Lucene search
+L

522638 matches found

Kitploit
Kitploit
added 2026/09/17 1:05 a.m.10 views

CVE-2024-6387-poc-1

CVE-2024-6387 regreSSHion in OpenSSH Description CVE-2024-6387, nicknamed "regreSSHion," is a critical vulnerability in OpenSSH that allows unauthenticated remote attackers to execute code with root privileges on vulnerable Linux systems. This vulnerability arises from a race condition in the...

8.1CVSS7.8AI score0.99506EPSS
SaveExploits71
Kitploit
Kitploit
added 2026/09/17 1:05 a.m.12 views

cve-2026-21440-writeup-poc

cve-2026-21440 path traversal to arbitrary file write in @adonisjs/bodyparser overview a critical path traversal vulnerability exists in the @adonisjs/bodyparser package that allows remote attackers to write arbitrary files outside the intended upload directory. when the multipartfile.move functi...

9.2CVSS8.7AI score0.01049EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/17 1:05 a.m.7 views

hook

amalmurali47/hook このリポジトリは、git clone 操作中に RCE を引き起こす Git の脆弱性 CVE-2024-32002 を悪用する PoC の一部です。このリポジトリには、エクスプロイトで使用される悪意のあるフックが含まれています。 概要 詳細な手順とエクスプロイトの仕組みについては、gitrce リポジトリ またはブログ記事 https://amalmurali.me/posts/git-rce を参照してください。 免責事項...

9CVSS8.1AI score0.29234EPSS
SaveExploits32References2
Kitploit
Kitploit
added 2026/09/17 1:05 a.m.10 views

log4shell

Log4Shell This project is a demonstration of how the log4shell security vulnerability works. This vulnerability is described in CVE-2021-44228. The project is intended for educational purposes only. It should only be used on your own system and solely for experimental purposes. Any execution is...

10CVSS7.8AI score0.99999EPSS
SaveExploits371
Kitploit
Kitploit
added 2026/09/17 1:04 a.m.11 views

S2-062

S2-062 CVE-2021-31805/s2-062 Batch Scanning and Exploitation Please comply with laws and regulations; unauthorized attacks on website systems are prohibited. Usage Batch Scan Mode root@kitploit: python3 CVE-2021-31805.py -m scan -f 123.txt Command Execution Mode root@kitploit: python3...

9.8CVSS8.2AI score0.85433EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/17 1:04 a.m.10 views

CVE-2021-44529

CVE-2021-44529 A code injection vulnerability in CVE-2021-44529 Ivanti EPM Cloud Services Appliance CSA allows unauthenticated users to execute arbitrary code with limited privileges nobody...

9.8CVSS9AI score0.99105EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/17 1:04 a.m.9 views

go-get-rce

This repository does not have a README...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 1:04 a.m.9 views

CVE-2026-1731

CVE-2026-1731 Blind RCE PoC Effected Versions: Privileged Remote Access : = 24.3.4 Remote Support : = 25.3.1 For further information I recommend you read the analysis by attackerkb.com. How to Build You will need to following tools to build this PoC: Git, rust 1. Clone my repository root@kitploit...

9.9CVSS8.5AI score0.895EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/17 1:04 a.m.10 views

CVE-2021-44529

CVE-2021-44529 Vendor Homepage: https://www.ivanti.com/ Software Link: https://forums.ivanti.com/s/article/Customer-Update-Cloud-Service-Appliance-4-6 Version: CSA 4.6 4.5 - EOF Aug 2021 Execute root@kitploit: python3 exploit.py Example root@kitploit: python3 exploit.py 'https://x.x.x.x' 'ls'...

9.8CVSS8.7AI score0.99105EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/17 1:04 a.m.9 views

CVE-2026-1731

BeyondTrust CVE-2026-1731 Scanner Professional Python scanner for detecting BeyondTrust Remote Support / Privileged Remote Access exposure. Developer: issam junior Telegram: https://t.me/arabhackerzgroup CVE-2026-1731 — BeyondTrust Remote Code Execution Vulnerability CVE-2026-1731 is a critical...

9.9CVSS9.2AI score0.895EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/17 1:04 a.m.9 views

ICS-MoxieManager-FileUpload-PoC

ICS-MoxieManager-RCE-CVE-2026-30-03 CVE-2026-30-03 9.8 Critical Possible RCE Jenzabar ICS + MoxieManager proof https://www.youtube.com/watch?v=lcfUL6Xx3f4&feature=youtu.be CVE CVSS Impact Affected CVE-2026-30-03 9.8 Critical Possible RCE Jenzabar ICS + MoxieManager A vulnerability in the...

6.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 1:04 a.m.10 views

CVE-2026-1457

CVE-2026-1457: TP-Link VIGI C385 Authenticated Remote Code Execution Overview CVE-2026-1457 is an authenticated buffer overflow vulnerability in the web API of TP-Link VIGI C385 V1. This vulnerability allows authenticated attackers to perform remote code execution RCE. CVSS v4.0 Score: 8.5 High...

8.8CVSS7.6AI score0.06568EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/17 1:04 a.m.8 views

CVE-2024-25291

DeskFiler RCE A Proof-Of-Concept for CVE-2024-25291 vulnerability. deskfiler - 1.2.3 allows Electron webview in application, with resultant remote code In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file that...

9.8CVSS6.2AI score0.01598EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/17 1:04 a.m.11 views

CVE-2026-3844

CVE-2026-3844 — Breeze Cache RCE Unauthenticated Arbitrary File Upload → Remote Code Execution...

9.8CVSS8.5AI score0.27701EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/17 1:04 a.m.9 views

cve-2026-21962

CVE-2026-21962 — 因 URI 规范化导致的路径遍历提权 / 远程代码执行 发现者: gregk4sec https://github.com/gregk4sec/cve 发现日期: 2025-09-24 受影响厂商: Oracle 受影响产品: Oracle OHS / WebLogic Server 的 Apache HTTP Server 代理插件、WebLogic Server 的 IIS 代理插件 严重性: 严重 / CVSS 10.0 CVSSv3.1 基础评分: 10.0 CVSS 向量:...

10CVSS8.3AI score0.42475EPSS
SaveExploits6References4
Kitploit
Kitploit
added 2026/09/17 1:04 a.m.12 views

CVE-2025-64512---pdfminer.six-Remote-Code-Execution-RCE-

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE -orange WARNING – EDUCATIONAL USE ONLY This proof-of-concept is for authorized security testing and educational purposes only. Use only on systems you own or have explicit written permission to test. The author is not responsible for any...

8.6CVSS7.4AI score0.00312EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/17 1:03 a.m.7 views

CVE-2025-1094-PoC-Postgre-SQLi

Analysis of CVE-2025-1094 and Emulation Setup This detailed examination, conducted on March 14, 2025, explores CVE-2025-1094, a hypothetical high-severity SQL injection vulnerability in PostgreSQL, based on the provided emulation setup and proof-of-concept PoC execution. The analysis covers the...

8.1CVSS8.2AI score0.9003EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/17 1:03 a.m.7 views

CVE-2021-44228

Overview This repository contains OpenIOC rules to facilitate hunting for indicators of compromise related to the Apache Log4j 2 remote code execution vulnerability CVE-2021-44228. These rules are considered hunting rules and as such detection efficacy will vary by organization. With...

10CVSS8AI score0.99999EPSS
SaveExploits371
Kitploit
Kitploit
added 2026/09/17 1:03 a.m.9 views

CVE-2026-33725

CVE-2026-33725 A proof-of-concept exploit for CVE-2026-33725, a Remote Code Execution and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import in Metabase. Vulnerable Versions Metabase Enterprise ≥ v1.47 and v1.54.22 Metabase Enterprise ≥ v1.54.0 and v1.54.22 Metabase...

7.2CVSS7.4AI score0.00763EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/17 1:03 a.m.11 views

CVE-2026-20841-PoC

CVE-2026-20841-PoC Proof of Concept for CVE-2026-20841 CVE-2026-20841 – Details CVE-2026-20841 is a vulnerability affecting Microsoft Notepad, where specially crafted input can trigger unintended command execution. The issue occurs due to improper handling of certain file content or execution...

7.8CVSS8.4AI score0.11848EPSS
SaveExploits9
Rows per page
Query Builder