Lucene search
+L

584856 matches found

Kitploit
Kitploit
•added 2026/09/26 6:02 a.m.•13 views

Kernelhub

CVE-2003-0352 Describe Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms. ImpactVersion Product| C...

7.5CVSS6.8AI score0.98484EPSS
SaveExploits11
OSV
OSV
•added 2026/09/26 6:01 a.m.•7 views

RLSA-2026:71641 Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks...

8.5CVSS6.5AI score0.00381EPSS
SaveExploits1References7
Rockylinux
Rockylinux
•added 2026/09/26 6:01 a.m.•11 views

libxml2 security update

An update is available for libxml2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libxml2 library is a development toolbox providing the implementation of...

8.5CVSS6.5AI score0.00381EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/26 5:57 a.m.•8 views

scanner-for-CVE-2025-55182-vulnerability

🛡️ GitHub Vulnerability Scanner for CVE-2025-55182 React/Next.js RCE This Python script is designed to scan all your public and private GitHub repositories for dependencies that are potentially vulnerable to CVE-2025-55182 a critical Remote Code Execution affecting specific versions of React Serve...

10CVSS7.7AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
•added 2026/09/26 5:57 a.m.•19 views

cve-2025-2082-POV

CVE-2025-2082 – Function Pointer Overwrite PoV VCSEC-style This repository demonstrates a Proof of Vulnerability PoV simulating a critical memory corruption flaw inspired by CVE-2025-2082, discovered in Tesla's VCSEC Vehicle Controller Security component. The vulnerability allows an attacker to...

7.5CVSS8.2AI score0.00383EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/26 5:56 a.m.•10 views

log4shell-test-exploit

Test exploit of CVE-2021-44228 log4shell Preparation root@kitploit: Install Nodejs HTTP server npm -g i http-server Build victim app cd victim-app mvn install Compile Trojan cd test-trojan javac Trojan.java Build marshalsec required Java 8 git clone [email protected]:mbechler/marshalsec.git ...

10CVSS7.7AI score0.99999EPSS
SaveExploits375References1
Kitploit
Kitploit
•added 2026/09/26 5:55 a.m.•10 views

ProxyNotShell-PoC

Working PoC for CVE-2022-41040 and CVE-2022-41082 A.K.A ProxyNotShell Requirement: pip install requestsntlm2 requests Usage: root@kitploit: python pocaug3.py Creds: ProxyShell PoC script from: https://blog.viettelcybersecurity.com/pwn2own-2021-microsoft-exchange-exploit-chain/ Gtsc's blog post...

8.8CVSS7.2AI score0.9997EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/09/26 5:53 a.m.•9 views

CVE-2022-1388

CVE-2022-1388 - F5 BIG-IP iControl REST Authentication Bypass RCE This Python script exploits CVE-2022-1388, a critical vulnerability in F5 BIG-IP iControl REST that allows unauthenticated remote command execution via improper access control and HTTP header handling. ⚠️ For educational and...

9.8CVSS9.1AI score0.99954EPSS
SaveExploits63
Kitploit
Kitploit
•added 2026/09/26 5:51 a.m.•10 views

page-table-exploitation

page-table-exploitation A demonstration of how page tables can be used to run arbitrary code in ring-0 and lead to a privesc. Uses CVE-2016-7255 as an example...

7.8CVSS7.8AI score0.80968EPSS
SaveExploits24
Kitploit
Kitploit
•added 2026/09/26 5:51 a.m.•8 views

CVE-2025-55182

What is CVE-2025-55182? Also known as React2Shell, this vulnerability refers to a structural flaw in React Server Components where prototype pollution occurs during data deserialization, enabling RCE. Affected versions are React 19.0.0, 19.1.0, 19.1.1, 19.2.0, Next.js 15.x 15.0.0 15.5.6, 16.x...

10CVSS7.5AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
•added 2026/09/26 5:50 a.m.•9 views

CVE-2017-1000117

git-client-rce This PoC is only for educational purpose!!! Test GIT Repo for git-client-rce PoC CVE-2017-1000117 https://marc.info/?l=git&m=150238802328673&w=2 This CVE affects all the git clients v2.14.1 Execute following on test system to see PoC : $git clone --recursive...

8.8CVSS7.3AI score0.77823EPSS
SaveExploits9References1
Kitploit
Kitploit
•added 2026/09/26 5:47 a.m.•17 views

hot-jar-swapping-urlclassloader

URLClassLoader hot jar swapping The following example code shows the ability to hot jar swap an already loaded JAR-file and get code execution by abusing the fact that inner classes still access the JAR file when invoked, as long as the inode does not change. Tested on MacOS with OpenJDK And also...

6.4AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/26 5:46 a.m.•9 views

CVE-2025-52691

CVE-2025-52691 This repository contains a safe Proof of Concept PoC to detect vulnerable SmarterMail versions affected by CVE‑2025‑52691. The script performs version detection only and does not exploit the vulnerability. CVE-2025-52691 – SmarterMail Version Detection PoC 📌 Description This...

10CVSS8.4AI score0.85655EPSS
SaveExploits15
Kitploit
Kitploit
•added 2026/09/26 5:44 a.m.•19 views

POC-CVE-2026-18729

Description Proof of concept exploit code for CVE-2026-18729 Usage python3 poc.py -url -uname -pword -c Without bash command proof of code exec via Divide By Zero Error With bash command NOTE: Bash output isn't returned because the endpoint only returns the component template and metadata. The ba...

8.8CVSS5.7AI score0.01946EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/26 5:43 a.m.•14 views

ENLBufferPwn

ENLBufferPwn CVE-2022-47949 CVE:| CVE-2022-47949 ---|--- CVSS v3.1:| 9.8/10 Critical Authors:| PabloMK7, Rambo6Glaz, Fishguy6564 Reported:| August 8th, 2021 Mario Kart 7 April 14th, 2022 for the impacted WiiU and Switch games Disclosed:| December 22nd, 2022 Table of contents Description...

9.8CVSS8.4AI score0.23147EPSS
SaveExploits1References7
Kitploit
Kitploit
•added 2026/09/26 5:38 a.m.•12 views

ciscoasa_honeypot

Cisco ASA honeypot Cymmetria Research, 2018. https://www.cymmetria.com/ Contact: [email protected] A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability It is released under the MIT license for the use of the...

10CVSS8.8AI score0.8678EPSS
SaveExploits7
Kitploit
Kitploit
•added 2026/09/26 5:29 a.m.•10 views

CVE-2019-0232

CVE-2019-0232 Description This is a tool that automates the exploitation workflow for CVE‑2019‑0232 by providing both command execution mode and reverse‑shell mode. It supports automatic URL encoding for commands, spins up a temporary HTTP server to host nc.exe, uploads it to the vulnerable Apach...

9.3CVSS7.9AI score0.99923EPSS
SaveExploits11
Kitploit
Kitploit
•added 2026/09/26 5:22 a.m.•11 views

CVE-2022-29078

CVE-2022-29078 vuln ejs 3.1.6 docker Setup root@kitploit: git clone https://github.com/miko550/CVE-2022-29078.git cd CVE-2022-29078 docker build . -t miko/vuln-ejs docker run -p 49160:8080 -d --name vuln-ejs miko/vuln-ejs Usage root@kitploit: http://127.0.0.1:49160/ Exploit In browser...

9.8CVSS7.3AI score0.32808EPSS
SaveExploits7
Kitploit
Kitploit
•added 2026/09/26 5:19 a.m.•11 views

wp2shell-poc-fulljs

WordPress CVE Logical Flow Demonstration Overview This project allows to reproduce the logical flow related to CVE-2026-63030 and CVE-2026-60137 leading to an sql injection serving as a base to finally trigger a RCE in WordPress. CVE-2026-63030 CVE-2026-60137 The demonstration illustrates how the...

9.8CVSS8.9AI score0.10119EPSS
SaveExploits83
Kitploit
Kitploit
•added 2026/09/26 5:17 a.m.•11 views

confluence-rce-poc

confluence-rce-poc Setting up POC for CVE-2021-26084 Docker Feed official docker-entrypoint.sh to postgres, change db username and password as required...

9.8CVSS8AI score0.99999EPSS
SaveExploits46
Rows per page
Query Builder