Lucene search
+L

49618 matches found

Kitploit
Kitploit
added 2026/09/08 11:26 p.m.5 views

CVE-2018-16370

CVE-2018-16370 In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a ZIP archive.More details see https://github.com/lazyphp/PESCMS-TEAM/issues/2...

9.8CVSS8.2AI score0.01783EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/08 11:25 p.m.5 views

CVE-2024-23897

CVE-2024-23897 Jenkins RCE Arbitrary File Read CVE-2024-23897 Usage: python poc.py http://127.0.0.1:8888/ /etc/passwd Update: Update to Jenkins 2.442, LTS 2.426.3 Fix: If you can't update to the latest version, disable access to the CLI, this should completely eliminate the possibility of...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits50
Kitploit
Kitploit
added 2026/09/08 11:24 p.m.7 views

CVE-2021-21978

CVE-2021-21978 Exploit script with echo back, a simpler way 0. Vulnerability Information The VMware View Planner Web management interface has an entry for uploading log functionality files, which requires no authentication and the log file path written is user-controllable. By overwriting the...

9.8CVSS8.2AI score0.99005EPSS
SaveExploits9
NVD
NVD
added 2026/09/08 11:17 p.m.6 views

CVE-2026-53581

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.420 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulatin...

9CVSS0.00326EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 11:17 p.m.5 views

CVE-2026-47680

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

5.3CVSS0.00327EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/08 11:13 p.m.5 views

CVE-2024-13869

CVE-2024-13869 Migration,Backup, Staging – WPvivid 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft...

7.2CVSS8.2AI score0.02266EPSS
SaveExploits2References1
CVE
CVE
added 2026/09/08 11:02 p.m.13 views

CVE-2026-53581

OPNsense is a FreeBSD-based firewall and routing platform. A path traversal vulnerability in the NTP configuration module allows an attacker with access to NTP settings to manipulate the GPS or PPS serial port parameter , escaping the intended directory and forcing the system to write user-contro...

9CVSS0.00326EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 10:59 p.m.6 views

ghostcat-verification

Verificación de Ghostcat CVE-2020-1938 Resumen Se ha encontrado un nuevo exploit llamado Ghostcat CVE-2020-1938; consulte los artículos en snyk y tenable para obtener detalles y análisis del exploit en sí. En mi caso, quería verificar qué servidores Tomcat son explotables y, de ser así, cómo se...

9.8CVSS7.5AI score0.9927EPSS
SaveExploits51
Kitploit
Kitploit
added 2026/09/08 10:53 p.m.7 views

CVE-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which allows unauthenticated attackers to gain RCE on WSO2 servers via uploadi...

10CVSS8.3AI score0.99999EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/09/08 10:52 p.m.8 views

CVE-2022-44268-

...

6.5CVSS7.5AI score0.89855EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/08 10:50 p.m.5 views

CVE-2023-29919

Summary: There is an arbitrary read file vulnerability in SolarView Compact 6.00 and below, attackers can bypass authentication to read files through texteditor.php Vendor: SolarView Compact Affected Product: SolarView Compact =ver 6.00 poc: http://example.com/texteditor.php Details: You can fill...

9.8CVSS8.1AI score0.60221EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 10:46 p.m.4 views

CVE-2013-3214

CVE-2013-3214 vTiger 5.4.0 Arbitrary File Upload to Remote Code Execution...

9.8CVSS8.1AI score0.84535EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/08 10:41 p.m.6 views

cve-2019-14220

Summary An unprotected method in a bstutils service in BlueStacks 4.120 and below on Mac and 4.110 and below on Winodws allows a local attacker to read the contents of arbitrary files with system privileges. Description BlueStacks is an Android emulator available for Windows and Mac systems. It...

6.5CVSS6.8AI score0.00906EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 10:38 p.m.6 views

CVE-2024-24919-POC

CVE-2024-24919-POC Read about it - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 The vulnerability allows an unauthenticated remote attacker to read the contents of an arbitrary file located on the affected appliance. Nuclei Template:...

8.6CVSS7.9AI score0.99978EPSS
SaveExploits53References1
Kitploit
Kitploit
added 2026/09/08 10:37 p.m.7 views

cve-2022-41352

cve-2022-41352 generate poc.tar root@kitploit: $ chmod +x cpiopocgen.py $ ./cpiopocgen.py show the middle finger to cpio root@kitploit: $ cd /tmp $ mkdir -p poc/a/b copy poc.tar to /tmp/poc/a/b/ $ cd /tmp/poc/a/b/ $ cpio -i poc.tar $ ls -al ../ total 16 drwxrwxr-x 3 xabino xabino 4096 ott 10 14:5...

9.8CVSS8.5AI score0.95478EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/08 10:36 p.m.7 views

CVE-2025-2539

POC - CVE-2025-2539 File Away Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state, and federal...

7.5CVSS8AI score0.01624EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/08 10:33 p.m.7 views

CVE-2026-52680_exploit

CVE-2026-52680 — Apache Kyuubi REST Batch Path-Traversal Arbitrary File Write Unauthenticated arbitrary file write in Apache Kyuubi's REST API via the multipart batch-submission endpoint. POST /api/v1/batches multipart/form-data writes the resourceFile part to $KYUUBIHOME/work/upload// using the...

9.8CVSS5.9AI score0.00832EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/08 10:30 p.m.8 views

CVE-2024-21545-PoC

CVE-2024-21545-PoC Proxmox VE Arbitrary File Read - Full System Compromise . Not Testeted yet... will test them this week...

8.2CVSS7.7AI score0.00363EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 10:20 p.m.9 views

eLabFTW-1.8.5-EntityController-Arbitrary-File-Upload-RCE

Exploit Title : eLabFTW 1.8.5 'EntityController' Arbitrary File Upload / RCE Date : 5/18/19 Exploit Author : liquidsky Joseph McPeters Vulnerable Software : eLabFTW 1.8.5 Vendor Homepage : https://www.elabftw.net/ Version : 1.8.5 Software Link : https://doc.elabftw.net/ Tested On : Linux / PHP...

9CVSS8.1AI score0.17792EPSS
SaveExploits4References1
NVD
NVD
added 2026/09/08 10:19 p.m.5 views

CVE-2026-86995

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node validated the repository parameter for fetch or pull, but setUpstream wrote a branch..remote value into repository configuration without validating it. A later fetch or pull resolved the remote...

5.3CVSS0.00323EPSS
SaveExploits0References4
Rows per page
Query Builder