Lucene search
+L

17152 matches found

Kitploit
Kitploit
•added 2026/09/27 2:47 a.m.•12 views

dcsgonefwbsp

dcsgonefwbsp Getting started To make it easy for you to get started with GitLab, here's a list of recommended next steps. Already a pro? Just edit this README.md and make it your own. Want to make it easy? Use the template at the bottom! Add your files Create or upload files Add files using the...

6.2AI score
SaveExploits0References14
Kitploit
Kitploit
•added 2026/09/27 2:19 a.m.•11 views

CVE-2019-19781-CitrixRCE

Citrix未授权远程代码执行攻击工具 - CVE-2019-19781 参考资料: https://blog.fox-it.com/2020/07/01/a-second-look-at-cve-2019-19781-citrix-netscaler-adc/ 绕过方式: 1 - 已删除/修改的脚本位于:/vpn/../vpns/portal/scripts/ 2 - Perl命令注入(模板注入)攻击后出现的正斜杠("/")问题...

9.8CVSS8AI score0.99999EPSS
SaveExploits48
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•40 views

WordPress Contact Form by Supsystic - Server-Side Template Injection

Contact Form by Supsystic WordPress plugin = 1.7.36 contains a server-side template injection caused by unsandboxed TwigLoaderString and cfsPreFill functionality, letting unauthenticated attackers execute arbitrary code remotely via GET parameters. id: CVE-2026-4257 info: name: WordPress Contact...

9.8CVSS6.4AI score0.32782EPSS
SaveExploits9References3
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•83 views

Shield Security WP Plugin <= 18.5.9 - Local File Inclusion

The Shield Security Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the renderactiontemplate parameter. This makes it possible for unauthenticated attacker to include and execute PHP fil...

9.8CVSS8.2AI score0.56567EPSS
SaveExploits0References3
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•44 views

Koha 3.20.1 - Directory Traversal

Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the templatepath parameter to 1 svc/virtualshelves/search or 2 svc/members/search. id: CVE-2015-4632 info: name:...

7.5CVSS7.5AI score0.51829EPSS
SaveExploits8References5
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•157 views

Nodejs Squirrelly - Remote Code Execution

Nodejs Squirrelly is susceptible to remote code execution. Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuratio...

8.8CVSS8.4AI score0.58286EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/27 1:42 a.m.•13 views

CVE-2024-36991

CVE-2024-36991 Nuclei 模板 描述 此仓库包含一个 Nuclei 模板,用于检测 Splunk Enterprise(Windows 版本低于 9.2.2、9.1.5 和 9.0.10)中的路径遍历漏洞。该漏洞允许未经授权访问敏感文件,例如 /etc/passwd。 CVE 详情 CVE ID :CVE-2024-36991 漏洞类型 :路径遍历 受影响软件 :Splunk Enterprise(Windows 版本低于 9.2.2、9.1.5 和 9.0.10) 作者 :Sardine Web 参考 : Twitter 作者 使用方法 单次扫描...

7.5CVSS7.9AI score0.13006EPSS
SaveExploits10
Kitploit
Kitploit
•added 2026/09/27 12:15 a.m.•7 views

CVE-2021-26084-Nuclei-template

CVE-2021-26084-Nuclei-template This nuclei template is to verify the vulnerability without executing any commands to the target machine...

9.8CVSS8AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
•added 2026/09/27 12:09 a.m.•14 views

nuclei_template

Este repositorio no tiene un README...

5.7AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/26 11:19 p.m.•11 views

CVE-2021-32819

CVE-2021-32819 CVE-2021-32819 : SquirrellyJS mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options, remote code execution may be triggered in downstream applications. Source...

8.8CVSS8.5AI score0.58286EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/09/26 10:33 p.m.•12 views

CVE-2019-3396

CVE-2019-3396 Path traversal en Confluence Widget Connector CVE-2019-3396 POC de RCE POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: x.x.x.x Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 X11; Linux x8664; rv:60.0 Gecko/20100101 Firefox/60.0 Content-Type:...

10CVSS8.9AI score0.99913EPSS
SaveExploits20
Kitploit
Kitploit
•added 2026/09/26 10:19 p.m.•5 views

CVE-2026-87902-PoC-pwnVader

CVE-2026-87902 — Unauthenticated local file inclusion in WordPress core page-template resolution → RCE Author: pwnVader · License: MIT repository root...

8.1CVSS8.1AI score0.19756EPSS
SaveExploits29
Kitploit
Kitploit
•added 2026/09/26 10:18 p.m.•4 views

CVE-2026-29053

CVE-2026-29053 - Ghost CMS 6.19.0 - Ejecución Remota de Código Autenticada mediante Tema Malicioso CVE-2026-29053, afecta al sistema de gestión de contenido Ghost construido sobre Node.js. Las versiones desde la 0.7.2 hasta la 6.19.0 son susceptibles a este problema. Un tema malicioso puede...

9.8CVSS6.1AI score0.04803EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/26 7:18 p.m.•11 views

XWiki-Platform-RCE-CVE-2025-24893

XWiki Platform Unauthenticated RCE Exploit Overview This script is a refurbished Bash implementation of an exploit targeting the XWiki Platform versions affected by CVE-2025-24893. It leverages a critical unauthenticated remote code execution vulnerability that allows attackers to execute arbitra...

9.8CVSS8.9AI score0.99864EPSS
SaveExploits52References1
Kitploit
Kitploit
•added 2026/09/26 6:08 p.m.•57 views

phishing-frenzy

Phishing Frenzy Ruby on Rails Phishing Framework Documentation & Info Relevant up to date documentation can be found on the official Phishing Frenzy website located below Phishing Frenzy Website Please submit any tickets or issues to the github issues page Phishing Frenzy Tickets To contact us...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/26 5:43 p.m.•10 views

POC_CVE-2026-45185

CVE-2026-45185 Laboratorio de Validación de Plantillas Nuclei Este repositorio no es un repositorio de PoC de exploits de propósito general. Es un laboratorio de validación local para reproducir y revisar el comportamiento de una plantilla CVE-2026-45185 destinada a ser contribuida a...

9.8CVSS8.9AI score0.00944EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/26 5:11 p.m.•12 views

CVE-2022-29078

CVE-2022-29078 | EJS SSTI → RCE White Hat School 4.ª generación clase 32 - Woo Sang-beom @taka3636 Resumen La vulnerabilidad de inyección de plantillas del lado del servidor SSTI en EJS , como en Hello . Internamente, EJS compila la cadena de la plantilla en una función de JavaScript y luego la...

9.8CVSS7.4AI score0.32808EPSS
SaveExploits7References1
Kitploit
Kitploit
•added 2026/09/26 4:34 p.m.•16 views

magento2-template-filter-patch

Parche del Filtro de Plantillas de Magento 2 para CVE-2022-24086, CVE-2022-24087 Parche de Magento 2 para CVE-2022-24086, CVE-2022-24087. Corrige la vulnerabilidad RCE y los errores relacionados mediante un escape profundo de variables de plantilla. Si no puede actualizar Magento o no puede aplic...

10CVSS8.9AI score0.99199EPSS
SaveExploits6References7
Kitploit
Kitploit
•added 2026/09/26 4:15 p.m.•6 views

cve-2021-4034

cve-2021-4034...

7.8CVSS7.1AI score0.94345EPSS
SaveExploits155
Kitploit
Kitploit
•added 2026/09/26 3:53 p.m.•9 views

Vvveb-CMS-CVE-2025-8518

Vvveb-CMS-CVE-2025-8518 Este repositorio contiene una Prueba de Concepto PoC que demuestra una vulnerabilidad crítica en givanz Vvveb 1.0.5. La vulnerabilidad permite a un usuario autenticado con privilegios de edición de plantillas escribir código PHP arbitrario en archivos del servidor, lo que...

7.2CVSS5.7AI score0.02014EPSS
SaveExploits6
Rows per page
Query Builder