Lucene search
+L

566726 matches found

Kitploit
Kitploit
•added 2026/09/25 12:12 p.m.•20 views

mssharepoint-scanner

MS SharePoint Scanner A single-file, dependency-free defensive tool for Microsoft SharePoint that combines service discovery single or bulk with CVE assessment for two critical on-premises vulnerabilities: CVE-2026-55040 Critical 9.1 — JWT token authentication bypass CVE-2026-63520 High 8.1 —...

9.1CVSS8.4AI score0.17535EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/25 12:12 p.m.•35 views

CVE-2026-32475

CVE-2026-32475 — Elementor Pro ≤ 4.2.1 Unauthenticated Arbitrary File Upload → RCE PoC for CVE-2026-32475 CVSS 9.0 Critical, CWE-434: an unauthenticated arbitrary file upload in the Elementor Pro Forms module that leads to remote code execution. Fixed in Elementor Pro 4.2.2 2026-08-19. Reported b...

9CVSS7AI score0.01711EPSS
SaveExploits5
OSV
OSV
•added 2026/09/25 12:09 p.m.•9 views

RLSA-2026:71419 Critical: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis CVE-2026-82717 unbound: Unbound: Heap buffer overflow via malicious DNSSEC response CVE-2026-81634 unbound: Unbound:...

9.8CVSS6.5AI score0.00962EPSS
SaveExploits1References5
Rockylinux
Rockylinux
•added 2026/09/25 12:09 p.m.•11 views

unbound security update

An update is available for unbound. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The unbound packages provide a validating, recursive, and caching DNS or...

10CVSS6.2AI score0.00962EPSS
SaveExploits1
OSV
OSV
•added 2026/09/25 12:09 p.m.•4 views

RLSA-2026:71586 Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks...

8.5CVSS6.5AI score0.00381EPSS
SaveExploits1References8
Kitploit
Kitploit
•added 2026/09/25 12:05 p.m.•11 views

CVE-2026-64638

CVE-2026-64638 Reflected XSS on Login Screen Leading to PHP Code Execution — WordPress Core Software: WordPress Core ≤ 7.0.2 all versions prior to 7.0.3 CVSS: 8.9 High CWE: CWE-79 — Improper Neutralization of Input During Web Page Generation Authentication Required: None Pre-Auth User Interaction...

8.9CVSS8.2AI score0.00894EPSS
SaveExploits34
Kitploit
Kitploit
•added 2026/09/25 12:03 p.m.•14 views

moodle-rce-calculatedquestions

Scripts to Test Input Validation in Moodle Calculated Questions CVE-2024-43425 This repository contains the companion scripts to the blog post Back to School - Exploiting a Remote Code Execution Vulnerability in Moodle, which describes a remote code execution vulnerability in the Moodle learning...

8.1CVSS8.7AI score0.87536EPSS
SaveExploits8References3
Kitploit
Kitploit
•added 2026/09/25 12:01 p.m.•8 views

CVE-2023-24871

CVE-2023-24871 This repository contains materials related to CVE-2023-24871, which I covered in this series of posts. You'll find more info inside the specific folders, since the vulnerability allowed both RCE & LPE...

8.8CVSS8AI score0.03217EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 11:59 a.m.•11 views

teamcity-CVE-2026-63077-pcap

teamcity-CVE-2026-63077-pcap teamcity teamcity-CVE-2026-63077 exploitation pcap info: https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/ https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077/ Target: teamcity server 2025.11.3 docker 192.168.64.31 po...

9.8CVSS8.6AI score0.8957EPSS
SaveExploits7References1
Kitploit
Kitploit
•added 2026/09/25 11:57 a.m.•13 views

cacti-rce-snmp-options-vulnerable-application

Cacti v1.2.24 inyección de comandos autenticada CVE-2023-39362 aplicación vulnerable Esta es una aplicación vulnerable para probar el exploit de la vulnerabilidad Cacti CVE-2023-39362. ¡ADVERTENCIA! ¡Esta aplicación contiene vulnerabilidades de seguridad graves. Úsela bajo su propio riesgo! Se...

7.2CVSS8AI score0.85449EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/25 11:56 a.m.•10 views

NoFaxGiven

NoFaxGiven - Code Execution & Persistence in NETWORK SERVICE FAX Service A fax routing extension is a DLL that adds routing functionality to the fax service. Multiple fax routing extensions can reside on one server. When the fax server receives a fax transmission, it routes the received document...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 11:56 a.m.•11 views

CVE-2026-64638-POC

CVE-2026-64638 — XSS2Shell Pre-Authentication Reflected XSS → Remote Code Execution in WordPress Core ⚠️ DISCLAIMER: This repository is for authorized security research and educational purposes only. Do not use against systems you do not own or have explicit written permission to test. Unauthorize...

8.9CVSS8.4AI score0.00894EPSS
SaveExploits34References1
RedhatCVE
RedhatCVE
•added 2026/09/25 11:36 a.m.•6 views

CVE-2026-96804

A flaw was found in MLflow. The statsmodel component of MLflow fails to enforce a security control that prevents insecure deserialization during model loading. This allows a remote attacker to execute arbitrary code by submitting a specially crafted MLmodel artifact. This vulnerability can lead t...

8.8CVSS6.5AI score0.00423EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/25 11:34 a.m.•8 views

cve-2025-66398

CVE-2025-66398 — Signal K Server RCE PoC 📜 Description CVE-2025-66398 is a Signal K Server issue where an unauthenticated attacker can poison the server’s restore state via /skServer/validateBackup, then hijack config via /skServer/restore to inject a backdoor admin account and optionally achieve...

9.6CVSS6.7AI score0.1985EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/25 11:18 a.m.•11 views

IPFire_2.25_RCE_Authenticated

IPFire 2.25 Remote Code Execution Authenticated - CVE-2021-33393 This exploit is based on CVE-2021-33393 https://nvd.nist.gov/vuln/detail/CVE-2021-33393 and was built upon the original exploit by Mücahit Saratar https://github.com/KaanaryOverFlow/ipfire-2-25-auth-rce, extending it to achieve a...

9CVSS8AI score0.59616EPSS
SaveExploits6References1
NVD
NVD
•added 2026/09/25 11:17 a.m.•9 views

CVE-2026-97875

Rojo's "rojo serve" HTTP API default port 34872 has no Host/Origin header validation, making it vulnerable to DNS rebinding. A malicious webpage can read all project source, write malicious code to files on disk, and launch local programs via opener::open with no user interaction beyond visiting...

8.1CVSS0.0026EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/25 11:16 a.m.•15 views

CVE-2024-23692

CVE-2024-23692 - Rejetto HFS Remote Code Execution RCE A tactical documentation and exploit guide for CVE-2024-23692 , an unauthenticated critical Remote Code Execution RCE vulnerability affecting Rejetto HTTP File Server HFS versions prior to 2.3m. This guide leverages an In-Memory Reverse Shell...

9.8CVSS8.5AI score0.99485EPSS
SaveExploits21References1
RedhatCVE
RedhatCVE
•added 2026/09/25 11:14 a.m.•6 views

CVE-2026-79109

A flaw was found in Google Chrome's printing component. A remote attacker, after compromising the renderer process, could exploit improper input validation by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

8.3CVSS6.6AI score0.00432EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 11:14 a.m.•9 views

CVE-2025-58434-59528-htb-ctf

CVE-2025-58434-59528-htb-ctf Silentium Exploit Chain This repository contains the complete exploitation chain for the Silentium machine on Hack The Box. The exploit leverages a two-stage vulnerability involving user enumeration and JavaScript injection to achieve Remote Code Execution RCE. 📝...

9.8CVSS6.8AI score0.49894EPSS
SaveExploits15
Kitploit
Kitploit
•added 2026/09/25 11:14 a.m.•11 views

CVE-2024-22120-RCE-with-gopher

Usage root@kitploit: python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Example Scenario You have identified a Zabbix server running on IP 192.168.1.100, and you have access to a low-privileged user with the following details: Session ID sid: d82bf6715e1d3c1f25 Host ID hosti...

9.1CVSS8.3AI score0.76618EPSS
SaveExploits5
Rows per page
Query Builder