Lucene search
+L

14467 matches found

Kitploit
Kitploit
added 2026/09/22 2:41 a.m.12 views

CVE-2024-4898

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 1-click WP Staging & Migration = 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation...

9.8CVSS5.9AI score0.04156EPSS
SaveExploits0References1
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.160 views

Apache Druid Kafka Connect - Remote Code Execution

The vulnerability has the potential to enable a remote attacker with authentication to run any code on the system. This is due to unsafe deserialization that occurs during the configuration of the connector through the Kafka Connect REST API id: CVE-2023-25194 info: name: Apache Druid Kafka Conne...

8.8CVSS7.5AI score0.9581EPSS
SaveExploits8References5
Adobe
Adobe
added 2026/09/22 12:00 a.m.10 views

APSB26-150 : Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves critical and important vulnerabilities that could result in arbitrary code execution, arbitrary file system read, privilege escalation, and security feature bypass...

6.1AI score
SaveExploits0Affected Software2
Kitploit
Kitploit
added 2026/09/21 11:38 p.m.13 views

CVE-2024-4898-Poc

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 1-click WP Staging & Migration = 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation...

9.8CVSS5.9AI score0.04156EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 8:39 p.m.12 views

CVE-2023-43208

CVE-2023-43208 Mirth Connect RCE PoC Proof-of-concept Python script targeting CVE-2023-43208 in Mirth Connect. Disclaimer Use only in environments you own or are explicitly authorized to test. This repository is for security research, validation, and defensive testing. The author assumes no...

9.8CVSS8.7AI score0.82708EPSS
SaveExploits21References1
Kitploit
Kitploit
added 2026/09/21 8:19 p.m.12 views

CVE-2023-43208

CVE-2023-43208 — Mirth Connect Pre-Auth RCE Pre-authenticated Remote Code Execution in NextGen Healthcare Mirth Connect CVSS 9.8 Critical — Patch bypass of CVE-2023-37679 Overview Mirth Connect uses the Java XStream library to deserialize XML payloads on the /api/users endpoint without...

9.8CVSS8.5AI score0.82708EPSS
SaveExploits21
NVD
NVD
added 2026/09/21 8:17 p.m.8 views

CVE-2026-73547

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's extauthz filter assumes that a request contains a :path pseudoheader when applying queryparameterstoset or queryparameterstoremove from an authorization...

7.5CVSS0.00827EPSS
SaveExploits0References9
OSV
OSV
added 2026/09/21 7:47 p.m.3 views

CVE-2026-73547 Envoy ext_authz: request `:path` pseudoheader dereferenced w/o null check

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's extauthz filter assumes that a request contains a :path pseudoheader when applying queryparameterstoset or queryparameterstoremove from an authorization...

7.5CVSS5.6AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/21 7:47 p.m.7 views

Mirth-Connect-CVE-2023-43208

CVE-2023-43208:NextGen Mirth Connect 中的未认证远程代码执行(RCE) 该漏洞利用工具利用了 Mirth Connect 的 XStream 引擎中的一个严重反序列化漏洞。它源于 CVE-2023-37679 的不完整补丁,可在所有 4.4.1 之前的版本中实现未认证的任意代码执行。 使用方法 root@kitploit: python3 mirthrce.py https://target 免责声明 此漏洞利用脚本严格用于教育目的和经授权的安全审计,以帮助防御者缓解...

9.8CVSS8.8AI score0.82708EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/21 7:12 p.m.14 views

CVE-2023-25194

CVE-2023-25194 https://hackerone.com/reports/1529790 Poc root@kitploit: POST /connectors HTTP/1.1 Host: xxxx:8083 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.0.0 Safari/537.36 Accep...

8.8CVSS8AI score0.9581EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/21 6:54 p.m.8 views

mcpjam-cve-2026-23744-validator

MCPJam Inspector Authorized Security Validator A bounded proof-of-concept validator for CVE-2026-23744 affecting vulnerable MCPJam Inspector deployments. This project is an independent, non-destructive validation tool for the previously disclosed CVE-2026-23744. It is not the original vulnerabili...

9.8CVSS7.1AI score0.64842EPSS
SaveExploits42References2
Kitploit
Kitploit
added 2026/09/21 4:27 p.m.9 views

CVE-2025-55182-GodzillaMemoryShell

CVE-2025-55182-GodzillaMemoryShell help root@kitploit: usage: exploit.py -h --proxy PROXY --utf16 --unicode --key KEY --target TARGET CVE-2025-55182 Godzilla Memoryshell options: -h, --help show this help message and exit --proxy PROXY HTTP proxy address, e.g. http://127.0.0.1:8888 --utf16 Enable...

10CVSS7.8AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/21 3:41 p.m.12 views

CVE-2024-22145

CVE-2024-22145 InstaWP Connect = 0.1.0.8 - Missing Authorization to Arbitrary Options Update Subscriber+ Description: The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the...

8.8CVSS8.2AI score0.01103EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/21 3:40 p.m.10 views

cve-2025-0282-ivanti_rce_reproduction

CVE-2025-0282 — Ivanti Connect Secure / Policy Secure / ZTA Gateways Stack-Based Buffer Overflow RCE CVSS 9.0 — CRITICAL | Actively Exploited Zero-Day | Discovered January 2025 Overview CVE-2025-0282 is a stack-based buffer overflow vulnerability CWE-121 / CWE-787 in the IFT/TLS handling componen...

9CVSS8.1AI score0.99979EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/21 2:19 p.m.10 views

CVE-2025-0282

PoC for CVE-2025-0282 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-0282, and is based upon the exploitation strate...

9CVSS8.1AI score0.99979EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/21 2:02 p.m.10 views

ripple20-digi-connect-exploit

Ripple20 Exploit: Digi Connect ME 9210 Authors: Moshe Kol, Shlomi Oberman This repository contains a PoC exploit for CVE-2020-11896, a critical heap-based buffer overflow vulnerability in the Track TCP/IP stack part of the Ripple20 vulnerability suite. The exploit achieves remote code execution R...

10CVSS9.1AI score0.36852EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/21 1:56 p.m.7 views

CVE-2023-43208-EXPLOIT

CVE-2023-43208 - Mirth Connect Remote Code Execution RCE Exploit 🚨 Introduction 📖 This repository contains a Proof-of-Concept PoC exploit for a critical vulnerability in NextGen Healthcare Mirth Connect versions prior to 4.4.1. The vulnerability, tracked as CVE-2023-43208, allows for...

9.8CVSS8.7AI score0.82708EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/21 12:37 p.m.12 views

CVE-2025-22457

CVE-2025-22457 CVE-2025-22457: Python Exploit POC Scanner to Detect Ivanti Connect Secure RCE This script helps identify Ivanti Connect Secure, Policy Secure, or ZTA Gateways that may be vulnerable to CVE-2025-22457 , a critical unauthenticated stack-based buffer overflow in the web process...

9.8CVSS9AI score0.99981EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/21 12:32 p.m.8 views

CVE-2022-42475

CVE-2022-42475 Background This is the exploit for the blog post here: https://bishopfox.com/blog/exploit-cve-2022-42475 Redacted Version This version of the exploit will not work without you, the hacker, supplying the necessary memory addresses for ROP gadgets, etc. The work to determine these da...

9.8CVSS8.5AI score0.99474EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/21 12:25 p.m.11 views

CVE-2024-22024

CVE-2024-22024 Check for CVE-2024-22024 vulnerability in Ivanti Connect Secure !WARNING FOR EDUCATIONAL PURPOSE AND AUTHORIZED TESTING ONLY. Parameters -u or --targeturl: The target Ivanti Connect Secure ICS URL or file with list of URLs. -c or --attackerurl: The attacker URL generate one using...

8.3CVSS8.1AI score0.94721EPSS
SaveExploits1
Rows per page
Query Builder