Lucene search
+L

1133658 matches found

Kitploit
Kitploit
added 2026/09/01 1:37 p.m.2 views

Mintinstall-object-injection

TR Linux mint yazılım yöneticisi v 7.9.5/9 yanlış yapılandırmadan dolayı obje enjeksiyonu ve keyfi kod çalıştırmamıza neden olmaktadır. EN Linux mint software manager v 7.9.5/9 causes us to execute object injection and arbitrary code due to incorrect configuration root@kitploit: mintinsall TR Min...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 1:37 p.m.7 views

CVE-2020-7246

CVE-2020-7246 qdPM 9.1 - Remote Code Execution...

8.8CVSS7.3AI score0.83235EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/01 1:37 p.m.3 views

CVE-2018-8097-PoC

CVE-2018-8097 POC for CVE-2018-8097 This script exploits CVE-2018-8097 and can retrieve files and contents using a time based blind RCE method. Usage root@kitploit: python cve-2018-8097.py -h -u URL -c COMMAND -t TIME -id OBJECTID -d FILEPATH options: -h, --help show this help message and exit -u...

9.8CVSS7.2AI score0.06201EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/01 1:37 p.m.6 views

CVE-2025-3515

CVE-2025-3515 CVE‑2025‑3515 — Arrastrar y soltar múltiples archivos para Contact Form 7 Descripción: Subida de archivos arbitrarios a través de drag‑and‑drop‑multiple‑file‑upload‑contact‑form‑7 ≤1.3.8.9 permite la subida de archivos .phar, lo que conduce a ejecución remota de código en...

9.8CVSS5.8AI score0.0509EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/01 1:37 p.m.4 views

cve-2025-32433-erlang_ssh_rce_reproduction

CVE-2025-32433: Erlang/OTP SSH Daemon Pre-Auth Remote Code Execution CVSS Score: 10.0 CRITICAL Status: Actively Exploited in the Wild Disclosure: June 2025 Overview CVE-2025-32433 is a critical unauthenticated remote code execution vulnerability in the SSH server implementation ssh application...

10CVSS7.7AI score0.98594EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/09/01 1:37 p.m.3 views

Shellshock_vuln_Exploit

🚨 Shellshock RCE Exploit CVE-2014-6271 This is a Python exploit for the Shellshock vulnerability CVE-2014-6271, which affects GNU Bash. The exploit targets CGI scripts on vulnerable web servers and establishes a reverse shell to the attacker's machine. CVE ID CVE-2014-6271 Disclaimer This tool is...

10CVSS7.2AI score0.99999EPSS
SaveExploits138
Kitploit
Kitploit
added 2026/09/01 1:37 p.m.5 views

CVE-2026-35585-poc

CVE-2026-35585: PoC de Inyección de Comandos del Sistema Operativo en File Browser English version Resumen Este repositorio es una Prueba de Concepto PoC de la grave vulnerabilidad de inyección de comandos del sistema operativo CVE-2026-35585 encontrada en File Browser versiones 2.0.0 a 2.33.1...

7.5CVSS7.5AI score0.01922EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/01 1:37 p.m.3 views

cve-2019-7609

CVE-2019-7609 Exploit for CVE-2019-7609 written in python3.6+ based on the code by LandGrey. CVE-2019-7609 : RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer. Usage 1. Start a listener 2. Run the exploit with the target url base url of the kiba server, the listener host...

10CVSS6.9AI score0.95338EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/01 1:36 p.m.5 views

CVE-2021-22205

CVE-2021-22205 Description - POC for CVE-2021-22205: Gitlab CE/EE RCE 未授权远程代码执行漏洞 POC && EXP - create by antx at 2021-10-29. Detail - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file...

10CVSS7.3AI score0.99731EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/09/01 1:36 p.m.4 views

URLextractor

URLextractor Information gathering & website reconnaissance Usage: ./extractor http://www.hackthissite.org/ Tips: Colorex: put colors to the ouput pip install colorex and use it like ./extractor http://www.hackthissite.org/ | colorex -g "INFO" -r "ALERT" Tldextract: is used by dnsenumeration...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 1:36 p.m.4 views

cve-2024-49113-ldap_nightmare_reproduction

CVE-2024-49113 — LDAP Nightmare Windows LDAP Client Remote Code Execution Heap-Based Buffer Overflow...

7.5CVSS7.3AI score0.82992EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/01 1:36 p.m.3 views

CVE-2026-33017

CVE-2026-33017 — Langflow Unauthenticated Remote Code Execution Author: dynamo2k1 Severity: Critical CVSSv3: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Overview CVE-2026-33017 is a critical unauthenticated Remote Code Execution vulnerability in Langflow, an open-source platform for visually building...

9.8CVSS7.5AI score0.96177EPSS
SaveExploits32References2
Kitploit
Kitploit
added 2026/09/01 1:36 p.m.6 views

CVE-2025-53770

CVE-2025-53770 This is a scanner for the SharePoint unauthenticated Remote Code Execution vulnerability, assigned CVE number CVE-2025-53770. The code for this was written by reverse-engineering a payload seen in the wild. Use at your own risk, I am not responsible for any negative impact this mig...

9.8CVSS7.4AI score0.99998EPSS
SaveExploits42References2
Kitploit
Kitploit
added 2026/09/01 1:36 p.m.4 views

CVE-2017-3000

CVE-2017-3000 A full exploit of CVE-2017-3000 on Flash Player Constant Blinding PRNG Insert WANG and wang into dynamically generated code heap in the end...

6.5CVSS6.8AI score0.0836EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 1:36 p.m.4 views

Blackash-CVE-2025-0282

Blackash-CVE-2025-0282 Description A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution...

9CVSS6.9AI score0.99979EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/01 1:35 p.m.5 views

CVE-2015-3224

Exploit de la Consola Web de Ruby on Rails CVE-2015-3224 Este repositorio contiene un script en Python para explotar una vulnerabilidad de omisión de la lista blanca de IP en la consola web de desarrollo de Ruby on Rails 4.0.x y 4.1.x. El script permite la ejecución remota de código en servidores...

4.3CVSS5.9AI score0.44708EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/01 1:35 p.m.3 views

By-Poloss..-..CVE-2026-39938

CVE-2026-39938: Cacti = 1.2.30 - LFI no autenticado Resumen Ejecutivo Campo| Valor ---|--- ID CVE| CVE-2026-39938 Puntuación CVSS| 9.8 Crítico Producto afectado| Cacti Versiones afectadas| = 1.2.30 Versión parcheada| 1.2.31 Commit de corrección| 9871f0c Detalles de la Vulnerabilidad Causa Raíz La...

9.8CVSS5.8AI score0.00693EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/01 1:35 p.m.6 views

CVE-2023-46818

Metasploit-module Metasploit Module root@kitploit: use exploit/linux/http/ispconfiglanguageedit set RHOSTS target.com set USERNAME admin set PASSWORD password123 set LHOST 127.0.0.1 set LPORT 4444 exploit An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in...

7.2CVSS7.1AI score0.15856EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/01 1:35 p.m.5 views

CVE-2025-6220

Ultimate Addons for Contact Form 7 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0...

7.2CVSS6.2AI score0.00932EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/01 1:35 p.m.3 views

CVE-2025-57819-RCE

FreePBX 16 — Unauthenticated SQLi to RCE Summary: This guide demonstrates how to chain two vulnerabilities in FreePBX 16 CVE-2025-57819 and CVE-2025-61678 to achieve a complete attack chain from unauthenticated access to Remote Code Execution RCE. Vulnerability / CVE Information , to write a PHP...

10CVSS7.4AI score0.88269EPSS
SaveExploits28
Rows per page
Query Builder