Lucene search
+L

1255263 matches found

Nuclei
Nuclei
added 2026/09/09 2:52 a.m.140 views

Wowza Streaming Engine Manager 4.7.4.01 - Directory Traversal

Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifically crafted HTTP request to the REST API. id: CVE-2018-19365 info: name: Wowza Streaming Engine Manager 4.7.4.01 - Directory Traversal author: 0xAkoko severity: critical...

9.1CVSS7.9AI score0.22292EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/09 2:52 a.m.31 views

TOTOLINK A3002RU 1.0.8 - Information Disclosure

TOTOLINK A3002RU firmware version 1.0.8 contains a vulnerability in which an unauthenticated attacker can obtain the plaintext admin password by making a GET request for password.htm. This allows remote attackers to gain administrative access without credentials. id: CVE-2018-13317 info: name:...

6.1CVSS6.3AI score0.00991EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/09 2:52 a.m.26 views

Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure

The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.05.03 via the frmformspreview AJAX action. This makes it possible for unauthenticated attackers to export all of the form entries for a given form. id: CVE-2017-20194 info...

5.3CVSS5.7AI score0.01128EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/09 2:52 a.m.4 views

CVE-2023-34598

Gibbon v25.0.0 - Local File Inclusion - CVE-2023-34598 Gibbon v25.0.0 is vulnerable to a Local File Inclusion LFI vulnerability where it's possible to include the content of several files present in the installation folder in the server's response. Proof of Concept In order to exploit the...

9.8CVSS8.1AI score0.47238EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/09 2:50 a.m.9 views

CVE-2024-4577-checker

CVE-2024-4577 Vulnerability Checker The CVE-2024-4577 Vulnerability Checker is a Bash script designed to scan multiple domains for the CVE-2024-4577 vulnerability in PHP-CGI. This tool allows security researchers and system administrators to quickly assess whether their systems or a list of domai...

9.8CVSS7.4AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/09 2:49 a.m.3 views

CVE-2022-1011

CVE-2022-1011 Fix link: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0c4bcfdecb1ac0967619ee7ff44871d93c08c909 This vulnerability is mainly due to the asynchronous nature of splice, which allows the user-mode filesystem process server side to retain a piece of memor...

7.8CVSS6.9AI score0.01169EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 2:49 a.m.6 views

XBadManners

XBadManners CVE Description CVE-2018-16323 is a memory leakage in processing XBM images. After XBM image was converted to another image type you can extract leaked memory bytes from image data. Discovered by d4d. Tool A pretty simple tool for generating CVE-2018-16323 PoC. Directory samples...

6.5CVSS7AI score0.49324EPSS
SaveExploits4References2
Kitploit
Kitploit
added 2026/09/09 2:48 a.m.8 views

CVE-2020-35575-TP-LINK-TL-WR841ND-password-disclosure

CVE-2020-35575-password-disclosure-issue-in-the-web-interface A password-disclosure issue in the web interface on certain TP-Link devices allows a remote malicious user to get full administrative access to the web panel. This affects WA901ND devices prior to 3.16.9201211 beta, and Archer C5, Arch...

9.8CVSS8.2AI score0.07643EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/09 2:48 a.m.5 views

CVE-2022-1077

CVE-2022-1077 Description A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely an...

7.5CVSS7AI score0.0251EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 2:47 a.m.14 views

CVE-2024-40275_Scanner

CVE-2024-40725 Scanner A Python-based detection tool for CVE-2024-40725 , an Apache HTTP Server source code disclosure vulnerability affecting versions 2.4.0 and 2.4.61. Legal notice: Only run this scanner against servers you own or have explicit written authorization to test. Unauthorized use ma...

5.3CVSS6.7AI score0.04168EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/09 2:45 a.m.7 views

Exploits

Exploits Original CVEs, exploit PoCs and security advisories by @kmkz · boffsec-services.com · @kmkzsecurity 2026 File| Target| Type| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| Advisory 3-CVE chain| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghelli...

10CVSS8.2AI score0.9981EPSS
SaveExploits144References17
Kitploit
Kitploit
added 2026/09/09 2:45 a.m.8 views

CVE-2023-23752_Joomla

CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated Information Disclosure A proof-of-concept for CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated Information Disclosure. For versions 4.0.0 4.2.8 it means from 4.0.0 up to 4.2.7. Getting Started Executing program With python3 root@kitploit: python3...

5.3CVSS6.8AI score0.99827EPSS
SaveExploits43
Kitploit
Kitploit
added 2026/09/09 2:39 a.m.5 views

CVE-2024-29296

CVE-2024-29296 - User enumeration on Portainer CE - 2.19.4 A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or...

5.3CVSS6AI score0.01252EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/09 2:38 a.m.6 views

CVE-2015-6668

CVE-2015-6668 Title: CV filename disclosure on Job-Manager WP Plugin...

7.5CVSS7.4AI score0.10031EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 2:37 a.m.4 views

cve-2025-24054-lab

CVE-2025-24054 — Detection & Mitigation Lab Project log for a defensive security lab on CVE-2025-24054 , the Windows New Technology LAN Manager NTLM Hash Disclosure Spoofing vulnerability, under the assumption that the affected system cannot be patched short-term. Blue-team educational project...

6.5CVSS7.5AI score0.58909EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/09 2:37 a.m.4 views

CVE-2025-11749

CVE-2025-11749 AI Engine = 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation ⚠️ AI Engine = 3.1.3 — Unauthenticated Sensitive Information Exposure → Privilege Escalation GitHub: Nxploited Telegram: @KNxploited IMPORTANT NOTICE: Many unethical individuals attempt to...

9.8CVSS7.7AI score0.74759EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/09 2:33 a.m.5 views

CVE-2019-13025

Connect Box CH7465LG CVE-2019-13025 Information This repository contains two PoCs for the Connect Box CH7465LG running on Firmware CH7465LG-NCIP-6.12.18.24-5p8-NOSH or older. For more information have a look at my blog. Usage Unauthenticated Remote Code Execution $ python3 poc-rce.py...

9.8CVSS8.2AI score0.03321EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 2:19 a.m.4 views

imagemagick-lfi-poc

ImageMagick LFI PoC CVE-2022-44268 The researchers at MetabaseQ discovered CVE-2022-44268, i.e. ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image e.g., for resize, the resulting image could have embedded the content of an arbitrary remote file if the...

6.5CVSS5.8AI score0.89855EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/09 2:17 a.m.6 views

CVE-2023-3897

CVE-2023-3897 Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version...

5.3CVSS6.1AI score0.03064EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/09 2:14 a.m.5 views

CVE-2023-46501

CVE-2023-46501 - BoltWire v6.03 - Improper Access Control Description In version 6.03 of BoltWire CMS , it is possible to exploit an “Improper Access Control” vulnerability, through the index.php?p=member.admin&action=data parameter, allowing an attacker to view any member's password, including t...

9.1CVSS8.1AI score0.01267EPSS
SaveExploits1
Rows per page
Query Builder