Lucene search
+L

49711 matches found

Kitploit
Kitploit
added 2026/09/10 3:38 a.m.10 views

CVE-2024-23897

Jenkins File Read Vulnerability - CVE-2024-23897 CVE-2024-23897 is a critical vulnerability in Jenkins that allows unauthenticated attackers to read arbitrary files on the Jenkins controller's file system. This flaw arises from improper handling of command arguments in the args4j library,...

9.8CVSS8.1AI score0.99999EPSS
SaveExploits50References1
Kitploit
Kitploit
added 2026/09/10 3:37 a.m.5 views

CVE-2026-37065

CVE-2026-37065 Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion. To exploit the vulnerability, an authenticated attacker with the role of superadmin can send a specially crafted POST request to the affected endpoint using the url parameter remove to control the file to be...

9.1CVSS5.8AI score0.00351EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/10 3:36 a.m.4 views

CVE-2025-2539

CVE-2025-2539 - WordPress File Away = 3.9.9.0.1 - Arbitrary File Read 🔥 Vulnerability Summary The WordPress plugin File Away version = 3.9.9.0.1 is vulnerable to an unauthenticated arbitrary file read vulnerability. This allows attackers to read any file on the server, such as wp-config.php,...

7.5CVSS8.2AI score0.01624EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/10 3:35 a.m.7 views

CVE-2019-2615

CVE-2019-2615 GET /beawlsmanagementinternal2/wlmanagement HTTP/1.1 Host: 192.168.5.137:7001 User-Agent: Mozilla/5.0 Windows NT 6.1; Win64; x64; rv:66.0 Gecko/20100101 Firefox/66.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/ ;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encodin...

4.9CVSS6.3AI score0.05464EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 3:18 a.m.6 views

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit 🛡️ Description CVE-2026-3891 is a critical Unauthenticated Arbitrary File Upload vulnerability found in the Pix for WooCommerce WordPress plugin in versions up to and including 1.5.0. The vulnerability exists in the lknpixforwoocommercec6savesetting...

9.8CVSS5.8AI score0.2506EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/10 3:13 a.m.9 views

CVE-2020-11579

CVE-2020-11579 Introduction PHPKB 9.0 Enterprise Edition MySQL database is affected by an unauthenticated arbitrary file disclosure via a malicious MySQL Server. A remote attacker can read any file on a remote victim host with web-server privileges e.g. www-data, via a single HTTP GET request. Re...

7.5CVSS7.4AI score0.26919EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 3:12 a.m.5 views

SonLogger-vulns

CVE-2021-27964 | SonLogger - Unauthenticated Arbitrary File Upload Metasploit Date: 30-01-2021 Exploit Author: Berkan Er [email protected] Vendor Homepage: https://www.sonlogger.com/ Software Link: https://www.sonlogger.com/download Version: 4.2.3.3 Tested on: Windows 10 Enterprise x64 CVE:...

9.8CVSS7.8AI score0.47519EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/10 3:12 a.m.8 views

grafanaExp

grafanaExp Exploit Grafana CVE-2021-43798 arbitrary file read vulnerability to automatically detect vulnerability, existing plugins, extract secret key, decrypt server database file, and output datasourrce info. Usage Provides exp and decode functionality. root@kitploit: ➜ ./grafanaExp -h NAME:...

7.5CVSS8.1AI score0.88503EPSS
SaveExploits45
Kitploit
Kitploit
added 2026/09/10 3:12 a.m.5 views

CVE-2022-39952

CVE-2022-39952 POC for CVE-2022-39952 affecting Fortinet FortiNAC The default configuration of this exploit writes a cron job to create a reverse shell. Be sure to change the payload file to suite your environment. Technical Analysis A technical root cause analysis of the vulnerability and...

9.8CVSS8.2AI score0.99809EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/10 3:10 a.m.13 views

sudowp-dropzone-elementor

SudoWP DropZone for Elementor Contributors: SudoWP, WP Republic Original Authors: WEB-SHOP-HOSTING Tags: elementor, dropzone, upload, security-patch, fork, cve-2024-5153, honeypot Requires at least: 5.6 Tested up to: 6.7 Stable tag: 1.7.17 License: GPLv2 or later Security Notice This is a...

9.8CVSS5.9AI score0.01002EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 3:07 a.m.7 views

PoC-CVE-2021-41773

CVE-2021-41773 Apache HTTP Server Path Traversal Exploit A Python exploit for CVE-2021-41773, a path traversal vulnerability in Apache HTTP Server 2.4.49 that allows reading arbitrary files from the server. Vulnerability Details CVE-2021-41773 is a path traversal vulnerability in Apache HTTP Serv...

9.8CVSS8.2AI score0.99992EPSS
SaveExploits164
Kitploit
Kitploit
added 2026/09/10 3:04 a.m.3 views

CVE-2026-20224---XXE-Injection-en-Cisco-Catalyst-SD-WAN-Manager

CVE-2026-20224 - Cisco Catalyst SD-WAN Manager XXE Injection ⚠️ DISCLAIMER THIS TOOL IS EXCLUSIVELY FOR EDUCATIONAL AND RESEARCH PURPOSES This exploit is intended exclusively for authorized red team operations, penetration testing, and security research on systems where you have explicit written...

8.6CVSS7.8AI score0.01036EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 2:50 a.m.6 views

CVE-2019-3799

CVE-2019-3799 - Spring-Cloud-Config-Server Directory Traversal Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the...

6.5CVSS6.5AI score0.85295EPSS
SaveExploits6References2
Kitploit
Kitploit
added 2026/09/10 2:20 a.m.6 views

CVE-2023-45878_to_RCE

CVE-2023-45878 to RCE This script chains and automates Arbitrary File Write to RCE on Gibbon LMS through CVE-2023-45878 exploitation. The script performs the following steps: 1. Generates an msfvenom stageless reverse shell for Windows 2. Uploads a webshell exploiting CVE-2023-45878 3. Downloads...

9.8CVSS8.1AI score0.63113EPSS
SaveExploits8
NVD
NVD
added 2026/09/10 2:16 a.m.4 views

CVE-2026-18351

The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementorfileupload function. This is due to insufficient file type validation in the isfiletypevalid function, which uses the...

9.8CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/10 2:16 a.m.4 views

CVE-2025-30208-Series

CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Vulnerability Overview CVE-2025-30208, CVE-2025-31125 and CVE-2025-31486 are arbitrary file reading vulnerabilities in the Vite development server. These vulnerabilities allow an attacker to bypass access controls through specific URL parameters...

7.5CVSS6.8AI score0.74969EPSS
SaveExploits35
EUVD
EUVD
added 2026/09/10 2:15 a.m.5 views

EUVD-2026-75229

BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed may be caused...

8.5CVSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/10 2:15 a.m.11 views

CVE-2026-84063

BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed may be caused...

8.5CVSS
SaveExploits0References2
CVE
CVE
added 2026/09/10 2:15 a.m.16 views

CVE-2026-84063

BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed may be caused...

8.5CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 1:59 a.m.6 views

CVE-2024-9932

CVE-2024-9932 Wux Blog Editor = 3.0.0 - Unauthenticated Arbitrary File Upload Description: The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbtinsertImageNew' function in versions up to, and including, 3.0.0. This...

9.8CVSS6AI score0.36395EPSS
SaveExploits5
Rows per page
Query Builder