Lucene search
+L

16364 matches found

Kitploit
Kitploit
β€’added 2026/08/31 8:36 p.m.β€’4 views

CVE-2023-42426

CVE ID: CVE-2023-42426 Vulnerability Type: Cross-Site Scripting Description: Cross-site scripting XSS vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image' component. Steps to reproduce: 1. Select the...

6.1CVSS6.1AI score0.00793EPSS
SaveExploits1References1
Kitploit
Kitploit
β€’added 2026/08/31 8:03 p.m.β€’316 views

radare2

Radare2: Libre Reversing Framework for Unix Geeks Current git master branch is 6.2.0, next release will be 6.2.1. Description r2 is a complete rewrite of radare. It provides a set of libraries, tools and plugins to ease reverse engineering tasks. Distributed under LGPLv3, despite each plugin can...

6AI score
SaveExploits0References27
Kitploit
Kitploit
β€’added 2026/08/31 6:00 p.m.β€’5 views

ImHex

A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM. /ˈΙͺmhΙ›ks/...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
β€’added 2026/08/31 5:06 p.m.β€’7 views

CVE-2023-22809

Linux Privilege Escalation Exploit for CVE-2021-3560 Sudoedit a.k.a -e - Local Privilege Escalation For educational and authorized security research purposes only Original Exploit Authors n3m1dotsys Vulnerability Description In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra...

7.8CVSS7.2AI score0.55367EPSS
SaveExploits21References4
Kitploit
Kitploit
β€’added 2026/08/31 4:07 p.m.β€’5 views

CVE-2022-42096

Backdrop CMS versiΓ³n 1.23.0 ExplicaciΓ³n de la vulnerabilidad: Se descubriΓ³ que Backdrop CMS versiΓ³n 1.23.0 contiene una vulnerabilidad de cross-site scripting XSS almacenado a travΓ©s del contenido Post. Vectores de ataque: El atacante debe publicar algo en "Post content" e insertar el payload XSS...

4.8CVSS5.8AI score0.0196EPSS
SaveExploits1References1
Kitploit
Kitploit
β€’added 2026/08/31 2:25 p.m.β€’3 views

wxHexEditor

wxHexEditor wxHexEditor official GIT repo For info : http://www.wxhexeditor.org Compilation instructions Just launch make! Compilation dependencies on Linux wxgtk;...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/08/31 2:13 p.m.β€’8 views

CVE-2019-12836

CVE-2019-12836 Application JEditor v3.0.5 - WYSIWIG Editor for JIRA Simple yet powerful rich text editor for Jira. Import HTML emails, paste rich contents, create templates and prepopulate fields. Vendor of Product Bobronix Vendor Website http://bobronix.com/ CVE Reference...

8.8CVSS7.3AI score0.00969EPSS
SaveExploits2
Kitploit
Kitploit
β€’added 2026/08/31 2:05 p.m.β€’4 views

Joomla-JCK-Editor-6.4.4-SQL-Injection

Joomla-JCK-Editor-6.4.4-SQL-Injection The JCK Editor Jtreelink plugin for Joomla! fails to correctly parse the user inputs, allowing SQL Injection. This exploit takes advantage of this security flaw and dump the administrators credentials and possibly upload a PHP RCE shell. Exploit Title: Joomla...

9.8CVSS7.4AI score0.82976EPSS
SaveExploits6
Kitploit
Kitploit
β€’added 2026/08/31 1:10 p.m.β€’6 views

sops

SOPS: Secrets OPerationS SOPS is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age, and PGP. demo .. image:: https://i.imgur.com/X0TM5NI.gif .. image::...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/08/31 1:01 p.m.β€’5 views

CVE-2018-0802_CVE-2017-11882

RTF118820802 CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about Patch analysis:...

9.3CVSS7.2AI score0.99945EPSS
SaveExploits38
Kitploit
Kitploit
β€’added 2026/08/31 12:22 p.m.β€’2 views

Vvveb-CMS-CVE-2025-8518

Vvveb-CMS-CVE-2025-8518 This repository contains a Proof of Concept PoC demonstrating a critical vulnerability in givanz Vvveb 1.0.5. The vulnerability allows an authenticated user with template editing privileges to write arbitrary PHP code to server files, leading to Remote Code Execution RCE...

7.2CVSS6.1AI score0.01406EPSS
SaveExploits6
Kitploit
Kitploit
β€’added 2026/08/31 12:20 p.m.β€’2 views

CVE-2023-46818

CVE-2023-46818 An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled. Usage root@kitploit: ❯ python3 CVE-2023-46818.py Usage: python3 CVE-2023-46818.py Poc of CVE-2023-46818 ISPConfig =...

7.2CVSS7.1AI score0.15856EPSS
SaveExploits14
Kitploit
Kitploit
β€’added 2026/08/31 11:56 a.m.β€’2 views

Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation

🧨 CVE-2020-11107 – XAMPP Local Privilege Escalation Windows πŸ“Œ Overview CVE-2020-11107 is a Local Privilege Escalation LPE vulnerability affecting Apache Friends XAMPP on Windows. An unprivileged user can modify the XAMPP Control Panel configuration file xampp-control.ini and replace the default...

8.8CVSS7.2AI score0.2247EPSS
SaveExploits5References1
Kitploit
Kitploit
β€’added 2026/08/31 11:47 a.m.β€’4 views

dnSpy

dnSpyEx dnSpyEx is an unofficial continuation of the dnSpy project which is a debugger and .NET assembly editor. You can use it to edit and debug assemblies even if you don't have any source code available. Main features: Debug .NET and Unity assemblies Edit .NET and Unity assemblies Light and da...

5.9AI score
SaveExploits0References4
NVD
NVD
β€’added 2026/08/31 11:16 a.m.β€’9 views

CVE-2026-82679

A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the file dmFrontPlugin/lib/dmWidget/media/dmWidgetContentBaseMediaForm.php of the component Widget Editor. Performing a manipulation results in unrestricted upload. The attack may ...

6.5CVSS
SaveExploits0References6
Kitploit
Kitploit
β€’added 2026/08/31 10:57 a.m.β€’2 views

CVE-2025-30406

Part1: Exploit root@kitploit: Ξ» CVE-2025-30406.exe rce.txt...

9.8CVSS7.4AI score0.94252EPSS
SaveExploits6
CVE
CVE
β€’added 2026/08/31 10:30 a.m.β€’8 views

CVE-2026-82679

An unrestricted file upload vulnerability exists in diem-project/diem (up to version 5.1.3 ), located in the Widget Editor component within the file dmFrontPlugin/lib/dmWidget/media/dmWidgetContentBaseMediaForm.php. The root cause is an unknown function that fails to properly restrict upload hand...

6.5CVSS6.2AI score
SaveExploits0References6
EUVD
EUVD
β€’added 2026/08/31 10:30 a.m.β€’5 views

EUVD-2026-68460

A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the file dmFrontPlugin/lib/dmWidget/media/dmWidgetContentBaseMediaForm.php of the component Widget Editor. Performing a manipulation results in unrestricted upload. The attack may ...

6.5CVSS6.2AI score
SaveExploits0References6
NVD
NVD
β€’added 2026/08/31 9:17 a.m.β€’8 views

CVE-2026-82666

A flaw has been found in yaojingang GEOFlow up to 2.1.0. This issue affects the function preview of the file app/Http/Controllers/Admin/SiteThemeEditorController.php of the component Superadmin Theme Editor. This manipulation of the argument blade causes code injection. It is possible to initiate...

5.8CVSS
SaveExploits0References9
EUVD
EUVD
β€’added 2026/08/31 8:30 a.m.β€’4 views

EUVD-2026-68435

A flaw has been found in yaojingang GEOFlow up to 2.1.0. This issue affects the function preview of the file app/Http/Controllers/Admin/SiteThemeEditorController.php of the component Superadmin Theme Editor. This manipulation of the argument blade causes code injection. It is possible to initiate...

5.8CVSS5.5AI score
SaveExploits0References9
Rows per page
Query Builder