Lucene search
+L

23571 matches found

Kitploit
Kitploit
added 2026/08/31 2:15 a.m.6 views

CVE-2026-12277

CVE-2026-12277 Frontend File Manager Plugin WordPress = 23.6 - Unauthenticated Arbitrary File Deletion to RCE Summary...

8.7CVSS5.9AI score0.00392EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 1:48 a.m.4 views

CVE-2026-8713

CVE-2026-8713 — Avada Fusion Builder WordPress Exploit Pre-Auth Path Traversal → Arbitrary File Delete → Force Reinstall → RCE Overview CVE-2026-8713 is a CVSS 9.1 critical vulnerability in the Avada Fusion Builder plugin/theme for WordPress. The maybedeletefiles function in the FusionFormDBEntri...

9.1CVSS5.9AI score0.02669EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 12:36 a.m.5 views

BitLock-Crypto-Research

🛡️ BitLock Framework: Ecosistema de Criptovirología y C2 PoC Este repositorio contiene una Prueba de Concepto PoC integral diseñada para el estudio de arquitecturas de amenazas modernas. El proyecto simula un entorno de ataque fileless sin archivos con una infraestructura de comando y control C2...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 12:28 a.m.5 views

CVE-2025-60710

CVE-2025-60710 This is PoC for local privilege escalation vulnerability in \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration scheduled task. When this scheduled task is started the taskhostw.exe process whill try to open the C:\Users%username%\AppData\Local\CoreAIPlatform.00\UKP directory...

7.8CVSS7.3AI score0.04598EPSS
SaveExploits0
CVE
CVE
added 2026/08/31 12:00 a.m.10 views

CVE-2026-75458

CVE-2026-75458 is a vertical privilege escalation in the XueZhiSi Open Source Exam System (versions ≤ 3.9.0). The teacher-end endpoint POST /api/teacher/user/delete/{id} deletes the target user after calling getUserById(id), setDeleted(true), and updateByIdFilter() without verifying whether the r...

8.1CVSS5.9AI score0.0015EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/31 12:00 a.m.11 views

CVE-2026-51729

CVE-2026-51729 affects the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ). The root cause is an incorrect access control in the delDevice function, reachable via a crafted POST request to /cgi-bin/cstecgi.cgi , which allows an unauthenticated attacker to request deletion of a managed slave ...

9.1CVSS5.9AI score0.00163EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/31 12:00 a.m.9 views

EUVD-2026-68881

The teacher-end interface POST /api/teacher/user/delete/id in XueZhiSi Open Source Exam System = 3.9.0 contains a vertical privilege escalatio vulnerability. This interface accepts a user ID and then executes getUserByIdid, setDeletedtrue, updateByIdFilter in sequence, without any validation of...

5.9AI score0.0015EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/31 12:00 a.m.30 views

CVE-2026-75458

The teacher-end interface POST /api/teacher/user/delete/id in XueZhiSi Open Source Exam System = 3.9.0 contains a vertical privilege escalatio vulnerability. This interface accepts a user ID and then executes getUserByIdid, setDeletedtrue, updateByIdFilter in sequence, without any validation of...

0.0015EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/31 12:00 a.m.29 views

CVE-2026-51729

Incorrect access control in the delDevice function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to request deletion of a managed slave device via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

0.00163EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/30 5:47 p.m.5 views

CVE-2025-65669

CVE-2025-65669 An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page without any authorization or authentication checks, bypassing the expected admin-only deletion restriction. Discovered by - Rivek Raj Tamang RivuDon, Sikkim, India...

9.1CVSS5.9AI score0.00472EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/30 4:02 p.m.3 views

CVE-2025-48799

Description This is PoC for CVE-2025-48799, an elevation of privilege vulnerability in Windows Update service. This vulnability affects windows clients win11/win10 with at least 2 hard drives. When machine have multiple hard drives it is possible to change location where new content is saved usin...

7.8CVSS7.2AI score0.01047EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/08/30 3:27 p.m.2 views

Raccine

Raccine A Simple Ransomware Protection Why We see ransomware delete all shadow copies using vssadmin pretty often. What if we could just intercept that request and kill the invoking process? Let's try to create a simple vaccine. How it works We register a debugger for vssadmin.exe and wmic.exe,...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/30 2:40 p.m.4 views

CVE-2026-12513

CVE-2026-12513: Shared Files 1.7.68 — Unauthenticated Arbitrary File Deletion via Path Traversal 📖 Advisory Overview CVE-2026-12513 is an unauthenticated Arbitrary File Deletion vulnerability via Path Traversal affecting the Shared Files and Shared Files Pro WordPress plugins before version 1.7.6...

6.8CVSS6AI score0.00272EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/30 1:17 p.m.3 views

CVE-2020-26259

Description XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights. Influence Xstream \n" + " \n" + " \n" + " 0\n" + " \n" + " \n" + " \n" + " text/plain\n" + " \n" + " C:\Al1ex.txt\n" + " \n" + " \n" + " \n"...

6.8CVSS6.5AI score0.82392EPSS
SaveExploits5
GithubExploit
GithubExploit
added 2026/08/30 8:13 a.m.15 views

Exploit for CVE-2026-12513

CVE-2026-12513: Shared Files Quick Links: Explore the res...

6.8CVSS5.9AI score0.00272EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/30 7:19 a.m.8 views

CVE-2026-0603

CVE-2026-0603 Hibernate ORM Injection / Second-Order SQL Injection ★ CVE-2026-0603 Hibernate SQL Injection PoC ★ https://github.com/user-attachments/assets/2e7c3a89-e26f-48cd-af0b-8b82d32ce71f Overview CVE-2026-0603 is a Second-Order SQL Injection vulnerability in Hibernate ORM , a widely used Ja...

8.3CVSS6AI score0.00796EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/08/29 5:00 p.m.4 views

CVE-2026-24135

CVE-2026-24135: Beliebige Dateilöschung in Gogs durch Wiki-Pfad-Traversal Schweregrad: Hoch CVSS 7.5 Betroffene Software: Gogs Behoben in: 0.13.4, 0.14.0+dev Advisory: GHSA-jp7c-wj6q-3qf2 Patch: gogs/gogs8099 Zusammenfassung Während eines Sicherheits-Audits von Gogs einem beliebten, in Go...

8.1CVSS7.2AI score0.00655EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/08/29 3:25 p.m.3 views

WiseDelete

Wrapper del Driver WiseDelfile Un'utilità Windows leggera che carica il driver kernel WiseDelfile64.sys , esegue l'handshake del dispositivo richiesto e invia richieste IOCTL per eliminare file che non possono essere rimossi tramite le API Windows standard. Questo progetto dimostra come...

7.1CVSS5.2AI score0.00204EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/29 3:13 p.m.5 views

CVE-2026-48866

php // deletephysicalfile — WITH validation $filepath = self::getphysicalfilepath $url, $entryid ; $filepath = applyfilters 'gformfilepathpredeletefile', $filepath, $url ; // NEW: verify path is in uploads if ! GFCommon::isfileinuploads$url GFCommon::logdebugMETHOD . sprintf': Not del...

9.6CVSS5.2AI score0.00468EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/29 1:54 p.m.4 views

CVE-2023-6972-Exploit-Arbitrary-File-Deletion

CVE-2023-6972 Dimostrazione di concetto PoC Descrizione Questo repository contiene un exploit Proof of Concept PoC per CVE-2023-6972. La vulnerabilità consente la cancellazione arbitraria di file non autenticata AFD nel plugin Wordpress Backup Migration Nota: Un'analisi tecnica completa, un caso ...

9.8CVSS7.3AI score0.0139EPSS
SaveExploits1
Rows per page
Query Builder