Lucene search
+L

586118 matches found

Kitploit
Kitploit
•added 2026/09/27 7:52 a.m.•12 views

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro = 1.9.26 - Unauthenticated Arbitrary File Upload Description WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation i...

9.8CVSS8.9AI score0.33345EPSS
SaveExploits13
Kitploit
Kitploit
•added 2026/09/27 7:51 a.m.•12 views

pyrocms-ssti-fix

🛡️ PyroCMS SSTI Fix Drop-in security fix for CVE-2023-29689 - Server-Side Template Injection leading to Remote Code Execution in PyroCMS 3.9. The Problem PyroCMS allows admin users to edit templates stored in the database. Without sandboxing, attackers with admin access can inject malicious Twig...

9.8CVSS8.3AI score0.53463EPSS
SaveExploits4References3
Kitploit
Kitploit
•added 2026/09/27 7:50 a.m.•11 views

CVE-2025-24893-PoC

CVE-2025-24893-PoC XWiki Unauthenticated RCE Exploit Affected XWiki Versions Versions 15.10.11 Versions 16.4.1 Versions 16.5.0RC1 Vulnerability Description Affected XWiki versions contain a Remote Code Execution vulnerability caused by unsafe Groovy expression handling in the SolrSearch macro...

9.8CVSS8.5AI score0.99864EPSS
SaveExploits52References1
The Hacker News
The Hacker News
•added 2026/09/27 7:47 a.m.•19 views

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Two critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway that allow remote code execution have been exploited in the wild, Citrix confirmed on September 27. It released fixes for both, along with six other flaws. One of the two affects every deployment on an affected version,...

9.5CVSS8.7AI score0.01301EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/27 7:44 a.m.•10 views

ghostcat

This tool exploits an LFI vulnerability within Apache Tomcat named CVE-2020-1938 to not only view sensitive files, but also to run malicious JSP payloads. It can be downloaded here you will need to run it from the command line Usage: ghostcat target HTTP port AJP port file read/eval...

9.8CVSS7.5AI score0.9927EPSS
SaveExploits51References1
Kitploit
Kitploit
•added 2026/09/27 7:43 a.m.•10 views

CVE-2023-4220-exploit

CVE-2023-4220-漏洞利用 Chamilo LMS 版本 = 1.11.24 中,位于 /main/inc/lib/javascript/bigupload/inc/bigUpload.php 的大文件上传功能存在无限制文件上传漏洞,允许未经身份验证的攻击者通过上传 web shell 执行存储型跨站脚本攻击(Stored XSS)并获得远程代码执行。 PoC bash CVE.2023-4220.sh -f webshell -u URL -l puerto 上传的文件应可在以下路径查看:/main/inc/lib/javascript/bigupload/files。...

8.1CVSS7.5AI score0.76084EPSS
SaveExploits26
Kitploit
Kitploit
•added 2026/09/27 7:43 a.m.•11 views

cve-2024-7646

CVE-2024-7646 Description In default, nginx.ingress.kubernetes.io/server-snippet is disabled, but due to this cve, nginx.ingress.kubernetes.io/auth-tls-verify-client can still insert custom snippets, or even lua code can be included. Fixed version ingress-nginx controller v1.11.2 - fixed by...

8.8CVSS8.5AI score0.27018EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 7:42 a.m.•10 views

ssh_poc2024

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

8.1CVSS7.5AI score0.99506EPSS
SaveExploits71
Kitploit
Kitploit
•added 2026/09/27 7:40 a.m.•14 views

CVE-2019-9978

CVE-2019-9978 - RCE en el Plugin Social Warfare de WordPress system'cat /etc/passwd' ✅ Paso 2 – Iniciar un Servidor HTTP de Python Usa Python para servir tu payload: python3 -m http.server 8000 Esto hará que tu payload.txt sea accesible en: http://:8000/payload.txt ✅ Paso 3 – Ejecutar el Exploit...

6.1CVSS7.6AI score0.72946EPSS
SaveExploits20References2
Kitploit
Kitploit
•added 2026/09/27 7:38 a.m.•15 views

FOXCMS-CVE-2025-29306-POC

Inyección de Parámetros FOXCMS RCE – CVE-2025-29306 Este repositorio contiene un PoC basado en Python para una vulnerabilidad de Ejecución Remota de Código RCE que afecta a FOXCMS v1.2, un sistema de gestión de contenidos de código abierto chino. CVE-ID: CVE-2025-29306 Afecta: FOXCMS v1.2 Tipo:...

8.6AI score0.46583EPSS
SaveExploits11
Kitploit
Kitploit
•added 2026/09/27 7:38 a.m.•16 views

CVE-2024-23742

CVE-2024-23742 Un problema en Loom hasta la versión 0.196.1 en macOS permite a un atacante remoto ejecutar código arbitrario a través de la configuración RunAsNode y enableNodeClilnspectArguments. Con esta herramienta, podemos comprobar si la aplicación es vulnerable: Después de la validación,...

9.8CVSS8.4AI score0.01695EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 7:37 a.m.•18 views

CVE-2024-29671-POC

NEXTU FLETA Wifi6 Router RCE Exploit POC Este documento describe cómo se explotó la vulnerabilidad CVE-2024-29671 en el firmware del router NEXTU FLATA AX1500. Entorno de ejecución Este router está basado en la arquitectura MIPS y utiliza el chipset Realtek con Little-Endian. La versión del...

9.8CVSS6.3AI score0.24521EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/27 7:32 a.m.•10 views

CVE-2026-47117-openmed-rce

CVE-2026-47117: OpenMed Ejecución Remota de Código No Autenticada mediante la Carga de Modelos PII Severidad: Crítica, CVSS 4.0 9.3 , CVSS 3.1 9.8 asignado por VulnCheck, la CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1:...

9.8CVSS6AI score0.01288EPSS
SaveExploits1References3
GithubExploit
GithubExploit
•added 2026/09/27 7:29 a.m.•19 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller

Citrix Netscaler CVE-2026-8452 RCE Vulnerability !Banner...

9.8CVSS8.9AI score0.01011EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/27 7:14 a.m.•15 views

CVE-2025-2005

CVE-2025-2005 — Front-End Users Arbitrary File Upload CVE-2025-2005 WordPress Front-End Users — Unauthenticated Arbitrary File Upload 0xZ3R0 // h4ckxel 0x00 — Executive Summary Front-End Users is affected by an unauthenticated arbitrary file upload vulnerability affecting versions ≤ 3.2.32. The...

9.8CVSS8.5AI score0.21975EPSS
SaveExploits3
EUVD
EUVD
•added 2026/09/27 7:12 a.m.•11 views

EUVD-2026-87904

Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to run arbitrary JScript inside the hMailServer service process, with the privileges of the service account, via a...

9.8CVSS6AI score0.01729EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/27 7:12 a.m.•8 views

CVE-2019-18935-exploit-study

CVE-2019-18935-exploit-study In-depth study of CVE-2019-18935 affecting Telerik UI for ASP.NET AJAX. Covers .NET deserialization vulnerability, RadAsyncUpload handler, gadget chains, mixed-mode assembly exploitation, and mitigation strategies...

9.8CVSS8AI score0.99737EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/09/27 7:11 a.m.•13 views

CVE-2025-55182_PoC

CVE-2025-55182 - React Server Components RCE PoC Author: rl0x01 Description CVE-2025-55182 is a critical CVSS 10.0 Remote Code Execution RCE vulnerability affecting React Server Components via the Flight protocol. Vulnerable Versions Next.js| React ---|--- 14.3.0-canary.77 to 15.0.4| 19.0.0...

10CVSS8AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
•added 2026/09/27 7:10 a.m.•9 views

CVE-2025-10230

CVE-2025-10230 — Inyección de Comandos en el Hook WINS de Samba El autor no asume ninguna responsabilidad por el mal uso o daño causado por esta herramienta. La investigación se proporciona estrictamente con fines educativos y defensivos. Descripción Este repositorio contiene una Prueba de Concep...

10CVSS8.7AI score0.39653EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/27 7:10 a.m.•11 views

CVE-2025-25257

CVE-2025-25257 由watchtowr及其他人在github上发布的针对CVE-2025-25257的漏洞利用代码,在我从官方供应商网站下载的fortiweb安装版本上无法工作。我从这些漏洞利用代码中提取了一些代码,制作了一个能够在我的环境中弹出反向shell的POC。反向shell的IP地址和端口是硬编码的,当然需要更改。 漏洞分析及逐步演示已在我在YouTube频道的两个视频中描述(意大利语,英文字幕): 第1部分:https://youtu.be/Z6I4adGuJ1c 第2部分:https://youtu.be/Z6I4adGuJ1c...

9.8CVSS8.7AI score0.99775EPSS
SaveExploits18
Rows per page
Query Builder