Lucene search
+L

627876 matches found

Kitploit
Kitploit
added 2026/09/01 8:19 p.m.4 views

CVE-2019-11231-PoC

Exploit RCE de GetSimpleCMS CVE-2019-11231 Exploit de ejecución remota de código no autenticado para GetSimpleCMS ≤ 3.3.15 Vulnerabilidad GetSimpleCMS expone archivos sensibles públicamente /data/other/authorization.xml, /data/users/, lo que permite a los atacantes: 1. Filtrar claves de API y...

9.8CVSS8.2AI score0.71598EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/01 8:19 p.m.7 views

CVE-2025-14598

CVE-2025-14598 CVSS: 9.8 远程未认证SQL注入导致远程代码执行 执行摘要 在BET e-Portal的登录功能中发现了SQL注入漏洞,该软件解决方案广泛部署于教育机构,用于学生信息和考试成绩管理。该漏洞允许未认证攻击者干扰后端SQL查询,在某些配置下可能升级为远程代码执行。该问题通过CERT/CC协调披露,并被分配了CVE-2025-14598 。 本文档提供该漏洞的技术概述、影响、在不同部署中的表现以及一般修复指南。 受影响产品 产品: BET e-Portal 供应商: BeeS Software Solutions Pvt Ltd 部署环境: BET...

9.8CVSS6.1AI score0.00721EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 8:19 p.m.5 views

Log4Shell-CVE-2021-44228-PoC

Log4Shell CVE-2021-44228: Descripción breve Apache Log4j2 2.0-beta9 hasta 2.15.0 excepto las versiones 2.12.2, 2.12.3 y 2.3.1 Las funciones JNDI utilizadas en la configuración, los mensajes de registro y los parámetros no protegen contra endpoints LDAP controlados por el atacante y otros endpoint...

10CVSS7.4AI score0.99999EPSS
SaveExploits368
Kitploit
Kitploit
added 2026/09/01 8:19 p.m.4 views

CVE-2025-55182-PoC

React2Shell CVE-2025-55182 PoC 使用方法 root@kitploit: Interactive shell ./react2shell -u http://target:3000 Single command ./react2shell -u http://target:3000 -c "id" WAF bypass 128KB junk data ./react2shell -u http://target:3000 -waf 128 ビルド root@kitploit: go build -o react2shell . オプション フラグ| 説明...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/01 8:19 p.m.8 views

CVE-2015-3224

CVE-2015-3224 エクスプロイト - Rails Web Console RCE CVE-2015-3224 のエクスプロイトのJavaScript実装(Node.js)です。このツールは、脆弱性のあるバージョンの web-console gem を実行しているRuby on Railsアプリケーションを標的とし、認証なしのリモートコード実行(RCE)を可能にします。 脆弱性について CVE-2015-3224 により、攻撃者はRailsの web-console gem のIPホワイトリスト保護をバイパスできます。 web-console...

4.3CVSS6AI score0.44708EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/01 8:19 p.m.4 views

CVE-2025-55182-react2shell

react2shell CVE-2025-55182 toolkit. Scanner + exploit for unauthenticated RCE in Next.js via RSC payload injection. Node.js exploit: zero dependencies. Bash scanner: checks single URLs or bulk lists. Exploit root@kitploit: Single command with output ./react2shell.mjs -t http://target:3000 -c "id"...

10CVSS7.6AI score0.99802EPSS
SaveExploits389
NVD
NVD
added 2026/09/01 8:17 p.m.8 views

CVE-2026-76658

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

10CVSS0.00435EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.8 views

CVE-2026-73731

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script...

6.1CVSS0.00193EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.9 views

CVE-2026-73716

A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful...

7.5CVSS0.00457EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.8 views

CVE-2026-73720

Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS0.00699EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.8 views

CVE-2026-73722

Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection against the affected system. Successful exploitation could allow an attacker to execute arbitrary commands as a...

7.2CVSS0.00957EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.9 views

CVE-2026-73719

An arbitrary file write vulnerability exists in the API of HPE Networking Fabric Composer and could allow an authenticated administrative user to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on...

7.2CVSS0.00462EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.7 views

CVE-2026-73713

Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. Successful exploitation of these vulnerabilities could allow a local attacker to achieve arbitrary code execution with root privileges on the underlying operating system of the affected system...

7.8CVSS0.00109EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.9 views

CVE-2026-73712

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to...

8.1CVSS0.00401EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.9 views

CVE-2026-73709

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacke...

8.3CVSS0.00207EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.8 views

CVE-2026-73700

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to...

9CVSS0.00313EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.7 views

CVE-2026-73705

An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary commands on the underlying operating syste...

8.8CVSS0.00348EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.7 views

CVE-2026-73703

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script co...

8.8CVSS0.00202EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.6 views

CVE-2026-73701

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticate...

9CVSS0.00524EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/01 8:17 p.m.7 views

AZL-98451 CVE-2026-72649 affecting package rubygem-elasticsearch 8.9.0-1

Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586. A specially crafted trained model artifact could cause attacker-controlled logic to execute with a materially broader system-call surface tha...

8.8CVSS6.4AI score0.0058EPSS
SaveExploits0References1
Rows per page
Query Builder