Lucene search
+L

631413 matches found

Kitploit
Kitploit
added 2026/09/07 1:00 p.m.5 views

CVE-2023-42793

CVE-2023-42793 - TeamCity Admin Account Creation lead to RCE use exploit.py first to creat administrator account for you and then use rce.py to execute commands on the target, and for reverse shell check this exploit script Description This script exploits CVE-2023-42793 to create an admin accoun...

9.8CVSS8.7AI score0.99979EPSS
SaveExploits19References1
Kitploit
Kitploit
added 2026/09/07 12:56 p.m.4 views

CVE-2019-12594

CVE-2019-12594 This is a PoC for CVE-2019-12594, a vulnerability in DOSBox 0.74-2. Launching a calculator on the host from DosBox 0.74-2 The PoC for this vulnerability has been tested with the following configuration: DOSBox 0.74-2 Debian 10 amd64 Libc6 2.28-10...

9.8CVSS7.7AI score0.06685EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 12:55 p.m.5 views

privesc-CVE-2010-0426

Sudo 1.6.x=1.6.9p21 and 1.7.x=1.7.2p4 Local Privilege Escalation Sudo su "do" allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all commands and arguments. Vulnerable environment To setup a vulnerable environment f...

6.9CVSS7.5AI score0.01082EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/07 12:55 p.m.6 views

CVE-2022-24990

CVE-2022-24990 CVE-2022-24990 TerraMaster TOS unauthenticated RCE via PHP Object Instantiation Usage Vulnerability Detection. root@kitploit: python CVE-2022-24990.py -u http://127.0.0.1:8080 Upload a PHP webshell. root@kitploit: python CVE-2022-24990.py -a http://127.0.0.1:8080 Reference...

9.8CVSS8.2AI score0.83553EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/07 12:55 p.m.4 views

CVE-2018-2628

Test for Vulnerabilities Upload Shell Method one: Method two: Execute Shell Obtain Meterpreter root@kitploit: msf use exploit/multi/script/webdelivery msf exploitmulti/script/webdelivery set target 3 target = 3 msf exploitmulti/script/webdelivery set payload windows/meterpreter/reversetcp payload...

9.8CVSS8.3AI score0.99448EPSS
SaveExploits70
Kitploit
Kitploit
added 2026/09/07 12:55 p.m.4 views

spectre-attack-example

Spectre Attack Example January 2, 2018 CVE-2017-5753 and CVE-2017-5715 "Spectre" exploit example What is this? We place the text "The Magic Words are Squeamish Ossifrage." in memory, and then we attempt to read it using the vulnerability. If the system is vulnerable, you will see the same text on...

5.6CVSS7.1AI score0.93838EPSS
SaveExploits13References3
Kitploit
Kitploit
added 2026/09/07 12:54 p.m.4 views

CVE-2022-22274_CVE-2023-0656

SonicWall NGFW CVE-2022-22274 & CVE-2023-0656 On March 24, 2022, SonicWall released an advisory with the following details: A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service DoS or potentially results in...

9.8CVSS8.5AI score0.75521EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/07 12:53 p.m.3 views

CVE-2021-21972

Usage & Disclaimer VMware vCenter Server Remote Code Execution Vulnerability CVE-2021-21972 Usage: Python CVE-2021-21972.py urls.txt Each URL in urls.txt is on a single line, vulnerable addresses are output to vul.txt Affected Versions: VMware vCenter Server 7.0 series 7.0.U1c VMware vCenter Serv...

10CVSS8.3AI score0.99865EPSS
SaveExploits48
EUVD
EUVD
added 2026/09/07 12:53 p.m.4 views

EUVD-2026-72385

LibreNMS before 26.8.0 contains an argument injection vulnerability in the graphtitle parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaking out of double-quote escaping. Attackers can inject DEF and LINE arguments to read RRD files from unauthorized...

8.8CVSS0.00324EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/07 12:53 p.m.1 views

CVE-2026-86427 LibreNMS before 26.8.0 Argument Injection via graph_title

LibreNMS before 26.8.0 contains an argument injection vulnerability in the graphtitle parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaking out of double-quote escaping. Attackers can inject DEF and LINE arguments to read RRD files from unauthorized...

8.7CVSS6.5AI score
SaveExploits0References4
CVE
CVE
added 2026/09/07 12:53 p.m.8 views

CVE-2026-86427

LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph_title parameter . The root cause is the ability to break out of double-quote escaping, allowing authenticated attackers to inject arbitrary rrdtool arguments . This enables reading RRD files from unauthorized devices...

8.8CVSS0.00324EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/07 12:53 p.m.31 views

CVE-2026-86427 LibreNMS before 26.8.0 Argument Injection via graph_title

LibreNMS before 26.8.0 contains an argument injection vulnerability in the graphtitle parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaking out of double-quote escaping. Attackers can inject DEF and LINE arguments to read RRD files from unauthorized...

8.8CVSS0.00324EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/07 12:53 p.m.8 views

EUVD-2026-72384

LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to...

9.2CVSS0.01405EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/07 12:53 p.m.17 views

CVE-2026-86426

LibreNMS before 26.8.0 contains an authentication bypass in its REST API caused by MySQL type coercion : unauthenticated attackers can send small integers (0–9) instead of string tokens, allowing them to match token hashes and access protected endpoints. Successful exploitation exposes device cre...

9.2CVSS0.01405EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/07 12:53 p.m.33 views

CVE-2026-86426 LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion

LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to...

9.2CVSS0.01405EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/07 12:53 p.m.3 views

CVE-2019-13024

CVE-2019-13024 The official exploit code for Centreon v19.04 Remote Code Execution CVE-2019-13024...

9CVSS7.8AI score0.32156EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/07 12:52 p.m.6 views

cve-2019-3398

cve-2019-3398 Details A quick python proof of concept for CVE-2019-3398 confluence vulnerability written in python. Confluence version 6.12.3, 6.13.3, 6.14.2, and 6.15.1 are affected. The exploit requires working credentials. To use Edit the osusername and ospassword fields, and possibly the...

9CVSS7.8AI score0.96837EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/07 12:52 p.m.6 views

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC The vulnerability allows an attacker with network access to an Erlang/OTP SSH server to execute arbitrary code without prior authentication. Description A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to...

10CVSS7.9AI score0.98594EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/09/07 12:51 p.m.7 views

Automation-for-Juniper-cve-2023-36845

Automation for Juniper CVE:2023-36845 Overview is a bash script designed to check for the CVE-2023-36845 vulnerability. This script processes a list of IP addresses, sends a request to each, and determines whether the system is vulnerable based on the response. Usage To use the script, run it fro...

9.8CVSS7.6AI score0.9507EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/07 12:49 p.m.4 views

CVE-2023-20273

CVE-2023-20273 CVE-2023-20273 Exploit PoC Usage root@kitploit: usage: exploit.py -h -t URL -u Username -p Password -c Command | -r -dest Outfile -www | -tcp | -null -ip LocalIP -port LocalPort -fs filesystem -path filepath -operation operationtype -v -q CVE-2023-20273 Exploit PoC options: -h,...

7.2CVSS7.9AI score0.89634EPSS
SaveExploits11
Rows per page
Query Builder