Lucene search
+L

12587 matches found

Kitploit
Kitploit
added 2026/09/07 7:07 a.m.5 views

CVE-2025-47812

CVE-2025-47812 – Wing FTP Server RCE via Lua Injection Author: 0xgh057r3c0n 🧠 Description This exploit leverages a Lua injection vulnerability in Wing FTP Server 's login handler loginok.html to execute arbitrary operating system commands or gain a reverse shell. It abuses unsanitized Lua code...

10CVSS8.4AI score0.92823EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/09/07 6:48 a.m.3 views

CVE-2020-35846

CVE-2020-35846 - Prueba de Concepto para Filtrar Nombres de Usuario de Cockpit John Hammond | Domingo, 25 de julio de 2021 Script Python de prueba de concepto para filtrar nombres de usuario de Cockpit con CVE-2020-35846...

9.8CVSS8.1AI score0.93292EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/07 6:44 a.m.4 views

Snoop

Snoop OSINT Tool for research social media accounts by username Install Requests root@kitploit: pip install requests Install BeautifulSoup root@kitploit: pip install beautifulsoup4 Execute the program root@kitploit: python3 snoop.py...

6AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.54 views

WAVLINK WN533A8 - Improper Access Control

WAVLINK WN533A8 M33A8.V5030.190716 is susceptible to improper access control. An attacker can obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser; and thereby possibly obtain sensitive information, modify data, and/or execute...

7.5CVSS7.4AI score0.20351EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.55 views

Zoo Management System 1.0 - SQL Injection

Zoo Management System 1.0 contains a SQL injection vulnerability via the username parameter on the login page. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

9.8CVSS7.4AI score0.01707EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.40 views

Zoho ManageEngine ADSelfService Plus 6121 - Username Enumeration

Zoho ManageEngine ADSelfService Plus 6121 is vulnerable to username enumeration CVE-2022-28987. The Forgot Password functionality responds differently for existing and non-existing users, allowing attackers to enumerate valid usernames. id: CVE-2022-28987 info: name: Zoho ManageEngine ADSelfServi...

5.3CVSS5.9AI score0.10282EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.73 views

modoboa 2.0.4 - Admin TakeOver

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4. id: CVE-2023-0777 info: name: modoboa 2.0.4 - Admin TakeOver author: r3Y3r53 severity: critical description: | Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to...

9.8CVSS7.6AI score0.15207EPSS
SaveExploits4References4
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.47 views

Usermin 2.100 - Username Enumeration

Usermin version 2.100 and below is susceptible to username enumeration via the password change functionality. An attacker can determine valid usernames by analyzing the response messages from the password change endpoint. id: CVE-2024-44762 info: name: Usermin 2.100 - Username Enumeration author:...

5.3CVSS5.9AI score0.02566EPSS
SaveExploits5References4
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.94 views

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

5.4CVSS5.8AI score0.01331EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.61 views

Webmin < 1.920 - Authenticated Remote Code Execution

rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...

8.8CVSS7.8AI score0.34798EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.54 views

Purchase Order Management v1.0 - Cross Site Scripting (Reflected)

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the password parameter at /purchaseorder/classes/login.php. id: CVE-2023-29623 info: name: Purchase Order Management v1.0 - Cross Site Scripting Reflected author: theamanrawat severity:...

6.1CVSS6.2AI score0.0125EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.24 views

Loan Management System 1.0 - SQL Injection

Loan Management System 1.0 contains a SQL injection vulnerability via the username parameter. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id: CVE-2025-9744 info: name:...

9.8CVSS7.4AI score0.01806EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.64 views

Pritunl VPN Server 1.29.2145.25 - Username Enumeration

Pritunl 1.29.2145.25 contains a username enumeration issue caused by different error responses in /auth/session login attempts, letting attackers verify valid usernames, exploit requires network access to the login endpoint. id: CVE-2020-25200 info: name: Pritunl VPN Server 1.29.2145.25 - Usernam...

5.3CVSS5.9AI score0.0747EPSS
SaveExploits1References1
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.51 views

AnythingLLM - Username Enumeration via Password Recovery

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to commit e287fab56089cf8fcea9ba579a3ecdeca0daa313, the password recovery endpoint returns different error messages depending on whether a username exists, so enabling...

5.3CVSS5.8AI score0.00779EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 6:22 a.m.7 views

Blackash-CVE-2025-47812

🛡️ CVE-2025-47812 – RCE crítico en Wing FTP Server 🛡️ 🔎 Resumen: CVE-2025-47812 es una vulnerabilidad crítica de ejecución remota de código RCE que afecta a Wing FTP Server versiones anteriores a la 7.4.4. Fue descubierta por un investigador de seguridad y se ha confirmado que se está explotando...

10CVSS8.4AI score0.92823EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/07 6:07 a.m.6 views

CVE-2026-36227

CVE-2026-36227: Easy Chat Server 3.1 UserName Path Traversal PoC Este repositorio contiene una prueba de concepto benigna para CVE-2026-36227, un problema de path traversal en el manejo del registro de usuarios de Easy Chat Server 3.1. Este repositorio es únicamente para investigación de segurida...

6.5CVSS5.9AI score0.00866EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 5:38 a.m.5 views

cve-2016-20012

CVE-2016-20012 Script de Enumeración de Usuarios SSH Este script de Python intenta enumerar nombres de usuario válidos en un servidor SSH intentando conectarse con una contraseña no válida. Mide el tiempo de respuesta para cada nombre de usuario para identificar posibles cuentas válidas basándose...

5.3CVSS6.9AI score0.05326EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 5:31 a.m.5 views

wpUsersScan

wpUsersScan Acerca de wpUsersScan Enumera la lista de usuarios de los sitios web de WordPress a través de la API REST / CVE-2017-5487, WordPress 4.7.1 - Enumeración de nombres de usuario Uso root@kitploit: $ python wpUsersScan.py URL Cómo instalar Clonar Clona el repositorio con: root@kitploit: $...

5.3CVSS7AI score0.87299EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/07 5:07 a.m.2 views

Noregressh

Originalmente quería crear un escáner y explotador de regreSHHion. Luego le añadí CVEs adicionales. Si alguien puede ayudarme a ampliar partes del proyecto, póngase en contacto. BIENVENIDO A NOREGRESSH Norregressh es un framework de pruebas de penetración centrado en regresiones de OpenSSH y...

8.1CVSS7.2AI score0.99506EPSS
SaveExploits98References1
Kitploit
Kitploit
added 2026/09/07 5:06 a.m.6 views

vsftpd-234-backdoor

Exploit de Puerta Trasera vsftpd 2.3.4 Un pequeño exploit en Python 3 sin dependencias para la puerta trasera de vsftpd 2.3.4 CVE-2011-2523. Activa la puerta trasera a través de FTP y te lleva a un shell interactivo de root en el listener generado. Escrito como un reemplazo moderno para scripts d...

10CVSS7.8AI score0.96184EPSS
SaveExploits49
Rows per page
Query Builder