Lucene search
+L

7148 matches found

Kitploit
Kitploit
added 2026/09/01 3:18 a.m.4 views

CVE-2024-22120-RCE-with-gopher

Usage root@kitploit: python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Summary This exploit was created to exploit an XXE XML External Entity. Through it, I read the backend code of the web service and found an endpoint where I could use gopher to make internal requests on...

9.1CVSS7.4AI score0.76618EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/01 2:47 a.m.4 views

CVE-2021-42560

CVE-2021-42560: Unsafe XML Parsing in MITRE Caldera The Debrief plugin in Caldera versions =2.9.0 receives base64 encoded "SVG" parameters when generating a PDF. These SVG are parsed in an unsafe manner and can be leveraged for XXE attacks e.g. File Exfiltration, Server-Side Request Forgery, Out ...

8.8CVSS8.3AI score0.02148EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/01 2:41 a.m.55 views

microctfs

microctfs Small CTF challenges running on Docker logviewer Build and Start logviewer challenge exposed on port 8000 root@kitploit: cd logviewer docker build -t logviewer . docker run -d -p 8000:80 --name logchallenge logviewer Restart logviewer challenge root@kitploit: docker rm -f logchallenge &...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 1:38 a.m.4 views

CVE-2019-2888

CVE-2019-2888 WebLogic EJBTaglibDescriptor XXE Vulnerability https://www.oracle.com/security-alerts/cpuoct2019.html fernflower.jar weblogic.jar/weblogic/servlet/ejb2jsp/dd/EJBTaglibDescriptor.class root@kitploit: ╭─root@jas502n /var ╰─ find ./ |grep EJBTaglibDescriptor  ✔  8388  18:32:43...

5.3CVSS6.4AI score0.04539EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/01 1:37 a.m.4 views

cve-2017-12629

README Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML...

9.8CVSS7.1AI score0.91896EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/08/31 11:24 p.m.4 views

B-XSSRF

B-XSSRF Toolkit to detect and keep track on Blind XSS, XXE & SSRF SETUP...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 9:18 p.m.5 views

CVE-2018-12463

CVE-2018-12463 XML external entity XXE vulnerability in /ssc/fm-ws/services in Fortify Software Security Center SSC 17.10, 17.20 & 18.10 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request.. Exploit-DB...

9.8CVSS7.1AI score0.13849EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/31 9:05 p.m.6 views

CVE-2021-2471

CVE-2021-2471 entorno maven Proceso de reproducción aquí Entorno de referencia: https://github.com/SecCoder-Security-Lab/jdbc-sqlxml-xxe...

7.9CVSS6.8AI score0.07493EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/31 8:54 p.m.35 views

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 8:54 p.m.4 views

wordpress_cve-2021-29447

wordpresscve-2021-29447 WordPress XXE vulnerability Credit : https://github.com/motikan2010...

7.1CVSS6.7AI score0.85719EPSS
SaveExploits20References1
Kitploit
Kitploit
added 2026/08/31 8:35 p.m.4 views

CVE_2020_2546

Twitter: @Hktalent3135773 1、Weblogic RCE exploit CVE20202546 CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic RCE T3 payload exploit poc python3 2、exploit GIOP + send bind CVE-2020-2555、CVE-2019-2888、CVE-2019-2888 or others GIOP + send jta rmi or others...

9.8CVSS6.9AI score0.93168EPSS
SaveExploits22References2
Kitploit
Kitploit
added 2026/08/31 8:08 p.m.6 views

cve-2025-58360

GeoServer: CVE-2025-58360 Disclaimer The code and information contained within this repository is for educational and research purposes only. The owner of the repository takes no responsibility for anything you do with the code and/or information within this repository. Your actions are your own...

9.8CVSS7.3AI score0.64874EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/31 7:11 p.m.4 views

CVE-2017-10617

CVE-2017-10616 & CVE-2017-10617 These two vulnerabilities affect Juniper Contrail version 2.2, 3.0, 3.1 and 3.2: Hard coded credentials CVE-2017-10616 XML External Entity CVE-2017-10617 Vendor security bulletin can be found at Juniper Security Alert JSA10819 2017-10. The vulnerable service in...

6.4CVSS6AI score0.02278EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/31 6:00 p.m.3 views

CVE-2021-2471

CVE-2021-2471 - XXE in MySQL Connector/J Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.26 and prior. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access ...

7.9CVSS6.8AI score0.07493EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 5:27 p.m.30 views

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

6.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 5:22 p.m.4 views

lazyweb

LazyWeb - Vulnerable Web Application LazyWeb is a demonstration web application designed to showcase common server-side application vulnerabilities. Each vulnerability is categorized with its respective difficulty rating to provide a comprehensive learning experience for developers and security...

5.9AI score
SaveExploits0
NVD
NVD
added 2026/08/31 5:17 p.m.5 views

CVE-2026-17615

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

7.5CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 5:09 p.m.141 views

xxexploiter

XXExploiter It generates the XML payloads, and automatically starts a server to serve the needed DTD's or to do data exfiltration. Installation root@kitploit: install node and npm if you don't have it yet npm install -g xxexploiter Building & Running from source This is a simple Node application...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 5:07 p.m.8 views

ZimbraExploit

ZimbraExploit K8Cscan calls Zimbra8.8.11 Remote Code Execution Vulnerability GetShell https://www.cnblogs.com/k8gege/p/10822908.html CVE-2019-9621 Zimbra8.8.11 XXE GetShell Exploit...

7.5CVSS7AI score0.81037EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/31 4:49 p.m.3 views

CVE-2025-65482-XXE-

CVE-2025-65482 XXE XML External Entity Injection XXE in XDocReport Bug Definition XML External Entity Injection Vulnerability Overview XML External Entity Injection XXE is a vulnerability in the processing of XML formatted data, where a user injects XML data that references an external file or...

9.8CVSS5.8AI score0.00494EPSS
SaveExploits1
Rows per page
Query Builder