Lucene search
+L

9665 matches found

Kitploit
Kitploit
added 2026/09/13 6:00 p.m.7 views

CVE-2020-25398

CVE-2020-25398 InterMind iMind Server 至 3.13.65 版本存在 CSV 注入漏洞,通过 csv 导出功能触发。 信息 描述:攻击者可配置特定数据,这些数据在导出为恶意 csv 文件时携带代码执行载荷,并在用户机器上打开后运行。 研究人员:Andrey Skuratov https://github.com/h3llraiser/ 发现日期:2020-07-06(初始公告) 公开发布: VEL 链接:即将提供 NIST CVE 链接:即将提供 截图:...

8.8CVSS7.8AI score0.01978EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 5:53 p.m.8 views

CVE-2021-45232

Apache APISIX Dashboard未授权访问漏洞CVE-2021-45232 FOFA 查询 title="Apache APISIX Dashboard" 影响范围 Apache APISIX Dashboard 2.10.1 POC: root@kitploit: IP:PORT/apisix/admin/migrate/export 修复建议 升级至最新安全版本 Apache APISIX Dashboard 2.10.1:https://github.com/apache/apisix-dashboard/releases/tag/v2.10.1...

9.8CVSS8.2AI score0.85943EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/13 5:50 p.m.57 views

knowsmore

Knows More KnowsMore officially supports Python 3.8+. Main features Import NTLM Hashes from .ntds output txt file generated by CrackMapExec or secretsdump.py Import NTLM Hashes from NTDS.dit and SYSTEM Import Cracked NTLM hashes from hashcat output file Import BloodHound ZIP or JSON file BloodHou...

6.2AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/13 5:49 p.m.76 views

yaralyzer

THE YARALYZER Visually inspect all of the regex matches and their sexier, more cloak and dagger cousins, the YARA matches found in binary data and/or text. See what happens when you force various character encodings upon those matched bytes. With colors. Quick Start root@kitploit: pipx install...

6.2AI score
SaveExploits0References16
Kitploit
Kitploit
added 2026/09/13 5:25 p.m.9 views

ff-password-exporter

FF Password Exporter Puede ser difícil exportar tus contraseñas desde Firefox. Desde la versión 57 de Firefox Quantum los complementos de exportación de contraseñas existentes ya no funcionan. Mozilla no proporciona otras alternativas oficiales. FF Password Exporter hace que sea rápido y fácil...

6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 5:25 p.m.32 views

ff-password-exporter

FF Password Exporter It can be difficult to export your passwords from Firefox. Since version 57 of Firefox Quantum existing password export addons no longer work. Mozilla provides no other official alternatives. FF Password Exporter makes it quick and easy to export all of your passwords from...

5.6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 5:23 p.m.254 views

ip-finder-cli

IPFinder CLI Command Line Interface https://ipfinder.io/ Supports Single IP Address, asn, ranges, firewall as Input Supports Bulk Exports Results to Screen or to An Output File Supports IPv4 and IPv6 Supports ASN number , RANGES , Firewall Getting Started sign up for a free account at...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 5:07 p.m.76 views

domainim

DOMAINIM Features • Usage • Installation • Usage • Contributing • Additional Notes Domainim is a fast domain reconnaissance tool for organizational network scanning. The tool aims to provide a brief overview of an organization's structure using techniques like OSINT, bruteforcing, DNS resolving...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 5:02 p.m.7 views

IPGeoLocation

IPGeoLocation ==== 用于获取IP地理位置信息的工具 由 ip-api 提供支持 要求 Python 3.x termcolor colorama 下载/安装 git clone https://github.com/maldevel/IPGeoLocation pip3 install -r requirements.txt --user 如果缺少 pip3: apt-get install python3-setuptools easyinstall3 pip pip3 install -r requirements.txt 功能 获取IP或域名地理位置。...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 4:56 p.m.9 views

vt-py-scanner

Escáner de VirusTotal Script de Python para analizar TODOS los archivos con la API de VirusTotal, escaneando carpetas y subcarpetas de forma recursiva. Optimizado para Windows. Características Escanea TODOS los archivos de una carpeta y sus subcarpetas Configuración mediante archivo .env - Guarda...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:38 p.m.46 views

lazywarden

Secure, Automated, and Multi-Cloud Bitwarden Backup and Import System Lazywarden is a Python automation tool designed to Backup and Restore data from your vault, including Bitwarden attachments. It allows you to upload backups to multiple cloud storage services and receive notifications across...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:28 p.m.7 views

CVE-2021-45232-RCE

CVE-2021-45232 CVE-2021-45232 Apache apisix Dashboard api unauth rce Version: 2.10.1 Fofa: title="Apache APISIX Dashboard" POC: root@kitploit: IP:PORT/apisix/admin/migrate/export...

9.8CVSS8.2AI score0.85943EPSS
SaveExploits5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.123 views

Hongdian H8922 3.0.5 Devices - Local File Inclusion

Hongdian H8922 3.0.5 devices are vulnerable to local file inclusion. The /logdownload.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ e.g., ../../etc/passwd This can be carried out wi...

6.5CVSS6.9AI score0.1592EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.136 views

WordPress Advanced Order Export For WooCommerce <3.1.8 - Authenticated Cross-Site Scripting

WordPress Advanced Order Export For WooCommerce plugin before 3.1.8 contains an authenticated cross-site scripting vulnerability via the tab parameter in the admin panel. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can...

6.1CVSS6.3AI score0.10348EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.22 views

Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated settings import/export

includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress allows unauthenticated options changes. id: CVE-2019-17228 info: name: Motors Car Dealer & Classified Ads = 1.4.0 - Unauthenticated settings...

6.5CVSS6.6AI score0.01153EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.11 views

Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export

The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handleexport' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or...

5.3CVSS5.7AI score0.00729EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.22 views

WordPress midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload

WordPress midi-Synth plugin \u003C= 1.1.0 contains an unrestricted file upload vulnerability caused by missing file type and extension validation in the 'export' AJAX action, letting unauthenticated attackers upload arbitrary files and potentially execute remote code, exploit requires attacker to...

9.8CVSS6.2AI score0.04458EPSS
SaveExploits1References1
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.42 views

LolLMS < 2.2.0 - Server-Side Request Forgery

A Server-Side Request Forgery SSRF vulnerability exists in parisneo/lollms versions prior to 2.2.0. The /api/files/export-content endpoint processes Markdown image URLs by downloading them via downloadimagetotemp in backend/routers/files.py without any validation, allowing an unauthenticated...

7.5CVSS7.4AI score0.01765EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.85 views

WP Attachment Export < 0.2.4 - Unrestricted File Download

The plugin does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress powered site. This includes details of even privately published posts and password protected posts with their passwords revealed ...

7.5CVSS7.2AI score0.07729EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.20 views

WordPress FastDup <= 2.1.9 Sensitive Information Exposure - Directory Listing

FastDup WordPress plugin 2.2 contains a directory listing vulnerability caused by lack of access restrictions in sensitive directories, letting attackers view export files, exploit requires no authentication. id: CVE-2023-6592 info: name: WordPress FastDup = 2.1.9 Sensitive Information Exposure -...

5.3CVSS6.7AI score0.00905EPSS
SaveExploits1References4
Rows per page
Query Builder