Lucene search
+L

626280 matches found

Kitploit
Kitploit
added 2026/09/01 1:10 p.m.4 views

CVE-2025-3248

CVE-2025-3248: Langflow Unauthenticated Remote Code Execution RCE This repository contains two Python scripts: LangflowCheck.py: A scanner that checks for Langflow AI instances vulnerable to CVE-2025-3248. exploit.py: A working reverse shell exploit for vulnerable Langflow targets. Summary...

9.8CVSS7.7AI score0.99996EPSS
SaveExploits36
Kitploit
Kitploit
added 2026/09/01 1:10 p.m.3 views

CVE-2025-47812

=========================================================== CVE-2025-47812 - Wing FTP Server Remote Code Execution RCE =========================================================== Author: blindma1den Date: July 2025 Exploit Type: Remote Code Execution Unauthenticated Target: Wing FTP Server 7.4.4...

10CVSS7.8AI score0.92823EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/01 1:10 p.m.3 views

IHxExec

IHxExec POC to execute arbitrary code on behalf of another user. U can read more about the technique here: https://cicada-8.medium.com/process-injection-is-dead-long-live-ihxhelppaneserver-af8f20431b5d https://www.youtube.com/watch?v=bK3ufqZxkxc Note the attached video:...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 1:09 p.m.4 views

CVE-2025-27590

CVE-2025-27590 - PoC Exploit Command Injection via Multipart Form Upload 📌 Description This is a Proof-of-Concept PoC exploit for CVE-2025-27590 , a command injection vulnerability affecting web applications that process multipart file uploads without proper sanitization. The vulnerability allows...

9.8CVSS6.1AI score0.27573EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 1:09 p.m.3 views

cve-2022-24644

CVE-2022-24644 ZZ Inc. KeyMouse 3.08 Windows Unauthenticated Update Remote Code Execution Vulnerability Usage: python3 cve-2022-24644poc.py Details in the report at gerr.re. Steps to reproduce 1. Install KeyMouse Windows 3.08; 2. Set spoof www.keymouse.com to our attacker ip; For the...

8.8CVSS7.3AI score0.01896EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/01 1:09 p.m.3 views

CVE-2025-25257

CVE-2025-25257 - FortiWeb Vulnerability Checker & Exploit A Python-based tool for checking and exploiting CVE-2025-25257 vulnerability in FortiWeb devices. This vulnerability allows SQL injection and remote code execution through a crafted Authorization header. 📋 Description CVE-2025-25257 is a...

9.8CVSS7.9AI score0.99772EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/01 1:09 p.m.4 views

CVE-2025-3054-Exploit

CVE-2025-3054 Exploit: Download here Details CVE ID : CVE-2025-3054 Published : June 5, 2025 CVSS : 8.8 Patch Available: No official patch yet Impact The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadfiles functi...

8.8CVSS6.4AI score0.0086EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 1:08 p.m.2 views

CVE-2019-3980-Open_Net_Admin_v18.1.1_RCE

CVE-2019-3980 – OpenNetAdmin 18.1.1 Remote Code Execution ⚠️ Disclaimer This repository is intended strictly for educational and research purposes only. The information and code provided here can be used in controlled environments , such as private lab machines. Unauthorized use of this code...

10CVSS7.4AI score0.05138EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/01 1:08 p.m.4 views

drupal-cve-2019-6339

drupal-cve-2019-6339 Drupal remote code execution vulnerabilty...

9.8CVSS7.3AI score0.33228EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 1:08 p.m.4 views

CVE-2018-3245

Weblogic-CVE-2018-3245 CVE-2018-3245 0x00 Introduction On October 16 local time, and in the early hours of October 17 Beijing time, Oracle officially released the October Q3 Critical Patch Update CPU, which fixed a Weblogic remote code execution vulnerability CVE-2018-2893 that was not fully...

9.8CVSS7.7AI score0.94281EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/01 1:07 p.m.3 views

Nextjs_Exploit_Tool

Next.js RSC RCE Exploit Tool CVE-2025-55182 Project Introduction CVE-2025-55182 is a high-severity vulnerability in Next.js's Server Component RSC processing chain. An attacker can craft special multipart/form-data requests and forged RSC response chunks to induce the server to execute arbitrary...

10CVSS7.4AI score0.99802EPSS
SaveExploits388
Kitploit
Kitploit
added 2026/09/01 1:06 p.m.3 views

CVE-2025-24893-XWiki-Unauthenticated-RCE-Exploit-POC

CVE-2025-24893 - XWiki Unauthenticated RCE Exploit POC ⚠️ Unauthenticated Remote Code Execution in XWiki 🛠️ PoC implementation by @dollarboysushil 💡 Overview CVE-2025-24893 is a critical RCE vulnerability in XWiki, caused by unsafe Groovy expression handling inside the SolrSearch macro. An attacker...

9.8CVSS7.4AI score0.99864EPSS
SaveExploits52
Kitploit
Kitploit
added 2026/09/01 1:06 p.m.2 views

struts_rest_rce_fuzz-CVE-2017-9805-

This repository does not have a README...

8.1CVSS7AI score0.99396EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/01 1:05 p.m.3 views

CVE-2024-28397-js2py-Sandbox-Escape

Introduction 中文 Analysis Chinese Analysis English js2py is a popular python package that can evaluate javascript code inside python interpreter. It is used by various web scrapers to parse javascript code on the website. There exists a vulnerability in the implementation of a global variable insi...

5.3CVSS7.5AI score0.04548EPSS
SaveExploits22References3
Kitploit
Kitploit
added 2026/09/01 1:05 p.m.3 views

CVE-2015-3306

CVE-2015-3306 ProFTPD Exploit This repository contains a Python proof-of-concept PoC exploit for CVE-2015-3306 ⚠️ Warning: Only use this against systems you own or have explicit permission to test. Unauthorized exploitation is illegal. Author Mohamed EL-KHAROUATI Part 1: CVE-2015-3306 ProFTPD...

10CVSS7.5AI score0.96752EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/01 1:05 p.m.4 views

CVE-2025-24893-PoC

CVE-2025-24893 - XWiki Remote Code Execution RCE An updated proof-of-concept PoC exploit for CVE-2025-24893 , a critical unauthenticated RCE vulnerability in XWiki. This version improves on the original by allowing arbitrary shell command execution and clean reverse shell injection. By:...

9.8CVSS7.6AI score0.99864EPSS
SaveExploits52References1
Kitploit
Kitploit
added 2026/09/01 1:05 p.m.7 views

CVE-2025-49113-Roundcube_1.6.10

CVE-2025-49113 – Roundcube 1.6.10 Authenticated Remote Code Execution ⚠️ Disclaimer This repository is intended strictly for educational and research purposes. All demonstrations were performed in a controlled lab environment. Unauthorized testing or exploitation of systems without explicit...

9.9CVSS7.5AI score0.99032EPSS
SaveExploits29References1
Kitploit
Kitploit
added 2026/09/01 1:04 p.m.5 views

CVE-2022-46080

EN This project provides a proof-of-concept exploit for a remote code execution RCE vulnerability in Nexxt routers, specifically targeting the version 15.03.06.60. This vulnerability allows an attacker to enable the Telnet service on the router without authentication, potentially gaining...

9.8CVSS7.9AI score0.02556EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/01 1:02 p.m.3 views

CVE-2026-42945

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This vulnerability — along with three other memory...

9.2CVSS7.9AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/01 1:02 p.m.4 views

CVE-2019-9193

EN GenPostgresRCEExploit is a PoC tool designed to exploit an authenticated Remote Code Execution RCE vulnerability in specific versions of PostgreSQL 9.3 - 11.7. It allows authenticated users to execute system commands on a PostgreSQL database server that is vulnerable to CVE-2019-9193. Features...

9CVSS7.3AI score0.91655EPSS
SaveExploits17
Rows per page
Query Builder