Lucene search
+L

49707 matches found

Kitploit
Kitploit
β€’added 2026/09/10 3:13 a.m.β€’9 views

CVE-2020-11579

CVE-2020-11579 Introduction PHPKB 9.0 Enterprise Edition MySQL database is affected by an unauthenticated arbitrary file disclosure via a malicious MySQL Server. A remote attacker can read any file on a remote victim host with web-server privileges e.g. www-data, via a single HTTP GET request. Re...

7.5CVSS7.4AI score0.26919EPSS
SaveExploits2
Kitploit
Kitploit
β€’added 2026/09/10 3:12 a.m.β€’5 views

SonLogger-vulns

CVE-2021-27964 | SonLogger - Unauthenticated Arbitrary File Upload Metasploit Date: 30-01-2021 Exploit Author: Berkan Er [email protected] Vendor Homepage: https://www.sonlogger.com/ Software Link: https://www.sonlogger.com/download Version: 4.2.3.3 Tested on: Windows 10 Enterprise x64 CVE:...

9.8CVSS7.8AI score0.47519EPSS
SaveExploits6
Kitploit
Kitploit
β€’added 2026/09/10 3:12 a.m.β€’8 views

grafanaExp

grafanaExp Exploit Grafana CVE-2021-43798 arbitrary file read vulnerability to automatically detect vulnerability, existing plugins, extract secret key, decrypt server database file, and output datasourrce info. Usage Provides exp and decode functionality. root@kitploit: ➜ ./grafanaExp -h NAME:...

7.5CVSS8.1AI score0.88503EPSS
SaveExploits45
Kitploit
Kitploit
β€’added 2026/09/10 3:12 a.m.β€’5 views

CVE-2022-39952

CVE-2022-39952 POC for CVE-2022-39952 affecting Fortinet FortiNAC The default configuration of this exploit writes a cron job to create a reverse shell. Be sure to change the payload file to suite your environment. Technical Analysis A technical root cause analysis of the vulnerability and...

9.8CVSS8.2AI score0.99809EPSS
SaveExploits7
Kitploit
Kitploit
β€’added 2026/09/10 3:10 a.m.β€’13 views

sudowp-dropzone-elementor

SudoWP DropZone for Elementor Contributors: SudoWP, WP Republic Original Authors: WEB-SHOP-HOSTING Tags: elementor, dropzone, upload, security-patch, fork, cve-2024-5153, honeypot Requires at least: 5.6 Tested up to: 6.7 Stable tag: 1.7.17 License: GPLv2 or later Security Notice This is a...

9.8CVSS5.9AI score0.01002EPSS
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/10 3:07 a.m.β€’7 views

PoC-CVE-2021-41773

CVE-2021-41773 Apache HTTP Server Path Traversal Exploit A Python exploit for CVE-2021-41773, a path traversal vulnerability in Apache HTTP Server 2.4.49 that allows reading arbitrary files from the server. Vulnerability Details CVE-2021-41773 is a path traversal vulnerability in Apache HTTP Serv...

9.8CVSS8.2AI score0.99992EPSS
SaveExploits164
Kitploit
Kitploit
β€’added 2026/09/10 3:04 a.m.β€’3 views

CVE-2026-20224---XXE-Injection-en-Cisco-Catalyst-SD-WAN-Manager

CVE-2026-20224 - Cisco Catalyst SD-WAN Manager XXE Injection ⚠️ DISCLAIMER THIS TOOL IS EXCLUSIVELY FOR EDUCATIONAL AND RESEARCH PURPOSES This exploit is intended exclusively for authorized red team operations, penetration testing, and security research on systems where you have explicit written...

8.6CVSS7.8AI score0.01036EPSS
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/10 2:50 a.m.β€’6 views

CVE-2019-3799

CVE-2019-3799 - Spring-Cloud-Config-Server Directory Traversal Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the...

6.5CVSS6.5AI score0.85295EPSS
SaveExploits6References2
Kitploit
Kitploit
β€’added 2026/09/10 2:20 a.m.β€’6 views

CVE-2023-45878_to_RCE

CVE-2023-45878 to RCE This script chains and automates Arbitrary File Write to RCE on Gibbon LMS through CVE-2023-45878 exploitation. The script performs the following steps: 1. Generates an msfvenom stageless reverse shell for Windows 2. Uploads a webshell exploiting CVE-2023-45878 3. Downloads...

9.8CVSS8.1AI score0.63113EPSS
SaveExploits8
NVD
NVD
β€’added 2026/09/10 2:16 a.m.β€’4 views

CVE-2026-18351

The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementorfileupload function. This is due to insufficient file type validation in the isfiletypevalid function, which uses the...

9.8CVSS
SaveExploits0References5
Kitploit
Kitploit
β€’added 2026/09/10 2:16 a.m.β€’4 views

CVE-2025-30208-Series

CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Vulnerability Overview CVE-2025-30208, CVE-2025-31125 and CVE-2025-31486 are arbitrary file reading vulnerabilities in the Vite development server. These vulnerabilities allow an attacker to bypass access controls through specific URL parameters...

7.5CVSS6.8AI score0.74969EPSS
SaveExploits35
EUVD
EUVD
β€’added 2026/09/10 2:15 a.m.β€’5 views

EUVD-2026-75229

BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed may be caused...

8.5CVSS
SaveExploits0References2
Cvelist
Cvelist
β€’added 2026/09/10 2:15 a.m.β€’11 views

CVE-2026-84063

BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed may be caused...

8.5CVSS
SaveExploits0References2
CVE
CVE
β€’added 2026/09/10 2:15 a.m.β€’16 views

CVE-2026-84063

BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed may be caused...

8.5CVSS
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/10 1:59 a.m.β€’6 views

CVE-2024-9932

CVE-2024-9932 Wux Blog Editor = 3.0.0 - Unauthenticated Arbitrary File Upload Description: The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbtinsertImageNew' function in versions up to, and including, 3.0.0. This...

9.8CVSS6AI score0.36395EPSS
SaveExploits5
Kitploit
Kitploit
β€’added 2026/09/10 1:58 a.m.β€’6 views

CVE-2024-48914

This post is a research article published by EQSTLab. Thanks toRajesh Sharma, who discovered this vulnerability. CVE-2024-48914 β˜… CVE-2024-48914 Arbitrary File Read and DoS PoC β˜… Description CVE-2024-48914 : vendure-ecommerce Arbitrary file read and DoS Vulnerability description: Vendure is an...

9.1CVSS8.1AI score0.60416EPSS
SaveExploits1References3
Kitploit
Kitploit
β€’added 2026/09/10 1:46 a.m.β€’9 views

eLabFTW-1.8.5-EntityController-Arbitrary-File-Upload-RCE

Exploit Title : eLabFTW 1.8.5 'EntityController' Arbitrary File Upload / RCE Date : 5/18/19 Exploit Author : liquidsky Joseph McPeters Vulnerable Software : eLabFTW 1.8.5 Vendor Homepage : https://www.elabftw.net/ Version : 1.8.5 Software Link : https://doc.elabftw.net/ Tested On : Linux / PHP...

9CVSS8.1AI score0.17792EPSS
SaveExploits4References1
Kitploit
Kitploit
β€’added 2026/09/10 1:40 a.m.β€’17 views

CVE-2026-26336-PoC

CVE-2026-26336 β€” Alfresco Share Unauthenticated File Read Overview Alfresco Share exposes a /share/page/resource/ endpoint used to serve static resources. In vulnerable versions, this endpoint does not properly restrict path traversal, allowing an unauthenticated attacker to read arbitrary files...

8.7CVSS5.9AI score0.0039EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/10 1:40 a.m.β€’11 views

CVE-2026-21627---Tassos-Novarain-Framework-plg_system_nrframework-Exploit---Joomla

CVE-2026-21627 Unauthenticated Arbitrary File Inclusion in Joomla's Novarain Framework nrframework Overview A critical vulnerability in the Tassos/Novarain Framework plgsystemnrframework Joomla plugin allows unauthenticated attackers to include arbitrary PHP files on the server, instantiate...

9.5CVSS5.9AI score0.01544EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/10 1:40 a.m.β€’4 views

imagemagick-lfi-poc

ImageMagick LFI PoC CVE-2022-44268 The researchers at MetabaseQ discovered CVE-2022-44268, i.e. ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image e.g., for resize, the resulting image could have embedded the content of an arbitrary remote file if the...

6.5CVSS5.8AI score0.89855EPSS
SaveExploits28
Rows per page
Query Builder