Lucene search
+L

521549 matches found

Kitploit
Kitploit
added 2026/09/14 11:29 a.m.7 views

CVE-2026-33017

CVE-2026-33017 - Langflow Unauthenticated RCE ⚠️ DISCLAIMER: This repository is for authorized security testing and educational purposes only. Use only on systems you own or have explicit permission to test. The author is not responsible for any misuse or damage caused by this tool. Overview...

9.8CVSS8.4AI score0.96177EPSS
SaveExploits32References1
Kitploit
Kitploit
added 2026/09/14 11:28 a.m.6 views

CVE-2021-44077

CVE-2021-44077 Proof of Concept Exploit for CVE-2021-44077: PreAuth RCE in ManageEngine ServiceDesk Plus msiexec.exe pip install the requirements file or make sure you've got the requests package. If you're trying to catch a reverse shell, run your listener first, e.g. root@kitploit: nc -l 4444...

9.8CVSS8.5AI score0.93298EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/14 11:27 a.m.5 views

CVE-2024-9162

CVE-2024-9162 All-in-One WP Migration and Backup = 7.86 - Authenticated Administrator+ Arbitrary PHP Code Injection The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary PHP Code Injection due to missing file type validation during the export in all versions up to, and...

7.2CVSS6AI score0.02745EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/14 11:27 a.m.5 views

oracle-weblogic-CVE-2021-2109

oracle-weblogic-CVE-2021-2109 Oracle Weblogic RCE - CVE-2022-2109...

7.2CVSS7.5AI score0.70447EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/14 11:26 a.m.5 views

CVE-2019-9193

CVE-2019–9193 - PostgreSQL 9.3-12.3 Authenticated Remote Code Execution Proof of Concept PostgreSQL Database from version 9.3 to 12.3 latest tested are vulnerable to Authenticated Remote Code Execution. Even if it isn't considered to be a vulnerability itself by the development team, this could b...

9CVSS7.4AI score0.91655EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/14 11:26 a.m.7 views

CVE-2024-55347

CVE Disclosure: CVE-2024-55347 Public Disclosure of CVE-2024-55347 🚀 Date: 10-02-2025 Summary A Binary Planting vulnerability in Kroll Artifact Parser And Extractor KAPE v1.3.0.2 allows attackers to escalate privileges and execute arbitrary code by placing a maliciously crafted Binary file in a...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 11:26 a.m.6 views

Thunderstorm

Thunderstorm Thunderstorm is a modular framework to exploit UPS devices. For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future. CVE Thunderstorm is currently capable of exploiting the following CVE: CVE-2022-47186 –...

10CVSS7.3AI score0.0157EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 11:25 a.m.6 views

CVE-2024-5452

CVE-2024-5452 01. Overview of RCE and pytorch-lightning 1 Overview of RCE and pytorch-lightning RCE Remote Code Execution is a vulnerability that allows an attacker to execute arbitrary code remotely within a system or application, and is classified as CWE-94: Improper Control of Generation of...

9.8CVSS8.9AI score0.26831EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/14 11:24 a.m.5 views

Corsair---DLL-Planting-CVE-2023-38822

Corsair---DLL-Planting-CVE-2023-38822 DLL Planting in the Corsair iCUE v.5.3.102 CVE-2023-38822 Discoverer: Idan Malihi Description An issue in Corsair iCUE v.5.3.102 allows a local attacker to execute arbitrary code via the MPDC.dll, CRYPTSP.dll, dcomp.dll, profapi.dll, and MSASN1.dll components...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 11:23 a.m.4 views

Groovy-scripting-engine-CVE-2015-1427

ElasticSearch Groovy Sandbox Bypass && Code Execution Vulnerability CVE-2015-1427 Test Environment jre version: openjdk:8-jre elasticsearch version: v1.4.2 Principle Reference articles: http://cb.drops.wiki/drops/papers-5107.html...

9.8CVSS8.2AI score0.99906EPSS
SaveExploits19References1
Kitploit
Kitploit
added 2026/09/14 11:22 a.m.5 views

CVE-2021-44228-PoC

CVE-2021-44228 PoC PoC for CVE-2021-44228. Project made for EDUCATIONAL PURPOSES ONLY. Exploit server This project creates two servers: http and ldap. Both are necessary for exploit to work. Specified java file is compiled and servers are started in Dockerfile. Payload is shown to user - it has t...

10CVSS7.3AI score0.99999EPSS
SaveExploits370
Kitploit
Kitploit
added 2026/09/14 11:22 a.m.4 views

Text4shell--Automated-exploit---CVE-2022-42889

Install maven - maven-linux //For automated hacking: 1../install.sh root@kitploit: 2../exploit.sh 3.To remove the application use ./stopapp.sh //For manual hacking: 1. Maven install to create the fat jar root@kitploit: mvn clean install 2. Docker build root@kitploit: docker build --tag=text4shell...

9.8CVSS7.4AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/14 11:22 a.m.5 views

CVE-2020-15227

CVE-2020-15227 DISCLAIMER! I take no responsibility of using it in wild life environment so please do NOT do it. This thingy is just to demonstrate and for test things for sysadmins I made this exploit according to publishing a CVE of David Grudl The founder of Nette foundation as he did not solv...

9.8CVSS8.1AI score0.34424EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/14 11:21 a.m.10 views

CVE-2019-12725-Command-Injection

POC CVE-2019-12725-Remote-Command-Execution ZeroShell 3.9.0 Remote Command Injection Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exploit this iss...

10CVSS8.2AI score0.89849EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/14 11:20 a.m.6 views

CVE-2024-40711-Exp

Usages root@kitploit: .\ysoserial.exe -f BinaryFormatter -g Veeam -c localhostServer -vi targetIP -vp 6170 -vg DataSet -vc "cmd /c mspaint.exe" root@kitploit: Usage: ysoserial.exe options Options: --vi, --targetveeamip=VALUE The target Veeam Backup and reaplication IP address --vp,...

9.8CVSS8.5AI score0.90369EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/14 11:20 a.m.10 views

CVE-2021-30005-POC

CVE-2021-30005-POC PoC for CVE-2021-30005. Details The vulnerability resides in the fact that PyCharm would automatically activate a virtual environment found in the project when opened for the first time. This allowed an attacker to create a repository containing a malicious virtual environment...

7.8CVSS7.5AI score0.00881EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/14 11:20 a.m.8 views

CVE-2020-6364

CVE-2020-6364 Remote code execution in CA APM Team Center Wily Introscope. Original advisory A deserialization vulnerability in CA APM Team Center leads to unauthenticated remote code execution on the server. When authenticating to the server a cookie is returned that starts with the infamous rO0...

10CVSS8.2AI score0.06408EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 11:20 a.m.3 views

CVE-2022-24112

CVE-2022-24112 Apache APISIX batch-requests RCECVE-2022-24112 root@kitploit: Place the target in url.txt python3 ApacheAPISIXRCECVE-2022-24112.py Cmd:...

9.8CVSS8.4AI score0.96001EPSS
SaveExploits16
RedHat Linux
RedHat Linux
added 2026/09/14 11:20 a.m.3 views

postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments

A type confusion vulnerability in PostgreSQL allows any user to execute arbitrary code as the database's operating system user by calling functions with mishandled "internal" data type arguments...

8.8CVSS0.00423EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/14 11:20 a.m.4 views

postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump

A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...

8.8CVSS0.00363EPSS
SaveExploits0References5
Rows per page
Query Builder