Lucene search
+L

49832 matches found

Kitploit
Kitploit
added 2026/09/10 1:00 a.m.7 views

CVE-2026-3844

CVE-2026-3844 — Breeze Cache = 2.4.4 Unauthenticated Arbitrary File Upload to RCE Overview...

9.8CVSS8.3AI score0.27701EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/10 12:59 a.m.8 views

CVE-2021-41277

CVE-2021-41277 MetaBase Arbitrary File Read A small script I wrote myself; it's not well written, so please feel free to point out any issues. Disclaimer : The techniques provided are for learning and reference testing only. Any direct or indirect losses caused by using the information provided i...

10CVSS7.1AI score0.97178EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/10 12:59 a.m.7 views

CVE-2026-34036

CVE-2026-34036 Proof-of-concept script for CVE-2026-34036 , an authenticated local file inclusion / LFI in Dolibarr. The issue is reachable through core/ajax/selectobject.php. An authenticated user can abuse the objectdesc parameter to make the application read arbitrary local files on the server...

6.5CVSS6AI score0.01464EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/10 12:59 a.m.6 views

CVE-2024-23897-Jenkins-4.441

CVE-2024-23897 - Jenkins Arbitrary File Leak Compile root@kitploit: g++ CVE-2024-23897.cpp -o exploit Usage root@kitploit: /exploit -u http://10.10.10.10 -f /etc/passwd...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits50
Kitploit
Kitploit
added 2026/09/10 12:56 a.m.6 views

ktor-cve-2023-45612-poc

Ktor XXE Vulnerability Proof-of-Concept CVE-2023-45612 Summary Impact: Arbitrary files access via a crafted XML DTD with an XXE reference. Root cause: Unsafe XML document parser. This repo contains a vulnerable Ktor 2.3.4 app configured to allow external entities so the XXE effect is visible...

9.8CVSS8.1AI score0.00595EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/10 12:56 a.m.10 views

CVE-2023-4357

【CVE-2023-4357】Chrome-XXE Arbitrary File Read Vulnerability Reproduction REPRODUCTION CASE Use files shown above or browse to http://188.68.220.248/js.svg...

8.8CVSS7.4AI score0.47122EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:53 a.m.8 views

CVE-2024-11613-wp-file-upload

CVE-2024-11613-wp-file-upload 由 Chirag Artani https://3rag.com 为 WordPress File Upload 中的 CVE-2024-11613 编写的漏洞利用程序 相关信息如下 - WordPress 的 WordPress File Upload 插件在所有版本(包括 4.24.15)中均存在远程代码执行、任意文件读取和任意文件删除漏洞,漏洞位于 'wfufiledownloader.php' 文件中。这是由于对 'source'...

9.8CVSS8.1AI score0.04465EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:53 a.m.10 views

zimaos-cve-2026-28286-arbitrary-file-write

🚨 CVE-2026-28286 — ZimaOS 任意文件写入 从 API 配置错误 → 任意文件写入 → 潜在的系统沦陷 ⚡ 快速摘要 端点: /v21/files/file 问题: 缺少路径验证 影响: 可在预期目录之外进行任意文件写入 严重性: 🔴 严重 🧪 快速开始 root@kitploit: git clone https://github.com/Rushi9/zimaos-cve-2026-28286-arbitrary-file-write.git cd zimaos-cve-2026-28286-arbitrary-file-write pip install -r...

9.9CVSS5.9AI score0.0041EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 12:52 a.m.7 views

CVE-2026-30952-PoC

CVE-2026-30952: LiquidJS Path Traversal PoC This repository contains a Proof of Concept PoC for CVE-2026-30952 , a high-severity path traversal vulnerability discovered in the liquidjs library versions 10.25.0. Authors & Researchers: Moriel Harush Maor Caplan Description The vulnerability allows...

8.7CVSS5.9AI score0.00557EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 12:52 a.m.7 views

CVE-2025-8081-Elementor

CVE-2025-8081 - Elementor Arbitrary File Read Vulnerability A critical arbitrary file read vulnerability in Elementor WordPress plugin that allows authenticated administrators to read any file accessible by the web server, including sensitive configuration files containing database credentials. 📋...

4.9CVSS5.9AI score0.00508EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 12:52 a.m.10 views

CVE-2024-54910

CVE-2024-54910 https://vulners.com/cve/CVE-2024-54910 This document explores a vulnerability that allows arbitrary file writes, leading to privilege escalation on a Windows System that has Hasleo Backup Suite Free = 4.9.4 installed. It demonstrates how backup recovery operations, combined with...

4.7CVSS5.9AI score0.00407EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:51 a.m.8 views

POC-CVE-2026-1357

CVE-2026-1357 WPvivid Backup & Migration RCE PoC Discovered by: Lucas Montes NiRoX Vulnerability: Unauthenticated Arbitrary File Upload leading to Remote Code Execution RCE CVE ID: CVE-2026-1357 CVSS: Critical9.8 Status: Patched in version 0.9.124 Overview This repository contains the analysis an...

9.8CVSS8.4AI score0.32714EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/10 12:45 a.m.9 views

CVE-2026-3844

CVE-2026-3844 Breeze Cache ≤ 2.4.4 - Unauthenticated Arbitrary File Upload ⚠️ Disclaimer root@kitploit: THIS TOOL IS PROVIDED FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY. Unauthorized access to computer systems is illegal. Use this tool only on systems you own or have explicit permission t...

9.8CVSS8.2AI score0.27701EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/10 12:44 a.m.9 views

CVE-2026-1405

CVE-2026-1405 Slider Future = 1.0.5 - Unauthenticated Arbitrary File Upload 🚀 CVE-2026-1405.py — Slider Future Mass Exploit Tool 🩸 Vulnerability Overview Component: Slider Future WordPress plugin Affected Versions: ≤ 1.0.5 Vulnerability: Unauthenticated Arbitrary File Upload CVE: CVE-2026-1405 CV...

9.8CVSS6AI score0.03177EPSS
SaveExploits2
EUVD
EUVD
added 2026/09/10 12:30 a.m.6 views

EUVD-2026-75175

In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...

7.7CVSS0.00393EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 12:27 a.m.9 views

rails-forensics-CVE-2026-66066

rails-forensics-CVE-2026-66066 Tooling and method for answering two questions about a Rails application and CVE-2026-66066, the Active Storage and libvips arbitrary file read known as KindaRails2Shell: 1. Was I vulnerable, and for how long? 2. Was I exploited, and if so, what left the building? T...

9.5CVSS8.4AI score0.27861EPSS
SaveExploits10References1
Kitploit
Kitploit
added 2026/09/10 12:07 a.m.10 views

CVE-2026-1107

CVE-2026-1107 Nuclei Template Nuclei template for detecting CVE-2026-1107 in EyouCMS. The vulnerability allows unauthenticated attackers to perform Path Traversal/Arbitrary File Read via the checkuserinfo function in Diyajax.php. Vulnerability Details CVE ID: CVE-2026-1107 Target: EyouCMS 1.7.1...

9.8CVSS6.7AI score0.00498EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.7 views

PT-2026-89725

A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with pat...

9.8CVSS0.01318EPSS
SaveExploits1References9
Tenable Nessus
Tenable Nessus
added 2026/09/10 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-84828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in PCS Pacemaker Configuration System. A local attacker with membership in the 'haclient' group can exploit the 'pcs host auth --token' command...

6.5CVSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.6 views

PT-2026-89721

In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the LightningApp when running on a Windows host. The vulnerability occurs at the /api/v1/upload file/ endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to...

9.1CVSS0.01103EPSS
SaveExploits1References7
Rows per page
Query Builder