Lucene search
+L

627740 matches found

Kitploit
Kitploit
added 2026/09/06 9:43 a.m.5 views

CVE-2025-47812

CVE-2025-47812 – Wing FTP Server RCE via Lua Injection Author: 0xgh057r3c0n 🧠 Description This exploit leverages a Lua injection vulnerability in Wing FTP Server 's login handler loginok.html to execute arbitrary operating system commands or gain a reverse shell. It abuses unsanitized Lua code...

10CVSS8.4AI score0.92823EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/09/06 9:42 a.m.4 views

cve-2022-26134

CVE-2022-26134 por 1vere$k Solo un PoC simple para el exploit de Atlassian Jira. Proporciona ejecución de código para un usuario no autorizado en un servidor. CVE-2022-26134 - Vulnerabilidad de inyección OGNL. Script de prueba de concepto que explota la vulnerabilidad de ejecución remota de códig...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/09/06 9:39 a.m.7 views

CVE-2024-13346

CVE-2024-13346 Avada Theme 7.11.14 - Ejecución arbitraria de shortcodes no autenticada CVE-2024-13346 script de explotación Código de instalación root@kitploit: git clone https://github.com/tausifzaman/CVE-2024-13346.git root@kitploit: cd CVE-2024-13346 root@kitploit: pip install -r...

9.8CVSS8.2AI score0.02297EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/06 9:39 a.m.4 views

CVE-2021-44228

CVE-2021-44228 Apache Log4j 2 Versiones vulnerables: Las versiones de Log4j anteriores a 2.15.0-rc2 están sujetas a una vulnerabilidad de ejecución remota de código a través del analizador ldap JNDI. Ir a reproducir el problema Ir a la reproducción de la vulnerabilidad...

10CVSS7.4AI score0.99999EPSS
SaveExploits368References1
Kitploit
Kitploit
added 2026/09/06 9:39 a.m.4 views

DIR-890L-1.20-RCE

D-Link DIR-890L RCE Versión afectada: = v1.22B01 Hotfix última Firmware: Aquí Este modelo ha llegado al final de su ciclo de vida. Los recursos asociados con estos productos han cesado su desarrollo y ya no reciben soporte. D-Link Systems, Inc. recomienda retirar estos productos y reemplazarlos p...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 9:38 a.m.5 views

CVE-2021-30005-POC

CVE-2021-30005-POC PoC para CVE-2021-30005. Detalles La vulnerabilidad reside en el hecho de que PyCharm activaba automáticamente un entorno virtual encontrado en el proyecto cuando se abría por primera vez. Esto permitía a un atacante crear un repositorio que contuviera un entorno virtual...

7.8CVSS7.5AI score0.00881EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/06 9:37 a.m.7 views

CVE-2020-28653

CVE-2020-28653 Versión: 2016 - 2020 antes del parche Uso: root@kitploit: python exploit.py http://vuln-web.com...

9.8CVSS7.2AI score0.787EPSS
SaveExploits4
CVE
CVE
added 2026/09/06 9:36 a.m.18 views

CVE-2026-80437

Ninja Forms WordPress plugin versions 3.14.10 through before 3.15.2 are affected by an unauthenticated arbitrary shortcode execution vulnerability. The plugin fails to sanitize shortcodes in request-derived values (IP and Referer merge tags) before substituting them into content that is later pro...

4.8CVSS5.7AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/06 9:36 a.m.22 views

CVE-2026-80437 Ninja Forms 3.14.10 - 3.15.1 - Unauthenticated Arbitrary Shortcode Execution via IP and Referer Merge Tags

The Ninja Forms WordPress plugin from 3.14.10 before 3.15.2 does not prevent shortcodes in request-derived values from being executed when it substitutes them into content it later processes for shortcodes, allowing unauthenticated users to run any shortcode registered on the site...

4.8CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/06 9:36 a.m.8 views

EUVD-2026-72092

The Ninja Forms WordPress plugin from 3.14.10 before 3.15.2 does not prevent shortcodes in request-derived values from being executed when it substitutes them into content it later processes for shortcodes, allowing unauthenticated users to run any shortcode registered on the site...

4.8CVSS5.7AI score
SaveExploits0References1
CVE
CVE
added 2026/09/06 9:36 a.m.20 views

CVE-2026-80439

The Redirection for Contact Form 7 WordPress plugin (versions 2.2.7 through 3.2.10 ) allows unauthenticated users to execute arbitrary shortcodes registered on the site. The root cause is that shortcodes contained in submitted form values are not sanitized before being substituted into an action'...

4.8CVSS5.5AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/06 9:36 a.m.21 views

CVE-2026-80439 Redirection for Contact Form 7 2.2.7 - 3.2.10 - Unauthenticated Arbitrary Shortcode Execution via Action Setting Mail-Tags

The Redirection for Contact Form 7 WordPress plugin from 2.2.7 before 3.2.11 does not prevent shortcodes in submitted form values from being executed when it substitutes those values into an action's settings and then processes those settings for shortcodes, allowing unauthenticated users to run...

4.8CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/06 9:36 a.m.6 views

EUVD-2026-72091

The Redirection for Contact Form 7 WordPress plugin from 2.2.7 before 3.2.11 does not prevent shortcodes in submitted form values from being executed when it substitutes those values into an action's settings and then processes those settings for shortcodes, allowing unauthenticated users to run...

4.8CVSS5.5AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/06 9:36 a.m.22 views

CVE-2026-19859 JetFormBuilder < 3.6.5.2 - Unauthenticated Arbitrary Shortcode Execution via 'status' Parameter

The JetFormBuilder WordPress plugin before 3.6.5.2 does not sanitize a request parameter before rendering it as message content, allowing unauthenticated users to execute arbitrary shortcodes registered on the site on any page displaying a form. Escaping is applied to that content before a later...

6.5CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/06 9:36 a.m.11 views

CVE-2026-19859

JetFormBuilder is a WordPress plugin that allows form creation. Versions before 3.6.5.2 are affected by an unauthenticated arbitrary shortcode execution vulnerability. The root cause is that the status request parameter is not properly sanitized before rendering as message content: escaping is ap...

6.5CVSS6.3AI score
SaveExploits0References1
EUVD
EUVD
added 2026/09/06 9:36 a.m.6 views

EUVD-2026-72089

The JetFormBuilder WordPress plugin before 3.6.5.2 does not sanitize a request parameter before rendering it as message content, allowing unauthenticated users to execute arbitrary shortcodes registered on the site on any page displaying a form. Escaping is applied to that content before a later...

6.5CVSS6.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/06 9:35 a.m.6 views

CVE-2025-49113

CVE-2025-49113 Exploit de RCE El método de autenticación de nombre de usuario/contraseña en este Exploit consta de 4 pasos el código está un poco desordenado...

9.9CVSS8AI score0.98897EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/09/06 9:33 a.m.5 views

CVE-2021-43811

CVE-2021-43811 awslabs/sockeye Inyección de código mediante carga insegura de YAML CVE-2021-43811 Descripción de NVD Sockeye es un framework de secuencia a secuencia de código abierto para la traducción automática neuronal, construido sobre PyTorch. Sockeye utiliza YAML para almacenar las...

7.8CVSS7.5AI score0.02415EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 9:33 a.m.6 views

CVE-2024-0044

CVE-2024-0044/A-307532206 es una vulnerabilidad de gravedad alta en el framework de Android que permite a atacantes con acceso adb ejecutar código arbitrario bajo el UID de cualquier aplicación. Fue encontrada originalmente por Tom Hebb de Meta Red Team X. Puedes encontrar muchos artículos sobre...

7.8CVSS7.5AI score0.0146EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/06 9:32 a.m.6 views

CVE-2024-43160

Wordpress BerqWP = 1.7.6 - Subida Arbitraria de Archivos No Autenticada CVE-2024-43160 El complemento BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript para WordPress es vulnerable a la subida arbitraria de archivos debido a l...

10CVSS6AI score0.04624EPSS
SaveExploits1
Rows per page
Query Builder