Lucene search
+L

625746 matches found

Kitploit
Kitploit
added 2026/08/31 4:11 p.m.3 views

SubrionCMS-4.2.1-File-upload-RCE-auth-

SubrionCMS-4.2.1-File-upload-RCE-auth- This is an edited version of the CVE-2018-19422 exploit to fix an small but annoying issue I had. I had to use this exploit in a CTF but I could not get it to properly exploit, just kept failing to login. After an unholy amount of time I finally figured out...

7.2CVSS7.1AI score0.64261EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/08/31 4:10 p.m.3 views

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file |...

10CVSS7.4AI score0.99997EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/08/31 4:09 p.m.2 views

sunlogin_rce

Foreword Nothing much to say, I'll just put the tool and the vulnerable version here. It's great for local testing, but do not use it for illegal tests. Tested Sunflower client vulnerable version: 11.0.0.33162 The vulnerable client is provided in the source code. Port scanning uses:...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 4:08 p.m.7 views

CVE-2020-2883

CVE-2020-2883 First clone the framework root@kitploit: git clone https://github.com/Y4er/CVE-2020-2555 Then place CVE20202883.java into the src/com/supeream/CVE20202883.java directory Import into IDEA and run CVE20202883.java for RCE! Screenshot...

9.8CVSS7.4AI score0.97116EPSS
SaveExploits34
Kitploit
Kitploit
added 2026/08/31 4:07 p.m.3 views

docker-CVE-2019-11043

Imagen de Docker y comandos para comprobar CVE-2019-11043 CVE: CVE-2019-11043 Descripción: En las versiones de PHP 7.1.x anteriores a 7.1.33, 7.2.x anteriores a 7.2.24 y 7.3.x anteriores a 7.3.11, en ciertas configuraciones de FPM, es posible provocar que el módulo FPM escriba más allá de los...

9.8CVSS7.1AI score0.9978EPSS
SaveExploits57References1
Kitploit
Kitploit
added 2026/08/31 4:07 p.m.4 views

exploit-CVE-2014-6271

Shellshock exploit + vulnerable environment Shellshock, also known as Bashdoor, is a family of security bugs in the widely used Unix Bash shell, the first of which was disclosed on 24 September 2014. Many Internet-facing services, such as some web server deployments, use Bash to process certain...

10CVSS7.5AI score0.99999EPSS
SaveExploits138
Kitploit
Kitploit
added 2026/08/31 4:06 p.m.5 views

CVE-2021-22205

CVE-2021-22205 Description - POC for CVE-2021-22205: Gitlab CE/EE RCE 未授权远程代码执行漏洞 POC && EXP - create by antx at 2021-10-29. Detail - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file...

10CVSS7.3AI score0.99731EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/08/31 4:06 p.m.4 views

CVE-2018-14324-Exploit

Hackeando Eclipse GlassFish - CVE-2018-14324 La descripción de CVE-2018-14324 no explica completamente el impacto de esta vulnerabilidad. En resumen, tienes acceso a Java Management Extensions JMX mediante credenciales hardcodeadas admin:admin. Si bien el impacto se enumera como " información...

10CVSS7.2AI score0.04343EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 4:05 p.m.3 views

cve-2019-7609

CVE-2019-7609 Exploit for CVE-2019-7609 written in python3.6+ based on the code by LandGrey. CVE-2019-7609 : RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer. Usage 1. Start a listener 2. Run the exploit with the target url base url of the kiba server, the listener host...

10CVSS6.9AI score0.95338EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/08/31 4:05 p.m.5 views

CVE-2024-4040

CVE-2024-4040 Una vulnerabilidad de inyección de plantillas del lado del servidor en CrushFTP en todas las versiones anteriores a 10.7.1 y 11.1.0 en todas las plataformas permite a atacantes remotos no autenticados leer archivos del sistema de archivos fuera del VFS Sandbox, eludir la autenticaci...

10CVSS7.5AI score0.99539EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/08/31 4:04 p.m.3 views

GTRS

GTRS - Google Translator Reverse Shell This tools uses Google Translator as a proxy to send arbitrary commands to an infected machine. root@kitploit: INFECTED MACHINE ==HTTPS== GOOGLE TRANSLATE ==HTTP== C2 Environment Configuration First you need a VPS and a domain, for the domain you can get a...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 4:03 p.m.7 views

Form-Tools-3.1.1-RCE

Form-Tools-3.1.1-RCE CVE-2024-22722 RCE via SSTI Automation with Python. Server Side Template Injection SSTI vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application. This script automates the creation of ...

7.2CVSS6AI score0.00885EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 4:02 p.m.4 views

FakeImageExploiter

FakeImageExploiter v1.4 - backdoor images.jpg.ps1 root@kitploit: CodeName: Metamorphosis Version release: v1.4 Stable Author: pedro ubuntu r00t-3xp10it Distros Supported : Linux Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 Legal Disclamer: root@kitploit: The...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 4:01 p.m.3 views

CVE-2023-36250

CVE-2023-36250 CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record. Vulnerability Type CSV Injection Discoverer Bruno Teixeira Reference http://gnome.com Affected Product Code Base GNOME...

7.8CVSS7.4AI score0.00556EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 4:01 p.m.5 views

CVE-2024-30088__Windows-TOCTOU-exploit

CVE-2024-30088 – PoC adaptado para WinRM 📌 Resumen Esta es una versión modificada del exploit original CVE-2024-30088, adaptada para funcionar en entornos no interactivos WinRM. El PoC original inicia un cmd.exe interactivo, que no funciona a través de WinRM. Esta versión se centra en la ejecució...

7CVSS7.2AI score0.68202EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/31 4:01 p.m.5 views

CVE-2020-8158

CVE-2020-8158: TypeORM Prototype Pollution Vulnerability Overview This is a proof-of-concept demonstrating CVE-2020-8158, a critical prototype pollution vulnerability in TypeORM versions 0.2.25. Vulnerability Details CVE ID : CVE-2020-8158 CVSS Score : 9.8 CRITICAL Affected Package : TypeORM 0.2....

9.8CVSS7.4AI score0.0212EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 4:01 p.m.5 views

CVE-2025-27480

CVE-2025-27480 CVE‑2025‑27480 – Ejecución remota de código en OpenSSH De qué trata la vulnerabilidad La versión 8.9p1 de OpenSSH contiene un sutil error de desbordamiento de búfer que ocurre cuando analiza un paquete SSHUSERAUTH. Un cliente puede enviar un paquete con un campo “user” muy largo, y...

8.1CVSS7.6AI score0.12309EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 4:00 p.m.3 views

CVE-2026-39987-Poc

CVE-2026-39987-Poc Cliente WebSocket de Prueba de Concepto PoC para CVE-2026-39987 Marimo Pre-Auth RCE, destinado a pruebas de seguridad autorizadas. ⚠️ Descargo de responsabilidad Este script/herramienta se proporciona únicamente con fines educativos, de investigación y de pruebas autorizadas...

9.8CVSS7.3AI score0.97279EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/08/31 4:00 p.m.4 views

CVE-2024-0582

RU GenIoURingExploit is a PoC exploit targeting a specific vulnerability in the Linux kernel CVE-2024-0582. The PoC leverages the iouring mechanism to gain unintended access and potentially escalate privileges by manipulating socket buffers and triggering certain kernel behaviors. Features Utiliz...

7.8CVSS7.2AI score0.12836EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/31 3:59 p.m.4 views

CVE-2019-6340

CVE-2019-6340 CVE-2019-6340 POC Drupal rce python poc.py url php func command node number Example: python poc.py http://192.168.142.148/drupal-8.6.9/ system ipconfig 200 Twitter: @0w4ys...

8.1CVSS7.3AI score0.92017EPSS
SaveExploits23
Rows per page
Query Builder