Lucene search
+L

353952 matches found

Kitploit
Kitploit
•added 2026/09/25 2:50 a.m.•10 views

PHP_8.1.x_Exploit

🚀 PHP CVE Autopilot Automated detection & exploitation of critical PHP vulnerabilities CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh is a single‑file, zero‑configuration security assessment tool that automatically discovers vulnerable PHP endpoints and...

9.8CVSS7.2AI score0.99987EPSS
SaveExploits71References1
Kitploit
Kitploit
•added 2026/09/25 2:50 a.m.•9 views

CVE-2020-8515

CVE-2020-8515 Draytek CVE-2020-8515 PoC I had kicking about. Amusingly, the command injected gets executed twice, see here: root@kitploit: $ ./draytek.py draytek.local executing command: cat /etc/passwd + vulnerable! executing command: uname -a Linux Vigor3900 2.6.33.5 1 Wed Mar 28 00:49:28 CST...

10CVSS8.4AI score0.99993EPSS
SaveExploits7References1
Kitploit
Kitploit
•added 2026/09/25 2:49 a.m.•11 views

CVE-2020-28018

CVE-2020-28018: Exim Use-after-free UAF leading to RCE Introduction There exists a Use-after-free UAF vulnerability in tls-openssl.c that allow remote unauthenticated attackers to corrupt internal memory data, thus finally achieving remote code execution. Primitives: Memory Leakage Arbitrary read...

9.8CVSS8AI score0.5675EPSS
SaveExploits3References1
Kitploit
Kitploit
•added 2026/09/25 2:48 a.m.•14 views

nodesub

NODESUB Nodesub es una herramienta de línea de comandos para encontrar subdominios en programas de bug bounty. Soporta diversas técnicas de enumeración de subdominios y proporciona opciones flexibles para personalización. Características Realizar enumeración de subdominios usando notación CIDR...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 2:48 a.m.•38 views

nodesub

NODESUB Nodesub is a command-line tool for finding subdomains in bug bounty programs. It supports various subdomain enumeration techniques and provides flexible options for customization. Features Perform subdomain enumeration using CIDR notation Support input list. Perform subdomain enumeration...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 2:47 a.m.•15 views

EDRSandblast-GodFault

EDRSandblast-GodFault Por Gabriel Landau en Elastic Security. Modificación de EDRSandblast - vea el README original a continuación. Integra GodFault en EDR Sandblast, logrando el mismo resultado sin el uso de ningún controlador vulnerable. Salida de Ejemplo...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 2:46 a.m.•8 views

CVE-2021-25094-tatsu-preauth-rce

Preauth RCE in Tatsu builder Wordpress plugin CVE-2021-25094 Simple PoC of an unauthenticated RCE in Tatsu Builder = 3.3.11 provided as an example. Full write-up here: https://darkpills.com/wordpress-tatsu-builder-preauth-rce-cve-2021-25094/ Usage: root@kitploit: python3 exploit-rce.py -h...

8.1CVSS7.9AI score0.83354EPSS
SaveExploits9
GithubExploit
GithubExploit
•added 2026/09/25 2:45 a.m.•18 views

Exploit for Use After Free in Linux Linux_Kernel

GhostLock — CVE-2026-43499 PoC Qualcomm 4.19 kernel Local p...

7.8CVSS7.7AI score0.00278EPSS
SaveExploits108
Kitploit
Kitploit
•added 2026/09/25 2:45 a.m.•13 views

CVE-2022-1388

CVE-2022-1388 Checking and exploit for CVE-2022-1388 Installation: root@kitploit: python3 -m pip install -r requirements.txt Usage Single : root@kitploit: python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"'...

9.8CVSS8.8AI score0.99954EPSS
SaveExploits63References3
Kitploit
Kitploit
•added 2026/09/25 2:44 a.m.•13 views

am335xbootrom

Reverse Engineering the AM335x Boot ROM It's probably been eighteen months since I first got my hands a few Beaglebone Black boards, saved from the dumpster. Unfortunately, the boards didn't work right away. Now, this was my first time working with one of these boards, or any single board compute...

6.1AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/25 2:43 a.m.•13 views

Embedded-Backdoor-Connection

Embedded Backdoor Connection via PDF Files 😈 brought to you by Introduction This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240. As so...

9.3CVSS7.9AI score0.73617EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/09/25 2:40 a.m.•10 views

TJ-OPT

TJ-OPT Release Date September 9th 2024 Introduction As a pentester, there are many great resources, cheat sheets, and guidelines that contain a large amount of valuable information. However, it can be frustrating and time-consuming to find these notes or resources that are scattered all over the...

6AI score
SaveExploits0
OSV
OSV
•added 2026/09/25 2:39 a.m.•5 views

MAL-2026-17175 Malicious code in n8n-nodes-flowstats (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa25eb3d56eb14b75cbb4dedbd5d09063e4b742b53acef9a4096cc77213b8f3 The package presents itself as an n8n community node that annotates items with flow statistics, but nodes/FlowStats.node.js contains two independent...

6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/25 2:39 a.m.•14 views

Malicious code in n8n-nodes-flowstats (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa25eb3d56eb14b75cbb4dedbd5d09063e4b742b53acef9a4096cc77213b8f3 The package presents itself as an n8n community node that annotates items with flow statistics, but nodes/FlowStats.node.js contains two independent...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 2:38 a.m.•13 views

CVE-2019-5624

CVE-2019-5624 A proof of concept for Metasploit's CVE-2019-5624 vulnerability Rubyzip insecure ZIP handling RCE Intro In February 2019 I found a new vulnerability in the Rubyzip library. It allows an attacker to exploit insecure ZIP handling Zip Slip resulting in remote command execution. This...

7.4CVSS7.5AI score0.02758EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/25 2:37 a.m.•8 views

CVE-2026-22812

🔐 CVE-2026-22812 - OpenCode Unauthenticated HTTP Server → Remote Code Execution RCE Security advisory, technical analysis, detection guidance, and mitigation notes for CVE-2026-22812 📌 Overview CVE-2026-22812 is a high-severity Remote Code Execution RCE vulnerability affecting OpenCode versions...

8.8CVSS8.5AI score0.16771EPSS
SaveExploits7
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/25 2:37 a.m.•9 views

Malicious code in better-dotenv3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f996c75c75423a57a64c1c89b04f2e1ba87674973dba2dd359df5b0937ffe3cf The package is a dotenv typosquat that runs a hidden Windows loader on every require and on CLI startup. dist/index.cjs and dist/cli.cjs invoke...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2026/09/25 2:37 a.m.•4 views

MAL-2026-17172 Malicious code in better-dotenv3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f996c75c75423a57a64c1c89b04f2e1ba87674973dba2dd359df5b0937ffe3cf The package is a dotenv typosquat that runs a hidden Windows loader on every require and on CLI startup. dist/index.cjs and dist/cli.cjs invoke...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 2:37 a.m.•15 views

windows-api-function-cheatsheets

Windows API Function Cheatsheets Contact 🌨️ Tetsuo: https://www.x.com/tetsuo Table of Contents Windows API Function Cheatsheets File Operations Process Management Memory Management Thread Management Dynamic-Link Library DLL Management Synchronization Interprocess Communication Windows Hooks...

6.6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 2:36 a.m.•10 views

CVE-2019-19919

CVE-2019-19919 Handlebars Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' Vulnerability pip install requests packaging python handlebarsscanner.py pip install requests python handlebarsexploit.py Enter the target URL: Exploit Expected Output : Ente...

9.8CVSS7.6AI score0.07066EPSS
SaveExploits0
Rows per page
Query Builder