Lucene search
+L

517475 matches found

Kitploit
Kitploit
added 2026/09/04 12:13 a.m.4 views

spd_flasher

CVE-2022-38694 Hardened Exploit — RP2350 USB Host Auto Flasher 中文版 README Tutorial UDX710 Boot Chain Reverse Engineering and RP2350 Hardened Boot Tutorial Exploiting CVE-2022-38694 Unisoc BootROM vulnerability via Raspberry Pi RP2350 USB Host to automatically send SPL Loader on boot and start...

7.8CVSS6AI score0.00586EPSS
SaveExploits2References10
Kitploit
Kitploit
added 2026/09/04 12:13 a.m.5 views

SC3010-Computer-Security

SC3010-Computer-Security — CVE-2017-5638 Attack Recreation This repository is part of the SC3010 Computer Security course project. It recreates CVE-2017-5638 , a critical Remote Code Execution vulnerability in Apache Struts 2 versions 2.3.5–2.3.31 and 2.5–2.5.10, famously exploited in the 2017...

10CVSS8.2AI score0.99999EPSS
SaveExploits46References1
Kitploit
Kitploit
added 2026/09/04 12:13 a.m.7 views

CVE-2018-1270

CVE-2018-1270 - Spring messaging Spel 代码执行漏洞 昨天 Spring 公布了1个RCE漏洞,了解一下: CVE-2018-1270: Remote Code Execution with spring-messaging 影响版本 Spring Framework 5.0 to 5.0.4 Spring Framework 4.3 to 4.3.14 这个漏洞对环境没有要求,如果你在使用 spring-messaging + websocket + STOMP,请尽快升级到最新版本;如果你在用 SpringBoot,请升级到...

9.8CVSS7.7AI score0.77597EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/04 12:12 a.m.3 views

CVE-2021-42013

CVE-2021-42013 Vulnerable service Installation Several options: 1. Docker container root@kitploit: docker run -d -p 8080:80 12345qwert123456/apache2450cve-2021-42013 2. Dockerfile root@kitploit: git clone https://github.com/12345qwert123456/CVE-2021-42013.git cd...

9.8CVSS8.2AI score0.99964EPSS
SaveExploits190
Kitploit
Kitploit
added 2026/09/04 12:12 a.m.4 views

CVE-2019-16098

CVE-2019-16098 The driver in Micro-Star MSI Afterburner 4.6.2.15658 aka RTCore64.sys and RTCore32.sys allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. This can be exploited for privilege escalation, code execution under high privileges, and information...

7.8CVSS7.6AI score0.19839EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/04 12:11 a.m.4 views

CVE-2022-21974

CVE-2022-21974: Unitialized pointer free in RMSRoamingSecurity Remote Code Execution Root-cause The RMSRoamingSecurity!ATL::CComCreator ::CreateInstance constructor allocates and initializes a CRmsRoamingSecurity object 0x3470 bytes but it fails to initialize completely its state. For example, at...

9.3CVSS7.6AI score0.04969EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 12:11 a.m.8 views

CVE-2024-32019-Netdata-ndsudo-Privilege-Escalation-PoC

CVE-2024-32019 Netdata ndsudo Privilege Escalation PoC Summary CVE-2024-32019 is a local privilege-escalation flaw in Netdata’s SUID helper ndsudo that lets a local user execute arbitrary programs as root via an untrusted search path PATH hijacking. The issue exists because ndsudo restricts comma...

8.8CVSS7.9AI score0.01165EPSS
SaveExploits15References1
Kitploit
Kitploit
added 2026/09/04 12:11 a.m.7 views

PoC-CVE-2026-9198

Description Proof of concept exploit code for CVE-2026-9198 Exploit-DB entry: https://www.exploit-db.com/exploits/52675 Usage python3 poc.py -u -c...

9.8CVSS9AI score0.57019EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/04 12:10 a.m.6 views

CVE-2021-28476

CVE-2021-28476: a guest-to-host "Microsoft Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys. This is a proof of concept for CVE-2021-28476 "Hyper-V Remote Code Execution Vulnerability", an arbitrary memory read in vmswitch.sys network virtualization service provider patched by Microso...

9.9CVSS8.2AI score0.38625EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/04 12:10 a.m.9 views

CVE-2010-1240

CVE-2010-1240 PDF Launch Action Research Tool Educational research tool demonstrating CVE-2010-1240 vulnerability in Adobe Reader through malicious PDF Launch Actions. ⚠️ Disclaimer This tool is created strictly for educational purposes and security research to demonstrate CVE-2010-1240...

9.3CVSS7.8AI score0.73617EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/04 12:06 a.m.6 views

react2shell-scanner

🚨 React2Shell Scanner CVSS 10.0 RCE in React Server Components. Is your React 19 app vulnerable? Fast, accurate scanner for CVE-2025-55182 React2Shell - a critical remote code execution vulnerability exploited in the wild. Zero false positives with intelligent Server Components detection. 🚨 About...

10CVSS7.5AI score0.99802EPSS
SaveExploits389References3
Kitploit
Kitploit
added 2026/09/04 12:02 a.m.7 views

CVE-2020-1350

Warning This repository has been archived and is no longer actively maintained. CVE-2020-1350 This Powershell Script is checking if your server is vulnerable for the CVE-2020-1350 Remote Code Execution flaw in the Windows DNS Service. Supported OS for this workaround script Windows Server 2012...

10CVSS7.5AI score0.91353EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/04 12:02 a.m.7 views

CIMCown

...

8.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 12:02 a.m.4 views

LOG4J-CVE-2021-44228

LOG4J-CVE-2021-44228 Log4Shell — also known as CVE-2021-44228 — is a critical vulnerability that enables remote code execution in systems using the Apache Foundation’s Log4j, which is an open-source Java library that is extensively used in commercial and open-source software products and utilitie...

10CVSS7.4AI score0.99999EPSS
SaveExploits368
Kitploit
Kitploit
added 2026/09/04 12:02 a.m.5 views

CVE-2022-22947

CVE-2022-22947 CVE-2022-22947 Spring-Cloud-Gateway In the first quarter of 2022, an interesting and critical base score of 10.0 Spring Cloud Gateway Code Injection vulnerability was discovered leveraging the Actuator API to perform SpEL Injection, potentially leading to system compromise. Spring...

10CVSS7.9AI score0.98253EPSS
SaveExploits54
Kitploit
Kitploit
added 2026/09/04 12:01 a.m.7 views

Drupal-cve-2019-6340

Research CVE 2019-6340 root@kitploit: The site as Drupal 8 core RESTful API Services module gets enabled and allows the user to send GET, PATCH or POST Request to the server. GET request is enough to trigger the code execution vulnerability even though PATCH method is disabled The site has any...

8.1CVSS8AI score0.92017EPSS
SaveExploits23
EUVD
EUVD
added 2026/09/04 12:00 a.m.6 views

EUVD-2026-71608

In DocsGPT 0.15.0 and below, the application provides a custom prompt feature that allows users to define prompt content used during chatbot interactions. This functionality renders user-supplied prompt data using Jinja templates without input sanitization or sandboxing. An unauthenticated attack...

9.8CVSS6.3AI score0.00577EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/04 12:00 a.m.5 views

EUVD-2026-71745

An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core/models/ETMemberModel.class.php, core/controllers/ETMemberController.class.php, and core/lib/ET.class.php components...

6AI score0.00194EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/04 12:00 a.m.4 views

EUVD-2026-71612

PowerJob Worker version 5.1.2 and likely earlier versions exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port. This allows a remote attacker to execute arbitrary code...

9.8CVSS6AI score0.00885EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/04 12:00 a.m.5 views

EUVD-2026-71610

Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...

6AI score0.00258EPSS
SaveExploits0References2
Rows per page
Query Builder