Lucene search
+L

1133721 matches found

Kitploit
Kitploit
added 2026/08/31 11:32 a.m.2 views

CVE-2025-55182_full_exploit

CVE-2025-55182fullexploit this repo have CVE-2025-55182 full exploit with RCE Step to run the exploit 1. Install Dependencies pip install -r requirements.txt 2. Run exploit python3 exploit.py targetlist.txt "command"...

10CVSS7AI score0.99802EPSS
SaveExploits388
Kitploit
Kitploit
added 2026/08/31 11:32 a.m.5 views

CVE-2022-29464

CVE-2022-29464 WSO2 RCE Usage : root@kitploit: python3 exploit.py https://host:9443/ ArbitraryShellName.jsp...

10CVSS7.3AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/08/31 11:31 a.m.4 views

vulnerable-next-js-poc

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ SECURITY RESEARCH ONLY This repository contains a proof of concept for CVE-2025-55182 , a critical remote code execution vulnerability in React Server Components. This is for authorized security testing and research purposes only. Vulnerability...

10CVSS7.5AI score0.99802EPSS
SaveExploits388
Kitploit
Kitploit
added 2026/08/31 11:27 a.m.5 views

CVE-2017-9779

Ejecución automática de Payload desde Windows mediante la ruta de Usuarios :: ¿Qué es Cmder? Cmder es un paquete de software creado por pura frustración ante la ausencia de buenos emuladores de consola en Windows. Está basado en software increíble, y sazonado con la combinación de colores Monokai...

7.8CVSS7.1AI score0.00577EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 11:26 a.m.2 views

CVE-2025-56513-NiceHash-Update-Chain-Compromise

CVE-2025-56513 Critical Supply-Chain Vulnerability in NiceHash QuickMiner Update Mechanism Author: Prince T Philip Role: Independent Security Researcher Severity: CRITICAL — CVSS 9.8 Impact: Remote Code Execution / Supply-Chain Compromise Status: Publicly Disclosed & Assigned CVE-2025-56513...

9.8CVSS6.5AI score0.00448EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 11:26 a.m.2 views

Next.js-RCE-Scanner---CVE-2025-55182-CVE-2025-66478

🔍 Next.js RCE Scanner - CVE-2025-55182 & CVE-2025-66478 A powerful and easy-to-use scanner for detecting critical RCE vulnerabilities in Next.js applications 🎯 Overview An advanced vulnerability scanner for detecting CVE-2025-55182 and CVE-2025-66478 - critical Remote Code Execution RCE...

10CVSS7AI score0.99802EPSS
SaveExploits402References1
RedhatCVE
RedhatCVE
added 2026/08/31 11:25 a.m.6 views

CVE-2026-42563

A flaw was found in Dulwich, a pure-Python implementation of Git file formats and protocols. An attacker can exploit this vulnerability by crafting malicious file paths within an untrusted Git branch. When a victim merges this branch, the ProcessMergeDriver component incorrectly substitutes the...

8CVSS7.4AI score0.00555EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/31 11:25 a.m.7 views

CVE-2024-25600

MODIFIED CVE-2024-25600 original - https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT WordPress Bricks Builder RCE Exploit A Python exploit for CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution vulnerability. Description This tool exploits a critical vulnerability in WordPress...

10CVSS7.9AI score0.88234EPSS
SaveExploits19References1
Kitploit
Kitploit
added 2026/08/31 11:25 a.m.3 views

POC-CVE-2025-55182

CVE-2025-55182 Advanced Scanner A full-featured exploitation utility for CVE-2025-55182 — Remote Code Execution via React Server Components in Next.js. The scanner automatically crafts the multipart payload and abuses process.mainModule.require'childprocess'.execSync to achieve arbitrary OS comma...

10CVSS7.2AI score0.99802EPSS
SaveExploits388
Kitploit
Kitploit
added 2026/08/31 11:17 a.m.6 views

CVE-2017-9805

CVE-2017-9805: Apache Struts 2 S2-052 RCE Analizi Bu depo, Apache Struts 2 S2-052 üzerindeki XStream deserialization zafiyetine yönelik teknik detayları ve PoC Proof of Concept çalışmasını içermektedir. 📌 Zafiyet Bilgileri CVE Kodu: CVE-2017-9805 Zafiyet Türü: Uzaktan Kod Çalıştırma RCE Risk...

8.1CVSS7AI score0.99396EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/08/31 11:16 a.m.3 views

Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725

CVE-2019-2725 – Oracle WebLogic Unauthenticated Remote Code Execution Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. An easily exploitable vulnerability allows an...

9.8CVSS7.6AI score0.99964EPSS
SaveExploits36
Kitploit
Kitploit
added 2026/08/31 11:14 a.m.5 views

CVE-2019-9978

CVE-2019-9978 WordPress Plugin Social Warfare RCE Vulnerability 3.5.3 🐞 Minimal simulated from vulnerable plugin and exploit it 🥰 Installation Of Vulnerable Plugin Install dependencies: root@kitploit: docker-compose build Start vulnerable and attacker server containers root@kitploit: docker-compo...

6.1CVSS6.8AI score0.72946EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/08/31 11:13 a.m.3 views

CVE-2022-26134

CVE-2022-26134 - Confluence OGNL injection vulnerability Script Usage Install Python libraries pip install -r requirements.txt Vulnerability Verification python3 CVE-2022-26134check.py -u url -c whoami Batch Scanning python3 CVE-2022-26134check.py -f url.txt -c whoami Affected Versions Confluence...

9.8CVSS7.3AI score0.99999EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/08/31 11:11 a.m.4 views

CVE-2022-29078

CVE-2022-29078 Simple PoC for CVE-2022-29078 vuln ejs 3.1.6 Usage root@kitploit: git clone https://github.com/chuckdu21/CVE-2022-29078.git cd CVE-2022-29078 python3 CVE-2022-29078.py A prompt will appear to execute commands root@kitploit: $ id uid=0root gid=0root groupes=0root...

9.8CVSS6.8AI score0.32808EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/31 11:10 a.m.4 views

CVE-2025-34227_Nagios-XI-Command-Injection-Configuration-Wizard

CVE-2025-34227 Nagios XI Authenticated Command Injection in Configuration Wizard Simple proof of concept repository for CVE-2025-34227, an authenticated command injection in Nagios XI - Configuration Wizard Full writeup here: https://theyhack.me/CVE-2025-34227-Nagios-XI-Wizard-Command-Injection/...

8.8CVSS5.9AI score0.24251EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 11:08 a.m.4 views

CVE-2014-0196

See https://vulners.com/cve/CVE-2014-0196...

6.9CVSS6.3AI score0.22475EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/31 11:04 a.m.4 views

CVE-2025-55182-Attack-Analysis

CVE-2025-55182 Attack Analysis: React Server Components RCE Real-world attack analysis on a production Next.js application 📋 Table of Contents Executive Summary Vulnerability Overview Attack Timeline Technical Analysis Malware Analysis Indicators of Compromise IOCs Mitigation & Response Lessons...

10CVSS7.4AI score0.99802EPSS
SaveExploits388References1
Kitploit
Kitploit
added 2026/08/31 11:01 a.m.6 views

CVE-2024-57778

CVE-2024-57778 Description : An issue in Orbe ONetView Roteador Onet-1200 allows a remote attacker to escalate privileges via the servers response from status code 500 to status code 200. Versions : Discovered in Orbe ONetView Roteador Onet-1200 Orbe 1680210096, but applicable to all versions up...

8.8CVSS6AI score0.00538EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 10:59 a.m.6 views

CVE-2026-38192

pluck-CMS-4.7.20-code-injection-vulnerability In admin.php, the moduleaddtosite function iterates through the entire $POST array, splits the user-controllable parameter names using explode'|', ... and directly concatenates them into data/settings/themes//moduleconf.php. This file will subsequentl...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 10:58 a.m.5 views

unicorn_pe

Unicorn PE Unicorn PE is an unicorn based instrumentation project/framework designed to emulate code execution for windows PE files, especially packed ones. This project is archived and no longer maintained. sogen is recommended as a successor. Feature Dump PE image from emu-memory into file, fix...

6.1AI score
SaveExploits0References4
Rows per page
Query Builder