Lucene search
+L

320687 matches found

Kitploit
Kitploit
added 2026/09/18 4:23 a.m.9 views

IOFireWireFamily-overflow

IOFireWireFamily-overflow IOFireWireFamily-overflow is a proof-of-concept exploit for CVE-2016-7608, a buffer overflow in IOFireWireUserClient that was fixed in macOS Sierra 10.12.2. This vulnerability can be triggered to cause denial of service or possibly arbitrary code execution on devices wit...

5.5CVSS7.2AI score0.01101EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/18 4:21 a.m.10 views

Hipcam-RTSP-Format-Validation-Vulnerability

Hipcam RealServer/V1.0 RTSP Format Validation Vulnerability Proof-of-Concept | CVE-2023-50685 Proof-of-Concept for RTSP Service Format Validation Vulnerability in Hipcam RealServer/V1.0. Description This POC exploits a format validation vulnerability in the Real Time Streaming Protocol RTSP servi...

7.5CVSS6AI score0.01219EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 4:20 a.m.181 views

dolos_cloak

Dolos Cloak Dolos Cloak is a python script designed to help network penetration testers and red teamers bypass 802.1x solutions by using an advanced man-in-the-middle attack. The tool is able to piggyback on the wired connection of a victim device that is already allowed on the target network...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 4:19 a.m.49 views

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/18 4:19 a.m.10 views

CVE-2023-4698

CVE-2023-4698 Local File Inclusion LFI in usememos/memos 0.13.2 Description Today, I want to shine a spotlight on a significant discovery — a critical security vulnerability that has been identified in usememos/memos. This vulnerability, which falls under the category of Local File Inclusion LFI,...

7.5CVSS7.5AI score0.00916EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/18 4:18 a.m.7 views

CVE-2025-3419

CVE-2025-3419 - WordPress Eventin = 4.0.26 - Arbitrary File Read 🔥 Vulnerability Summary The Eventin plugin = 4.0.26 for WordPress contains an unauthenticated arbitrary file read vulnerability in the proxyimage function. Attackers exploit insufficient input validation by manipulating the url...

7.5CVSS7.8AI score0.00695EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 4:16 a.m.12 views

pbtk

pbtk - Ingeniería inversa de aplicaciones Protobuf Protobuf es un formato de serialización desarrollado por Google y utilizado en un número creciente de aplicaciones Android, web, de escritorio y más. Consiste en un lenguaje para declarar estructuras de datos , que luego se compila a código u otr...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 4:16 a.m.111 views

pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 4:16 a.m.7 views

CVE-2023-3460

CVE-2023-3460 - Unauthorized admin access for Ultimate Member plugin POC CVSS score: 9.1 Date: 07/04/2023 What is ultimate member plugin? Ultimate member plugin is a popular membership plugin for registering user's, the plugin has 200,000+ active installation. Quick Check A critical vulnerability...

9.8CVSS8.3AI score0.72306EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/18 4:16 a.m.13 views

CVE-2024-48245

CVE-2024-48245 SQL Injection Vulnerability in Vehicle Management System 1.0 - 1.3 Description Vehicle Management System 1.0 is vulnerable to SQL Injection. Low-authenticated guest users or administrative accounts can exploit vulnerable POST parameters in several endpoints to execute arbitrary SQL...

7.2CVSS5.8AI score0.01036EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 4:16 a.m.11 views

CVE-2022-46604-Responsive-File-Manager

CVE 2022 46604 – Responsive File Manager ⚠️ Disclaimer This repository is intended strictly for educational and research purposes only. The information and code provided here can be used in controlled environments such as private lab machines. Unauthorized use of this code against systems you do...

8.8CVSS7.8AI score0.08627EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/18 4:10 a.m.10 views

e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout

CVE-2026-17543 — SQL Injection in PHP ext/pgsql via E'...' Backslash Breakout Proof of concept for CVE-2026-17543 CVSS 9.8 Critical, CWE-89, a SQL injection vulnerability in PHP's procedural PostgreSQL extension. Vulnerability Summary pginsert, pgselect, pgupdate, pgdelete, and pgconvert all rout...

9.8CVSS6.2AI score0.00323EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/18 4:07 a.m.12 views

wsh

wsh wsh pronunciado woosh es un generador de webshells e interfaz de línea de comandos. Esto comenzó como un simple cliente http, ya que interactuar con webshells es tedioso. Hay un formulario, para enviar un comando tienes que escribir en una caja de entrada y presionar un botón. Quería algo que...

6.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 4:04 a.m.18 views

parameth

parameth This tool can be used to brute discover GET and POST parameters Often when you are busting a directory for common files, you can identify scripts for example test.php that look like they need to be passed an unknown parameter. This hopefully can help find them. example scan The -off flag...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 4:03 a.m.15 views

ThisSeemsWrong

Fix for this issue appeared as CVE-2024-49746: bulletin, patch "This seems wrong" Above title is the comment from Parcel::continueWrite method, which is actually responsible for resizing Parcel objects, either when explicitly request by user for example through setDataSize or when calling one of...

7.2AI score
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/18 4:03 a.m.12 views

CVE-2022-30190-follina-Office-MSDT-Fixed

'Follina' MS-MSDT n-day Microsoft Office RCE — Modified Version Based on the project from https://github.com/chvancooten/follina.py, modifications have been made to allow custom specification of the docx template file, making it easier for phishing use in real-world scenarios. After editing your...

9.3CVSS8.3AI score0.99234EPSS
SaveExploits63References1
Kitploit
Kitploit
added 2026/09/18 4:02 a.m.9 views

CVE-2023-24055

CVE-2023-24055 POC and Scanner for CVE-2023-24055 Use at your own risk! configscanner.py A simple Parser for the KeePass config file running unter Windows. The tool will open the directory %APPDATA%\Roaming\KeePass\KeePass.config.xml and will output all triggers. The triggers Execute command line...

5.5CVSS6.7AI score0.03691EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/18 3:59 a.m.10 views

msf_shellcode_analysis

Static analysis of a Metasploit shellcode For a first blogpost, I thought it'd be nice to analyze a common Metasploit shellcode - it's a great opportunity to discuss topics such as encoding, PEB, Windows shellcodes and Export Address Tables. Getting started We start with an intercepted, long...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 3:58 a.m.43 views

thc-hydra

H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 3:56 a.m.180 views

nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: root@kitploit: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.co...

6.2AI score
SaveExploits0References3
Rows per page
Query Builder