Lucene search
+L

516497 matches found

Kitploit
Kitploit
added 2026/09/01 8:41 p.m.7 views

CVE-2003-0264-SLmail-5.5

CVE-2003-0264 - Seattle Lab Mail 5.5 POP3 バッファオーバーフロー 参照 https://vulners.com/cve/CVE-2003-0264 脆弱性 SLMail は POP3 パスワードの送信時に境界チェックを行いません。 そのため、SLMail サーバーに対して長大で不正な形式の POP3 PASS を送信することにより、任意のコードを実行できます。...

7.5CVSS5.8AI score0.71483EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/01 8:41 p.m.6 views

CVE-2021-41773-Apache-RCE

CVE-2021-41773-Apache-RCE 在 Apache HTTP Server 2.4.49 的路径规范化变更中发现了一个缺陷。攻击者可以使用路径遍历攻击,将 URL 映射到由类似 Alias 指令配置的目录之外的文件。如果这些目录外的文件没有受到通常默认配置 "require all denied" 的保护,这些请求可能会成功。如果还为这些别名路径启用了 CGI 脚本,则可能导致远程代码执行。已知该问题已在野外被利用。此问题仅影响 Apache 2.4.49,不影响早期版本。Apache HTTP Server 2.4.50 中的修复被证实不完整,请参见...

9.8CVSS7.2AI score0.99992EPSS
SaveExploits164
Kitploit
Kitploit
added 2026/09/01 8:41 p.m.3 views

CVE-2004-2271-MiniShare-1.4.1-BOF

CVE-2004-2271 - MiniShare 1.4.1 - BOF 参考文献 https://nvd.nist.gov/vuln/detail/CVE-2004-2271 脆弱性 MiniShare 1.4.1 は、受信した HTTP GET リクエストに対して境界チェックを行いません。 長く不正な形式の HTTP GET リクエストを送信することで、攻撃者はバッファオーバーフローを引き起こし、システム上で任意のコードを実行できます。 エクスプロイトノート EIP が上書きされた後、シェルコードに使用できるスペースは 210 バイトのみです。...

7.5CVSS7.3AI score0.71908EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/01 8:41 p.m.5 views

CVE-2024-4040

Exploit Code for CVE-2024-4040 Overview This exploit code targets the CVE-2024-4040 vulnerability, allowing unauthorized access to user accounts by reading and validating tokens stored in the "sessions.obj" file. If the tokens are valid, hackers can gain entry to the targeted accounts. Unlike oth...

10CVSS7AI score0.99539EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/01 8:41 p.m.3 views

Log4jCenter

Log4jCenter Exploiting CVE-2021-44228 in vCenter for remote code execution and more. Blog post detailing exploitation linked below: How to exploit Log4j vulnerabilities in VMWare vCenter Why? Proof of concepts for this vulnerability are scattered and have to be performed manually. This repository...

10CVSS7.5AI score0.99999EPSS
SaveExploits366
Kitploit
Kitploit
added 2026/09/01 8:41 p.m.4 views

CVE-2018-7600

CVE-2018-7600 - Drupal 7 Remote Code Execution A Rust implementation of the CVE-2018-7600 exploit targeting vulnerable Drupal 7 installations = 7.57. This CLI reproduces this following PoC flow: it poisons a cached renderable form via the user/password path, extracts a formbuildid, then triggers...

9.8CVSS7AI score0.99991EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/01 8:40 p.m.4 views

needrestart-sudo-escalate-cve-2024-4890

CVE-2024-4890: needrestart Sudo Privilege Escalation PoC Disclaimer For lab-only use in controlled environments. Do not exploit on production systems without explicit authorization. This PoC is for educational purposes only. The author is not responsible for any misuse or unauthorized access...

4.9CVSS6.4AI score0.0056EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 8:40 p.m.3 views

Craft-CMS-Exploit

Este script de Python explota la vulnerabilidad de ejecución remota de código CVE-2023-41892 de Craft CMS, un popular sistema de gestión de contenidos. Las versiones entre 4.0.0-RC1 y 4.4.14 se ven afectadas por esta vulnerabilidad, lo que permite a atacantes ejecutar código arbitrario de forma...

10CVSS7.5AI score0.92555EPSS
SaveExploits10References2
Kitploit
Kitploit
added 2026/09/01 8:40 p.m.5 views

CVE-2022-24086-RCE-PoC

CVE-2022-24086 RCE POC About CVE-2022-24086 which Adobe saw being “exploited in the wild in very limited attacks” received a severity score of 9.8 out of 10, and adversaries exploiting it can achieve remote code execution on affected systems without the need to authenticate. Issue that is now...

10CVSS7.4AI score0.99199EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/01 8:40 p.m.6 views

CVE-2025-48148

CVE-2025-48148 StoreKeeper for WooCommerce = 14.4.4 - Unauthenticated Arbitrary File Upload 🚀 StoreKeeper for WooCommerce = 14.4.4 - Unauthenticated Arbitrary File Upload Exploit 📝 Description The StoreKeeper for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to...

10CVSS5.9AI score0.15082EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/01 8:40 p.m.4 views

Cobaltstrike-RCE-CVE-2022-39197

Cobaltstrike RCE Vulnerability CVE-2022-39197 Reproduction Vulnerability Brief This vulnerability exists in the Cobalt Strike Beacon software and may allow an attacker to set a malformed username in the Beacon configuration, triggering XSS, which can lead to remote code execution on the Cobalt...

6.1CVSS7AI score0.46446EPSS
SaveExploits6References2
Kitploit
Kitploit
added 2026/09/01 8:39 p.m.3 views

Log4jUnifi

Log4jUnifi Exploiting CVE-2021-44228 in Unifi Network Application for remote code execution and more. Another Log4j on the fire: Unifi Why? Proof of concepts for this vulnerability are scattered and have to be performed manually. This repository automates the exploitation process. See the blog po...

10CVSS7AI score0.99999EPSS
SaveExploits366
Kitploit
Kitploit
added 2026/09/01 8:39 p.m.3 views

CVE-2019-16941

CVE-2019-16941 Proof-of-Concept: The vulnerability requires multiple and relatively improbable conditions in order to get triggered, fact that limits its exploitability. However, it takes little effort and understanding to prepare a payload given the fact that it can result into an arbitrary code...

9.8CVSS7.4AI score0.05133EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/01 8:39 p.m.4 views

Jenkins_CVE-2019-1003000

JenkinsScript-SecurityPipeline Plugin Remote Code Execution VulnerabilityCVE-2019-1003000 pocsuite Version...

8.8CVSS6.8AI score0.98375EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/01 8:38 p.m.7 views

GeoServer-CVE-2024-36401

GeoServer-CVE-2024-36401 GeoServer CVE-2024-36401: Vulnerabilidad de ejecución remota de código RCE en la evaluación de expresiones de nombres de propiedades GetPropertyValue root@kitploit: POST /geoserver/wfs HTTP/1.1 Host: PunitDarji Content-Type: application/xml User-Agent: Mozilla/5.0 Windows...

9.8CVSS7.3AI score0.99813EPSS
SaveExploits26
EUVD
EUVD
added 2026/09/01 8:38 p.m.8 views

EUVD-2026-65525

NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers incomplete fix of CVE-2026-12841...

9.8CVSS5.8AI score0.00403EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/01 8:38 p.m.4 views

Ivanti-CVE-2025-0282

Ivanti-CVE-2025-0282 Ivanti Remote code execution Thanks @Abdualhadi khalifa...

9CVSS6.9AI score0.99979EPSS
SaveExploits14References1
Kitploit
Kitploit
added 2026/09/01 8:38 p.m.3 views

CVE-2023-46604

Resumen Técnico del Ataque: CVE-2023-46604 El script explota una vulnerabilidad de deserialización insegura en Apache ActiveMQ CVE-2023-46604 para lograr la ejecución remota de código en el servidor objetivo. Descripción del Proceso de Explotación root@kitploit: Objetivo de la Vulnerabilidad: La...

10CVSS7.7AI score0.99723EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/01 8:37 p.m.4 views

CVE-2022-20699

CVE-2022-20699 🎧 Audiobahn よりお届けします Cisco Anyconnect VPN 未認証 RCE rwx stack 十分にチェックされていません...

10CVSS7.4AI score0.72458EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/01 8:37 p.m.5 views

CVE-2024-23113

CVE-2024-23113 このスクリプトは、CVE-2024-23113(FortiGate...

9.8CVSS7.4AI score0.61725EPSS
SaveExploits8
Rows per page
Query Builder