Lucene search
+L

625547 matches found

Kitploit
Kitploit
added 2026/08/31 2:26 p.m.4 views

CVE-2023-32031

CVE-2023-32031 CVE-2023-32031 MS Exchange PowerShell backend RCE Reference https://littlepwner.github.io/posts/cve-2023-32031-ms-exchange-powershell-backend-rce/...

8.8CVSS7.4AI score0.8145EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 2:26 p.m.5 views

CVE-2024-34102

Cosmic Sting: CVE-2024-34102 Exploiter Cosmic Sting is a Go-based tool designed to exploit CVE-2024-34102, Remote Code Execution vulnerability. CVE-2024-34102 Detail Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External...

9.8CVSS7.6AI score0.99994EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/08/31 2:26 p.m.2 views

CVE-2022-24086

CVE-2022-24086 Probado con: magento 2.4.3 y datos de ejemplo Imagen de Docker: docker.io/bitnami/magento:2.4.3-debian-10-r0 Nombre: root@kitploit: var this.getTemplateFilter.filter$order.shippingaddress.cityvar...

10CVSS7.4AI score0.99199EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/31 2:25 p.m.4 views

Citrix-ADC-RCE-CVE-2020-8193

Citrix ADC RCE 0x01 CreateSession request POST /pcidss/report?type=allprofiles&sid=loginchallengeresponse1requestbody&username=nsroot&set=1 HTTP/1.1 Host: 192.168.3.18:9080 User-Agent: Mozilla/5.0 Windows NT 6.1; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/76.0.3809.132 Safari/537.36...

6.5CVSS6.7AI score0.88411EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/31 2:25 p.m.2 views

bad-dicom

Bad-DICOM PoC of my handcrafted CVE-2019-11687's exploit tool. I've crafted this PEDICOM as a Proof of Concept for my college's capstone: "Detection and prevention of attacks based on vulnerabilities of DICOM files against medical management services ". What is a PEDICOM DoomDicom.dcm is a PEDICO...

9.3CVSS7.2AI score0.02774EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/08/31 2:25 p.m.4 views

Confluence-RCE

Usage: python3 mian.py Detection Command Execution Reverse Shell Supports SOCKS5 and HTTP Proxy...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 2:24 p.m.4 views

CVE-2018-11776

CVE-2018-11776 Proof of Concept exploit so I could quickly assess what sorts of protections and fixes are available. Originally found by Man Yue Mo, Semmle: https://semmle.com/news/apache-struts-CVE-2018-11776 Semmle had a "Apache Struts RCE - CVE-2018-11776 - PoC Exploit Demo" YouTube video up f...

9.3CVSS7.2AI score0.99991EPSS
SaveExploits42References1
Kitploit
Kitploit
added 2026/08/31 2:24 p.m.5 views

CVE-2022-36804-PoC

CVE-2022-36804-PoC Multithreaded exploit script for CVE-2022-36804 affecting most BitBucket versions 8.3.1 See the full advisory here https://jira.atlassian.com/browse/BSERV-13438 All credit to TheGrandPew for discovery The script will automatically detect public repositories located on bitbucket...

8.8CVSS7.4AI score0.99077EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/08/31 2:23 p.m.5 views

CVE-2024-30270-PoC

This script is designed to exploit vulnerabilities in a Mailcow instance using Cross-Site Scripting XSS and Remote Code Execution RCE. The script aims to: Inject an XSS payload into a Mailcow web interface. Use the XSS payload to execute unauthorized actions. Achieve RCE by overwriting a server...

6.2CVSS7.1AI score0.27346EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 2:23 p.m.3 views

CVE-2022-36553-PoC

CVE-2022-36553 - Hytec Inter HWL-2511-SS Unauthenticated Remote Command Injection. Overview This repository contains a Proof of Concept PoC reverse shell script for exploiting CVE-2022-36553, a critical vulnerability in Hytec Inter HWL-2511-SS devices. The script is a practical demonstration,...

9.8CVSS7.3AI score0.90902EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 2:23 p.m.5 views

CVE-2024-0044

CVE-2024-0044/A-307532206 es una vulnerabilidad de gravedad alta en el framework de Android que permite a atacantes con acceso adb ejecutar código arbitrario bajo el UID de cualquier aplicación. Fue encontrada originalmente por Tom Hebb de Meta Red Team X. Puedes encontrar muchos artículos sobre...

7.8CVSS7.2AI score0.0146EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/31 2:23 p.m.5 views

cve-2023-30253

CVE-2023-30253 Description Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: ?PHP instead of ?php in injected data. Documentation CVE-2023-30253 GitHub Advisory: GHSA-9wqr-5jp4-mjmh Setup root@kitploit: git clone...

8.8CVSS7.7AI score0.82094EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/08/31 2:22 p.m.4 views

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa root@kitploit: app="JETBRAINS-TeamCity" ZoomEye root@kitploit: app:"JetBrains TeamCity" Hunter.how root@kitploit: product.name="TeamCity" Shodan root@kitploit: http.component:"teamcity" How to use I'm using Python3.9. root@kitploit: pip install requests urllib3 faker...

9.8CVSS7.3AI score0.99991EPSS
SaveExploits26References1
Kitploit
Kitploit
added 2026/08/31 2:22 p.m.2 views

PHP-FPM-Remote-Code-Execution-Vulnerability-CVE-2019-11043-

CVE-2019-11043 1. Vulnerability Description When Nginx processes requests containing %0a with fastcgisplitpathinfo, it causes PATHINFO to be empty due to the newline character \n. PHP-FPM has a logic flaw when handling an empty PATHINFO. An attacker can craft a request to achieve remote code...

9.8CVSS7.1AI score0.9978EPSS
SaveExploits57
Kitploit
Kitploit
added 2026/08/31 2:22 p.m.4 views

CVE-2025-67888

CVE-2025-67888 Control Web Panel = 0.9.8.1208 admin/index.php OS Command Injection Vulnerability Affected Versions: Version 0.9.8.1208 and prior versions. Vulnerability Description: User input passed via the "key" GET parameter to /admin/index.php when the "api" parameter is set is not properly...

7.3CVSS6.1AI score0.03602EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/31 2:21 p.m.4 views

git-lfs-RCE-exploit-CVE-2020-27955-Go

Exploit de ejecución remota de código RCE en Git-lfs CVE-2020-27955 versión Go Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken, etc. Descubierto por Dawid Golunski https://legalhackers.com https://exploitbox.io Probado en Windows en: git, GitHub...

10CVSS7.1AI score0.82715EPSS
SaveExploits14References1
Kitploit
Kitploit
added 2026/08/31 2:21 p.m.1 views

CVE-2024-28397-command-execution-poc

CVE-2024-28397-command-execution-poc This vulnerability arises from incomplete sandboxing in js2py, where crafted JavaScript can traverse Python’s internal object model and access dangerous classes like subprocess.Popen, leading to arbitrary command execution. JSON-Parsers & RCE Exploit PoC...

5.3CVSS6.8AI score0.04548EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/08/31 2:21 p.m.2 views

F5_RCE

Uso root@kitploit: python3 f5rce.py -u Especificar URL objetivo -f Especificar archivo de detección por lotes -c Ejecutar comando El efecto es el siguiente: PS: la salida no es muy estética, la modificaré 😁 Problema Este PoC actualmente solo admite algunos comandos; ejecutar history, ls, etc...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 2:21 p.m.3 views

CVE-2023-38831-winrar-expoit-simple-Poc

CVE-2023-38831-winrar-expoit-simple-Poc Very important I hope you see this link first https://github.com/b1tg/CVE-2023-38831-winrar-exploit I did not write the full exploit. He wrote the exploit. https://github.com/b1tg All he did was modify something simple to get a Reverse Shell through the...

7.8CVSS6.8AI score0.97894EPSS
SaveExploits49References3
Kitploit
Kitploit
added 2026/08/31 2:20 p.m.4 views

CVE-2024-25600-Bricks-Builder-plugin-for-WordPress

CVE-2024-25600 Exploit Tool 🚀 Description 📝 This tool 🛠️ is designed to exploit the CVE-2024-25600 vulnerability 🕳️ found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticated remote code execution on affected websites 💻. The tool automates the exploitation...

10CVSS7.9AI score0.88234EPSS
SaveExploits19
Rows per page
Query Builder