Lucene search
+L

566712 matches found

Kitploit
Kitploit
•added 2026/09/25 7:37 a.m.•14 views

CVE-2025-37164-PoC

CVE-2025-37164 - HPE OneView Unauthenticated RCE PoC Proof-of-Concept exploit for CVE-2025-37164, a critical CVSS 10.0 unauthenticated remote code execution vulnerability in HPE OneView. DISCLAIMER THIS SOFTWARE IS PROVIDED FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING PURPOSES ONLY. Use only o...

10CVSS9.1AI score0.90193EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/09/25 7:27 a.m.•10 views

Pwn2Own-Auto-2024-CHARX

Pwn2Own Automotive 2024 CHARX Exploit This exploit was submitted successfully against the Phoenix Contact CHARX SEC-3100 during Pwn2Own Automotive 2024. An accompanying blog post covers some of our research process and details on the vulnerabilities found, with a follow-up post on the actual...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 7:25 a.m.•11 views

Apache-OFBiz-Directory-Traversal-exploit

Apache-OFBiz-Directory-Traversal-exploit A vulnerability classified as critical, has been found in Apache OFBiz up to 18.12.12. Affected by this issue is an unknown functionality. The manipulation with an unknown input leads to a path traversal vulnerability. The product uses external input to...

9.8CVSS8.5AI score0.99919EPSS
SaveExploits8
Kitploit
Kitploit
•added 2026/09/25 7:20 a.m.•11 views

CVE-2026-0073

0-Click RCE on Android Critical vulnerability CVE-2026-0073 in Android ADB, an authentication bypass flaw in the TLS certificate verification of the adbd daemon, specifically in the adbdtlsverifycert function. The TLS certificate verification makes Wireless Debugging accept an attacker as if they...

8.8CVSS7.9AI score0.00541EPSS
SaveExploits13
Kitploit
Kitploit
•added 2026/09/25 7:16 a.m.•15 views

CVE-2017-12149

CVE-2017-12149 CVE-2017-12149 JBOSS as 6.X Deserialization Reverse Shell Version Rewritten GUI interface based on the author's command-line mode detail:http://www.cnblogs.com/sevck/p/7874438.html...

9.8CVSS8.4AI score0.90713EPSS
SaveExploits14
Kitploit
Kitploit
•added 2026/09/25 7:15 a.m.•14 views

CVE-2020-5902-rce-gui

CVE-2020-5902-RCE-Big Vulnerability Exploitation Tool GUI Version v1.0 Tool Usage Instructions For command execution, if the first execution fails, you can try several more times. Batch Target Address Detection Execute Reverse Shell Single Target Address Detection File Upload...

10CVSS7.6AI score0.99999EPSS
SaveExploits62
Kitploit
Kitploit
•added 2026/09/25 7:13 a.m.•10 views

CVE-2025-8110

CVE-2025-8110 – Gogs ≤ 0.13.3 RCE PoC Proof-of-Concept for CVE-2025-8110 , an authenticated arbitrary file write in Gogs ≤ 0.13.3 caused by improper symbolic-link handling in the PutContents API. An authenticated user can commit a symlink pointing to .git/config, then use the API to overwrite it...

8.8CVSS8.1AI score0.85202EPSS
SaveExploits23
RedhatCVE
RedhatCVE
•added 2026/09/25 7:04 a.m.•7 views

CVE-2026-79195

A flaw was found in Chromium. A remote attacker could exploit a use-after-free vulnerability within the Script component. By enticing a user to visit a specially crafted HTML page, the attacker could execute arbitrary code inside the sandbox...

8.8CVSS6.6AI score0.00413EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/25 7:04 a.m.•7 views

CVE-2026-78909

A flaw was found in Google Chrome. This use-after-free vulnerability in the Views component allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by leveraging social engineering tactics to entice a user to visit a specially crafted HTM...

9.6CVSS6.8AI score0.00462EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/25 7:04 a.m.•8 views

CVE-2026-84333

A flaw was found in Dawn, a component of Google Chrome on Android. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the browser's sandbox, allowing the attacker to gain...

9.6CVSS6.7AI score0.00462EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 6:59 a.m.•9 views

winsos-poc

WinSOS This technique utilizes executables within the WinSxS folder, commonly trusted by Windows, to exploit the classic DLL Search Order Hijacking method. By leveraging these executables, threat actors can execute malicious code within Windows applications without requiring elevated privileges...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 6:57 a.m.•13 views

CVE-2023-22527-confluence

CVE-2023-22527-confluence Confluence CVE-2023-22527 realworld poc Usage Download bun https://github.com/oven-sh/bun/releases Start ngrok root@kitploit: ngrok tcp 4444 Listen localhost 4444 root@kitploit: nc -nvlp 4444 Run exploit root@kitploit: bun exploit-CVE-2023-22527.js --lhost...

10CVSS8.9AI score0.99984EPSS
SaveExploits34References1
Kitploit
Kitploit
•added 2026/09/25 6:53 a.m.•10 views

FastJsonAutoTypeBypass

What's this This project is used for studying how to bypass fastJSON AutoType check. Gadget Info Mapping just for fastjson 1.2.47: root@kitploit: package com.FastJson1242; import com.alibaba.fastjson.JSONObject; public class Poc public static void mainString argv String payload ="\n" + " "a": \n"...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/09/25 6:52 a.m.•6 views

CVE-2026-79026

A flaw was found in Google Chrome Extensions. This use-after-free vulnerability allows a remote attacker, leveraging social engineering, to potentially execute arbitrary code outside the sandbox. This occurs when a user is convinced to install a specially crafted Chrome extension, leading to...

9.6CVSS6.8AI score0.00426EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 6:51 a.m.•13 views

panos-captive-portal-rce

CVE-2026-0300 — Escáner de RCE por Desbordamiento de Búfer en el Portal C cautivo de User-ID de PAN-OS...

9.8CVSS7.9AI score0.31725EPSS
SaveExploits7References6
RedhatCVE
RedhatCVE
•added 2026/09/25 6:51 a.m.•5 views

CVE-2026-79197

A flaw was found in V8 in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

8.8CVSS6.8AI score0.00413EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/25 6:42 a.m.•5 views

CVE-2026-87601

A flaw was found in V8, the JavaScript engine used in Google Chrome. This race condition vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox. Exploitation occurs when a user visits a specially crafted HTML page...

7.5CVSS6.5AI score0.00289EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 6:27 a.m.•10 views

Hadoop-Yarn-ResourceManager-RCE

Vuln Impact There was an unauthorized access vulnerability in Hadoop yarn ResourceManager. This vulnerability existed in Hadoop yarn, the core component of Hadoop. Because Hadoop yarn opened the RPC service to the public by default, a remote attacker could take advantage of this unauthorized...

6.4AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 6:24 a.m.•13 views

MAL-012

MAL-012: Reflected Cross-Site Scripting in Admin Console leading to Remote Code Execution in Payara Server A reflected Cross Site Scripting XSS attack was found in the Payara Admin Console. By convincing an admin user to access the malicious URL and click the “Choose File” button, an attacker can...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 6:24 a.m.•17 views

MAL-011

MAL-011: Log4J Misconfiguration Allows Malicious JavaScript in Red Hat AMQ The Log4J component of the Redhat A-MQ application is misconfigured to allow the execution of arbitrary “Script” attributes in the Log4J config. If an attacker finds a way to modify the Log4J config used by A-MQ e.g. via...

8.8CVSS7.9AI score0.17457EPSS
SaveExploits0References3
Rows per page
Query Builder