Lucene search
+L

12587 matches found

Kitploit
Kitploit
added 2026/09/07 11:54 a.m.4 views

CVE-2018-15473-Exploit

CVE-2018-15473-Exploit El 15 de agosto de 2018, se publicó el siguiente aviso en la lista OSS-Security: http://openwall.com/lists/oss-security/2018/08/15/5 El equipo ShelIntel decidió invertir algo de tiempo y escribir un exploit para esta vulnerabilidad. El exploit a continuación tiene las...

5.9CVSS6.8AI score0.98631EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/07 11:37 a.m.3 views

Samba-CVE-2007-2447-Exploit

Exploit de Samba CVE-2007-2447 Este es un script de Python para explotar CVE-2007-2447, una vulnerabilidad conocida como ejecución de comandos del 'Username' map script en el servidor Samba. Descripción Este exploit está desarrollado para apuntar a las versiones de Samba 3.x - 4.x. CVE-2007-2447...

6CVSS8.1AI score0.49759EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/07 11:18 a.m.3 views

CVE-2007-2447_Samba_3.0.25rc3

CVE-2007-2447 'Username' map script' Command Execution 3.0.0 - 3.0.25rc3 3.0.20 - 3.0.25rc3 AMRIUNIX...

6CVSS8.1AI score0.49759EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/07 11:07 a.m.8 views

Osint-Sync

Osint Sync - Extensión de Navegador OSINT Una potente extensión de navegador para investigación de inteligencia de fuentes abiertas OSINT. Busque nombres de usuario, correos electrónicos y números de teléfono en más de 20 plataformas con acceso integrado a herramientas OSINT premium como GHunt,...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/07 11:03 a.m.5 views

cve-2022-22980

spring-data-mongodb-cve-2022-22980-exp A mediocre vulnerability, just making a note. 1. Start Redis, port 27017 2. Start the project, SpringBoot starts on port 6666 3. root@kitploit: GET /v1/user/get?username=Tjava.lang.Runtime.getRuntime.exec'open+-a+calculator.app' HTTP/1.1 Host: localhost:6666...

9.8CVSS8AI score0.17969EPSS
SaveExploits3References2
Kitploit
Kitploit
added 2026/09/07 10:53 a.m.11 views

Emora-Project

Emora Emora is an OSINT tool that allows you to search for accounts by username across social networks. Inspired by tools like Sherlock, Emora provides a user-friendly graphical interface to ease the usage and navigation through the results. Overview Overview Showcase Installation Using binary...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/07 10:51 a.m.7 views

WhatsMyName

WhatsMyName WhatsMyName WMN is a community-maintained dataset that lets you find out if a username exists across hundreds of websites. If you're investigating a person of interest, verifying an online identity, or simply curious about your own digital footprint, this project powers the tools that...

5.8AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/07 10:38 a.m.6 views

CVE-2023-31719

CVE-2023-31719 Es posible inyectar código SQL en el parámetro JSON "username" del endpoint /api/signin mediante una solicitud HTTP POST "username":"test' OR 2891=LIKECHAR65,66,67,68,69,70,71,UPPERHEXRANDOMBLOB500000000/2-- ZJMj","password":"test" Nombre del producto afectado: FUXA Versión afectad...

9.8CVSS8.2AI score0.27234EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 9:23 a.m.4 views

CVE-2025-47812

CVE-2025-47812 Este es un PoC Proof of Concept del Exploit para Wing FTP Server CVE-2025-47812 Descripción Las versiones de Wing FTP Server anteriores a la 7.4.4 sufrieron una vulnerabilidad de Ejecución Remota de Código RCE como resultado del tratamiento inseguro del parámetro username. Cuando s...

10CVSS8.4AI score0.92823EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/07 8:35 a.m.76 views

kerberoast

🚩 Sponsors If you like this project, consider sponsoring it on GitHub! Sponsors kerberoast Kerberos attack toolkit -pure python- Install pip3 install kerberoast Prereqirements Python 3.6 See requirements.txt For the impatient IMPORTANT: the accepted target url formats for LDAP and Kerberos are th...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/07 8:33 a.m.4 views

sherlock

Encuentra cuentas de redes sociales por nombre de usuario en más de 400 redes sociales Instalación • Uso • Contribuir Instalación !ADVERTENCIA Los paquetes para ParrotOS y Ubuntu 24.04, mantenidos por un tercero, parecen estar rotos. Los usuarios de estos sistemas deberían usar uv/pipx/pip o...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/07 8:20 a.m.7 views

CVE-2024-44541

CVE-2024-44541: SQL Injection Vulnerability in Inventio Lite v4 Description Inventio Lite v4 is vulnerable to SQL Injection SQLi in the /action=processlogin endpoint. This vulnerability allows attackers to inject arbitrary SQL queries via the username parameter in POST requests, potentially leadi...

9.8CVSS5.9AI score0.02576EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/07 7:45 a.m.98 views

godehashed

Godehashed A golang tool that uses the dehashed.com API to search for compromised assets. Results can then be compiled into a CSV for further analysis. Screenshot Dehashed API You must supply the tool an api key. See apikeytemplate.txt for example. Installation To install the tool in CLI run the...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 7:07 a.m.5 views

CVE-2025-47812

CVE-2025-47812 – Wing FTP Server RCE via Lua Injection Author: 0xgh057r3c0n 🧠 Description This exploit leverages a Lua injection vulnerability in Wing FTP Server 's login handler loginok.html to execute arbitrary operating system commands or gain a reverse shell. It abuses unsanitized Lua code...

10CVSS8.4AI score0.92823EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/09/07 6:48 a.m.3 views

CVE-2020-35846

CVE-2020-35846 - Prueba de Concepto para Filtrar Nombres de Usuario de Cockpit John Hammond | Domingo, 25 de julio de 2021 Script Python de prueba de concepto para filtrar nombres de usuario de Cockpit con CVE-2020-35846...

9.8CVSS8.1AI score0.93292EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/07 6:44 a.m.4 views

Snoop

Snoop OSINT Tool for research social media accounts by username Install Requests root@kitploit: pip install requests Install BeautifulSoup root@kitploit: pip install beautifulsoup4 Execute the program root@kitploit: python3 snoop.py...

6AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.54 views

WAVLINK WN533A8 - Improper Access Control

WAVLINK WN533A8 M33A8.V5030.190716 is susceptible to improper access control. An attacker can obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser; and thereby possibly obtain sensitive information, modify data, and/or execute...

7.5CVSS7.4AI score0.20351EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.55 views

Zoo Management System 1.0 - SQL Injection

Zoo Management System 1.0 contains a SQL injection vulnerability via the username parameter on the login page. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

9.8CVSS7.4AI score0.01707EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.40 views

Zoho ManageEngine ADSelfService Plus 6121 - Username Enumeration

Zoho ManageEngine ADSelfService Plus 6121 is vulnerable to username enumeration CVE-2022-28987. The Forgot Password functionality responds differently for existing and non-existing users, allowing attackers to enumerate valid usernames. id: CVE-2022-28987 info: name: Zoho ManageEngine ADSelfServi...

5.3CVSS5.9AI score0.10282EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.73 views

modoboa 2.0.4 - Admin TakeOver

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4. id: CVE-2023-0777 info: name: modoboa 2.0.4 - Admin TakeOver author: r3Y3r53 severity: critical description: | Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to...

9.8CVSS7.6AI score0.15207EPSS
SaveExploits4References4
Rows per page
Query Builder