Lucene search
+L

14430 matches found

Kitploit
Kitploit
added 2026/09/21 11:38 p.m.13 views

CVE-2024-4898-Poc

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 1-click WP Staging & Migration = 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation...

9.8CVSS5.9AI score0.04156EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 8:39 p.m.12 views

CVE-2023-43208

CVE-2023-43208 Mirth Connect RCE PoC Proof-of-concept Python script targeting CVE-2023-43208 in Mirth Connect. Disclaimer Use only in environments you own or are explicitly authorized to test. This repository is for security research, validation, and defensive testing. The author assumes no...

9.8CVSS8.7AI score0.82708EPSS
SaveExploits21References1
Kitploit
Kitploit
added 2026/09/21 8:19 p.m.12 views

CVE-2023-43208

CVE-2023-43208 — Mirth Connect Pre-Auth RCE Pre-authenticated Remote Code Execution in NextGen Healthcare Mirth Connect CVSS 9.8 Critical — Patch bypass of CVE-2023-37679 Overview Mirth Connect uses the Java XStream library to deserialize XML payloads on the /api/users endpoint without...

9.8CVSS8.5AI score0.82708EPSS
SaveExploits21
NVD
NVD
added 2026/09/21 8:17 p.m.7 views

CVE-2026-73547

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's extauthz filter assumes that a request contains a :path pseudoheader when applying queryparameterstoset or queryparameterstoremove from an authorization...

7.5CVSS
SaveExploits0References9
OSV
OSV
added 2026/09/21 7:47 p.m.2 views

CVE-2026-73547 Envoy ext_authz: request `:path` pseudoheader dereferenced w/o null check

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's extauthz filter assumes that a request contains a :path pseudoheader when applying queryparameterstoset or queryparameterstoremove from an authorization...

7.5CVSS
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/21 7:47 p.m.7 views

Mirth-Connect-CVE-2023-43208

CVE-2023-43208: NextGen Mirth Connect의 인증되지 않은 원격 코드 실행RCE 이 익스플로잇은 Mirth Connect의 XStream 엔진 내 심각한 역직렬화 취약점을 활용합니다. 이는 CVE-2023-37679에 대한 불완전한 패치에서 비롯된 것으로, 4.4.1 이전의 모든 버전에서 인증되지 않은 임의 코드 실행을 가능하게 합니다. 사용법 root@kitploit: python3 mirthrce.py https://target 면책 조항 이 익스플로잇 스크립트는 CVE-2023-43208을 완화하...

9.8CVSS9.1AI score0.82708EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/21 7:12 p.m.14 views

CVE-2023-25194

CVE-2023-25194 https://hackerone.com/reports/1529790 Poc root@kitploit: POST /connectors HTTP/1.1 Host: xxxx:8083 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.0.0 Safari/537.36 Accep...

8.8CVSS8AI score0.9581EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/21 6:54 p.m.8 views

mcpjam-cve-2026-23744-validator

MCPJam Inspector Authorized Security Validator A bounded proof-of-concept validator for CVE-2026-23744 affecting vulnerable MCPJam Inspector deployments. This project is an independent, non-destructive validation tool for the previously disclosed CVE-2026-23744. It is not the original vulnerabili...

9.8CVSS7.1AI score0.64842EPSS
SaveExploits42References2
Kitploit
Kitploit
added 2026/09/21 4:27 p.m.9 views

CVE-2025-55182-GodzillaMemoryShell

CVE-2025-55182-GodzillaMemoryShell help root@kitploit: usage: exploit.py -h --proxy PROXY --utf16 --unicode --key KEY --target TARGET CVE-2025-55182 Godzilla Memoryshell options: -h, --help show this help message and exit --proxy PROXY HTTP proxy address, e.g. http://127.0.0.1:8888 --utf16 Enable...

10CVSS7.8AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/21 3:41 p.m.12 views

CVE-2024-22145

CVE-2024-22145 InstaWP Connect = 0.1.0.8 - Отсутствие авторизации для произвольного обновления опций Subscriber+ Описание: Плагин InstaWP Connect – 1-click WP Staging & Migration для WordPress уязвим к несанкционированному изменению данных из-за отсутствия проверки прав доступа в функции...

8.8CVSS8.2AI score0.01103EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/21 3:40 p.m.10 views

cve-2025-0282-ivanti_rce_reproduction

CVE-2025-0282 — Ivanti Connect Secure / Policy Secure / ZTA Gateways Stack-Based Buffer Overflow RCE CVSS 9.0 — CRITICAL | Actively Exploited Zero-Day | Discovered January 2025 Overview CVE-2025-0282 is a stack-based buffer overflow vulnerability CWE-121 / CWE-787 in the IFT/TLS handling componen...

9CVSS8.1AI score0.99979EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/21 2:19 p.m.10 views

CVE-2025-0282

PoC for CVE-2025-0282 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-0282, and is based upon the exploitation strate...

9CVSS8.1AI score0.99979EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/21 2:02 p.m.9 views

ripple20-digi-connect-exploit

Ripple20 Exploit: Digi Connect ME 9210 Authors: Moshe Kol, Shlomi Oberman This repository contains a PoC exploit for CVE-2020-11896, a critical heap-based buffer overflow vulnerability in the Track TCP/IP stack part of the Ripple20 vulnerability suite. The exploit achieves remote code execution R...

10CVSS9.1AI score0.36852EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/21 1:56 p.m.7 views

CVE-2023-43208-EXPLOIT

CVE-2023-43208 - Mirth Connect Remote Code Execution RCE Exploit 🚨 Introduction 📖 This repository contains a Proof-of-Concept PoC exploit for a critical vulnerability in NextGen Healthcare Mirth Connect versions prior to 4.4.1. The vulnerability, tracked as CVE-2023-43208, allows for...

9.8CVSS8.7AI score0.82708EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/21 12:37 p.m.12 views

CVE-2025-22457

CVE-2025-22457 CVE-2025-22457: Python Exploit POC Scanner to Detect Ivanti Connect Secure RCE This script helps identify Ivanti Connect Secure, Policy Secure, or ZTA Gateways that may be vulnerable to CVE-2025-22457 , a critical unauthenticated stack-based buffer overflow in the web process...

9.8CVSS9AI score0.99981EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/21 12:32 p.m.8 views

CVE-2022-42475

CVE-2022-42475 Background This is the exploit for the blog post here: https://bishopfox.com/blog/exploit-cve-2022-42475 Redacted Version This version of the exploit will not work without you, the hacker, supplying the necessary memory addresses for ROP gadgets, etc. The work to determine these da...

9.8CVSS8.5AI score0.99474EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/21 12:25 p.m.11 views

CVE-2024-22024

CVE-2024-22024 Check for CVE-2024-22024 vulnerability in Ivanti Connect Secure !WARNING FOR EDUCATIONAL PURPOSE AND AUTHORIZED TESTING ONLY. Parameters -u or --targeturl: The target Ivanti Connect Secure ICS URL or file with list of URLs. -c or --attackerurl: The attacker URL generate one using...

8.3CVSS8.1AI score0.94721EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/21 12:02 p.m.9 views

CVE-2019-11539

CVE-2019-11539 Original Discovery: Orange Tsai, Meh Chang Authors: Justin Wagner, Alyssa Herrera Thanks to: Orange, Meh Chang, Rich Warren, Alyssa, Mimir Vulnerability Description In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and...

8CVSS7.8AI score0.98544EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/21 12:01 p.m.12 views

pwn-pulse

pwn-pulse.sh Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability CVE-2019-11510 Script authored by braindead @BishopFox. Based on research by Orange Tsai and Meh Chang. Thanks also to Alyssa Herrera and 0xDezzy for additional insights. Huge thanks to bl4ckh0l3z for fixing,...

10CVSS8.7AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/21 9:51 a.m.13 views

patch-CVE-2026-31337

Патч: CVE-2026-31337 Сведения об уязвимости CVE : CVE-2026-31337 Продукт : Ivanti Connect Secure Описание : RCE через обход аутентификации Критичность : Критическая CISA KEV : Да подтверждена эксплуатация в реальных условиях Статус патча: РАЗВЕРНУТ Поле| Значение ---|--- Дата патча| 2026-08-15...

5.8AI score
SaveExploits2
Rows per page
Query Builder