Lucene search
+L

566726 matches found

CVE
CVE
•added 2026/09/25 10:48 a.m.•13 views

CVE-2026-97875

The rojo serve HTTP API (default port 34872 ) is vulnerable to DNS rebinding because it lacks Host/Origin header validation . This flaw allows a malicious webpage to access project source code, write malicious code to the local disk, and execute local programs using opener::open() without user in...

8.1CVSS5.7AI score0.0026EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/25 10:36 a.m.•11 views

Adobe_ColdFusion_RCE_Unauthenticated

CVE-2023-26360 — Adobe ColdFusion Unauthenticated RCE Python implementation of the remote code execution exploit for CVE-2023-26360, based on analysis of the original Metasploit module and the prior work by jakabakos. Why this exists The jakabakos PoC attempts to inject directly into the variable...

9.8CVSS8.6AI score0.97339EPSS
SaveExploits13References2
Kitploit
Kitploit
•added 2026/09/25 10:35 a.m.•13 views

WordPress-RCE-CVE-2019-8942

WordPress Crop Image RCE — CVE-2019-8942 / CVE-2019-8943 Python3 implementation of the authenticated WordPress crop-image exploitation chain. The repository is organized around two independent workflows: a manual OSCP-style script and a fully automated script with an integrated reverse-shell...

8.8CVSS7.4AI score0.92642EPSS
SaveExploits11
Kitploit
Kitploit
•added 2026/09/25 10:32 a.m.•7 views

LogMePwn

LogMePwn LogMePwn is a fully automated, multi-protocol, reliable, super-fast scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability. Tool Highlights Inherent support for automatic Canary Tokens generation using emails or webhooks. Multi-protocol support: HTTP, IMAP, SSH,...

10CVSS7.5AI score0.99999EPSS
SaveExploits375References2
Kitploit
Kitploit
•added 2026/09/25 10:30 a.m.•9 views

FlaskCache_CVE-2021-33026_POC

Pickle Serialization Remote Code Execution - Redis Poisoning PoC Exploit Verificar que el servidor redis esté funcionando redis-cli -h 127.0.0.1 -p 6379 ping redis-cli keys redis-cli get Keyid Iniciar escucha con netcat en el puerto 10001 : nc -nvlp 10001 Configuración de entornos para Flask Chac...

9.8CVSS8.1AI score0.07064EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/25 10:28 a.m.•10 views

cve-2018-2894

Weblogic Arbitrary File Upload Vulnerability CVE-2018-2894 Recently, everyone has been talking about this vulnerability, and most have noticed the issue at config.do. However, according to https://mp.weixin.qq.com/s/y5JGmM-aNaHcs6P9a-gRQ the information there, begin.do also has a problem. Without...

9.8CVSS7.8AI score0.50224EPSS
SaveExploits7References2
Kitploit
Kitploit
•added 2026/09/25 10:26 a.m.•10 views

heroku-CVE-2013-0333

heroku-CVE-2013-0333 Inspect all of your heroku apps to see if they are running a vulnerable version of Rails Background A serious security vulnerability has been found in the Ruby on Rails framework. This exploit affects nearly all applications running Rails versions 2.3 and 3.0, and a patch has...

7.5CVSS6.3AI score0.95327EPSS
SaveExploits7References1
Kitploit
Kitploit
•added 2026/09/25 10:23 a.m.•12 views

CVE-2026-25243-debugfree

CVE-2026-25243 — DEBUG-free Redis RCE private Reliable remote code execution from a single crafted RESTORE on jemalloc Redis — noDEBUG command, no /proc, no gdb, no ROP, ASLR on. Runs the attacker's command as the redis process root in default images. 🔒 Private repository — authorized security...

8.8CVSS7.7AI score0.03663EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/25 10:20 a.m.•12 views

CVE-2026-64638-WordPress-Core-XSS2Shell

CVE-2026-64638 — Nuclei Detection Template Template Nuclei for non-intrusive detection of XSS2Shell , a pre-authenticated differential parser in WordPress Core that allows injection of DOM elements into the login page, serving as the basis for an XSS → RCE chain. ⚠️ This template only detects the...

8.9CVSS8.1AI score0.00894EPSS
SaveExploits34References1
RedhatCVE
RedhatCVE
•added 2026/09/25 10:05 a.m.•8 views

CVE-2026-93603

A flaw was found in vm2. This vulnerability allows an attacker who can execute untrusted script within the sandbox to achieve arbitrary code execution on the underlying host system by escaping sandbox containment. The issue occurs because vm2 fails to properly handle function calls lacking an...

10CVSS8.6AI score0.00726EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/25 10:04 a.m.•8 views

CVE-2026-79056

A flaw was found in chromium-browser. A use-after-free vulnerability in the ServiceWorker component allows a remote attacker to potentially execute arbitrary code outside of the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

9.6CVSS6.7AI score0.00462EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 10:01 a.m.•13 views

CVE-2025-57819-RCE

FreePBX 16 — Unauthenticated SQLi to RCE Summary: This guide demonstrates how to chain two vulnerabilities in FreePBX 16 CVE-2025-57819 and CVE-2025-61678 to achieve a complete attack chain from unauthenticated access to Remote Code Execution RCE. Vulnerability / CVE Information , to write a PHP...

10CVSS8.7AI score0.85463EPSS
SaveExploits30
Kitploit
Kitploit
•added 2026/09/25 10:00 a.m.•21 views

CVE-2026-33057---Mesop-Unauthenticated-RCE-PoC-and-yara-rules

CVE-2026-33057---Mesop-Unauthenticated-RCE-PoC-and-yara-rules CVE-2026-33057 - Mesop Unauthenticated RCE PoC and yara rules Realistically, I'm not sure if it will work, it probably won't work, but you try it anyway... BİO and DONATES : https://guns.lol/hackpatato cve prof:...

9.8CVSS5.9AI score0.04111EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/25 10:00 a.m.•7 views

CVE-2021-22204

CVE-2021-22204 - ExifTool Arbitrary Code Execution An upgraded proof-of-concept for CVE-2021-22204, a vulnerability in ExifTool versions 7.44 through 12.23 that allows arbitrary code execution when processing malicious DjVu files. Credit This is derivative work. The vulnerability and the original...

7.8CVSS8AI score0.99981EPSS
SaveExploits39
Kitploit
Kitploit
•added 2026/09/25 9:53 a.m.•13 views

CVE-2026-64638

CVE-2026-64638 — XSS2Shell: WordPress Login Page Pre-Auth XSS → Server RCE HackSpeak distribution mirror. This repository is a distribution mirror of the educational XSS2Shell PoC CVE-2026-64638 released by WordSec , with code identical to upstream; upstream is MIT License, Copyright c 2026...

8.9CVSS8.2AI score0.00894EPSS
SaveExploits34
Kitploit
Kitploit
•added 2026/09/25 9:49 a.m.•11 views

CVE-2026-64638

🛡️ CVE-2026-64638 - XSS2Shell WordPress Pre-Authentication Reflected XSS with potential escalation to PHP Code Execution 📌 Overview CVE-2026-64638 is a high-severity pre-authentication reflected Cross-Site Scripting XSS vulnerability affecting the WordPress login screen. Under specific conditions,...

8.9CVSS8AI score0.00894EPSS
SaveExploits34References1
Kitploit
Kitploit
•added 2026/09/25 9:47 a.m.•14 views

cve-2024-4577-phpcgi_rce_reproduction

CVE-2024-4577 - PHP CGI Argument Injection on Windows "WorstFit" Overview CVE-2024-4577 is a critical remote code execution vulnerability in PHP's CGI implementation on Windows. It bypasses the fix for the original CVE-2012-1823 by exploiting Windows "Best-Fit" code page conversion to smuggle...

9.8CVSS8AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
•added 2026/09/25 9:46 a.m.•19 views

CVE-2024-5082

Overview This repository contains a Python proof of concept for CVE-2024-5082 , a remote code execution vulnerability in Sonatype Nexus Repository Manager 2. The vulnerability allows a user with sufficient permission to publish a specially crafted Maven artifact and mark it for processing by the...

7.1CVSS7.7AI score0.02652EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/25 9:45 a.m.•13 views

CVE-2026-41179

CVE-2026-47668 Test environment for rclone RCE REF1: https://github.com/rclone/rclone/security/advisories/GHSA-jfwf-28xr-xw6q REF2: https://github.com/pssec-io/CVE-2026-41179 rce.py RCE on /operations/fdinfo, redirects output to stderr for convenience root@kitploit: ./rce.py uname -a exit status ...

10CVSS8.3AI score0.05299EPSS
SaveExploits5References2
RedhatCVE
RedhatCVE
•added 2026/09/25 9:36 a.m.•5 views

CVE-2026-93606

A flaw was found in vm2. An attacker running untrusted code within the sandbox can bypass isolation controls to achieve arbitrary code execution on the host system. This issue is caused by improper sanitization of host Promise objects, which allows sandboxed scripts to manipulate Promise...

10CVSS8.5AI score0.00712EPSS
SaveExploits0References5
Rows per page
Query Builder