manipulation of the argument action can...

7.5CVSS
SaveExploits0References6
CVE
CVE
added 2026/08/31 5:45 a.m.7 views

CVE-2026-82621

An authorization bypass vulnerability exists in Soarkey StudentManagement (学生信息管理系统), affecting versions up to commit e08f7f1d5015af407aa4cca0ada3dea189b4937e. The flaw resides in the AdminDao.doGet function of the Administrative Servlet (file code/src/service/AdminDao.java). An attacker can mani...

7.5CVSS6.7AI score
SaveExploits0References6
EUVD
EUVD
added 2026/08/31 5:45 a.m.4 views

EUVD-2026-68361

A weakness has been identified in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This impacts the function AdminDao.doGet of the file code/src/service/AdminDao.java of the component Administrative Servlet. Executing a manipulation of the argument action can...

7.5CVSS6.7AI score
SaveExploits0References6
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.55 views

Spring Framework - Path Traversal

Spring Framework MVC applications deployed as WAR or with embedded Servlet containers that do not reject suspicious URI sequences and serve static resources with Spring resource handling contain a path traversal vulnerability, letting attackers access unauthorized files, exploit requires...

5.9CVSS6.4AI score0.02054EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.114 views

ESAFENET CDG - Arbitrary File Download

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request. id: CVE-2019-9632 info: name: ESAFENET CDG - Arbitrary File Download author: pdteam severity: hi...

7.5CVSS7.2AI score0.39885EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.22 views

Zimbra Collaboration Suite - SSRF

Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component. id: CVE-2019-9621 info: name: Zimbra Collaboration Suite - SSRF author: riteshs4hu severity: high description: |...

7.5CVSS7AI score0.81037EPSS
SaveExploits11References5
Rows per page
Query Builder