Lucene search
+L

1195634 matches found

Kitploit
Kitploit
added 2026/09/19 4:54 a.m.10 views

CVE-2024-23997

YANA Notebook PoC A Proof-Of-Concept for CVE-2024-23997 vulnerability. 1. Vunerability Overview: Vulnerability Subject: Local Code Excution via XSS Vulnerability Version: = 1.0.16 Attack Type: Remote Code Execution Attack Vectors: To exploit the vulnerability, we must intercept an HTTP packet...

9.6CVSS6.1AI score0.00692EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/19 4:53 a.m.11 views

CVE-2025-31864

CVE-2025-31864 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Beam me up Scotty – Back to Top Button Vulnerable version = 1.0.23 Component slug beam-me-up-scotty Component link https://wordpress.org/plugins/beam-me-up-scotty/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A3:...

5.9CVSS7.8AI score0.00331EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/19 4:48 a.m.38 views

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/19 4:45 a.m.6 views

CVE-2021-26832

CVE-2021-26832 Suggested description Cross Site Scripting XSS at the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or directing the victim to a malicious site. Vulnerability Type...

6.1CVSS6.7AI score0.00846EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/19 4:43 a.m.8 views

CVE2_Jenkins_RCE

Jenkins CLI Websocket Hijacking - PoC A proof of concept cross-site WebSocket hijacking exploit for CVE-2024-23898 — a vulnerability affecting Jenkins versions 2.217-2.441. This exploits targets the Jenkins CLI that can be used to remotely access and issue commands to a Jenkins control server...

8.8CVSS7.7AI score0.67151EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/19 4:37 a.m.12 views

CVE-2025-39601

🚨 CVE-2025-39601 - CSRF to RCE in WordPress Custom CSS, JS & PHP plugin = 2.4.1 🧠 Description A Cross-Site Request Forgery CSRF vulnerability in the WPFactory Custom CSS, JS & PHP plugin allows for Remote Code Execution RCE by injecting malicious PHP code via unauthorized POST requests. This...

9.6CVSS8.4AI score0.0033EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/19 4:34 a.m.8 views

CVE-2024-34312

CVE-2024-34312 Description Virtual Programming Lab for Moodle up to v4.2.3 was discovered to contain a Cross-Site Scripting XSS vulnerability via its IDE component. Additional Details The browser connects directly to a websocket running on the jail server. Through the websocket, the jail server c...

6.1CVSS5.9AI score0.00804EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/19 4:31 a.m.10 views

XSSYA

XSSYA-V2.0 has been Released - check https://github.com/yehia-mamdouh/XSSYA-V-2.0 XSSYA is a Cross Site Scripting Scanner & Vulnerability Confirmation Working in two Methods • Method number 1 for Confirmation Request and Response • Method number 2 for Confirmation Execute encoded payload and sear...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/19 4:03 a.m.7 views

CVE-2022-29455

CVE-2022-29455 Wordpress Vulnerability - XSS Cross-Site Scripting Vulnerability Location https://add your target here/wp-content/plugins/elementor/assets/js/frontend.min.js Vulnerable Version = 3.5.5 versions Proof of Concept Exploit https://add your target...

6.1CVSS6.5AI score0.23678EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/19 4:03 a.m.10 views

CVE-2023-41425

CVE-2023-41425 Description A Cross Site Scripting vulnerability in Wonder CMS Version 3.2.0 to Version 3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. This is a modifed version of the original exploit by prodigiousMind which...

6.1CVSS7.7AI score0.54305EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/19 3:46 a.m.11 views

Roundcube-CVE-2024-42008-POC

CVE-2024-42008 RoundCube XSS Exploit Overview This repository contains a proof-of-concept exploit for CVE-2024-42008 , a Cross-Site Scripting XSS vulnerability in RoundCube webmail application. This exploit is designed for educational purposes and controlled penetration testing environments like...

9.3CVSS7.3AI score0.35902EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/19 3:46 a.m.7 views

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

Unauthenticated Stored Cross-Site Scripting XSS in genai/evalsvisualization.py of Google Cloud Vertex AI SDK google-cloud-aiplatform versions from 1.98.0 up to but not including 1.131.0 - github.com/googleapis/python-aiplatform Author: Joshua Provoste N-day Researcher & Dev Credits: Din Asotić...

8.6CVSS8.1AI score0.00522EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/19 3:36 a.m.10 views

CVE-2023-42426

CVE ID: CVE-2023-42426 Vulnerability Type: Cross-Site Scripting Description: Cross-site scripting XSS vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image' component. Steps to reproduce: 1. Select the...

6.1CVSS7AI score0.00793EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/19 3:28 a.m.8 views

CVE-2020-23592

CVE-2020-23592 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" Found vulnerability in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" allow an unauthenticated, remote attacker to conduct a cross-site...

8.8CVSS7.9AI score0.00536EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/19 3:26 a.m.8 views

CVE-2020-23588

CVE-2020-23588 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" Found vulnerability in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" allows an unauthenticated, remote attacker to conduct a cross-sit...

4.3CVSS5.6AI score0.0038EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/19 3:12 a.m.12 views

PoC-CVE-2024-24035

CVE-2024-24035 Title The SIL 3.1 is vulnerable to Cross Site Scripting XSS in the "hmessage" parameter. Date: 2024-01-14 Author: Elizeu Das Dores Vendor Homepage: https://www.setorinformatica.com/ Version: 3.1 POC CVE-2024-24035 The "hmessage" parameter is vulnerable to DOM Based Cross Site...

6.1CVSS5.9AI score0.00443EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/19 3:09 a.m.9 views

Stored-xss

Stored-xss CVE-2023-41575 - Stored XSS...

5.4CVSS6.1AI score0.00501EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/19 3:04 a.m.12 views

tulpar

Tulpar is a open source web vulnerability scanner for written to make web penetration testing automated. Tulpar has the following features. -Sql Injection GET Method -XSS GET Method -Crawl -E-mail Disclosure -Credit Card Disclosure -Whois -Command Injection GET Method -Directory Traversal GET...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/19 2:56 a.m.9 views

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload POC of DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite I'm a simple man, I see cvss:10/10 I go in xD I saw this new CVE CVE-2025-64095 DNN Insufficient Access Control - Image Upload allows for Site Content...

10CVSS5.9AI score0.44656EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/19 2:56 a.m.7 views

XSS-Payloads

This repository does not have a README...

5.7AI score
SaveExploits0
Rows per page
Query Builder