Lucene search
+L

49730 matches found

Kitploit
Kitploit
added 2026/09/10 7:35 a.m.6 views

CVE-2025-5394

CVE-2025-5394 – WordPress Alone Theme = 7.8.3 - Unauthenticated Arbitrary File Upload via Plugin Installation 🔥 Vulnerability Summary The WordPress theme Alone versions = 7.8.3 is vulnerable to an unauthenticated arbitrary file upload vulnerability. This flaw allows unauthenticated attackers to...

9.8CVSS6.3AI score0.5207EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/10 7:30 a.m.6 views

CVE-2020-1938_Ghostcat-PoC

CVE-2020-1938Ghostcat-PoC - CVE-2020-1938 A powerful Python exploit tool for Apache Tomcat AJP Ghostcat vulnerability CVE-2020-1938 with advanced features for penetration testing and security research. 🔍 Overview The Ghostcat vulnerability CVE-2020-1938 allows attackers to read arbitrary files fr...

9.8CVSS7.6AI score0.9927EPSS
SaveExploits51
Kitploit
Kitploit
added 2026/09/10 7:29 a.m.7 views

CVE-2025-13380

AI Engine for WordPress: ChatGPT, GPT Content Generator = 1.0.1 - Authenticated Contributor+ Arbitrary File Read The AI Engine for WordPress plugin contains a vulnerability in its image insertion feature that allows any authenticated user with post editing capabilities Contributor, Author, Editor...

6.5CVSS5.9AI score0.00492EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/10 7:28 a.m.3 views

CVE-2026-27641-Flask-Reuploaded

CVE-2026-27641 is a critical security vulnerability affecting versions of the Flask-Reuploaded library. It allows remote attackers to achieve arbitrary file writes Versions affected: 1.5.0 To test the vulnerability: python3 -m venv flaskreuploadedvenv In flaskreuploadedvenv: pip install...

9.8CVSS8AI score0.01202EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 7:28 a.m.4 views

CVE-2026-1357

🧨 CVE-2026-1357 – WPvivid Null-Key Exploit Tool CVE-2026-1357.py Migration, Backup, Staging – WPvivid Backup & Migration ≤ 0.9.123 Vulnerability: Unauthenticated Arbitrary File Upload → Remote Code Execution CVE: CVE-2026-1357 – CVSS 9.8 Critical GitHub: https://github.com/Nxploited Telegram:...

9.8CVSS8.4AI score0.32714EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/10 7:25 a.m.4 views

CVE-2025-63945-Tencent-iOA-EoP

CVE-2025-63945 Tencent iOA EoP Version : before 210.9.28693.62001 Summary: I discovered a vulnerability in Tencent PC Manager where files and directories under C:\Windows\Temp are insecurely handled. An attacker can leverage symbolic link symlink attacks to coerce a SYSTEM-privileged process into...

7.4CVSS5.9AI score0.00181EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 7:20 a.m.8 views

CVE-2022-44268

CVE-2022-44268 🧙‍♂️ CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit Video 📼 https://youtu.be/quKxwNAMBIA Usage 🛠 Poison the image ☣️ root@kitploit: python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png root@kitploit: Upload...

6.5CVSS7.5AI score0.89855EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/10 7:16 a.m.9 views

CVE-2023-1177

CVE-2023-1177 | | MLFlow Path Traversal | Tested on MLflow 2.2.0 | src: https://github.com/iumiro/CVE-2023-1177-MLFlow | .. code-block:: bash !/bin/bash RAND="EXPLOIT-$1+$RANDOM%9999" URL="http://172.17.0.2:6001" FILE='/root/.ssh/idrsa' curl -vX POST...

9.8CVSS8AI score0.6968EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/10 7:14 a.m.7 views

CVE-2022-32060

Snipe-IT Version v6.0.2 Vulnerability Explanation: An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file. Attack Vectors: We found a vulnerability file upload, when we upload malicious file...

4.8CVSS5.7AI score0.01166EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/10 7:11 a.m.4 views

CVE-2021-22005

CVE-2021-22005 VMware vCenter Server Arbitrary File Upload Vulnerability Code By: Junsheng @Orange Network Security Lab Orange Network Security Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/10 7:02 a.m.5 views

cve-2021-22005-exp

cve-2021-22005-exp 0x01 Vulnerability Overview On September 21, 2021, VMware released a security advisory disclosing 19 security vulnerabilities in vCenter Server, with CVSSv3 scores ranging from 4.3 to 9.8. Among them, the most critical vulnerability is an arbitrary file upload vulnerability in...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/10 7:00 a.m.5 views

CVE-2018-14847

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Blogpost https://n0p.me/winbox-bug-dissection/ Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script...

9.1CVSS8.4AI score0.96087EPSS
SaveExploits24
Patchstack
Patchstack
added 2026/09/10 6:49 a.m.6 views

WordPress Direct Download for WooCommerce plugin <= 1.19 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by Spy0x7 in WordPress Plugin Direct Download for WooCommerce versions = 1.19...

7.5CVSS0.00676EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/09/10 6:46 a.m.5 views

CVE-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which allows unauthenticated attackers to gain RCE on WSO2 servers via uploadi...

10CVSS8.3AI score0.99999EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/09/10 6:43 a.m.5 views

CVE-2021-43798

CVE-2021-43798 CVE-2021-43798 is a vulnerability marked as High priority CVSS 7.5 leading to arbitrary file read via installed plugins in Grafana application. This vulnerability works on versions 8.0.0-beta1, 8.0.0 to 8.3.0. Tested only on 8.2.0. Exploit works by creating a list of vulnerable...

7.5CVSS8.1AI score0.88503EPSS
SaveExploits45References1
Kitploit
Kitploit
added 2026/09/10 6:42 a.m.6 views

CVE-2019-17662

CVE-2019-17662 Golang implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit Copy of MuirlandOracle's python script...

9.8CVSS8.1AI score0.96758EPSS
SaveExploits11References1
Kitploit
Kitploit
added 2026/09/10 6:41 a.m.8 views

CVE-2021-22201

CVE-2021-22201 CVE-2021–22201 Arbitrary file read on Gitlab 13.9.0 = Gitlab 13.9.5 Usage python CVE-2021-22201.py url username password 参考 CVE-2021–22201: Arbitrary file read on Gitlab | by Son Nguy3n | Jun, 2021 | tradahacking Project import/export API | GitLab 1132378 Arbitrary file read during...

9.6CVSS7.1AI score0.03073EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/10 6:38 a.m.6 views

CVE-2024-13869

CVE-2024-13869 Migration,Backup, Staging – WPvivid 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft...

7.2CVSS8.2AI score0.02266EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2026/09/10 6:37 a.m.5 views

CVE-2026-78679

A flaw was found in GitPython. A remote attacker with low privileges can exploit a vulnerability in the TagReference.create function, where a positional reference parameter bypasses a security guard. This allows the attacker to supply a specially crafted reference value, such as --file=, to read...

7.1CVSS0.00241EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/10 6:37 a.m.5 views

CVE-2025-2539

CVE-2025-2539 PoC Unauthenticated Arbitrary File Read exploit for WordPress File Away Plugin ≤ 3.9.9.0.1 📖 Description This Python script is a proof-of-concept PoC exploit for CVE-2025-2539 , targeting a vulnerability in the WordPress File Away Plugin ≤ 3.9.9.0.1. The vulnerability allows...

7.5CVSS8AI score0.01624EPSS
SaveExploits6
Rows per page
Query Builder