Lucene search
+L

627796 matches found

CVE
CVE
added 2026/09/01 7:31 p.m.26 views

CVE-2026-73700

HPE Networking Fabric Composer contains a stored cross-site scripting (XSS) vulnerability in its web-based management interface. An authenticated low-privilege operator can inject malicious script that executes in the browser of an administrative user , potentially allowing arbitrary code executi...

9CVSS6AI score0.00313EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/09/01 7:30 p.m.7 views

EUVD-2026-69577

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...

9.6CVSS6.2AI score0.00252EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 7:30 p.m.37 views

CVE-2026-19766 Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete...

9.6CVSS0.00252EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/01 7:30 p.m.34 views

CVE-2026-19766

HPE Networking Fabric Composer is affected by an authentication bypass vulnerability in the underlying operating system. An unauthenticated adjacent attacker can exploit this to execute arbitrary code as a privileged user , resulting in complete compromise of the AFC host . The NVD rates this as ...

9.6CVSS6.2AI score0.00252EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/09/01 7:28 p.m.6 views

internet-of-vulnerable-things

Internet of Vulnerable Things The results of my small term paper on the topic of the Internet of Vulnerable Things. Abstract This paper provides a practical demonstration of how insecure the Internet of Things is by hacking a typical IoT device. Several vulnerabilities were identified in the...

8.8CVSS7.9AI score0.33482EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/01 7:28 p.m.6 views

CVE-2026-6279

╔══════════════════════════════════════════════════════════════╗ ║ CVE-2026-6279 · Avada Builder = 3.15.2 ║ ║ Unauthenticated RCE via calluserfunc ║║ ╚══════════════════════════════════════════════════════════════╝ 📋 Resumen...

9.8CVSS5.8AI score0.02163EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/01 7:28 p.m.4 views

CVE-2026-0300

🚨 CVE-2026-0300 - Critical Unauthenticated Remote Code Execution in Palo Alto Networks PAN-OS Buffer Overflow in User-ID™ Authentication Portal Captive Portal — Actively Exploited in the Wild 📋 Overview A critical buffer overflow vulnerability CWE-787 in the User-ID Authentication Portal of PAN-O...

9.8CVSS7.9AI score0.31725EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/01 7:25 p.m.5 views

PoC-CVE-2025-62222

PoC: CVE-2025-62222 - GitHub Copilot Chat RCE Este repositorio contiene una Prueba de Concepto PoC para la vulnerabilidad CVE-2025-62222. Demuestra cómo se puede lograr la Ejecución Remota de Código RCE en la máquina de un desarrollador manipulando el contexto de GitHub Copilot Chat en VS Code...

8.8CVSS7AI score0.00749EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 7:24 p.m.5 views

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file |...

10CVSS8.4AI score0.99997EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/01 7:24 p.m.6 views

CVE-2021-40870

CVE-2021-40870 Aviatrix permite a un usuario autenticado ejecutar código arbitrario...

9.8CVSS8.2AI score0.93019EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/01 7:24 p.m.6 views

CVE-2024-27348-HugeGraph-RCE

CVE-2024-27348: Apache HugeGraph RCE Bypass Avanzado de Sandbox Un exploit de Prueba de Concepto PoC avanzado y altamente fiable para CVE-2024-27348 Ejecución Remota de Código en Apache HugeGraph Server. A diferencia de muchos PoCs públicos que ejecutan comandos a ciegas o fallan en cargas útiles...

9.8CVSS8.4AI score0.9921EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/01 7:23 p.m.5 views

CVE-2021-22893

CVE-2021-22893 Proof-of-Concept PoC script to exploit Pulse Secure CVE-2021-22893. Usage Achieves RCE on Pulse Secure VPNs root@kitploit: chmod +x exploit.sh ./exploit.sh 10.0.0.1 ./exploit.sh -l ./exploit.sh -l IPList.txt...

10CVSS8.5AI score0.47172EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/01 7:23 p.m.4 views

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 VMware vSphere Client Unauthorized File Upload to Remote Code Execution RCE The vSphere Web Client HTML5 is essentially an administrative interface that enables management of a vSphere installation. The vSphere Client provides an administrator with access to the key...

10CVSS8.2AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/01 7:23 p.m.4 views

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE This repository contains my exploit code for the RCE vulnerability in Adobe ColdFusion 2021. Exploit Description The exploit sends a POST request containing a JSP reverse shell to /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. If successfull...

10CVSS8.5AI score0.9995EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/01 7:22 p.m.8 views

CVE-2025-59528.yaml

CVE-2025-59528.yaml Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses...

10CVSS7.9AI score0.8737EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/01 7:22 p.m.4 views

CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – LangGraph SQLite Checkpoint SQL Injection CVE-2025-67644 is a SQL Injection vulnerability CWE-89 in the langgraph-checkpoint-sqlite package part of LangGraph / LangChain ecosystem. It allows an attacker to inject arbitrary SQL via unsanitized metadata filter keys passed to th...

7.8CVSS6.3AI score0.02306EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/01 7:22 p.m.5 views

CVE-2024-42009

CVE-2024-42009 – Roundcube Stored XSS Docker PoC 📌 Overview This repository demonstrates a working Proof-of-Concept PoC for CVE-2024-42009 , a stored Cross-Site Scripting XSS vulnerability in Roundcube Webmail. The vulnerability is caused by improper HTML sanitization followed by unsafe attribute...

9.3CVSS8.4AI score0.82882EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/01 7:22 p.m.3 views

CVE-2025-55182

CVE-2025-55182 Batch Detection Tool Efficient batch detection tool for the Next.js prototype pollution vulnerability CVE-2025-55182. Vulnerability Overview CVE-2025-55182 is a prototype pollution vulnerability in the Next.js framework. Attackers can exploit prototype pollution by crafting malicio...

10CVSS7.9AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/01 7:22 p.m.4 views

CVE-2025-69516

CVE-2025-69516 - Tactical RMM Remote Code Execution This repository contains a Python script that automates the exploitation of the CVE-2025-69516 SSTI vulnerability in Tactical RMM. It has been tested on version 1.3.1. Usage root@kitploit: python xpl.py -d api.tactical.xyz -t SESSIONTOKEN -c "id...

8.8CVSS6AI score0.02137EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/01 7:21 p.m.5 views

Rocket.Chat-Automated-Account-Takeover-RCE-CVE-2021-22911

Rocket.Chat Automated Unauthenticated Account Takeover to RCE CVE-2021-22911 Full unauthenticated RCE proof of concept for Rocket.Chat 3.12.1 CVE-2021-22911 The original PoC created by Enox. Currently this only works for accounts without 2FA. I will be adding 2FA bypasses shortly Created by...

9.8CVSS8.1AI score0.95242EPSS
SaveExploits16
Rows per page
Query Builder