Lucene search
+L

516151 matches found

Kitploit
Kitploit
added 2026/08/31 6:23 p.m.3 views

CVE-2021-44228-PoC

CVE-2021-44228 PoC PoC para CVE-2021-44228. Proyecto creado SOLO CON FINES EDUCATIVOS. Servidor del exploit Este proyecto crea dos servidores: http y ldap. Ambos son necesarios para que el exploit funcione. El archivo java especificado se compila y los servidores se inician en el Dockerfile. El...

10CVSS6.9AI score0.99999EPSS
SaveExploits366
Kitploit
Kitploit
added 2026/08/31 6:21 p.m.4 views

CVE-2017-0199-v5.0

Exploit toolkit CVE-2017-0199 - v5.0 El exploit toolkit CVE-2017-0199 - v5.0 es un práctico script de Python que ofrece a pentesters e investigadores de seguridad una forma rápida y eficaz de probar la ejecución remota de código RCE en Microsoft Office. Puede generar un archivo RTF/PPSX malicioso...

9.3CVSS7.2AI score0.99933EPSS
SaveExploits30
Kitploit
Kitploit
added 2026/08/31 6:19 p.m.7 views

CVE-2024-53677-Exploitation

CVE-2024-53677 Explotación Apache Struts RCE a través de la subida de archivos Descripción CVE-2024-53677 es una vulnerabilidad que afecta a Apache Struts desde la versión 2.0.0 hasta antes de la 6.4.0. ⚠️ Esta fue explotada en un laboratorio de Hack The Box. La lógica de subida de archivos en...

9.8CVSS7.6AI score0.78198EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/08/31 6:17 p.m.7 views

cve-2019-17558-apache-solr-rce

Apache Solr RCE CVE-2019-17558 - Write-up de CTF Explotación práctica de una vulnerabilidad de inyección de plantillas Velocity Velocity Template Injection en Apache Solr, evolucionando de una falla en una herramienta automatizada Metasploit a una explotación manual exitosa. Este write-up documen...

7.5CVSS7.4AI score0.98567EPSS
SaveExploits14
NVD
NVD
added 2026/08/31 6:17 p.m.7 views

CVE-2026-79748

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0.12.15, the POST /api/servers and PUT /api/servers/:name endpoints in MCPHub create/update MCP server configurations a...

9.9CVSS0.00333EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/31 6:15 p.m.31 views

CVE-2023-20511

Release of an invalid pointer in the AMD kernel mode driver KMD could allow a privileged attacker to create a double free condition potentially leading to arbitrary code execution...

6.4CVSS0.00233EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/31 6:15 p.m.7 views

CVE-2023-20511

CVE-2023-20511 affects the AMD kernel mode driver (KMD) , where an invalid pointer release can create a double free condition. A privileged attacker with network access and high attack complexity could potentially exploit this to achieve arbitrary code execution . The CVSS v3.1 score is 6.4 (Medi...

6.4CVSS6.8AI score0.00233EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/31 6:15 p.m.7 views

EUVD-2023-60609

Release of an invalid pointer in the AMD kernel mode driver KMD could allow a privileged attacker to create a double free condition potentially leading to arbitrary code execution...

6.4CVSS6.1AI score0.00233EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 6:01 p.m.2 views

CVE-2021-40444

CVE-2021-40444 totalmente armado Generador de docx malicioso para explotar CVE-2021-40444 ejecución remota de código en Microsoft Office Word, funciona con archivos DLL arbitrarios. Antecedentes Aunque ya hay muchos PoC por Internet, decidí probar suerte en armar esta vulnerabilidad, ya que lo qu...

8.8CVSS7AI score0.9745EPSS
SaveExploits38References1
Kitploit
Kitploit
added 2026/08/31 5:58 p.m.3 views

CVE-2024-32002-git-rce-father-poc

This repository does not have a README...

9CVSS7.2AI score0.29234EPSS
SaveExploits32
Kitploit
Kitploit
added 2026/08/31 5:55 p.m.4 views

PoC_CVE-2017-3164_CVE-2017-1262

Apache Solr Poc CVE-2017-3164 CVE-2017-12629 This folder contains example exploits for Apache Solr CVE-2017-3164 CVE-2017-12629 To be use ONLY for education purposes and with full permission of the Apache Solr Server owner. You will need to know the IP or DNS name of the Apache Solr server and th...

9.8CVSS7.3AI score0.91896EPSS
SaveExploits12
CVE
CVE
added 2026/08/31 5:55 p.m.40 views

CVE-2026-79748

MCPHub , a hub for centrally managing and orchestrating multiple MCP servers/APIs, contains a command injection vulnerability in the POST /api/servers and PUT /api/servers/:name endpoints prior to version 0.12.15. These endpoints spawn configured stdio processes via child_process.spawn but lack a...

9.9CVSS6AI score0.00333EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/31 5:55 p.m.29 views

CVE-2026-79748 MCPHub: Authenticated non-admin user achieves RCE via POST /api/servers (missing authorization on stdio command/args)

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0.12.15, the POST /api/servers and PUT /api/servers/:name endpoints in MCPHub create/update MCP server configurations a...

9.9CVSS0.00333EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/31 5:54 p.m.5 views

CVE-2024-5274-Detection

CVE-2024-5274-Detection Código Guardián: Un script para descubrir vulnerabilidades CVE-2024-5274 CVE-2024-5274 Script de detección y actualización de vulnerabilidad Zero-Day de Google Chrome Resumen Google recientemente parcheó una cuarta vulnerabilidad de día cero en Chrome, conocida como...

9.6CVSS6.9AI score0.07472EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/31 5:54 p.m.2 views

CVE-2024-23897

CVE-2024-23897: Vulnerabilidad de Lectura Arbitraria de Archivos en Jenkins que lleva a RCE Introducción Este repositorio contiene un script de Python que explota una vulnerabilidad crítica CVE-2024-23897 en Jenkins, que permite la lectura arbitraria de archivos y la ejecución remota de código RC...

9.8CVSS8AI score0.99999EPSS
SaveExploits50
Kitploit
Kitploit
added 2026/08/31 5:53 p.m.6 views

CVE-2024-8856

CVE-2024-8856: WordPress WP Time Capsule Plugin Arbitrary File Upload Vulnerability Overview CVE-2024-8856 is a security vulnerability found in the WP Time Capsule plugin for WordPress that allows unauthenticated users to upload arbitrary files to the server. This can lead to remote code executio...

9.8CVSS7.7AI score0.94004EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/31 5:52 p.m.6 views

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 According to The National Vulnerability Database NVD CVE-2021-41773, Apache HTTP Server 2.4.49 is vulnerable to Path Traversal and Remote Code execution attacks. Path Traversal The path traversal vulnerability was introduced due to the new code change added for path...

9.8CVSS7.8AI score0.99992EPSS
SaveExploits164
Kitploit
Kitploit
added 2026/08/31 5:52 p.m.5 views

CVE-2025-1307

Exploit de Newscrunch CVE-2025-1307 🚨 Resumen Este exploit se dirige a una vulnerabilidad crítica CVE-2025-1307 en el tema Newscrunch de WordPress. La falla permite a usuarios autenticados Suscriptor y superiores subir archivos arbitrarios debido a la falta de comprobaciones de capacidad en la...

9.8CVSS7.3AI score0.02122EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 5:52 p.m.4 views

CVE-2021-3129

CVE-2021-3129 Herramientas de escaneo masivo para el modo de depuración de Laravel = V8.4.2, Ejecución Remota de Código RCE | Python Referencia Ambionics.io PHPGCC Cadena PHPGCC Laravel/RCE1 Laravel/RCE2 Laravel/RCE3 Laravel/RCE4 Laravel/RCE5 Laravel/RCE6 Laravel/RCE7 Monolog/RCE1 Monolog/RCE2...

9.8CVSS7AI score0.99943EPSS
SaveExploits38References1
Kitploit
Kitploit
added 2026/08/31 5:49 p.m.4 views

CVE-2019-0232

Exploit for Apache Tomcat CVE-2019-0232 This script exploits the CVE-2019-0232 vulnerability in Apache Tomcat, which allows remote code execution through the improper handling of the ism.bat script. The script leverages a reverse shell technique using certutil and nc.exe Netcat to gain remote...

9.3CVSS7.9AI score0.99652EPSS
SaveExploits11
Rows per page
Query Builder