Lucene search
+L

623845 matches found

Kitploit
Kitploit
added 2026/08/27 8:17 a.m.2 views

CVE-2025-47577

CVE-2025-47577 - WordPress TI WooCommerce Wishlist 中已上传图片的路径 💾 将有效的已上传图片 URL 保存到 result.txt 💾 将有效的愿望清单 URL 保存到 resultwishlist.txt 🧠 研究人员 致谢:Patchstack Database 🚀 使用方法 1. 准备 list.txt 文件,其中包含目标域名列表(每行一个,不带 http)。 2. 将要上传的文件(例如 hinata.jpg)放在同一文件夹中。 3. 运行脚本: root@kitploit: python3 CVE-2025-47577.py 示...

10CVSS9.4AI score0.04643EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/27 8:15 a.m.2 views

CVE-2022-36446

CVE-2022-36446 CVE-2022-36446 - Webmin 1.996 远程代码执行 需要访问"软件包更新"模块才能触发该漏洞。拥有该模块访问权限的用户可以在安装新软件包时,通过执行操作系统命令注入,以 root 权限在系统上运行命令。 HTTP 请求: root@kitploit: POST /package-updates/update.cgi HTTP/1.1 Host: 46.101.171.176:10000 Cookie: redirect=1; testing=1; sid=05ebaaec3707b0075c641325e9153608...

9.8CVSS8.9AI score0.96049EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/08/27 8:13 a.m.3 views

CVE-2021-46005

CVE-2021-46005 All Details about CVE-2021-46005 Software: Online Car Rental System 1.0 Software Link: https://www.sourcecodester.com/cc/14145/online-car-rental-system-using-phpmysql.html Vulnerability Type: Stored Cross Site Scripting Affected Component: vehicalorcview in post-avehical page Impac...

5.4CVSS5.5AI score0.02915EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 8:12 a.m.4 views

CVE-2026-22738-POC

CVE-2026-22738 — Inyección SpEL RCE en Spring AI SimpleVectorStore Ejecución remota de código no autenticada mediante inyección de Spring Expression Language SpEL en SimpleVectorStore.similaritySearch. Versiones Afectadas | Indicador | Predeterminado | Descripción | |---|---|---| | --target |...

9.8CVSS5.2AI score0.01087EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 8:10 a.m.3 views

CVE-2026-24061-POC

CVE-2026-24061-POC echo "cat /etc/passwd; id;" | python poc2.py TARGET 23 1. Connection Timeout Location: Line 25 in establishconnection method python self.connection.settimeout10 -- Adjustable connection timeout Purpose: Controls how long to wait for initial TCP connection to the target...

9.8CVSS8.7AI score0.97878EPSS
SaveExploits66
Kitploit
Kitploit
added 2026/08/27 8:10 a.m.2 views

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat

Rompiendo la Cadena de Actualización: Dentro de CVE-2025-59287 y la Amenaza RCE en WSUS CVE-2025-59287 es una vulnerabilidad crítica de RCE en Windows Server Update Services WSUS causada por una deserialización insegura de datos no confiables. Permite a atacantes remotos ejecutar código arbitrari...

9.8CVSS8.4AI score0.99979EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/08/27 8:09 a.m.2 views

CVE-2021-26084_Confluence

CVE-2021-26084 - Confluence RCE pre-autenticación inyección OGNL Uso root@kitploit: usage: cve-2021-26084confluencerce.py -h --url URL --cmd CMD --shell CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection optional arguments: -h, --help show this help message and exit --url URL, -u URL Target...

9.8CVSS8AI score0.99999EPSS
SaveExploits46References1
Kitploit
Kitploit
added 2026/08/27 8:08 a.m.3 views

CVE-2026-22686-RemoteCodeExecution-RCE-PoC

RCE en Entornos ESM — El Problema de require Al lograr la evasión del sandbox mediante CVE-2026-22686, ejecutar comandos del sistema operativo en un proyecto ESM "type": "module" requiere omitir las restricciones de carga de módulos de Node.js. Los enfoques estándar fallan por las siguientes...

10CVSS5.2AI score0.00598EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/27 8:07 a.m.2 views

CVE-2024-6386

CVE-2024-6386 - RCE via Twig SSTI in WPML PoC PoC on Python+Selenium Detailed research in Russian: CVE-2024-6386 CVSS Base Score: 9.9 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Summary In WPML you are available to use specific WordPress Shortcodes that allows you to create macroses and...

9.9CVSS9.1AI score0.25533EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/08/27 8:06 a.m.2 views

CVE-2024-53677

CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a container-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code...

9.8CVSS9AI score0.78198EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/08/27 8:06 a.m.3 views

CVE-2026-39987_exploit

🔥 CVE-2026-39987 | Exploit RCE Pre-Auth de Marimo Framework de Explotación | Ejecución Remota de Código RCE Completa | Omisión de Autenticación WebSocket 🧠 Para conocer los comandos más a fondo Abre el archivo website.html 🎯 Resumen Este exploit ataca aplicaciones Marimo que ejecutan WebSocket en...

9.8CVSS8.5AI score0.97279EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/08/27 8:05 a.m.2 views

CVE-2026-5027

This post is a research article published by EQSTLab. Thanks toYahia Hamza, who reported and analyzed this vulnerability. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ Description CVE-2026-5027 : Langflow Arbitrary File Write Vulnerability description: A path...

8.8CVSS5.6AI score0.31661EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/08/27 8:03 a.m.3 views

cve-2019-7609

CVE-2019-7609 基于 LandGrey 的代码 使用 python3.6+ 编写的 CVE-2019-7609 漏洞利用程序。 CVE-2019-7609 :在 Timelion 可视化工具中,影响 Kibana 5.6.15 之前版本和 6.6.0 之前版本的远程代码执行漏洞。 使用方法 1. 启动监听器 2. 运行该利用程序,参数为目标 URL(Kibana 服务器的基本 URL)、监听主机地址和监听端口 root@kitploit: ./cve-2019-7609.py http://:5601 3. 享受 RCE 示例 已在 TryHackme 的 Kiba 房间...

10CVSS7.4AI score0.95338EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/08/27 8:03 a.m.3 views

WinRAR-CVE-2025-8088-Exploitation-Toolkit

☠️ Herramienta de Explotación de WinRAR CVE-2025-8088 ☠️ ACCESO AL SISTEMA: CONCEDIDO OBJETIVO: VULNERABILIDAD DE WINRAR Una sofisticada herramienta GUI de nivel militar diseñada para crear archivos RAR maliciosos que explotan la vulnerabilidad de path traversal de WinRAR CVE-2025-8088. Esta...

8.8CVSS7.5AI score0.94551EPSS
SaveExploits35
Kitploit
Kitploit
added 2026/08/27 8:02 a.m.2 views

Unomi-CVE-2020-13942

CVE-2020-13942 Apache Unomi 远程代码执行漏洞脚本 漏洞简介 Apache Unomi是一个Java开源数据平台,这是一个Java服务器,旨在管理客户,潜在顾客和访问者的数据,并帮助个性化客户体验。Unomi可用于在非常不同的系统(例如CMS,CRM,问题跟踪器,本机移动应用程序等)中集成个性化和配置文件管理。 在Apache Unomi 1.5.1版本之前,攻击者可以通过精心构造的MVEL或ONGl表达式来发送恶意请求,使得Unomi服务器执行任意代码执行。 该漏洞编号为 CVE-2020-13942 ,漏洞等级:高危 ,漏洞评分:7.2 影响版本 Apach...

9.8CVSS8.5AI score0.68398EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/08/27 8:01 a.m.1 views

CVE-2025-1974-poc

POC of IngressNightmare, RCE in Ingress NGINX CVE-2025-1974 Developed from: https://github.com/zwxxb/CVE-2025-1974/blob/main/poc.py https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilitieshow-did-we-discover-ingressnightmare-24 Thanks 使用说明 root@kitploit: forward the admission webhook...

9.8CVSS7AI score0.99525EPSS
SaveExploits20References1
Kitploit
Kitploit
added 2026/08/27 7:59 a.m.1 views

CVE-2026-37748

CVE-2026-37748 — Sistema de Gestión de Visitantes 1.0 - Carga de Archivos Sin Restricciones → RCE Detalles...

7.2CVSS5.2AI score0.00807EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 7:58 a.m.3 views

CVE-2019-12840_POC

CVE-2019-12840POC Webmin 包更新认证远程命令执行的概念验证(PoC) 另一个 Metasploit 模块的替代方案。 所有功劳归功于 Özkan Mustafa Akkuş https://www.pentest.com.tr/exploits/Webmin-1910-Package-Updates-Remote-Command-Execution.html...

9CVSS8AI score0.77835EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/27 7:57 a.m.2 views

CVE-2009-3103---srv2.sys-SMB-Code-Execution-Python-MS09-050-

微软Windows---srv2.sys-SMB代码执行-Python-MS09-050- 微软Windows - 'srv2.sys' SMB代码执行(Python)(MS09-050) CVE-2009-3103 漏洞利用 概述 该Python脚本是CVE-2009-3103公开漏洞的更新版本。原始代码依赖于SMB.connection模块,本版本已替换该模块,使得脚本更具通用性和兼容性。 描述 此漏洞利用针对特定漏洞(CVE-2009-3103),将有效载荷注入目标系统,触发身份验证事件以执行有效载荷。 使用方法 1. 克隆仓库: root@kitploit: git clone ...

10CVSS8.5AI score0.90227EPSS
SaveExploits25References1
Kitploit
Kitploit
added 2026/08/27 7:57 a.m.1 views

deephas-1.0.7-Prototype-Pollution-PoC-CVE-2026-25047-

deephas = 1.0.7 – PoC de Prototype Pollution CVE-2026-25047 Título del Exploit: deephas = 1.0.7 - Prototype Pollution que conduce a Ejecución Arbitraria de Código / DoS CVE: CVE-2026-25047 GHSA: GHSA-2733-6c58-pf27 CVSS: 9.8 Crítico Autor: Mohammed Idrees Banyamer País del Autor: Jordania Contact...

9.4CVSS5.2AI score0.00717EPSS
SaveExploits4
Rows per page
Query Builder