Lucene search
+L

1133712 matches found

Kitploit
Kitploit
added 2026/08/31 6:10 a.m.7 views

CVE-2018-20250

exp for Extracting Code Execution From Winrar poc by Ridter how to use ? you just need to install python 3.7, and prepare a evil file you want to run, set the values you want, this exp script will generate the evil archive file automatically! 1. set the values you want root@kitploit: ... ... The...

7.8CVSS6.9AI score0.96274EPSS
SaveExploits14References1
Kitploit
Kitploit
added 2026/08/31 6:09 a.m.4 views

wordpress-rce-vapt-cve-2020-25213

WordPress RCE Exploitation & Mitigation CVE-2020-25213 📌 Project Overview This project was developed as part of the IE4012 – Offensive Hacking Tactics & Strategies module. It demonstrates a full cybersecurity attack lifecycle in a controlled lab environment, including: Social engineering attack...

10CVSS7.4AI score0.97328EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/08/31 6:09 a.m.5 views

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Detected This repository documents my investigation of a LetsDefend alert involving a Windows OLE zero-click remote code execution exploit tied to CVE-2025-21298. The goal is to show the reasoning behind the conclusion, from email triage ...

9.8CVSS7.7AI score0.80912EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/31 6:08 a.m.4 views

CVE-2020-27955-LFS

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...

10CVSS7.2AI score0.82715EPSS
SaveExploits14References1
Kitploit
Kitploit
added 2026/08/31 6:06 a.m.4 views

EXPLOIT-CVE-2026-8832-

EXPLOIT-CVE-2026-8832 An exploitation tool to test for Remote Code Execution RCE vulnerabilities in the WordPress plugin WPCode Lite Insert Headers and Footers v2.3.5. This vulnerability stems from registering the Custom Post Type CPT wpcode without defining a custom capabilitytype. This oversigh...

8.8CVSS6.2AI score0.01862EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 6:04 a.m.3 views

mi-laboratorio-log4shell

🚀 Automated Log4Shell CVE-2021-44228 Play & Plug Lab An automated, single-command security research laboratory designed to demonstrate and audit the Log4Shell CVE-2021-44228 Remote Code Execution RCE vulnerability. This project consolidates all necessary components vulnerable application, malicio...

10CVSS7.3AI score0.99999EPSS
SaveExploits366
Kitploit
Kitploit
added 2026/08/31 6:04 a.m.6 views

eternalblue-ms17-010-research

💀 EternalBlue MS17-010 Exploitation Research Controlled reproduction of CVE-2017-0144 — the SMB vulnerability behind the WannaCry ransomware outbreak ⚠️ Disclaimer: This research was conducted in a fully isolated, controlled lab environment for academic and educational purposes only. No production...

9.3CVSS7.3AI score0.9923EPSS
SaveExploits64
Kitploit
Kitploit
added 2026/08/31 6:04 a.m.6 views

CVE-2023-41892

CVE-2023-41892 A Craft CMS vulnerability that allows Remote Code Execution RCE...

10CVSS7.3AI score0.92555EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/08/31 6:03 a.m.4 views

cve-2025-66478_rce_vulnerable

Modern Blog with shadcn/ui A modern and elegant blog built with Next.js 16, React 19, shadcn/ui and Tailwind CSS. IMPORTANT: Next JS VULNERABLE project created solely for educational, testing and exploitation purposes, NOT RECOMMENDED FOR PRODUCTION DEPLOYMENT, ONLY FOR LOCAL OR CONTROLLED...

7AI score
SaveExploits112
Kitploit
Kitploit
added 2026/08/31 6:03 a.m.4 views

wongpress

Real Case Exploitation of Buffer Overflow & Format String Vulnerabilities to Gain RCE in Ubuntu Server Related CVEs CVE-2024-2961 : Buffer overflow vulnerability in Glibc iconv function CVE-2024-29510 : Format string vulnerability in Ghostscript PostScript language interpreter 1. Problem...

7.3CVSS6.9AI score0.8833EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/08/31 6:03 a.m.4 views

CVE-2026-3844

CVE-2026-3844 PoC exploit for CVE-2026-3844, a critical unauthenticated file upload vulnerability in the WordPress Breeze plugin leading to RCE...

9.8CVSS7.4AI score0.27701EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/08/31 6:02 a.m.2 views

CVE-2024-55503

CVE-2024-55503 Termius App MacOS dylib Command injection Description An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLDINSERTLIBRARIES component. using dylib root@kitploit: DYLDINSERTLIBRARIES=exploitcombined.dylib...

3.3CVSS6.3AI score0.00419EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 6:02 a.m.3 views

CVE-2024-1813-POC

CVE-2024-1813 - Simple Job Board ≤ 2.11.0 WordPress - Unauthenticated PHP Object Injection 🎥 Proof-of-Concept demo End-to-end: a guest stores a serialized PHP object through the public application form, the admin opens the applicants list, and the gadget chain drops a webshell. Unauthenticated PH...

9.8CVSS7.5AI score0.01219EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 6:01 a.m.3 views

From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack

From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack It shook the world in 2017 and has evolved into today’s CVE‑2025‑2776. Microsoft still relies on SMBv1, this article will explain how attackers have tweaked the chain from a simple DLL to a full reverse‑shell stack, and what that...

9.8CVSS7.9AI score0.64397EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 6:01 a.m.3 views

CVE-2020-0618_DETECTION

CVE-2020-0618 - Microsoft SQL Server Reporting Services SSRS RCE Detection PoC 📜 Description This is a simple PoC to detect CVE-2020-0618 , a Remote Code Execution vulnerability affecting Microsoft SQL Server Reporting Services SSRS. The vulnerability exists due to improper path validation in the...

9.8CVSS7.3AI score0.99022EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/08/31 6:00 a.m.3 views

PoC-CVE-2022-22965-Spring4Shell

PoC — CVE-2022-22965 Spring4Shell Disclaimer: This repository is intended for educational and research purposes only. All exploit scripts must be used exclusively against systems you own or have explicit written permission to test. The author is not responsible for any misuse or damage caused by...

9.8CVSS7.2AI score0.99638EPSS
SaveExploits105
Kitploit
Kitploit
added 2026/08/31 6:00 a.m.5 views

CVE-2026-32662

CVE-2026-32662: Active Debug Code in Production Advisory Field| Value ---|--- CVE| CVE-2026-32662 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 5.3 Medium Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CWE| CWE-489 Active Debug Code Researcher| Michael Groberman — Gr0m Published| 2026-04-02 Updat...

6.9CVSS6AI score0.00316EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 5:58 a.m.4 views

CVE-2026-3300

CVE-2026-3300 - Wordpress ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a...

9.8CVSS6.1AI score0.39159EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 5:57 a.m.5 views

cve-2010-2075-analysis

CVE-2010-2075 – UnrealIRCd Backdoor Remote Code Execution Overview This repository documents the analysis and exploitation of CVE-2010-2075, a backdoor vulnerability affecting UnrealIRCd 3.2.8.1. The vulnerability was reproduced in a controlled laboratory environment using Metasploitable 2 as the...

7.5CVSS5.9AI score0.83534EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/08/31 5:56 a.m.5 views

CVE-2023-51214

Suggested description Cross Site Scripting vulnerability in Implementing an Activity Log in Your Web App Using PHP v.1 allows a remote attacker to execute arbitrary code via a crafted payload to the URL. Vulnerability Type Cross Site Scripting XSS Vendor of Product sourcecodester.com Affected...

6.2AI score
SaveExploits0
Rows per page
Query Builder