Lucene search
+L

52994 matches found

Kitploit
Kitploit
•added 2026/09/25 4:47 a.m.•13 views

CVE-2024-30851-jasmin-ransomware-path-traversal-poc

Jasmin ransomware web panel path traversal PoC EducationalPurposes https://github.com/codesiddhant/Jasmin-Ransomware I discovered a pre-auth path traversal vulnerability in the Jasmin Ransomware web panel CVE-2024-30851, allowing an attacker to deanonymize panel operators and dump decryption keys...

6.3AI score0.04611EPSS
SaveExploits6References2
Kitploit
Kitploit
•added 2026/09/25 4:47 a.m.•9 views

CVE-2024-37726-MSI-Center-Local-Privilege-Escalation

CVE-2024-37726 MSI Center Local Privilege Escalation - Arbitrary File Overwrite Vulnerability Vulnerability Summary A local privilege escalation vulnerability on Windows OS has been identified in MSI Center versions = 2.0.36.0, which allows a low-privileged user to arbitrarily overwrite or delete...

6.4AI score0.0086EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/25 4:46 a.m.•10 views

exploit_cve-2021-29447

exploitcve-2021-29447 For educational purposes only. This exploit is supposed to be really convenient tool to get any file from server running wordpress 5.6.2 and php8. see https://wpscan.com/vulnerability/cbbe6c17-b24e-4be4-8937-c78472a138b5 All you need is base wp-admin access and ability to...

7.1CVSS7.1AI score0.85719EPSS
SaveExploits21
Kitploit
Kitploit
•added 2026/09/25 4:46 a.m.•9 views

ViteVulScan

ViteVulScan Vulnerability Introduction This project covers 3 vulnerabilities: CVE-2025-30208, CVE-2025-31125, CVE-2025-31486. All are arbitrary file reading vulnerabilities in the Vite development server. These three vulnerabilities have broad coverage and are easy to exploit without restrictions...

7.5CVSS6.8AI score0.74771EPSS
SaveExploits35
Kitploit
Kitploit
•added 2026/09/25 4:43 a.m.•12 views

uc_httpd_exploit

uc httpd exploit lighthttpd Simple uc httpd exploit made with py3.. this exploit was written from CVE-2014-2324 Description Multiple directory traversal vulnerabilities in 1 modevhost and 2 modsimplevhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. dot dot in...

5CVSS7.8AI score0.28814EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/25 4:43 a.m.•10 views

cve-2022-44268-detector

cve-2022-44268-detector - detect malicious PNGs cve-2022-44268-detector is a Go program that consumes PNGs and reports whether they appear to be malicious images generated by an exploit for CVE-2022-44268, an ImageMagick vulnerability that allows attackers to read arbitrary file contents using...

6.5CVSS7.8AI score0.89855EPSS
SaveExploits28
Kitploit
Kitploit
•added 2026/09/25 4:37 a.m.•12 views

CVE-2018-3760

CVE-2018-3760 Rails Asset Pipeline Directory Traversal Vulnerability Found by Orange Tsai Note : By default, Rails apps running in production mode are not vulnerable to this exploit. Exploit: root@kitploit: curl -v...

7.5CVSS7.6AI score0.26717EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/25 4:36 a.m.•13 views

CVE-2018-14847

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Blogpost https://n0p.me/winbox-bug-dissection/ Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script...

9.1CVSS8.7AI score0.96087EPSS
SaveExploits24
Kitploit
Kitploit
•added 2026/09/25 4:34 a.m.•10 views

CVE-2024-22263_Scanner

CVE-2024-22263Scanner For Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your own responsibility. CVE-2024-22263: Spring Cloud Dataflow Arbitrary File Writing Usage root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ██████╗ ██████╗ ██████╗...

8.8CVSS7AI score0.17537EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/25 4:24 a.m.•9 views

CVE-2022-44268

CVE-2022-44268 🧙‍♂️ CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit Video 📼 https://youtu.be/quKxwNAMBIA Usage 🛠 Poison the image ☣️ root@kitploit: python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png root@kitploit: Upload...

6.5CVSS7.6AI score0.89855EPSS
SaveExploits28
Kitploit
Kitploit
•added 2026/09/25 4:16 a.m.•10 views

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit 🛡️ Description CVE-2026-3891 is a critical Unauthenticated Arbitrary File Upload vulnerability found in the Pix for WooCommerce WordPress plugin in versions up to and including 1.5.0. The vulnerability exists in the lknpixforwoocommercec6savesetting...

9.8CVSS6AI score0.29729EPSS
SaveExploits13
Kitploit
Kitploit
•added 2026/09/25 4:15 a.m.•5 views

CVE-2019-8389

CVE-2019-8389 - Arbitrary file read in Musicloud for iOS v1.6 CVE-2019-8389 An exploit code for exploiting a local file read vulnerability in Musicloud v1.6 iOS Application Description: A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the...

8.1CVSS7.7AI score0.01459EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/25 4:14 a.m.•16 views

CVE-2024-23897

Modifications by Anant File read for files like /etc/os-release was stripping content. this is fixed now Added support for Authenticated session : provide username and password as commandline arguments root@kitploit: usage: jenkinsfileread.py -h -u URL -a USERAGENT -f FILE -t TIMEOUT -s -o -p PRO...

9.8CVSS8.6AI score0.99999EPSS
SaveExploits50
Kitploit
Kitploit
•added 2026/09/25 4:09 a.m.•13 views

UPnPHostFileRead

Description Local arbitrary file read PoC exploit for the Windows UPnP Device Host service. Reads an arbitrary file in the context of LOCAL SERVICE. Tested against Windows 11 Pro build 26200.8457. Reported to Microsoft. Assessed as "not a vulnerability". How to Build 1. Clone the repository. 2...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 4:08 a.m.•10 views

CVE-2024-5932

This post is a research article published by EQSTLab. ❗❗ IMPORTANT ❗❗ There are currently fake PoC github repositories running xmrig. Check out the link below for more information : URL1: https://x.com/win3zz/status/1828704644987511107 URL2: https://x.com/bornunique911/status/1828712791844524453...

10CVSS8.5AI score0.76803EPSS
SaveExploits10References2
Kitploit
Kitploit
•added 2026/09/25 3:49 a.m.•7 views

CVE-2025-30208

🔥 CVE-2025-30208 Vite Arbitrary File Read Vulnerability Scanner Advanced vulnerability scanner for CVE-2025-30208 with enterprise-grade features Professional penetration testing tool for Vite Arbitrary File Read vulnerability detection 🚀 Quick Start • 📋 Features • 🔧 Usage • 📊 Examples • 🛡️ Securit...

7.5CVSS6.9AI score0.74771EPSS
SaveExploits28
Kitploit
Kitploit
•added 2026/09/25 3:44 a.m.•13 views

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

9.8CVSS8.5AI score0.99996EPSS
SaveExploits65
Kitploit
Kitploit
•added 2026/09/25 3:43 a.m.•11 views

CVE-2019-11510

CVE-2019-11510 Exploit for Arbitrary File Read on Pulse Secure SSL VPN CVE-2019-11510 You can use a single domain, either a list of domains. You must include https:// in front of the domain. Usage : cat targetlist.txt | bash CVE-2019-11510.sh / bash CVE-2019-11510.sh -d https://vpn.target.com/ If...

10CVSS8.4AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
•added 2026/09/25 3:25 a.m.•19 views

cve-2019-1003000-jenkins-rce-poc

PoC: Jenkins RCE SECURITY-1266 / CVE-2019-1003000 Script Security, CVE-2019-1003001 Pipeline: Groovy, CVE-2019-1003002 Pipeline: Declarative A proof of concept to allow users with Overall/Read permission and Job/Configure and optional Job/Build to bypass the sandbox protection and execute arbitra...

8.8CVSS7.5AI score0.98375EPSS
SaveExploits17
Kitploit
Kitploit
•added 2026/09/25 3:20 a.m.•8 views

CVE-2021-22005

CVE-2021-22005 VMware vCenter Server Arbitrary File Upload Vulnerability Code By: Junsheng @Orange Network Security Lab Orange Network Security Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read...

9.8CVSS8.3AI score0.99999EPSS
SaveExploits11
Rows per page
Query Builder