Lucene search
+L

625397 matches found

Kitploit
Kitploit
added 2026/08/28 2:56 a.m.4 views

poc-proxycommand-vulnerable

RCE via insecure /.ssh/config Use of tokens like %h, %p in ProxyCommand is quite popular to use tunnels and connection proxying using SSH. Vulnerable config root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Note: in my initial assessment I was under the...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 2:54 a.m.5 views

CVE-2024-11635

WordPress File Upload Dieses README dokumentiert eine offengelegte Schwachstelle ausschließlich für Bildungs- und Verteidigungszwecke. Führen Siekeine Tests gegen Produktionssysteme oder Systeme durch, die Ihnen nicht gehören oder für die Sie keine ausdrückliche Genehmigung zum Testen haben...

9.8CVSS7.3AI score0.01474EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 2:53 a.m.4 views

Exploiting-Samba-on-Metasploitable-2

Sfruttamento di Samba su Metasploitable-2 Il mio obiettivo qui era utilizzare metasploit da una macchina Kali Linux per sfruttare una nota vulnerabilità di Samba CVE-2007-2447. Questo viene fatto per infiltrarsi in una macchina Metasploitable 2 con una reverse shell per accedere alla cartella roo...

6CVSS7.2AI score0.49759EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/08/28 2:53 a.m.5 views

Ivy

QUESTO REPOSITORY È STATO ARCHIVIATO Per visualizzare l'ultima versione di Ivy o per segnalare un problema, fare riferimento a https://github.com/Tylous/Ivy. Ulteriori Informazioni Se vuoi saperne di più sulle tecniche utilizzate in questo framework e sulle misure difensive per proteggerti, dai...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/28 2:53 a.m.4 views

cve-2023-46747

CVE-2023-46747 एक्सप्लॉइट स्क्रिप्ट यह स्क्रिप्ट F5 BIG-IP TMUI रिमोट कोड निष्पादन भेद्यता CVE-2023-46747 का शोषण करती है। यह एक बिना प्रमाणीकरण वाले हमलावर को कमजोर F5 BIG-IP सिस्टम पर मनमाने कमांड निष्पादित करने की अनुमति देती है। विषय-सूची विशेषताएँ आवश्यकताएँ उपयोग पैरामीटर यह कैसे काम करता ह...

9.8CVSS7.4AI score0.96515EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/28 2:53 a.m.6 views

CVE-2024-46451

CVE-2024-46451 TOTOLINK AC1200 T8 शोषण - बफ़र ओवरफ़्लो भेद्यता इस रिपॉजिटरी में एक पायथन स्क्रिप्ट है जो TOTOLINK AC1200 T8 संस्करण v4.1.5cu.861B20230220 में setWiFiAclRules फ़ंक्शन के desc पैरामीटर के माध्यम से बफ़र ओवरफ़्लो भेद्यता का शोषण करती है। भेद्यता विवरण भेद्यता प्रकार : बफ़र ओवरफ़्लो...

9.8CVSS5.9AI score0.01247EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 2:52 a.m.4 views

CVE-2024-46377

CVE-2024-46377 PoC für Schwachstelle beim beliebigen Datei-Upload in Best House Rental Management System 1.0 Übersicht Dieses Python-Skript demonstriert, wie die Schwachstelle beim beliebigen Datei-Upload in Best House Rental Management System 1.0 ausgenutzt werden kann. Die Schwachstelle...

9.8CVSS5.9AI score0.01213EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 2:52 a.m.30 views

haxx

haxx Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1. Based on CoreTrustDemo, also please note that certificates are not copyrightable. Usage Note: requires macOS + existing jailbreak Get up and running This method works on 14.0-14.6. 14.7 14.7b1-14.8.1 requires launch...

6.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/28 2:52 a.m.8 views

haxx

haxx Esecuzione di codice Untethered + Unsandboxed come root tramite haxx su iOS 14 - iOS 14.8.1. Basato su CoreTrustDemo, si noti inoltre che i certificati non sono soggetti a copyright. Utilizzo Nota: richiede macOS + jailbreak esistente Configurazione e avvio Questo metodo funziona su 14.0-14....

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/28 2:52 a.m.3 views

LetsDefend-SOC342-CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-andRCE-EventID-320

🧠 Análise do SharePoint Zero-Day do LetsDefend ToolShell - SOC342-CVE-2025-53770 📘 Introdução Investiguei um zero-day do SharePoint chamado ToolShell CVE-2025-53770 no laboratório cibernético do LetsDefend. O exercício simulou um ataque RCE zero-day do mundo real onde uma requisição POST malicios...

9.8CVSS7.3AI score0.99998EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/08/28 2:51 a.m.4 views

CVE-2019-0708

CVE-2019-0708 Scanner PoC per CVE-2019-0708 di @JaGoTu e @zerosum0x0. In questa repository Un fork scanner di rdesktop in grado di rilevare se un host è vulnerabile a CVE-2019-0708, la vulnerabilità di esecuzione remota di codice nei Servizi Desktop remoto di Microsoft Windows. Non dovrebbe causa...

10CVSS7AI score0.99999EPSS
SaveExploits126
Kitploit
Kitploit
added 2026/08/28 2:49 a.m.7 views

SMB-LINUX-CVE-2025-37899

Vulnerabilidade Use-After-Free no ksmbd do Kernel do Linux CVE-2025-37899 Descrição Foi descoberta uma vulnerabilidade do tipo use-after-free no módulo ksmbd do kernel do Linux, responsável pela implementação do protocolo SMB Server Message Block para compartilhamento de arquivos em rede. Esta...

8.8CVSS6.9AI score0.00975EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/28 2:49 a.m.6 views

go-get-rce

go-get-rce CVE-2018-6574...

7.8CVSS6.7AI score0.07625EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/28 2:49 a.m.3 views

MultiExploit

Multi-Service-Schwachstellenscanner Unterstützte Schwachstellen und Angriffsvektoren Microsoft SQL Server-Schwachstellen CVE-2023-21173 : Remote Code Execution in SQL Server 2022 Potenzielle Ausnutzung von: Schwachen Authentifizierungskonfigurationen Fehlkonfigurierten Serverprinzipalen...

5.5CVSS6.2AI score0.00111EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 2:48 a.m.5 views

CVE-2021-20038-SonicWall-RCE

SonicWallSSL-VPNRCE CVE-2021-20038 Kommandozeilenparameter -h Hilfe anzeigen -u URL angeben -f Datei angeben Das Dateiformat muss http/https-Header enthalten...

9.8CVSS7.4AI score0.99912EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/28 2:48 a.m.4 views

CVE-2025-3248

POC – Entfernter und nicht authentifizierter Angreifer kann manipulierte HTTP-Anfragen senden, um beliebigen Code auszuführen – CVE-2025-3248 Übersicht Langflow-Versionen vor 1.3.0 sind anfällig für Code-Injection im Endpunkt /api/v1/validate/code. Ein entfernter und nicht authentifizierter...

9.8CVSS7.4AI score0.99996EPSS
SaveExploits36References1
Kitploit
Kitploit
added 2026/08/28 2:48 a.m.4 views

Freeze.rs

QUESTO REPOSITORY È STATO ARCHIVIATO Per visualizzare l'ultima versione di Freeze.rs o per inviare una segnalazione, fare riferimento a https://github.com/Tylous/Freeze.rs. Freeze.rs Ulteriori Informazioni Se desideri saperne di più sulle tecniche utilizzate in questo framework, dai un'occhiata a...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/28 2:47 a.m.3 views

CVE-2024-50623

POC - CVE-2024-50623 - Cleo Upload e download di file senza restrizioni Panoramica CVE-2024-50623 è una vulnerabilità critica identificata nei prodotti software di trasferimento file di Cleo — Cleo Harmony, Cleo VLTrader e Cleo LexiCom — nelle versioni precedenti alla 5.8.0.21. Questa falla...

9.8CVSS7.4AI score0.98607EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/08/28 2:46 a.m.6 views

CVE-2024-10914

POC - CVE-2024–10914- Vulnerabilità di iniezione di comandi nel parametro name per D-Link NAS Panoramica È stata trovata una vulnerabilità in D-Link DNS-320, DNS-320LW, DNS-325 e DNS-340L fino al 20241028. È stata classificata come critica. La funzione interessata da questa vulnerabilità è...

9.8CVSS7.3AI score0.96183EPSS
SaveExploits13References1
Kitploit
Kitploit
added 2026/08/28 2:43 a.m.5 views

nexus_rce_CVE-2019-7238

nexusrceCVE-2019-7238 Alcune note di debug ed exploit non blind Exploit Usa Burp Suite, è sufficiente modificare ls / -al nella richiesta; nota che le doppie virgolette vengono sostituite con virgolette singole. root@kitploit: POST /service/extdirect HTTP/1.1 Host: localhost User-Agent: Mozilla/5...

9.8CVSS7.4AI score0.77146EPSS
SaveExploits4
Rows per page
Query Builder