Lucene search
+L

3037 matches found

Kitploit
Kitploit
added 2026/09/18 3:21 a.m.8 views

CVE-2017-9841

CVE-2017-9841 CVE-2017-9841 batch scanning and exploitation script. PHPUnit is a PHP-based testing framework. There is a security vulnerability in the Util/PHP/eval-stdin.php file in PHPUnit versions prior to 4.8.28 and 5.x versions prior to 5.6.3. Remote attackers can exploit this vulnerability ...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/18 12:31 a.m.8 views

dejavu

DejaVu This container runs a web application that analyzes images and returns their metadata using exiftool. Users send the application a URL to an image and the app will retrieve it, analyze it, and return the results. The version of exiftool used by the application is vulnerable to CVE-2021-222...

7.8CVSS8.1AI score0.99981EPSS
SaveExploits39
Kitploit
Kitploit
added 2026/09/18 12:07 a.m.11 views

CVE-2025-54322

CVE-2025-54322 - XSpeeder SXZOS Pre-Auth RCE Scanner A multi-threaded vulnerability scanner for CVE-2025-54322, an unauthenticated remote code execution vulnerability in XSpeeder SXZOS firmware affecting 70,000+ hosts globally. 📋 Table of Contents About the Vulnerability Features Installation Usa...

10CVSS6.9AI score0.15482EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/17 10:49 p.m.8 views

mpDNS

mpDNS aka multi-purpose DNS Server Simple, configurable DNS Server with multiple useful features Python 3 names.db - holds all custom records see examples Simple wildcards like .example.com Catch unicode dns requests Custom actions aka macro: shellexec::dig google.com +short - Execute shell comma...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/17 10:12 p.m.7 views

Php-unit-CVE-2017-9841

phpunit Remote Code Execution Vulnerability CVE-2017-9841 Composer is a PHP package management tool. Using Composer to install extension packages will create a vendor folder in the current directory and place all files in it. Usually this directory should be placed outside the web root so that...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/17 9:33 p.m.9 views

ccs-eval

Evaluates hosts for CVE-2014-0224 vulnerability https://vulners.com/cve/CVE-2014-0224 Usage: ccs-eval.py list-of-hosts.txt -Takes in a list of hosts, line seperated. Checks the host for common SSL ports using nmap. Peforms PoC injection test supplied by RedHat fake-client-early-ccs.pl. Writes...

7.4CVSS6.9AI score0.95326EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/17 7:22 p.m.10 views

Reproduce-CVE-2024-21513

Reproduce-CVE-2024-21513 Overview This project demonstrates the vulnerability CVE-2024-21513 in the langchain-experimental package, specifically in versions =0.0.15 and 0.0.21. The vulnerability allows arbitrary code execution via the VectorSQLDatabaseChain component when retrieving values from t...

8.5CVSS6.5AI score0.01864EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/17 6:43 p.m.10 views

cve-2023-40000

cve-2023-40000 That's a PoC of cve-2023-40000. Wordpress LiteSpeed Cache exploit. The CVE could be applied to all LiteSpeed Cache --------------------+"; echo "+----------------------------------------------------------------------+";...

8.3CVSS7.7AI score0.54872EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/17 6:43 p.m.12 views

CVE-2024-53924

CVE-2024-53924 Description: Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginning with the =IFA1=200, eval"import'os'.system substring. Author: Adham Elmosalamy @aelmo Date of Disclosure: November 23, 2024...

9.8CVSS6.6AI score0.00974EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/17 6:31 p.m.6 views

CVE-2020-15778

Write up for CVE id CVE-2020-15778. Discoverd by : Chinmay Pandya Email address : [email protected] Linkedin : www.linkedin.com/in/chinmay-pandya Vulnerability title: scp in OpenSSH 8.3p1 allows eval injection. Product: Openssh Affected Component: SCP...

7.8CVSS6.9AI score0.12996EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/17 6:23 p.m.6 views

phpunit-brute

phpunit-brute Tool to try multiple paths for PHPunit RCE CVE-2017-9841 and it will log found paths to found.txt in the dir. It uses the following list of paths https://raw.githubusercontent.com/random-robbie/bruteforce-lists/master/phpunit.txt if you have a path that is not on there please submit...

9.8CVSS8.1AI score0.99999EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/17 6:19 p.m.8 views

Eaton-UPS-Companion-Exploit

概要 Eaton UPS Companion ソフトウェアは、安全でない HTTP 接続を介して毎週アップデートを確認し、アップデート URL にある内容を eval で実行します。これにより、攻撃者はバックエンド ソフトウェアに既に存在するファイル実行、ネットワーク ソケット、ファイルシステム I/O などの低レベル OS 操作を利用する JavaScript 関数を作成できます。これらの操作はすべて、UPS(無停電電源装置)がシステム管理に必要とする権限により、NT AUTHORITY\SYSTEM...

8.8CVSS7.5AI score0.02103EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 5:13 p.m.5 views

buyer-eval-skill

Buyer Eval — The Rotten Tomatoes of B2B Software A free, open-source Claude skill that evaluates B2B vendors by talking to their AI agents, cross-referencing every claim against independent sources, and scoring what's verified vs. what's just optimistic marketing. New in v3.5 — Vendor questions a...

6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/17 3:57 p.m.9 views

CVE-2022-36432

CVE-2022-36432 Magento 2 用 Amasty Blog Pro のプレビュー機能におけるクロスサイトスクリプティング XSS 説明 Magento 2 用プラグイン Amasty Blog Pro 2.10.3 のプレビュー機能は、eval を安全でない方法で使用します。これにより、攻撃者は生成されたプレビューアプリケーションの応答を操作して、管理者パネルのユーザーに対してクロスサイトスクリプティング攻撃を行うことができます。 この脆弱性は、blog/view/base/web/js/adminhtml/preview.js ファイルに存在します。...

5.4CVSS6.1AI score0.00565EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/17 3:09 p.m.9 views

CVE-2026-61511-PoC-Exploit

CVE-2026-61511 – vBulletin 事前認証RCEエクスプロイト&検証ツール ⚠️ 倫理的な使用のみ – 許可されたセキュリティテスト このリポジトリは許可されたセキュリティ専門家、ブルーチーム、ペネトレーションテスター のみを対象としたツールを提供します。 許可のないコンピュータシステムへのアクセスは、CFAA(米国)、Computer Misuse Act(英国)、TCK 243/244(トルコ)、および世界各国の同様の法律 に基づき違法です。 📖 脆弱性の概要 CVE‑2026‑61511 は、vBulletin の AJAX テンプレートレンダリングエンジンにおけ...

9.8CVSS6.4AI score0.70766EPSS
SaveExploits8References1
Kitploit
Kitploit
added 2026/09/17 1:27 p.m.7 views

Ultimate-CVE-2026-61511

CVE-2026-61511 – 概念実証 vBulletin の脆弱性 CVE-2026-61511(認証不要のリモートコード実行)への曝露を検証するための教育・防御目的の概念実証(PoC)です。 連絡先 Telegram: https://t.me/thecodeb0ss 概要 このリポジトリは、vBulletin の脆弱性 CVE-2026-61511 に対する防御的な検出および検証の概念実証 を提供します。 公開されているセキュリティ研究によると、CVE-2026-61511 は vBulletin のテンプレートランタイムにおける重大な eval...

9.8CVSS6.8AI score0.70766EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/17 11:23 a.m.9 views

CVE-2025-1302

CVE-2025-1302 ★ CVE-2025-1302 JSONPath-plus RCE PoC ★ https://github.com/user-attachments/assets/5d791540-ef6c-4cd0-bd25-7a1dbbd194fb Lab Setup root@kitploit: docker build -t jsonpath:10.2.0 . docker run --rm --name jsonpath -p 3000:3000 jsonpath:10.2.0 localhost:3000 Description Versions of the...

9.8CVSS8.1AI score0.10395EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/17 11:22 a.m.8 views

cve-2025-12735-expr-eval-rce

CVE-2025-12735 expr-eval RCE Exploit A security research tool for detecting and testing the CVE-2025-12735 vulnerability in the expr-eval and expr-eval-fork npm packages. ⚠️ Disclaimer This tool is for authorized security testing and educational purposes only. Unauthorized access to computer...

9.8CVSS8AI score0.02252EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 10:46 a.m.11 views

CVE-2023-47253

CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', Proof of Concept POC Just access the URL with your PHP code in "gridValoresPopHidden" parameter...

9.8CVSS8.6AI score0.14308EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/17 9:41 a.m.14 views

CVE-2021-27928-POC

CVE-2021-27928 POC Description A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval...

9CVSS8.2AI score0.38436EPSS
SaveExploits9
Rows per page
Query Builder