Lucene search
+L

2661 matches found

Kitploit
Kitploit
added 2026/09/14 9:27 a.m.1117 views

phpstan

PHPStan - PHP Static Analysis Tool PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves PHP closer to compiled languages in the sense that the correctness of each line of the code can be...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/14 7:40 a.m.245 views

versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...

5.7AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/09/14 5:14 a.m.3 views

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

7.5CVSS5.9AI score0.00798EPSS
SaveExploits0References7
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.37 views

tagDiv Composer < 4.2 - Stored Cross-Site Scripting

tagDiv Composer plugin versions before 4.2 for WordPress are vulnerable to unauthenticated stored XSS via the /wp-json/tdw/savecss endpoint. An attacker can inject malicious JavaScript code through the compiledcss parameter, which gets stored and executed when the CSS is loaded. id: CVE-2023-3169...

6.1CVSS6.9AI score0.0129EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/14 12:45 a.m.8 views

Onapsis_CVE-2025-31324_Scanner_Tools

Escáner de Vulnerabilidad e Indicador de Compromiso IoC para CVE-2025-31324 Vulnerabilidad de Carga de Metadatos de Visual Composer CVE-2025-31324 es una vulnerabilidad crítica CVSSv3 10 que afecta a los sistemas SAP NetWeaver, específicamente dentro del componente Visual Composer Metadata...

10CVSS8.1AI score0.99512EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/13 11:55 p.m.7 views

CVE-2025-31324_PoC_SAP

CVE-2025-31324PoC Proof-of-Concept for CVE-2025-31324: Unauthenticated upload in SAP NetWeaver Visual Composer Metadata Uploader This script performs: 1. File upload to the vulnerable endpoint via Upload host/port 2. Optional trigger via HTTP GET via Trigger host/port 3. Basic response...

10CVSS8.2AI score0.99512EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/13 6:39 p.m.15 views

CVE-2021-38163

CVE-2021-38163 CVE-2021-38163 - exploit for SAP Netveawer SAP NetWeaver Visual Composer 7.0 RT versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and trigger its processing, which is capable of...

9.9CVSS8.1AI score0.36018EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 6:16 p.m.4 views

CVE-2025-31324

🔴 CVE-2025-31324 — SAP NetWeaver Visual Composer Unauthenticated File Upload Type: Proof of Concept — Vulnerability Research CVE: CVE-2025-31324 CVSS: 10.0 Critical AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Status: Patched — SAP Security Note 3594142 + 3604119 Added to CISA KEV: May 2025 ⚠️ Este PoC...

10CVSS0.99512EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/13 4:54 p.m.104 views

magescan

Mage Scan The idea behind this is to evaluate the quality and security of a Magento site you don't have access to. The scenario when you're interviewing a potential developer or vetting a new client and want to have an idea of what you're getting into. Installation .phar Download the magescan.pha...

5.9AI score
SaveExploits0References7
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.207 views

Nette Framework - Remote Code Execution

Nette Framework versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, and 3.0.6 are vulnerable to a code injection attack via specially formed parameters being passed to a URL. Nette is a PHP/Composer MVC Framework. id: CVE-2020-15227 info: name: Nette Framework - Remote Code Execution author:...

9.8CVSS7.9AI score0.34424EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.17 views

WordPress tagDiv Composer < 3.5 - Authentication Bypass

The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag WordPress theme before 5.2.2, does not properly implement the Facebook login feature, allowing unauthenticated attackers to login as any user by just knowing their email address id:...

9.8CVSS7.9AI score0.03613EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/13 1:15 p.m.6 views

CVE-2025-31324

CVE-2025-31324 Una prueba de concepto desarrollada para explotar CVE-2025-31324. Uso root@kitploit: usage: python CVE-2025-31324.py --help SAP NetWeaver Visual Composer Metadata Uploader = 7.50 CVE-2025-31324 PoC positional arguments: FILE local file to upload optional arguments: -h, --help show...

10CVSS8.2AI score0.99512EPSS
SaveExploits19References1
Kitploit
Kitploit
added 2026/09/13 10:46 a.m.7 views

Burp_CVE-2025-31324

CVE-2025-31324 Extensión de Burp Suite Resumen Esta extensión de Burp Suite basada en Python está diseñada para detectar la presencia de CVE-2025-31324 , una vulnerabilidad crítica en el componente Metadata Uploader de SAP NetWeaver Visual Composer. La vulnerabilidad permite la ejecución remota d...

10CVSS8.4AI score0.99512EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/13 10:25 a.m.10 views

CVE-2025-31324

PoC - CVE-2025-31324 [email protected] Exploit de prueba para la vulnerabilidad CVE-2025-31324 en SAP NetWeaver Visual Composer , que permite la carga arbitraria de archivos sin autenticación a través del endpoint /developmentserver/metadatauploader. ⚠️ Este código es solo para fines...

10CVSS8.2AI score0.99512EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/13 7:45 a.m.7 views

CVE-2025-31324

Analizador SAP CVE-2025-31324 Un escáner de seguridad basado en Python para identificar la vulnerabilidad CVE-2025-31324 en sistemas SAP Visual Composer, y detectar Indicadores de Compromiso IOCs conocidos como archivos .jsp maliciosos. 🚀 Características Detecta endpoints vulnerables de Visual...

10CVSS8.2AI score0.99512EPSS
SaveExploits19References1
Kitploit
Kitploit
added 2026/09/13 1:50 a.m.7 views

CVE-2021-43503

警告 该漏洞已被撤销 Override 这是关于 CVE-2021-43503 的内容,我无法通过 exp 重现此漏洞。 需求 PHP 7.1. Composer registrar=$b; namespace Illuminate\Queue\Capsule class Manager protected $manager; public function construct$c $this-manager-method=$c; namespace Mockery class ClosureWrapper private $closure; public function...

6AI score
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/12 4:15 p.m.9 views

CVE-2021-38163

CVE-2021-38163 - Vulnerabilidad de desincronización en SAP NetWeaver AS Java Descripción CVE-2021-38163 es una vulnerabilidad de seguridad en SAP NetWeaver Application Server AS Java que permite a un atacante autenticado subir archivos arbitrarios al servidor, lo que potencialmente puede conducir...

9.9CVSS8.1AI score0.36018EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 3:43 p.m.8 views

CVE-2025-31324

CVE-2025-31324 Prueba de concepto 0day para SAP NetWeaver creada por ShinyHunters CVE-2025-31324 es una vulnerabilidad crítica de "Subida de archivos sin restricciones" que afecta al SAP NetWeaver Application Server AS Java. Específicamente, reside dentro del componente Visual Composer VCFRAMEWOR...

10CVSS8.2AI score0.99512EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/12 1:53 p.m.8 views

SAP-CVE-2025-31324

SAP-CVE-2025-31324 POC Una herramienta para detectar y explotar una vulnerabilidad crítica de carga de archivos sin autenticación en SAP NetWeaver Visual Composer. Descripción SAP NetWeaver Visual Composer incluye un componente llamado Metadata Uploader que carece de controles de autorización...

10CVSS8.2AI score0.99512EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/12 2:19 a.m.6 views

CVE-2026-40176

CVE-2026-40176 — Inyección de Comandos en el Controlador Perforce de Composer Prueba de Concepto Una prueba de concepto autocontenida, con estilo OOP en PHP, que demuestra y verifica diferencialmente una vulnerabilidad de inyección de comandos en el controlador de repositorio Perforce de Composer...

7.8CVSS7.7AI score0.01065EPSS
SaveExploits4
Rows per page
Query Builder