Lucene search
+L

14257 matches found

Kitploit
Kitploit
added 2026/09/14 12:56 a.m.71 views

dockerscan

DockerScan v2.0 The Most Comprehensive Docker Security Scanner | |...

5.3AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 11:55 p.m.32 views

metta

Metta Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test mostly your host based instrumentation but may also allow you to test any network based detection and controls...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 10:18 p.m.15 views

PcapPlusPlus

...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 8:50 p.m.6 views

BurpSuite-collections

Burp-Suite-collections BurpSuite Related Collection Project, plugins mainly from non-BApp Store App Store All localization or use of BurpSuite is based on the premise that you have configured the Java environment!!! Related Tutorial Latest version after December 2022 For activation refer to...

5.9AI score
SaveExploits0References4
EUVD
EUVD
added 2026/09/13 8:06 p.m.5 views

EUVD-2026-77084

The GenieWords WordPress plugin from 1.5.27 to 1.5.34 does not have authorisation checks on some of its REST API and AJAX actions, and decodes stored values before printing them, allowing unauthenticated users to overwrite its configuration and inject arbitrary web scripts that execute on every...

8.8CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 6:32 p.m.157 views

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 5:27 p.m.9 views

CVE-2025-66478-PoC-Reverse-Shell

CVE-2025-66478 / CVE-2025-55182 "React2Shell" — PoC de RCE por Deserialización de Server Actions en RSC Prueba de concepto de explotación para CVE-2025-55182 — apodado públicamente "React2Shell" — una vulnerabilidad de contaminación de prototipos del lado del servidor en la deserialización de...

10CVSS7.5AI score0.99802EPSS
SaveExploits405
Kitploit
Kitploit
added 2026/09/13 5:21 p.m.6 views

exploitarium

https://discord.gg/WytKH65ZR join up for research, help, documentation, and more useful information for those interested. Statement This repo was incomplete when published. In regard to AI usage, my fuzzing workflow was automated by AI with a strict workflow. I used GPT-5.3 for ALL the fuzzing, a...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 4:32 p.m.11 views

React2Shell-Toolbox

React2Shell Toolbox 一个基于 Electron + Vue 3 的安全测试工具箱,专注于 React Server Actions 漏洞检测与利用。 中文文档 | English 项目简介 React2Shell Toolbox 是一款针对 Next.js React Server Actions 原型链污染漏洞(CVE-2025-55182)的安全测试工具。该工具提供了友好的图形界面,支持 POC 验证、虚拟终端交互、FOFA 资产搜索、以及高级的路由劫持功能。 应用截图 POC 验证界面 虚拟终端交互...

10CVSS7.5AI score0.99802EPSS
SaveExploits391References8
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.156 views

CData Sync < 23.4.8843 - Path Traversal

A path traversal vulnerability exists in the Java version of CData Sync CData - Sync' - r...

8.6CVSS7.6AI score0.02885EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.144 views

PowerJob <=4.3.2 - Unauthenticated Access

PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface. id: CVE-2023-29923 info: name: PowerJob =4.3.2 - Unauthenticated Access author: For3stCo1d severity: medium description: | PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface. impact: ...

5.3CVSS5.9AI score0.09545EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.97 views

ZKTeco BioTime <= 9.0.1 - Privilege Escalation

BioTime default employee credentials password 123456 allow login. Sessions are not role-validated, enabling privilege escalation to perform admin actions and enumerate backup files. id: CVE-2023-38952 info: name: ZKTeco BioTime = 9.0.1 - Privilege Escalation author: riteshs4hu severity: high...

9.8CVSS7.5AI score0.03257EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.55 views

Zoo Management System 1.0 - SQL Injection

Zoo Management System 1.0 contains a SQL injection vulnerability via the username parameter on the login page. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

9.8CVSS7.4AI score0.01776EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.136 views

Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting

PAN-OS management web interface is vulnerable to reflected cross-site scripting. A remote attacker able to convince an administrator with an active authenticated session on the firewall management interface to click on a crafted link to that management web interface could potentially execute...

8.8CVSS7.7AI score0.2389EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.31 views

WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting

A cross-site scripting vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter. id: CVE-2011-5106 info: name: WordPress Plugin Flexible Custom Post Type 0.1.7 - Cross-Site...

4.3CVSS5.9AI score0.10899EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.20 views

KevinLAB BEMS 1.0 - SQL Injection

KevinLAB BEMS 1.0 contains a SQL injection vulnerability. Input passed through inputid POST parameter in /http/index.php is not properly sanitized before being returned to the user or used in SQL queries. An attacker can possibly obtain sensitive information from a database, modify data, and...

9.8CVSS8.1AI score0.06535EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.40 views

WordPress Integrator 1.32 - Cross-Site Scripting

A cross-site scripting vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php. id: CVE-2012-5913 info: name: WordPress Integrator 1.32 - Cross-Site Scripti...

4.3CVSS5.9AI score0.08693EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.32 views

Langflow - Broken Access Control

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication controls. The issue allows any unauthenticated user to access sensitive user conversation data, transaction histories...

9.3CVSS7.9AI score0.3371EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.100 views

MAGMI - Cross-Site Request Forgery

MAGMI Magento Mass Importer is vulnerable to cross-site request forgery CSRF due to a lack of CSRF tokens. Remote code execution via phpcli command is also possible in the event that CSRF is leveraged against an existing admin session. id: CVE-2020-5776 info: name: MAGMI - Cross-Site Request...

8.8CVSS7.9AI score0.14725EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.41 views

WCFM Membership <= 2.10.0 - Broken Access Control

The WCFM Membership plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to, and including, 2.10.0 due to missing capability checks true the AJAX actions: wcfm-memberships, wcfm-memberships-manage, and wcfm-memberships-settings. id: CVE-2022-4940 info:...

7.3CVSS6.9AI score0.01084EPSS
SaveExploits0References3
Rows per page
Query Builder