Lucene search
+L

58501 matches found

CVE
CVE
added 2026/09/14 6:18 a.m.6 views

CVE-2026-85192

Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla 8.0.0 - Conditional Content Pro accepts inline PHP Condition Rules in article syntax. In affected versions, the PHP is passed to the Conditions evaluator without checki...

9.4CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 4:28 a.m.188 views

secator

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

9.1CVSS8.5AI score0.55006EPSS
SaveExploits7References2
Kitploit
Kitploit
added 2026/09/14 4:19 a.m.101 views

feroxbuster

!WARNING Security Notice – Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...

5.7AI score
SaveExploits0References12
Kitploit
Kitploit
added 2026/09/14 4:17 a.m.6 views

CVE-2026-21858-and-CVE-2025-68613

Ni8mare: n8n Pre-Auth RCE CVE-2026-21858 & CVE-2025-68613 — Laboratorio de Vulnerabilidad e Informe de PoC Entorno práctico Laboratorio Vulnerable e informe detallado de análisis y explotación de la cadena de vulnerabilidades Ni8mare en la plataforma n8n — desde Lectura Arbitraria de Archivos...

10CVSS8.4AI score0.99105EPSS
SaveExploits47References1
Kitploit
Kitploit
added 2026/09/14 4:11 a.m.6 views

CVE-2026-26980

CVE-2026-26980 — 👻 Ghost CMS Unauthenticated SQLi via Content API A SQL injection vulnerability existed in Ghost's Content API that allowed unauthenticated attackers to read arbitrary data from the database...

9.4CVSS8.4AI score0.70208EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/14 4:07 a.m.8 views

CVE-2026-26980-PoC

CVE-2026-26980 — Ghost CMS Content API Blind SQL Injection Affected: Ghost 3.24.0 – 6.19.0 Fixed in: Ghost 6.19.1 Auth required: None — Content API key is public Impact: Unauthenticated read of the entire database credentials, API keys Vulnerability slug-filter-order.js interpolates user-supplied...

9.4CVSS8.5AI score0.70208EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/14 4:02 a.m.10 views

CVE-2026-26980-Ghost-CMS-Api

CVE-2026-26980 Ghost CMS SQL Injection PoC This repository contains a Go-based proof-of-concept tool for demonstrating and validating the Ghost CMS Content API SQL injection vulnerability described by CVE-2026-26980. The implementation is based on the exploit flow implemented in the main Go sourc...

9.4CVSS8.3AI score0.70208EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/14 4:00 a.m.6 views

CVE-2022-45059-demo

CVE-2022-45059-demo Las versiones 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.1.0, 7.1.1 y 7.2.0 de Varnish Cache tienen una vulnerabilidad de contrabando de solicitudes donde un atacante puede solicitar que el encabezado content-length se convierta en hop-by-hop. Esta es una demostración que consiste en una...

7.5CVSS7.4AI score0.01494EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 3:30 a.m.10 views

petereport

PeTeReport PeTeReport Pe nTe st Report es una herramienta de informes de vulnerabilidades de aplicaciones de código abierto diseñada para ayudar en los esfuerzos de pentesting/redteaming, simplificando la tarea de escribir y generar informes. Centrada en la seguridad de productos, la herramienta...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 3:28 a.m.6 views

st2-046-poc

Variante de nombre de archivo Content-Disposition con byte nulo de CVE-2017-5638 Boletín de seguridad de Struts2 S2-046 Un byte nulo \x00 en el campo de nombre de archivo del encabezado Content-Disposition de una solicitud puede desencadenar una InvalidFileNameException con la misma cadena de...

10CVSS8.1AI score0.99999EPSS
SaveExploits46References1
Kitploit
Kitploit
added 2026/09/14 3:23 a.m.33 views

browsertunnel

browsertunnel Browsertunnel is a tool for exfiltrating data from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a feature intended to reduce the perceived latency of websites by doing DNS lookups in the background for specified domains. DNS traffic does not appear i...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/14 3:12 a.m.9 views

CSPBypass

CSP Bypass Welcome to CSPBypass.com , a tool designed to help ethical hackers bypass restrictive Content Security Policies CSP and exploit XSS Cross-Site Scripting vulnerabilities on sites where injections are blocked by CSPs that only allow certain whitelisted domains. Website Visit CSPBypass.co...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 3:07 a.m.8 views

CWFF

CWFF - Listas de palabras personalizadas para fuzzing CWFF es una herramienta que crea una lista de palabras especial de alta calidad para fuzzing/descubrimiento de contenido a la máxima velocidad posible usando concurrencia y está fuertemente inspirada por el Who, What, Where, When, Wordlist...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 3:05 a.m.6 views

ids_bypass

Descargo de responsabilidad Estos programas son solo con fines educativos. No los use sin permiso. injectserver: Prueba de concepto para CVE-2018-6794. Si como servidor interrumpe el orden normal de los paquetes del handshake TCP de 3 vías e inyecta datos de respuesta antes de que se complete el...

5.3CVSS6.6AI score0.24289EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/14 2:48 a.m.8 views

paskto

Paskto - Escáner Web Pasivo Paskto escaneará pasivamente la web utilizando el índice de Common Crawl, ya sea descargando los índices a petición o analizando datos de su sistema local. Las URL se procesan luego a través de Nikto y listas de URL conocidas para identificar contenido interesante...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 2:22 a.m.7 views

CVE-2017-1000117

Test repository to check Git's vulnerability CVE-2017-1000117 ¿Cómo funciona? Clona este repositorio de forma recursiva. La frase 「うんこもりもり」que significa algo como "Un montón de mierda" se mostrará en tu terminal. root@kitploit: $ git clone --recursive https://github.com/greymd/CVE-2017-1000117.gi...

8.8CVSS7.2AI score0.77823EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/14 2:17 a.m.6 views

CVE-2026-40000

CVE-2026-40000 A poc for CVE-2026-40000, a vulnerability in ZTE File Manager zte.com.cn.filer which allows to read arbitrary files from other apps as the privileges of this file manager How to: build the project or get the app from releases, install and open the poc, then input a file to open and...

1.8CVSS5.9AI score0.00296EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/14 2:08 a.m.6 views

CVE-2019-9673

CVE-2019-9673: Vulnerabilidad del filtro de contenido de Freenet NOTA: he divulgado este bug por completo al equipo de Freenet y he trabajado con ellos para verificar su parche. El parche ya está implementado en la última versión de Freenet. Recientemente he encontrado una vulnerabilidad de...

8.8CVSS7.3AI score0.03983EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/14 2:08 a.m.7 views

uBlockOrigin-HUGE-AI-Blocklist

uBlockOrigin & uBlacklist Lista Negra Masiva de IA Una lista negra masiva de sitios seleccionados manualmente más de 1000 que contienen contenido generado por IA, con el propósito de limpiar los motores de búsqueda de imágenes Google Search, DuckDuckGo y Bing usando uBlock Origin o uBlacklist...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 2:08 a.m.4 views

ladder

Ladder Ladder is a http web proxy. 简体中文 Ladder is a developer tool for testing and analyzing paywall implementations and content delivery behavior on modern websites. It allows developers, researchers, and publishers to simulate different client environments such as browsers and crawlers and...

5.7AI score
SaveExploits0References8
Rows per page
Query Builder