Lucene search
+L

523328 matches found

Kitploit
Kitploit
added 2026/09/20 12:53 p.m.7 views

rpc-rce.py

rpc.py RCE Exploit CVE-2022-35411 This is an updated and improved exploit for CVE-2022-35411 , targeting vulnerable versions of rpc.py Original exploit by : Elias Hohl Enhanced by : x7331 for usability, portability, and automation Vulnerability Summary The vulnerability lies in rpc.py's unsafe...

9.8CVSS9AI score0.46139EPSS
SaveExploits7References3
Kitploit
Kitploit
added 2026/09/20 12:52 p.m.9 views

CVE-2022-42889-POC

CVE-2022-42889-POC Proof of Concept for the Apache commons-text vulnerability CVE-2022-42889. What's the Issue : Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefi...

9.8CVSS8.4AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/20 12:52 p.m.9 views

CVE-2017-14980_syncbreeze_10.0.28_bof

Exploit - CVE-2017-14980 - Sync Breeze Enterprise v10.0.28 This repository contains a proof-of-concept buffer overflow exploit BOF for Sync Breeze Enterprise version 10.0.28, targeting the vulnerability identified as CVE-2017-14980. Description The vulnerability exists due to improper input...

9.8CVSS8.9AI score0.22483EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/20 12:52 p.m.10 views

vbox_cve_2017_10235

CVE-2017-10235: VirtualBox E1000 device buffer overflow Introduction The following document details a bug found in VirtualBox v5.1.22 now fixed in v5.1.24, in the guest device emulation component DevE1000 Intel 82540EM Ethernet Controller Emulation, in the function e1kFallbackAddToFrame, which...

6.7CVSS7.6AI score0.00833EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/20 12:50 p.m.9 views

cve-2026-67363-67364

Balbooa Forms 预认证 RCE + 支付篡改(CVE-2026-67364 / CVE-2026-67363) 针对 Balbooa Forms(combaforms)Joomla 组件两个预认证漏洞的 PoC 和检测模板,已在 2.4.3.2 版本中修复。 CVE-2026-67364 — 预认证 PHP 代码注入 - RCE(CVSS 9.8) CVE-2026-67363 — 预认证支付金额篡改(Stripe / Authorize.net) 由 Lulztigre 发现,通过 Joomla 安全打击小组(JSST)协调披露,发布于...

10CVSS6AI score0.00317EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 12:49 p.m.8 views

CVE-2024-53677

CVE-2024-53677: Apache Struts path traversal to RCE vulnerability A critical security vulnerability, identified as CVE-2024-53677 was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code execution...

9.8CVSS8.8AI score0.70143EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/20 12:47 p.m.8 views

cve-2022-26809

CVE-2022-26809 Detects attempts and successful exploitation of CVE-2022-26809, a remote code execution vulnerability over DCE/RPC. This package is described in detail in this Corelight blogpost. This package generates the following notices: CVE202226809::ExploitAttempt, and...

10CVSS8.8AI score0.90961EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/20 12:45 p.m.9 views

xzbot

xzbot 对 xz 后门(CVE-2024-3094)的探索。 包含以下内容: honeypot:用于检测利用尝试的模拟易受攻击服务器 ed448 patch:修补 liblzma.so,以使用我们自己的 ED448 公钥 backdoor format:后门载荷的格式 backdoor demo:在已知 ED448 私钥的前提下触发 RCE 的 CLI honeypot 参见 openssh.patch,这是一个针对 openssh 的简单补丁,它会记录任何公钥 N 匹配后门格式的连接尝试。 root@kitploit: $ git clone...

10CVSS8.8AI score0.85974EPSS
SaveExploits41References5
Kitploit
Kitploit
added 2026/09/20 12:45 p.m.11 views

CVE-2025-4389

CVE-2025-4389 Exploit Details Published : May 16, 2025 Updated : May 17, 2025 Severity : Critical CVSS Score: 9.8 CWE : CWE-434: CWE-434 Unrestricted Upload of File with Dangerous Type Affected Versions : All versions from n/a through 2.6.8.1 Researcher :...

9.8CVSS8.8AI score0.01006EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 12:41 p.m.12 views

nmap-CVE-2022-21907

nmap-CVE-2022-21907 Repository containing nse script for vulnerability CVE-2022-21907. It is a component IIS vulnerability on Windows. It allows remote code execution. The vulnerability affects the kernel module http.sys, which handles most basic IIS operations. After uploading the payload, the...

10CVSS9AI score0.9279EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/20 12:41 p.m.9 views

CVE-2021-30461

CVE-2021-30461 VOIP RCE Technical details https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/ YouTube : https://www.youtube.com/watch?v=9VBI6Lq-Rw Follow us Vulnmachines YouTube Twitter Facebook LinkedIn...

9.8CVSS8.3AI score0.36632EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/20 12:40 p.m.8 views

CVE-2022-26809

CVE description CVE-2022-26809 - weakness in a core Windows component RPC earned a CVSS score of 9.8 not without a reason, as the attack does not require authentication and can be executed remotely over a network, and can result in remote code execution RCE with the privileges of the RPC service,...

10CVSS8.7AI score0.90961EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/20 12:37 p.m.8 views

CVE-2022-24086-RCE

CVE-2022-24086-RCE CVE-2022-24086 RCE Description Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrar...

10CVSS8.8AI score0.99199EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/20 12:37 p.m.12 views

CVE-2022-22963-Exploit

CVE-2022-22963 Exploit This repository contains a Rust-based exploit for the CVE-2022-22963 vulnerability found in Spring Cloud Function versions 3.1.6, 3.2.2, and older unsupported versions. The vulnerability allows remote code execution and access to local resources through a specially crafted...

9.8CVSS8.2AI score0.99938EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/20 12:37 p.m.11 views

NotSecDrv

NotSecDrv - A PoC code for CVE-2018-7249 General Description An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. Two carefully timed calls to IOCTL 0xCA002813 can cause a race...

7CVSS7.3AI score0.02924EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/20 12:35 p.m.8 views

CVE-2025-53770

CVE-2025-53770 SharePoint Description The deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code remotely and compromise the system. Microsoft is aware of active exploitation and is preparing a comprehensive update. Ensure that mitigations...

9.8CVSS8.6AI score0.99998EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/20 12:32 p.m.5 views

F5-Big-IP-CVE-2022-1388

F5-Big-IP-CVE-2022-1388 CVE-2022-1388 F5 Big IP unauth remote code execution PoC Follow us Vulnmachines YouTube Twitter Facebook...

9.8CVSS8.8AI score0.99958EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/20 12:31 p.m.9 views

CVE-2017-8570

Usage: After downloading the script, modify attackip to the IP of Kali, LPORT to the port that msf will listen on, and DIR to any empty directory Give the script 777 permissions root@kitploit: chmod 777 auto Then run the script root@kitploit: ./auto Then find the Invoice.ppsx file in the...

9.3CVSS7.8AI score0.89889EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/20 12:30 p.m.9 views

cve-2024-32002-poc-rce

CVE-2024-32002 RCE POC A POC for CVE-2024-32002 demonstrating Remote Code Execution RCE. See cve-2024-32002-poc-rce for the related submodule repository. What this repo contains A symlink with an arbitraty name that links to the .git directory. A .gitmodules file that defines the malicious...

9CVSS8AI score0.29234EPSS
SaveExploits32References1
Kitploit
Kitploit
added 2026/09/20 12:28 p.m.8 views

CVE-2019-25024

CVE-2019-25024 OpenRepeater ORP / Unauthenticated Command Injection Advisories: MITRE CVE: https://vulners.com/cve/CVE-2019-25024 US NIST: https://nvd.nist.gov/vuln/detail/CVE-2019-25024 Tenable: https://www.tenable.com/cve/CVE-2019-25024 VulDB: https://vuldb.com/?id.170172 Ubuntu:...

10CVSS8.4AI score0.27631EPSS
SaveExploits4
Rows per page
Query Builder