Lucene search
+L

516283 matches found

Kitploit
Kitploit
added 2026/09/01 4:41 a.m.2 views

CVE-2025-68613

CVE-2025-68613 — n8n Workflow Automation Expression Engine Isolation Failure The author assumes no liability for misuse or damage caused by this research Provided strictly for educational and defensive purposes Description This repository contains a laboratory-grade analysis and a safe...

9.9CVSS7.8AI score0.99105EPSS
SaveExploits31
Kitploit
Kitploit
added 2026/09/01 4:41 a.m.4 views

go-get-rce

Este repositorio no tiene un README...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 4:41 a.m.5 views

CVE-2019-17621

DLink RCE vuln CVE-2019-17621 unauthenticated rce FAT can emulate this so plz use attifyos...

10CVSS7.4AI score0.89624EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/01 4:39 a.m.2 views

CVE-2024-3116_RCE_in_pgadmin_8.4

CVE-2024-3116RCEinpgadmin8.4 Making a lab and testing the CVE-2024-3116, a Remote Code Execution in pgadmin 8.4 pip download .whl file 8. Install pgadmin4 : python -m pip install C:\Users\User\Downloads\pgadmin4-8.4-py3-none-any.whl...

9.8CVSS6.9AI score0.65088EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/01 4:39 a.m.2 views

CVE-2012-2982

This PoC exploit for CVE-2012-2982 was written as an exercise for the "Intro to PoC scripting" Room on TryHackMe. The room can be found here: https://tryhackme.com/room/intropocscripting I was originally going to use Python to follow along, but decided to practice my Rust skills instead. I also s...

6.5CVSS5.9AI score0.62181EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/01 4:38 a.m.3 views

CVE-2022-31626

CVE-2022-31626 In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdomysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in...

8.8CVSS7.9AI score0.5838EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/01 4:37 a.m.4 views

CVE-2024-23739

CVE-2024-23739 An issue in Discord through 0.0.291 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. There is a tool designed to automate the process of searching for vulnerabilities in electron:...

9.8CVSS7.6AI score0.01808EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/01 4:37 a.m.2 views

n8n-RCE-CVE-2025-68613

n8n CVE-2025-68613 Overview This repository contains an educational security research project focused on CVE-2025-68613 , a vulnerability affecting specific versions of n8n related to unsafe workflow expression evaluation. The project was tested only in a controlled local lab environment. About...

9.9CVSS7.6AI score0.99105EPSS
SaveExploits31
Kitploit
Kitploit
added 2026/09/01 4:36 a.m.6 views

CVE-2023-33246

CVE-2023-33246 - RocketMQ Remote Code Execution CVE-2023-33246 - Apache RocketMQ config Remote Code Execution Exploit Overview RocketMQ is a distributed messaging and streaming platform. RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is...

9.8CVSS7.5AI score0.96604EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/01 4:36 a.m.3 views

CVE-2024-3105-PoC

CVE-2024-3105 PoC The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.5.0 via the 'insertphp' shortcode. This is due to the plugin not restricting the usage of the functionality to hig...

9.9CVSS6.1AI score0.02778EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 4:36 a.m.4 views

CVE-2021-31630-OpenPLC_RCE

CVE-2021-31630-OpenPLCRCE Exploit for Authenticated Remote Code Execution on OpenPLC v3 Webserver...

9CVSS7.3AI score0.27075EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/01 4:35 a.m.2 views

LogMePwn

LogMePwn LogMePwn is a fully automated, multi-protocol, reliable, super-fast scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability. Tool Highlights Inherent support for automatic Canary Tokens generation using emails or webhooks. Multi-protocol support: HTTP, IMAP, SSH,...

10CVSS7AI score0.99999EPSS
SaveExploits366References1
Kitploit
Kitploit
added 2026/09/01 4:35 a.m.3 views

CVE-2023-38646

CVE-2023-38646 Automatic Tools For Metabase RCE Exploit Known As CVE-2023-38646. Read https://secry.me/explore/news/metabase-rce-cve-2023-38646/ for more information POC, Dork How to Use single.py root@kitploit: python3 single.py --url=http://127.0.0.1:8080 --command="curl...

9.8CVSS7.4AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/01 4:35 a.m.2 views

Log4Shell-CVE-2021-44228

Exploiting Log4Shell CVE-2021-44228: A Complete, Modern Demonstration Lab Log4Shell CVE-2021-44228 is one of the most impactful remote code execution vulnerabilities ever disclosed. It affects Apache Log4j 2 , a widely used Java logging framework, and allows attackers to execute arbitrary code by...

10CVSS7.6AI score0.99999EPSS
SaveExploits366
Kitploit
Kitploit
added 2026/09/01 4:34 a.m.5 views

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle just disclosed a new vulnerability CVE-2025-61884, the detection script for that vuln can be found in this repo or originally here:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. As quoted from Oracle's security advisory: This Securit...

9.8CVSS7.4AI score0.99722EPSS
SaveExploits20References4
Kitploit
Kitploit
added 2026/09/01 4:34 a.m.3 views

CVE-2020-10977

GitLab v12.4.0-12.8.1 RCE Based entirely on https://github.com/dotPY-hax/gitlabRCE, which did not work for me and the HTML parsing stuff seemed cumbersome so I rewrote it in js. Usage Start a reverse shell handler in the usual way, then run this script with: root@kitploit:...

5.5CVSS6AI score0.42741EPSS
SaveExploits10References1
Kitploit
Kitploit
added 2026/09/01 4:34 a.m.3 views

CVE-2025-55182-VulnCheckPOC

CVE-2025-55182 Vulnerability Check PoC Proof-of-concept scanner for detecting React Server Components RSC vulnerability in Next.js applications CVE-2025-55182. Usage This is only a check to see if a server is vulnerable, based on this release by Searchlight Cyber...

10CVSS7AI score0.99802EPSS
SaveExploits402
Kitploit
Kitploit
added 2026/09/01 4:34 a.m.4 views

printix-CVE-2022-29554

CVE-2022-29554 Simple Release | Print Friendly A "Mishandling of Input to API" or "Exposed Dangerous Method or Function" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attacker the ability to...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 4:34 a.m.4 views

CVE-2022-29337

CVE-2022-29337 C-DATA FD702XW-X-R430 v2.1.13X001 was discovered to contain a command injection vulnerability via the vacmd parameter in formlanipv6. This vulnerability allows attackers to execute arbitrary commands via a crafted HTTP request...

9.8CVSS7.5AI score0.35463EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 4:33 a.m.3 views

Pluck-CMS-v4.7.18-Remote-Code-Execution-CVE-2023-50564

CVE-2023-50564 - Pluck CMS v4.7.18 Remote Code Execution RCE Exploit Description This script exploits a Remote Code Execution RCE vulnerability in Pluck CMS v4.7.18. The vulnerability allows a malicious user to upload a malicious PHP file to the server and execute it, gaining remote command...

8.8CVSS7.5AI score0.29069EPSS
SaveExploits11
Rows per page
Query Builder