Lucene search
+L

35016 matches found

Kitploit
Kitploit
added 2026/09/13 12:22 p.m.22 views

jsql-injection

Description jSQL Injection is a lightweight application used to find database information from a server. It's free , open source and cross-platform for Windows, Linux and Mac, and it works with Java from version 21 to 25. jSQL Injection is also part of the official penetration testing distributio...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 11:55 a.m.5 views

bmc_bladelogic

BMC Bladelogic RSCD remote exploits for Linux and Windows Change passwords, List users and Remote code execution Exploiting vulnerabilities in BMC BladeLogic RSCD agent CVE-2016-1542 BMC-2015-0010 CVE-2016-1543 BMC-2015-0011 CVE-2016-5063 Published on exploit-db BMCrexec.py...

7.5CVSS6.8AI score0.74618EPSS
SaveExploits14References2
Kitploit
Kitploit
added 2026/09/13 11:27 a.m.45 views

clusterfuzzlite

ClusterFuzzLite ClusterFuzzLite is a continuous fuzzing solution that runs as part of Continuous Integration CI workflows to find vulnerabilities faster than ever before. With just a few lines of code, GitHub users can integrate ClusterFuzzLite into their workflow and fuzz pull requests to catch...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 8:53 a.m.9 views

CVE-2024-57429

CVE-2024-57429 A cross-site request forgery CSRF vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated admin into submitting an unauthorized request. Impact: Exploitation of this CSRF...

5.4CVSS6.5AI score0.00284EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 8:13 a.m.5 views

CVE-2025-4796

CVE-2025-4796 eventin and update the speaker email to an email they control. then the attacker can use wordpress password reset to take over the admin account. requirements: python 3.8 or higher requests install requests: pip install requests usage run the script and enter required values when...

8.8CVSS5.8AI score0.00572EPSS
SaveExploits3
NVD
NVD
added 2026/09/13 6:16 a.m.8 views

CVE-2026-88912

The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.12 does not check ownership before changing the privacy level of an activity and its attached media, relying only on a nonce shared with every logged-in user, allowing users with a subscriber-level account or above to...

4.2CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 6:09 a.m.4 views

PrivacyNet

PrivacyNet: Privacy Network PrivacyNet is an anonymization tool that configures iptables and Tor to route all services, traffic and DNS through the Tor network. This tool allows users to route internet traffic through Tor and hide their real IP address. Features Installing and removing iptables...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 5:37 a.m.5 views

CVE-2020-1472

CVE-2020-1472 POC Requires the latest impacket from GitHub with added netlogon structures. Do note that by default this changes the password of the domain controller account. Yes this allows you to DCSync, but it also breaks communication with other domain controllers, so be careful with this! Li...

10CVSS7.5AI score0.99389EPSS
SaveExploits76References1
Kitploit
Kitploit
added 2026/09/13 5:15 a.m.10 views

fingerprint

fingerprint Monitoring Registry and File Changes in Windows - forensic analytics for windows registry and files "fingerprint" records the state of a windows system, in terms of files and registry. Such fingerprints can be compared to find all changed data. The data can be narrowed with procmon...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:12 a.m.8 views

ResetNightmare

ResetNightmare Proof-of-concept POC tool for ResetNightmare CVE-2026-27912. ResetNightmare is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched...

8CVSS7.6AI score0.00409EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 5:10 a.m.11 views

CVE-2025-4601

CVE-2025-4601 - WordPress RealHomes Theme = 4.4.0 - Privilege Escalation 🔥 Vulnerability Summary The WordPress theme RealHomes versions = 4.4.0 is vulnerable to a privilege escalation vulnerability. This allows authenticated users with low privileges such as subscribers to escalate their roles to...

8.8CVSS7.9AI score0.06951EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:07 a.m.5 views

CVE-2025-2304-POC

CVE-2025-2304-POC PoC for CVE-2025-2304 — Camaleon CMS 2.9.0 privilege escalation via mass assignment on the password change endpoint. Vulnerability The /admin/users/:id/updatedajax endpoint does not filter the role parameter before passing it to the model update, allowing any authenticated user ...

9.4CVSS6AI score0.00605EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/13 5:03 a.m.7 views

CVE-2023-46449

CVE-2023-46449 Control de Acceso Incorrecto ENLACE DEL VIDEO POC https://www.youtube.com/watch?v=H5QnsOKjs3s Sourcecodester Free and Open Source inventory management system v1.0 es vulnerable a Control de Acceso Incorrecto. Un usuario arbitrario puede cambiar la contraseña de otro usuario y tomar...

8.8CVSS7.8AI score0.00756EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 4:56 a.m.18 views

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:39 a.m.4 views

CVE-2024-48887-Exploit

CVE-2024-48887-Cambio de Contraseña No Verificado CWE-620 Resumen Una vulnerabilidad de cambio de contraseña no verificado en la interfaz gráfica de Fortinet FortiSwitch que permite a un atacante remoto no autenticado cambiar contraseñas de administrador mediante una solicitud especialmente...

9.8CVSS8.4AI score0.14908EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 4:37 a.m.57 views

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 3:15 a.m.8 views

fcn-

fcn free connect your private network from anywhere 1. What is fcn fcnfree connect is a foolproof one-click tool for accessing private networks, consisting of the server side and the client side fcn uses fcn public data servers and data encryption technology to virtually connect user clients to...

6.2AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 2:33 a.m.4 views

CVE-2022-27434

CVE-2022-27434 Se descubrió que UNIT4 TETA Mobile Edition 29HF13 contiene una vulnerabilidad de inyección SQL a través del parámetro ProfileName en la página errorReporting. La vulnerabilidad existe en la página de error generada por la aplicación en este caso: al cambiar la contraseña. Agregar u...

9.8CVSS8.2AI score0.01382EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 2:26 a.m.69 views

huntr-com-bug-bounties-collector

huntr.com bugs collector New bug bountyvulnerabilities collector Requirements Chrome with GUI If you encounter trouble with script execution, check the status of VMs GPU features, if available. Chrome WebDriver Preview root@kitploit: python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File...

9.4CVSS7.7AI score0.00959EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.30 views

WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation

Privilege escalation vulnerability exists in the Frontend Login and Registration Blocks plugin for WordPress versions = 1.0.7. An unauthenticated attacker can exploit the AJAX endpoint flrblocksusersettingshandleajaxcallback to change the administrator's email address. Subsequently, the attacker...

9.8CVSS8AI score0.06937EPSS
SaveExploits4References5
Rows per page
Query Builder