Lucene search
+L

354019 matches found

Kitploit
Kitploit
•added 2026/09/24 2:08 p.m.•9 views

CVE-2023-6931

CVE-2023-6931 Kernel Panic PoC for CVE-2023-6931 Description CVE-2023-6931 is a vulnerability in perfevent that leads to a heap buffer overflow caused by an integer overflow in the readsize of a group. What is a Performance Event perf event? perfevents is a performance monitoring and analysis...

7.8CVSS6.8AI score0.00715EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/24 2:07 p.m.•11 views

SharpToken

SharpToken Durante el movimiento lateral del equipo rojo, a menudo necesitamos robar los permisos de otros usuarios. Bajo la defensa de un EDR moderno, nos resulta difícil usar Mimikatz para obtener otros permisos de usuario, y si el usuario objetivo no tiene ningún proceso activo, no tenemos for...

6.2AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/24 2:07 p.m.•11 views

CVE-2021-36749

CVE-2021-36749 Apache Druid LoadData Arbitrary File Read Vulnerability Code By:Junsheng @Orange Cybersecurity Lab Orange Cybersecurity Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized attacks on websites are prohibited. Online reading of...

6.5CVSS7.1AI score0.80907EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/24 2:07 p.m.•13 views

CVE-2024-10914-EXPLOIT

CVE-2024-10914 - D-Link Remote Code Execution RCE This repo contains a proof-of-concept PoC exploit for a critical vulnerability affecting D-Link NAS devices. The bug, tracked as CVE-2024-10914 , impacts the following models: D-Link DNS-320 D-Link DNS-320LW D-Link DNS-325 D-Link DNS-340L The...

9.8CVSS8.1AI score0.96284EPSS
SaveExploits13
Kitploit
Kitploit
•added 2026/09/24 2:07 p.m.•13 views

featherduster

FeatherDuster and Cryptanalib FeatherDuster is a tool written primarily by Daniel "unicornfurnace" Crowley, along with community contributions, for breaking crypto; It tries to make the process of identifying and exploiting weak cryptosystems as easy as possible. Cryptanalib is the moving parts...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 2:07 p.m.•10 views

CVE-2022-34753-EXPLOIT

CVE-2022-34753 - OS Command Injection in SpaceLogic C-Bus Home Controller CVE-2022-34753 is a critical security vulnerability classified under CWE-78, indicating an "Improper Neutralization of Special Elements used in an OS Command" commonly referred to as 'OS Command Injection'. This vulnerabili...

8.8CVSS8.1AI score0.71284EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/24 2:07 p.m.•10 views

0-click-RCE-Exploit-for-CVE-2024-51791

CVE-2024-51791 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858910306140893268 This repository contains a proof-of-concept exploit for CVE-2024-51791, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress forms plugin, leading to...

10CVSS8.8AI score0.00627EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 2:07 p.m.•12 views

CVE-2022-33891-EXPLOIT

CVE-2022-33891 - Apache Spark UI Remote Code Execution RCE 🔐 Apache Spark UI is susceptible to a remote command injection vulnerability identified as CVE-2022-33891. This flaw arises due to improper handling of user authentication and access control, specifically when Access Control Lists ACLs ar...

8.8CVSS8.3AI score0.93076EPSS
SaveExploits12
Kitploit
Kitploit
•added 2026/09/24 2:07 p.m.•10 views

0-click-RCE-Exploit-for-CVE-2023-51409

CVE-2023-51409 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858586463777989073 This repository contains a proof-of-concept exploit for CVE-2023-51409, an unauthenticated arbitrary file upload vulnerability in the AI Engine: ChatGPT Chatbot WordPress plugin,...

10CVSS8.7AI score0.63077EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/24 2:07 p.m.•9 views

ProFTPd-1.3.5-mod_copy-Remote-Command-Execution

ProFTPd-1.3.5-modcopy-Remote-Command-Execution Script that exploits the vulnerability of the ProFTP 1.3.5 service with CVE-2015-3306 Usage .ProFTPD1.3.5RemoteCommandExecution.py -h --rhost RHOST --rportftp RPORTFTP --targeturi TARGETURI --tmppath TMPPATH --sitepath SITEPATH --payload PAYLOAD...

10CVSS7.9AI score0.96752EPSS
SaveExploits26
Kitploit
Kitploit
•added 2026/09/24 2:07 p.m.•7 views

CVE-2025-32463-POC

CVE-2025-32463 – Sudo chroot Privilege Escalation PoC This repository contains a proof-of-concept PoC exploit for CVE-2025-32463, a local privilege escalation vulnerability in sudo versions 1.9.14 through 1.9.17. The vulnerability allows a local unprivileged user to escalate privileges to root by...

9.3CVSS7.7AI score0.61039EPSS
SaveExploits71
Kitploit
Kitploit
•added 2026/09/24 2:07 p.m.•9 views

CVE-2012-2982

CVE-2012-2982 John Hammond | September 4th, 2021 Checking searchsploit for Webmin 1.580 I only saw a Metasploit module for the /file/show.cgi Remote Code Execution attack on that legacy Webmin version. This code is an attempt to recreate that in Python without using Metasploit. Files...

6.5CVSS6.1AI score0.62181EPSS
SaveExploits10
Kitploit
Kitploit
•added 2026/09/24 2:07 p.m.•9 views

CVE-2025-55182-React2shell

CVE-2025-55182 - React2shell A Python 2.7 exploit for CVE-2025-55182 – a critical prototype pollution / RCE vulnerability in Next.js applications. This tool allows both single‑target interactive shell and mass scanning of multiple hosts with multithreading, colorful output, and automatic HTTPS...

10CVSS7.9AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
•added 2026/09/24 2:07 p.m.•8 views

CVE-2025-66478-github-patcher

Next.js CVE Auto-Patcher Automation tool written in Go to scan GitHub repositories, detect vulnerable Next.js versions CVE-2025-66478, and automatically create Pull Requests with the specific security patch. 📋 Prerequisites Make sure you have the following installed and configured in your...

7.5AI score
SaveExploits112
Kitploit
Kitploit
•added 2026/09/24 2:07 p.m.•10 views

CVE-2024-10508

CVE-2024-10508 This tool scans WordPress sites for vulnerabilities in the RegistrationMagic plugin CVE-2024-10508. It checks for the presence of a specific version 6.0.2.6 and marks the site as vulnerable if found. The results are saved in a file vuln.txt for further analysis. Features: Scans...

9.8CVSS8.3AI score0.01518EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/24 2:06 p.m.•9 views

explotacion-vsftpd-nmap_Laboratorio_1

🔐 Security Lab - Unit 1 📝 Lab Statement Name: Exploitation of vulnerable services Objective: Identify, analyze, and exploit a vulnerable service in a controlled lab environment using reconnaissance and exploitation tools. Instructions: 1. Identify a vulnerable service on a target machine. 2...

10CVSS8AI score0.96184EPSS
SaveExploits52
Kitploit
Kitploit
•added 2026/09/24 2:06 p.m.•8 views

CVE-2024-4701-POC

CVE-2024-4701-POC POC for CVE-2024-4701 Download the genie docker file from https://netflix.github.io/genie/docs/4.3.0/demo/docker-compose.yml or this repo run docker-compose up Download the attached http payload loadlib Run the following command nc -w 5 localhost 8080 loadlib You may need to...

9.9CVSS8.5AI score0.24629EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/24 2:06 p.m.•10 views

CVE-2021-22210

0x01 Preface Disclaimer: This project is for learning and communication purposes only. Do not use it for illegal unauthorized testing! Update Log 10.30 Added burp proxy pool Rewrote command-line arguments Added GitLab unauthorized batch and single detection functionality 0x02 Usage Instructions...

10CVSS7.8AI score0.99731EPSS
SaveExploits29References3
Kitploit
Kitploit
•added 2026/09/24 2:06 p.m.•8 views

CVE-2023-38646-PoC-Metabase

CVE-2023-38646-PoC-Metabase Proof-of-Concept script for exploiting CVE-2023-38646. Intended for educational and research purposes only. Description This is a Python-based Proof-of-Concept PoC script to exploit CVE-2023-38646, a vulnerability affecting Metabase. The exploit abuses misconfiguration...

9.8CVSS8.7AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
•added 2026/09/24 2:06 p.m.•6 views

CVE-2022-25765-exploit

CVE-2022-25765 — Command Injection in pdfkit Description CVE-2022-25765 is a command injection vulnerability affecting pdfkit Ruby gem in versions 0.8.7.2. The vulnerability has a CRITICAL severity with CVSS 9.8, as it allows remote command execution without authentication. The problem lies in th...

9.8CVSS8.4AI score0.41568EPSS
SaveExploits12
Rows per page
Query Builder