Lucene search
+L

543143 matches found

Kitploit
Kitploit
•added 2026/09/24 11:55 a.m.•12 views

CVE-2023-27372-PoC

This is a proof of concept CVE-2023-27372 SPIP RCE vulnerability. It's a deserilzation flaw which exploits the dangerous use of ENV tag during the reset password feature spip.php?page=spippass within /ecrire/balise/formulaire.php Specifically this line: 1. Syntax: python3 exploit.py -u...

9.8CVSS8.4AI score0.99682EPSS
SaveExploits23
Kitploit
Kitploit
•added 2026/09/24 11:55 a.m.•10 views

Blackash-CVE-2025-20393

🛡️ CVE-2025-20393 – Critical Cisco AsyncOS Vulnerability 🔍 Overview CVE‑2025‑20393 is a critical remote code execution RCE vulnerability in Cisco AsyncOS Software , affecting: Cisco Secure Email Gateway physical & virtual Cisco Secure Email and Web Manager physical & virtual ⚠️ Only systems with...

10CVSS8.9AI score0.32392EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/24 11:55 a.m.•9 views

disable-RegisterSpoolerRemoteRpcEndPoint

disable-RegisterSpoolerRemoteRpcEndPoint Workaround for Windows Print Spooler Remote Code Execution VulnerabilityCVE-2021-34527. See: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 Update 2021-07-08: Microsoft released a patch Microsoft already released a patch for this...

9CVSS8.1AI score0.99792EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/24 11:55 a.m.•5 views

Microsoft-Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708

This repository does not have a README...

10CVSS7.8AI score0.99999EPSS
SaveExploits126
Kitploit
Kitploit
•added 2026/09/24 11:54 a.m.•8 views

exploit-CVE-2025-49113

CVE-2025-49113 PoC Repository Overview of CVE-2025-49113 CVE-2025-49113 is a critical vulnerability affecting Roundcube Webmail versions prior to 1.5.10 and 1.6.11. Discovered in 2025, this flaw allows remote code execution RCE through PHP Object Deserialization in the /settings/upload.php...

9.9CVSS8.4AI score0.98897EPSS
SaveExploits29
Kitploit
Kitploit
•added 2026/09/24 11:54 a.m.•10 views

cve-2021-42013

Apache 2.4.50 - Path Traversal or Remote Code Execution CVE-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...

9.8CVSS8.5AI score0.99964EPSS
SaveExploits71
Kitploit
Kitploit
•added 2026/09/24 11:54 a.m.•9 views

AegisJava

AegisJava A specialized tool to detect and mitigate CVE-2025-30749 , a critical Remote Code Execution RCE vulnerability in Oracle Java SE. Vulnerability Details CVE : CVE-2025-30749 Severity : High CVSS 8.1 Affected Components : Java 2D Impact : Unauthenticated Remote Code Execution Usage 1. Run...

8.1CVSS7.7AI score0.01095EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 11:54 a.m.•7 views

CVE-2025-55182

CVE-2025-55182 Toolkit & Lab Educational Only Lightweight Go toolkit plus a Dockerized Next.js lab to explore and triage CVE-2025-55182. For educational and authorized testing only. Features Root-cause writeup, visuals, and lab: see React2ShellDeconstructingaPerfect10RCE.pdf and the attack-path...

10CVSS7.7AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
•added 2026/09/24 11:54 a.m.•12 views

RTSPServer-Code-Execution-Vulnerability

Live Networks LIVE555 streaming media RTSPServer lookForHeader code execution vulnerability CVE-2018-4013 Summary An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library. A specially crafted packet can cause a stack-based buff...

10CVSS8.8AI score0.09667EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/24 11:53 a.m.•13 views

CVE-2023-36844_Juniper_RCE

CVE-2023-36844JuniperRCE A Proof of Concept for chaining the CVEs CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 to achieve Remote Code Execution phpinfo in Juniper JunOS within SRX and EX Series products.Modified from original exploit developed by @watchTowr . Shodan dork :...

9.8CVSS7.8AI score0.9507EPSS
SaveExploits27
Kitploit
Kitploit
•added 2026/09/24 11:53 a.m.•9 views

CVE-2021-2109

CVE-2021-2109 Weblogic Server Remote Code Execution Vulnerability Reproduction and Analysis In January 2021, Oracle released a security update patch, including 329 new security patches in the Oracle product family. This announcement specifically mentioned the Oracle WebLogic Server security...

7.2CVSS7.4AI score0.70447EPSS
SaveExploits7References1
Kitploit
Kitploit
•added 2026/09/24 11:53 a.m.•6 views

React2Shell-CVE-2025-55182

React2Shell CVE-2025-55182 A proof-of-concept exploit demonstrating a remote code execution vulnerability in Next.js applications through prototype pollution in the React server components rendering pipeline. ⚠️ Disclaimer This tool is for educational and authorized testing purposes only...

10CVSS7.8AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
•added 2026/09/24 11:53 a.m.•9 views

CVE-2020-27955

CVE-2020-27955 Thanks https://medium.com/bugbountywriteup/git-lfs-exploit-for-remote-code-execution-cve-2020-27955-e8f4786163c3...

10CVSS8AI score0.82323EPSS
SaveExploits14
Kitploit
Kitploit
•added 2026/09/24 11:53 a.m.•10 views

CVE-2024-1212

CVE-2024-1212 - Progress Kemp LoadMaster Unauthenticated Command Injection This is an exploit script for CVE-2024-1212 , an unauthenticated command injection vulnerability in Progress Kemp LoadMaster. Vulnerability Summary CVE-2024-1212 affects Progress Kemp LoadMaster , allowing unauthenticated...

10CVSS8.6AI score0.95388EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/09/24 11:53 a.m.•6 views

CVE-2018-7600

CVE-2018-7600 Proof of Concept Exploit for Drupal CVE-2018-7600 RCE with Pseudo-Shell and proxy support...

9.8CVSS8.1AI score0.99991EPSS
SaveExploits49
Kitploit
Kitploit
•added 2026/09/24 11:52 a.m.•11 views

CVE-2019-0708-EXP-MSF-

CVE-2019-0708-EXP-MSF- CVE-2019-0708-EXPMSF Vulnerability exploit program for cve-2019-0708 要求msf版本在5.0.4以上 root@kitploit: mkdir -p /usr/share/metasploit-framework/modules/exploit/windows/rdp/ mkdir -p /usr/share/metasploit-framework/modules/auxiliary/scanner/rdp/ mkdir -p...

10CVSS8.2AI score0.99999EPSS
SaveExploits126
Kitploit
Kitploit
•added 2026/09/24 11:52 a.m.•8 views

cve-2019-5736-poc

CVE-2019-5736 Proof of Concept This appends a string to the host runc binary. Bring your own payload see stage2.c. To run: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...

9.3CVSS7.3AI score0.98452EPSS
SaveExploits35
Kitploit
Kitploit
•added 2026/09/24 11:52 a.m.•11 views

react2shell-lab

React2Shell Vulnerability Lab This is a deliberately vulnerable Next.js application for testing CVE-2025-55182 and CVE-2025-66478 React Server Components RCE. ⚠️ WARNING : This application is intentionally vulnerable. Use only in isolated lab environments. Vulnerability Details CVE-2025-55182 /...

10CVSS7.4AI score0.99802EPSS
SaveExploits405
Kitploit
Kitploit
•added 2026/09/24 11:52 a.m.•10 views

Log4jUnifi

Log4jUnifi Exploiting CVE-2021-44228 in Unifi Network Application for remote code execution and more. Another Log4j on the fire: Unifi Why? Proof of concepts for this vulnerability are scattered and have to be performed manually. This repository automates the exploitation process. See the blog po...

10CVSS7.8AI score0.99999EPSS
SaveExploits375
Kitploit
Kitploit
•added 2026/09/24 11:52 a.m.•15 views

SpringBreaker

SpringBreaker Exploit PoC for Spring RCE issue CVE-2011-2894...

6.8CVSS7.5AI score0.08601EPSS
SaveExploits1
Rows per page
Query Builder