Lucene search
+L

626271 matches found

NVD
NVD
added 2026/09/01 1:20 p.m.8 views

CVE-2026-84147

This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system...

10CVSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/09/01 1:20 p.m.5 views

CVE-2026-84120

A flaw was found in the Audio/Video component of Firefox and Firefox ESR. This use-after-free vulnerability could allow a remote attacker to achieve arbitrary code execution. A use-after-free occurs when a program attempts to use memory that has been deallocated, which can lead to memory corrupti...

8.8CVSS6AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/01 1:20 p.m.3 views

CVE-2025-64512

CVE-2025-64512 – pdfminer.six Deserialization PoC Overview This proof-of-concept demonstrates a vulnerability in pdfminer.six CVE-2025-64512 that can lead to arbitrary command execution when a malicious PDF is processed. The exploit uses a crafted PDF that references a malicious, gzip-compressed...

8.6CVSS7.2AI score0.00312EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/01 1:19 p.m.2 views

CVE-2004-1561

CVE-2004-1561 Icecast Header Overwrite desbordamiento de búfer RCE Actualización para 568-edit.c Conseguí que funcionara el . Editado según...

7.5CVSS5.8AI score0.77928EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/01 1:19 p.m.6 views

cve-2026-9558-poc

CVE-2026-9558 — Mautic Theme Templates Server-Side Template Injection SSTI to Full Admin Takeover Table of Contents Overview Affected Versions Root Cause Analysis Repository Structure Requirements Usage Expected Output References Disclaimer Overview CVE-2026-9558 is a Server-Side Template Injecti...

9.9CVSS6.2AI score0.00571EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 1:18 p.m.1 views

CVE-2026-63030-CVE-2026-60137-wp2shell-poc

wp2shell — WordPress REST API Time-Based Blind SQLi → RCE Proof‑of‑Concept Description pocwptot.py is a proof‑of‑concept PoC to exploit a time‑based blind SQL injection vulnerability on the WordPress REST API batch endpoint, and perform an escalation chain up to Remote Code Execution RCE...

9.8CVSS7.5AI score0.97271EPSS
SaveExploits78
Kitploit
Kitploit
added 2026/09/01 1:18 p.m.4 views

cve-2026-0770-langflow_rce_reproduction

CVE-2026-0770: Langflow execglobals Remote Code Execution CVSS 9.8 Critical | ZDI-CAN-27325 | CWE-829: Inclusion of Functionality from Untrusted Control Sphere Overview CVE-2026-0770 is a critical unauthenticated remote code execution vulnerability in Langflow, a low-code application framework fo...

9.8CVSS7.9AI score0.63417EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/01 1:18 p.m.3 views

CVE-2021-43936

CVE-2021-43936 CVE-2021-43936 is a critical vulnerability CVSS3 10.0 leading to Remote Code Execution RCE in WebHMI Firmware. This vulnerability works on versions 4.0 and the newest ones. Tested only on 4.0.7475. Vulnerability is used by script in the following steps: 1. Logs into the application...

10CVSS7.5AI score0.35804EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/01 1:18 p.m.6 views

CVE-2025-48384-test

Reproduce Command Line root@kitploit: git clone --recursive https://github.com/beishanxueyuan/CVE-2025-48384-test.git 修改指向的GitHub仓库 root@kitploit: git init repo git -C repo -c protocol.file.allow=always submodule add https://github.com/beishanxueyuan/CVE-2025-48384.git sub git -C repo mv sub...

8CVSS7AI score0.04109EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/01 1:18 p.m.5 views

CVE-2026-57517-CWP

CVE-2026-57517 CWP Exploit This repository contains a Go-based proof-of-concept tool for testing a known Control Web Panel CWP vulnerability scenario related to CVE-2026-57517. The implementation targets a blind SQL injection path and includes optional webshell deployment and command execution fl...

9.8CVSS6.1AI score0.00963EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/01 1:18 p.m.2 views

Confluence_CVE-2021-26084

ConfluenceCVE-2021-26084 Remote Code Execution on Confluence Servers : CVE-2021-26084 PoC Confluence Possible exploit endpoints root@kitploit: https:///login https:///pages/templates2/viewpagetemplate.action https:///template/custom/content-editor https:///templates/editor-preload-container...

9.8CVSS7AI score0.99999EPSS
SaveExploits46References1
Kitploit
Kitploit
added 2026/09/01 1:17 p.m.5 views

PoC-CVE-2019-1003030

PoC de Bypass del Sandbox de Seguridad de Scripts de Jenkins 2.63 Este proyecto automatiza la creación y entrega de cargas útiles Groovy al endpoint de validación SecureGroovyScript de Jenkins utilizado por Jenkins 2.63. La herramienta admite tanto la ejecución interactiva como la de un solo uso...

9.9CVSS7.4AI score0.96868EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/01 1:17 p.m.4 views

CVE-2026-38526-KrayinCRM-RCE

CVE-2026-38526 - Krayin CRM RCE xpl0ited by infrar3d This is a Remote Code Execution RCE proof-of-concept specifically designed for Krayin CRM v2.2.x, an open-source customer relationship management system. The script automates the exploitation of a file upload vulnerability in the CRM's...

9.9CVSS5.9AI score0.03824EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/01 1:17 p.m.3 views

CVE-2024-9162

CVE-2024-9162 All-in-One WP Migration and Backup = 7.86 - Authenticated Administrator+ Arbitrary PHP Code Injection The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary PHP Code Injection due to missing file type validation during the export in all versions up to, and...

7.2CVSS5.9AI score0.02745EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/01 1:17 p.m.3 views

CVE-2024-24919

Check Point Security Gateway RCE Exploit Tool CVE-2024-24919 Overview This repository contains a tool for exploiting the CVE-2024-24919 vulnerability in Check Point Security Gateways. The tool is a multi-scanner that can identify vulnerable devices and a single-target exploit that can take full...

8.6CVSS7.6AI score0.99978EPSS
SaveExploits53
Kitploit
Kitploit
added 2026/09/01 1:16 p.m.6 views

CVE-2026-27971_POC

CVE-2026-27971 — Qwik server$ Unauthenticated RCE PoC !WARNING This repository contains an active remote-code-execution proof of concept. Use it only against systems you own or are explicitly authorized to test. The author assumes no responsibility for unauthorized use or damage. A standalone...

9.8CVSS6.4AI score0.05416EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 1:15 p.m.5 views

CVE-2026-59827

CVE-2026-59827 — Unsafe Deserialization of H2 Query Results in Metabase GHSA-w95f-x9v9-wv36 | CVSS 9.9 Critical | CWE-502: Deserialization of Untrusted Data Overview CVE-2026-59827 is a critical remote code execution vulnerability in Metabase, the popular open-source business intelligence and dat...

9.9CVSS7.9AI score0.00934EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/01 1:14 p.m.3 views

CVE-2026-23918-Double-free-Apache-httpd-mod_http2

CVE-2026-23918 - Apache httpd modhttp2 PoC This repository contains a proof-of-concept implementation written in Go for a pre-authentication memory corruption scenario affecting Apache httpd with modhttp2. The code in this repository demonstrates a spray-and-trigger approach against a vulnerable...

8.8CVSS7.6AI score0.49727EPSS
SaveExploits18References4
Kitploit
Kitploit
added 2026/09/01 1:14 p.m.4 views

CVE-2026-41472-POC

CyberPanel XSS to RCE CVE-2026-41472 One-click Remote Code Execution in CyberPanel v2.4.3 via unauthenticated API endpoints. Overview This exploit chains multiple vulnerabilities in CyberPanel's AI Scanner feature: 1. Unauthenticated Database Injection /api/ai-scanner/callback accepts arbitrary...

6.1CVSS6AI score0.00516EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 1:13 p.m.5 views

CVE-2022-29056

CVE-2022-29056 Exploit Automation For Educational Purposes 🚨 📌 Description This is a Python script with a graphical interface Tkinter that allows the user to test automated request submissions to a login endpoint. The goal is to simulate how servers respond to different payload sizes and analyze...

5.3CVSS6AI score0.01808EPSS
SaveExploits1
Rows per page
Query Builder