Lucene search
+L

627719 matches found

Kitploit
Kitploit
added 2026/09/06 1:01 a.m.6 views

CVE-2025-49619

CVE-2025-49619 PoC This script exploits CVE-2025-49619 in Skyvern to execute a reverse shell command. Author Name: Cristian Branet GitHub: cristibtz Usage 1. Start a listener root@kitploit: nc -lvnp 2. Run the exploit root@kitploit: python3 exploit.py -u "http://:" -k "" -i -p : Skyvern server IP...

8.5CVSS7.8AI score0.20994EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/06 1:01 a.m.6 views

CVE-2019-15707

CVE-2019-15707 शोषण...

4.9CVSS6.3AI score0.01211EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 1:01 a.m.4 views

CVE-2025-30065

💥 CVE-2025-30065 - Parquet Deserialization PoC This project demonstrates a safe proof-of-concept for CVE-2025-30065 using Apache Parquet and Java deserialization. When a Parquet file containing a serialized Java object is read, the payload executes a visible command to prove code execution. 📦 Usa...

10CVSS8.2AI score0.433EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/06 1:00 a.m.6 views

CVE-2019-8985

البرنامج الثابت و الاستغلال لثغرة CVE–2019–8985 في جهاز Netis WF2411 لدراسة تنفيذ الأوامر عن بُعد :...

9.8CVSS8AI score0.13296EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/06 1:00 a.m.5 views

CVE-2021-40444-docx-Generate

CVE-2021-40444 docx Generate .docx generate to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution 1. creeate blank docx file. 2. add "Bitmap Iamge" object in "Inert/Object" menu. Add Object...

8.8CVSS7.1AI score0.9745EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/09/06 12:59 a.m.5 views

ZeroPoint

ZeroPoint.ps1 ⚠ A defensive PowerShell utility to detect and mitigate exploitation of the CVE-2025-53770 zero-day vulnerability in Microsoft SharePoint Server. 🔍 What it Does This PowerShell script is designed to: Detect compromise indicators, such as suspicious .aspx webshells Parse ULS logs to...

9.8CVSS7.9AI score0.99998EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/06 12:59 a.m.3 views

CVE-2019-15029

CVE-2019-15029 The official exploit code for FusionPBX v4.4.8 Remote Code Execution CVE-2019-15029 Metasploit Module I wrote a simple Metasploit module to exploit this issue fusionpbxservices.rb, you just have to download it and copy it into metasploit modules directory...

9CVSS7.9AI score0.12318EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/06 12:58 a.m.9 views

CVE-2020-7247

CVE-2020-7247 यह भेद्यता OpenBSD के मेल सर्वर OpenSMTPD के "smtpmailaddr" फ़ंक्शन में मौजूद है, और OpenBSD संस्करण 6.6 को प्रभावित करती है। यह एक हमलावर को रूट उपयोगकर्ता के रूप में "sleep 66" जैसे मनमाने शेल कमांड निष्पादित करने की अनुमति देता है। उपयोग कैसे करें? python3 getShell.py यदि आपको...

10CVSS8.1AI score0.98972EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/06 12:57 a.m.6 views

CVE-2022-28672

CVE-2022-28672 Discord Server كان هذا الخطأ من نوع Use after Free ناتجًا عن معالجة غير صحيحة لمراجع ذاكرة كائنات جافاسكريبت. المدونة Foxit PDF Reader - UaF - RCE - JIT Spraying الإشعار الأمني CVE-2022-28672 العرض التوضيحي...

7.8CVSS7.5AI score0.01922EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/06 12:56 a.m.4 views

CVE-2021-26295

CVE-2021-26295 CVE-2021-26295 EXP can successfully get a reverse shell This article and tool are for technical sharing only. Any illegal use is strictly prohibited. The user shall bear all consequences. Trigger command execution EXP 1. VPS starts RMI listener on port 9999 root@kitploit: java -cp...

9.8CVSS8.5AI score0.97822EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/06 12:56 a.m.8 views

CVE-2021-30632

CVE-2021-30632 Chrome V8 RCE एक्सप्लॉइट विंडोज़ के लिए परीक्षण किया गया संस्करण : Chrome 91, 92, 93.0.4577.63 डेमो संदर्भ Chrome इन-द-वाइल्ड बग विश्लेषण: CVE-2021-30632 https://securitylab.github.com/research/inthewildchromecve202130632/ JS POC नमूना...

8.8CVSS7.9AI score0.6319EPSS
SaveExploits3References2
Kitploit
Kitploit
added 2026/09/06 12:56 a.m.6 views

CVE-2019-7609

CVE-2019-7609 Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing...

10CVSS7.4AI score0.95338EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/06 12:55 a.m.7 views

CVE-2023-34152

CVE-2023-34152 RCE vulnerability affecting ImageMagick 6.9.6-4. This vulnerability allows the attacker to execute commands on the victim system. Thus, allowing for Remote Command Execution. This is a POC which was inspired by fullwaywang discovery of CVE-2023-34152. Vulnerability Disclosure...

9.8CVSS8.1AI score0.08011EPSS
SaveExploits3References2
Kitploit
Kitploit
added 2026/09/06 12:55 a.m.5 views

CSPOC

Cobalt Strike Stored XSS RCE CVE-2022-39197 Runtime Parameters: -u: Cobaltstrike HTTP listener address, e.g., http://127.0.0.1:8500 -p: Payload, e.g., should not be too long Demonstration: Build command: go build -ldflags "-s -w" QQ Group: Click to join: 528118163 Join group / Cooperation / Conta...

6.1CVSS7.3AI score0.46446EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/06 12:54 a.m.6 views

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager 3 Remote Code Execution without authentication 3.15.0 found by Rico Tencent Security Yunding Lab and @voidfyoo Detailed analysis english: https://chybeta.github.io/2019/02/18/Nexus-Repository-Manager-3-RCE-%E5%88%86%E6%9E%90-%E3%80%90CVE-2019-7238%E3%80%91/...

9.8CVSS8.4AI score0.77146EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/06 12:54 a.m.5 views

CVE-2019-16172

CVE-2019-16172 The CVE-2019-16172 Scanner is designed to check LimeSurvey instances for the stored XSS vulnerability. CVE Descriptions CVE-2019-16172 Description: CVE-2019-16172 is a stored XSS vulnerability found in LimeSurvey versions prior to 3.17. The vulnerability arises due to improper...

5.4CVSS6AI score0.04611EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/06 12:52 a.m.8 views

Vulnerable-Docker-Engine

CVE-2021-41091 यह शोषण CVE-2021-41091 सुरक्षा भेद्यता की गहराई से जाँच प्रस्तुत करता है और एक होस्ट पर विशेषाधिकार वृद्धि प्राप्त करने के लिए शोषण स्क्रिप्ट का उपयोग करने के तरीके पर चरण-दर-चरण मार्गदर्शिका प्रदान करता है। भेद्यता सारांश CVE-2021-41091 Moby Docker Engine में एक दोष है जो अनअधिकृत...

6.3CVSS6.8AI score0.02848EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/06 12:52 a.m.5 views

cve-2025-24893

CVE-2025-24893 XWiki RCE शोषण XWiki प्लेटफ़ॉर्म में CVE-2025-24893 , एक दूरस्थ कोड निष्पादन RCE भेद्यता का शोषण करने के लिए एक सरल Python3 स्क्रिप्ट, जो Groovy-आधारित async मैक्रो और एक कॉन्फ़िगरेबल रिवर्स शेल पेलोड का उपयोग करती है। ⚠️ चेतावनी: यह उपकरण केवल शैक्षिक और अधिकृत परीक्षण उद्देश्यों क...

9.8CVSS8.1AI score0.99864EPSS
SaveExploits52
Kitploit
Kitploit
added 2026/09/06 12:51 a.m.6 views

CVE-2024-4040

Exploit Code for CVE-2024-4040 Overview This exploit code targets the CVE-2024-4040 vulnerability, allowing unauthorized access to user accounts by reading and validating tokens stored in the "sessions.obj" file. If the tokens are valid, hackers can gain entry to the targeted accounts. Unlike oth...

10CVSS7.5AI score0.99539EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/06 12:51 a.m.6 views

CVE-2025-3248

POC - दूरस्थ और बिना प्रमाणीकरण वाला हमलावर मनमाना कोड निष्पादित करने के लिए क्राफ्टेड HTTP अनुरोध भेज सकता है - CVE-2025-3248 अवलोकन Langflow के 1.3.0 से पहले के संस्करण /api/v1/validate/code एंडपॉइंट में कोड इंजेक्शन के प्रति संवेदनशील हैं। एक दूरस्थ और बिना प्रमाणीकरण वाला हमलावर मनमाना कोड...

9.8CVSS8.4AI score0.99989EPSS
SaveExploits37References1
Rows per page
Query Builder