Lucene search
+L

55365 matches found

Kitploit
Kitploit
added 2026/09/15 10:30 a.m.7 views

CVE-2023-24055

Disclaimer This script is for educational and demonstration purposes only. The author does not endorse or condone the use of this script for any criminal or malicious activities and it should only be used where explicitly allowed with proper permission. This script should be used with caution, as...

5.5CVSS6.3AI score0.03691EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/15 10:28 a.m.10 views

xmlsec

XMLSec Library XMLSec library provides C based implementation for major XML Security standards: XML Signature Syntax and Processing XML Encryption Syntax and Processing Detailed information about supported features and algorithms can be found in the XMLDsig and the XMLEnc interoperability reports...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 10:25 a.m.10 views

CVE-2023-21939

JDK CVE-2023-21939 文章链接 This is JDK CVE-2023-21939 Use JDK version lower than 8u371 JDK + Apache XML Graphics root@kitploit: org.apache.xmlgraphics batik-swing 1.15 How to reproduce this RCE: 1 Run XmlServer.java 2 Run JarServer.java 3 Run JarRCE.java for Test and successfully RCE Screenshot: JDK...

5.3CVSS6.8AI score0.02495EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 10:24 a.m.60 views

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 10:10 a.m.9 views

Poc-CVE-2024-32962-xml-crypto

Poc-CVE-2024-32962-xml-crypto A simulation of an attack exploiting the CVE-2024-32962 vulnerability to forge SAML messages and gain unauthorized permissions Very soon it will become available. Poc...

10CVSS8.1AI score0.00833EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/15 10:00 a.m.5 views

Nessus_Map

Nessus Map Nessus XML Praser Requirements Python3 Django Tested on Ubuntu 18.04 Windows 11 Pro PowerShell What it does Vulnerability based parsing Service based parsing Host bases parsing Unsupported OS parsing Generate Executive Summary of scan Export parsed .nessus files to JSON file Import JSO...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 9:44 a.m.6 views

CVE-2023-46604-ActiveMQ-RCE-pseudoshell

CVE-2023-46604 RCE Pseudoshell This script leverages CVE-2023046604 Apache ActiveMQ to generate a pseudo shell. The vulnerability allows for remote code execution due to unsafe deserialization within the OpenWire protocol. Description CVE-2023-46604 is a deserialization vulnerability that exists ...

10CVSS7.6AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/15 9:43 a.m.10 views

CVE-2018-11788

Summary Apache Karaf is a modern and polymorphic applications container. It's a lightweight, powered, and enterprise ready container powered by OSGi. Apache Karaf is a "product project", providing a complete and turnkey runtime. The runtime is "multi-facets", meaning that you can deploy different...

9.8CVSS8.2AI score0.07289EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 9:26 a.m.11 views

fusionauth-samlv2

fusionauth-samlv2 This repository is SAML v2.0 bindings in Java using JAXB. You'd use this library to process SAML requests and responses. See the tests for example code. Security disclosures If you find a vulnerability or other security related bug, please report the vulnerability here before...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 8:47 a.m.7 views

Digital-Signature-Forgery-Attack

In this article, we will look at the cryptographic attack of digital signature forgery Digital Signature Forgery Attack, its consequences pose a threat to the security of transactions in the Bitcoin network, since digital signatures confirm the ownership and authorization of cryptocurrency...

9.3CVSS8AI score0.09103EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 8:46 a.m.8 views

CVE-2019-19871-AuditGuide

Update 1-22-2020 There is now a tool from FireEye that will help scan these items below. The key to this is that you need to have enough logs to go back to 1-9-2020 to have a chance to see what was done beyond the exploit was ran. If it finds .XML payload files then you need to use the informatio...

9.8CVSS7.5AI score0.99999EPSS
SaveExploits48References2
Kitploit
Kitploit
added 2026/09/15 8:37 a.m.7 views

CVE-2018-11761

Summary In a recent research on Apache Tika, I found a DOS Denial of Service vulnerability existed on its XML parser. It is caused that the parser improperly parses XML document. Affected Version Tested on ElasticSearch 6.3.1 using Tika 1.18 and 6.2.3 using Tika 1.17 Analysis As we know, the core...

7.5CVSS6.7AI score0.0857EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 7:56 a.m.5 views

x-stream__xstream_CVE-2021-21345_1-4-15

master: v-1.4.x: XStream Java to XML Serialization, and back again Binaries All binary artifacts are bundled in the -bin archive. It includes the XStream jars and any other library used at build time, or optional runtime extras. Xpp3 is recommend for use as it will greatly improve the performance...

9.9CVSS7AI score0.72324EPSS
SaveExploits1References4
Kitploit
Kitploit
added 2026/09/15 7:56 a.m.5 views

overkill

Overkill Overkill is an exploit for a patched vulnerability affecting QNAP QTS. Due to the way QNAP discloses vulnerabilities, I'm unsure if this issue has a CVE or not. However, it was likely patched in November 2020 and April 2021. The n-day was "discovered" while doing diff analysis for...

9.8CVSS8.1AI score0.33381EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 7:55 a.m.10 views

CrushFTP_CVE-2025-54309

CVE-2025-54309 - CrushFTP Affected Versions 10.8.5 11.3.434 Race condition PoC by watchtower, adjusted to be more extensible. root@kitploit: python crushedftp.py usage: crushedftp.py -h -u USERNAME -p PASSWORD -r REQUESTS -P PAYLOAD target CrushFTP CVE-2025-54309 XML Race Condition Exploit...

9.8CVSS8.4AI score0.94709EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/15 7:46 a.m.10 views

CVE-2026-3227-TP-Link-authenticated-RCE

CVE-2026-3227: TP-Link Router OS Command Injection For more Information see https://vulners.com/cve/CVE-2026-3227 A persistent, authenticated OS Command Injection vulnerability in TP-Link router firmware leading to device bricking or potential LAN takeover. Disclaimer : This repository contains...

8.5CVSS6AI score0.01935EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 7:22 a.m.5 views

CVE-2026-46490-samlify-SAML-Attribute-Injection

CVE-2026-46490 — samlify SAML AttributeValue XML Injection → Privilege Escalation samlifyValue — is inserted unescaped , so a normal user can inject extra elements e.g. role=admin into their own, IdP-signed SAML assertion. Because the injection happens before signing, the Service Provider's...

8.8CVSS6.1AI score0.00469EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/09/15 7:17 a.m.8 views

CVE-2026-63077

Unauthenticated Remote Code Execution in JetBrains TeamCity CVE-2026-63077 Overview This is a proof-of-concept exploit script for CVE-2026-63077. Organizations can use this script to validate their detection and remediation posture. For a full technical analysis of CVE-2026-63077, please read our...

9.8CVSS8.5AI score0.86518EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/15 7:06 a.m.8 views

ofbiz-CVE-2023-49070-RCE-POC

ofbiz-CVE-2023-49070-RCE-POC This is a pre-auth RCE POC For CVE-2023-49070 which affected Apache ofbiz applications wget https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar Dns POC RCE POC This tweets helped me alot :...

9.8CVSS8.4AI score0.95368EPSS
SaveExploits10References2
Kitploit
Kitploit
added 2026/09/15 7:03 a.m.4 views

x-stream__xstream_CVE-2020-26217_1-4-14-java77

master: v-1.4.x: XStream Java to XML Serialization, and back again Binaries All binary artifacts are bundled in the -bin archive. It includes the XStream jars and any other library used at build time, or optional runtime extras. MXParser is recommend for use as it will greatly improve the...

9.3CVSS6.8AI score0.85001EPSS
SaveExploits7References5
Rows per page
Query Builder