Lucene search
+L

627221 matches found

Kitploit
Kitploit
added 2026/09/03 9:18 p.m.3 views

CVE-2024-50623

POC - CVE-2024-50623- Cleo 무제한 파일 업로드 및 다운로드 개요 CVE-2024-50623은 Cleo의 파일 전송 소프트웨어 제품인 Cleo Harmony, Cleo VLTrader, Cleo LexiCom의 5.8.0.21 이전 버전에서 확인된 치명적인 취약점입니다. 이 결함으로 인해 무제한 파일 업로드 및 다운로드가 가능해지며, 잠재적으로 원격 코드 실행으로 이어질 수 있습니다. 영향을 받는 장치 Cleo Harmony 5.8.0.21 이전 버전 Cleo VLTrader 5.8.0.21 이전 버전 Cl...

9.8CVSS7.4AI score0.98607EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/03 9:17 p.m.3 views

CVE-2019-8943

CVE-2019-8943 WordPress 5.0.0 - 이미지 원격 코드 실행 python을 사용한 CVE-2019-8942 및 CVE-2019-8943 익스플로잇 : ExploitDB : https://www.exploit-db.com/exploits/49512 metasploit용 원본 익스플로잇 : WordPress Core 5.0.0 - Crop-image Shell Upload Metasploit : https://www.exploit-db.com/exploits/46662 동영상 : 설명: 아래 동영상은 공격자가 ...

8.8CVSS6.8AI score0.92642EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/03 9:17 p.m.78 views

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 9:16 p.m.4 views

CVE-2023-32560

CVE-2023-32560 Ivanti Avalanche v6.4.0.0 RCE POC Reference: https://www.tenable.com/security/research/tra-2023-27...

9.8CVSS7.4AI score0.99428EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/03 9:16 p.m.3 views

CVE-2014-6271

Shellshock 익스플로잇 CVE-2014-6271 Shellshock는 BASH에서 발생하는 원격 명령 실행Remote Command Execution 취약점입니다. 이 스크립트는 modcgi가 활성화된 Apache 또는 유사한 웹 환경에서 이 취약점을 악용합니다. 취약점은 환경 변수 조작에 있으며, 환경 변수는 컴퓨터에서 프로세스가 실행되는 방식에 영향을 미치는 동적 이름-값 쌍입니다. 공격자는 악성 코드를 환경 변수에 첨부하여 변수를 받는 즉시 실행되도록 함으로써 이를 악용할 수 있습니다. 이를 통해 공격자는 시스템을...

10CVSS7.2AI score0.99999EPSS
SaveExploits146
Kitploit
Kitploit
added 2026/09/03 9:14 p.m.7 views

CVE-2021-40870

CVE-2021-40870 Unrestricted upload of file with dangerous type in Aviatrix allows an authenticated user to execute arbitrary code...

9.8CVSS7.4AI score0.93019EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/03 9:14 p.m.4 views

Shitrix-CVE-2019-19781

Shitrix-CVE-2019-19781 Shitrix 취약점을 익스플로잇하기 위한 제 작업 접근법 2020년 7월 21일 업데이트 - 이제 여러 단어 명령어와 슬래시를 지원합니다 curl = 7.42.0이 필요합니다 다음과 같이 호출합니다, 예: ./shitrix.sh target port ls -al...

9.8CVSS7AI score0.99999EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/03 9:12 p.m.5 views

Joomla-3.4.6---configuration.php-Remote-Code-Execution

Joomla-3.4.6---configuration.php-Remote-Code-Execution Affected versions: 3.0.0-3.4.6 1. Vulnerability verification python3 Joomla-3.4.6-RCE.py -t http://172.20.10.4 If "Vulnerable" is displayed, the vulnerability exists. python3 test.py -t http://127.0.0.1:8080/ --exploit --lhost 192.168.31.126...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 9:12 p.m.5 views

autopwn

autopwn Specify targets and run sets of tools against them autopwn is designed to make a pentester's life easier and more consistent by allowing them to specify tools they would like to run against targets, without having to type them in a shell or write a script. This tool will probably be usefu...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 9:10 p.m.4 views

cachegrab

Cachegrab Cachegrab is a tool designed to help perform and visualize trace-driven cache attacks against software in the secure world of TrustZone-enabled ARMv8 cores. For an overview of how Cachegrab works under the hood, see the Cachegrab release announcement. Using Cachegrab on Android It is...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 9:10 p.m.3 views

chuckle

Chuckle - 자동화된 SMB 릴레이 스크립트 Chuckle이 작동하려면 몇 가지 도구가 필요합니다: SMBRelayX.py Veil git 최신 버전 Responder Chuckle이 사용 중인 버전을 감지합니다. Nmap Nbtscan unixwiz MSFconsole 사용법은 아주 간단합니다. root로 실행하거나 sudo를 사용하세요: sudo ./chuckle.sh 잠시 기다리거나 권한 있는 사용자가 인증하도록 유도하면 대상 머신에서 셸을 얻을 수 있습니다. 실행 시 주의하시고, 허가받지 않은 네트워크에서는 절대...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 9:09 p.m.5 views

LFI-to-RCE-SE-Suite-2.0

Remote Code Execution in SoftExpert Excellence Suite 2.0 - CVE-2023-30330 Authenticated Local File Inclusion to Remote Code Execution on SoftExpert Excellence Suite EQM. CVE-2023-30330 SE Suite 2.x versions before 2.1.3 Tested on versions: 2.0.15.31 and 2.0.15.115 LFI PoC...

9.8CVSS7.2AI score0.05877EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/03 9:08 p.m.5 views

CVE-2020-13942byVulHub

CVE-2020-13942byVulHub Apache Unomi Expression Language Injection RCE CVE-2020-13942 Description This vulnerability allows arbitrary command execution on systems running Apache Unomi version 1.5.1, by exploiting MVEL expression language injection. Project Page GitHub - Vulhub - Unomi CVE-2020-139...

9.8CVSS7.2AI score0.68398EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/03 9:08 p.m.4 views

CVE-2024-22120-RCE-with-gopher

사용법 root@kitploit: python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime 요약 이 익스플로잇은 XXEXML External Entity를 악용하기 위해 만들어졌습니다. 이를 통해 웹 서비스의 백엔드 코드를 읽었고, 원격 코드 실행에 취약한 Zabbix 6.0.27 버전에 gopher를 사용하여 내부 요청을 보낼 수 있는 엔드포인트를 찾았습니다. 정찰 단계에서 외부 웹 서버에 무차별 대입brute-force 공격을 수행하여...

9.1CVSS7.3AI score0.76618EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/03 9:07 p.m.4 views

CVE-2023-21608

CVE-2023-21608 Discord Server This bug was Use after Free which was caused during resetForm operation while handling object memory references. Blog Adobe Acrobat Reader - resetForm - CAgg UaF - RCE Exploit - CVE-2023-21608 Advisory CVE-2023-21608 Demo...

7.8CVSS7.3AI score0.61475EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/03 9:07 p.m.3 views

DroppedConnection

DroppedConnection Emulates a Cisco ASA Anyconnect VPN service, accepting any credentials and logging them before serving VBS to the client that gets executed in the context of the user. Blog post:...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 9:07 p.m.3 views

CVE-2024-50379-POC

CVE-2024-50379-POC This repository contains a Python script designed to exploit CVE-2024-50379 , a vulnerability that allows attackers to upload a JSP shell to a vulnerable server and execute arbitrary commands remotely. This exploit is particularly useful when the /uploads directory is either...

9.8CVSS7.3AI score0.44312EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/03 9:07 p.m.4 views

CVE-2018-15982_EXP_IE

CVE-2018-15982EXP 사용법 root@kitploit: msfvenom -p windows/exec cmd=calc.exe -f raw 86.bin msfvenom -p windows/x64/exec cmd=calc.exe -f raw 64.bin python CVE201815982.py -i 86.bin -I 64.bin 출력 exp.swf와 index.html。 데모 https://twitter.com/Evi1cg/status/1071284773169950721...

10CVSS7.3AI score0.82456EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/03 9:06 p.m.5 views

CVE-2022-1388

CVE-2022-1388 Poc:pocsuite -r CVE-2022-1388F5BIG-IPPOCEXP.py -u url Exp:pocsuite -r CVE-2022-1388F5BIG-IPPOCEXP.py -u url --attack --command command 免责声明 此工具仅用于学习、研究和自查。不应将其用于非法目的。使用本工具产生的一切风险与我无关! Disclaimer This tool is for study, research, and self-examination only. It should not be used for...

9.8CVSS7.4AI score0.99958EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/03 9:04 p.m.3 views

CVE-2024-3400

CVE-2024-3400 Vulnerability Description The CVE-2024-3400 vulnerability is a security vulnerability that affects PAN-OS firewalls in versions 10.2, 11.0, and 11.1. This vulnerability is exploited when GlobalProtect gateway and device telemetry configurations are enabled. An attacker can leverage...

10CVSS7.4AI score0.99999EPSS
SaveExploits46References1
Rows per page
Query Builder