Lucene search
+L

987 matches found

Kitploit
Kitploit
added 2026/09/13 12:08 a.m.59 views

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

6.4CVSS8.6AI score0.31437EPSS
SaveExploits5References2
Kitploit
Kitploit
added 2026/09/12 10:37 p.m.5 views

PyShell

PyShell PyShell is Multiplatform Python WebShell. This tool helps you to obtain a shell-like interface on a web server to be remotely accessed. Unlike other webshells, the main goal of the tool is to use as little code as possible on the server side, regardless of the language used or the operati...

6.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 3:02 p.m.6 views

CVE-2024-24137

CVE-2024-24137: SQL-инъекция в Student File Managment System Подтверждение концепцииPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24137.md Подтверждение концепцииPoC : https://github.com/BurakSevben/CVE-2024-24137/blob/main/CVE-2024-24137.md...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 6:22 a.m.74 views

b374k

b374k shell 3.2 This PHP Shell is a useful tool for system or web administrator to do remote management without using cpanel, connecting using ssh, ftp etc. All actions take place within a web browser Features : File manager view, edit, rename, delete, upload, download, archiver, etc Search file,...

6.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 2:14 a.m.7 views

android-c-sharp-rat-server

Android C R.A.T Server 이것은 C R.A.T Server의 플러그인 시스템을 위해 구축된 플러그인입니다. 1. 이 플러그인을 설치하려면 AndroidExtension/bin/Debug에 있는 AndroidExtension.dll 파일을 /TutServer/bin/Debug/scripts에 복사하십시오. 2. 그런 다음 서버를 시작하고 Plugins 탭을 선택하십시오. 3. 목록에서 AndroidExtension.dll을 선택하고 Execute를 클릭하십시오. 4. 서버 포트클라이언트에 사용하는 것과 동일한 포...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/12 1:23 a.m.7 views

BetterAndroRAT

Better Android RAT Dendroid Based Android Remote Access Trojan Вся ответственность лежит на вас. Пожалуйста, используйте только в исследовательских целях. Возможности Удаленное обновление и установка приложений Удаленная веб-камера Удаленная запись микрофона Удаленное управление файлами Удаленные...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.11 views

CVE-2026-29909-MRCMS-vulnerability

CVE-2026-29909: MRCMS V3.1.2 - 인증되지 않은 디렉터리 열거 CVE ID CVE-2026-29909 설명 MRCMS V3.1.2에는 파일 관리 모듈에 인증되지 않은 디렉터리 열거 취약점이 존재합니다. /admin/file/list.do 엔드포인트는 인증 제어 및 적절한 입력 검증이 부족하여, 원격 공격자가 자격 증명 없이 서버의 디렉터리 내용을 열거할 수 있습니다. 개념 증명PoC root@kitploit: GET...

5.3CVSS6AI score0.00434EPSS
SaveExploits1
OSV
OSV
added 2026/09/09 1:32 p.m.7 views

CVE-2026-86774 Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy

Snipe-IT versions before 8.7.0 contain a broken access control vulnerability in AssetModelPolicy where the files method cascades from assets.files permission, allowing authenticated users to upload and delete file attachments on Asset Model records without the required models.files permission...

5.3CVSS5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/07 7:31 p.m.4 views

oracleShell

oracleShell oracle 데이터베이스 명령 실행 테스트 환경-DBA 권한: SELECT FROM v$version root@kitploit: Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production PL/SQL Release 11.2.0.1.0 - Production "CORE 11.2.0.1.0 Production" TNS for 32-bit Windows: Version 11.2.0.1.0 - Production NLSRTL Version...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 11:10 a.m.4 views

CVE-2022-44136-poc

CVE-2022-44136-poc Zenar CMS 9.3 страдает от уязвимости неограниченной загрузки файлов в своем модуле управления файлами, что позволяет аутентифицированным злоумышленникам с минимальными привилегиями загружать произвольные файлы, включая вредоносные PHP-скрипты, на веб-сервер. Из-за недостаточной...

9.8CVSS8.1AI score0.01125EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/08/12 5:24 p.m.26 views

CVE-2026-73298 Microsoft Container Migration Solution Accelerator: Authenticated IDOR allowing read/write/delete processes

The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-driven migration solution for moving container service configurations to Azure Kubernetes Service. In version 2.1.2 and earlier, a security vulnerability was identified in the...

8.7CVSS0.00677EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/12 5:24 p.m.14 views

EUVD-2026-57371

The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-driven migration solution for moving container service configurations to Azure Kubernetes Service. In version 2.1.2 and earlier, a security vulnerability was identified in the...

8.7CVSS5.4AI score0.00677EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/12 5:24 p.m.53 views

CVE-2026-73298

The CVE-2026-73298 entry concerns the Microsoft Container Migration Solution Accelerator (multi-service AI-driven migration tool) with vulnerability in version 2.1.2 and earlier. The issue is an authenticated IDOR (Insecure Direct Object Reference) that permits reading, writing, and deleting proc...

8.7CVSS5.4AI score0.00677EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/12 5:24 p.m.18 views

CVE-2026-73298 Microsoft Container Migration Solution Accelerator: Authenticated IDOR allowing read/write/delete processes

The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-driven migration solution for moving container service configurations to Azure Kubernetes Service. In version 2.1.2 and earlier, a security vulnerability was identified in the...

8.7CVSS5.4AI score
SaveExploits0References3
CVE
CVE
added 2026/08/09 2:00 a.m.60 views

CVE-2026-19326

CVE-2026-19326 affects Jevon-Zhong Ai-doctor 0.0.1. The vulnerability is in the deleteImage function of ai-doctor-server/src/filemanagement/filemanagement.service.ts, where manipulating the imagePath argument enables path traversal. Local access is required. The project was informed via an issue ...

4.8CVSS5AI score0.00137EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/09 2:00 a.m.14 views

EUVD-2026-54853

A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1. This vulnerability affects the function deleteImage of the file ai-doctor-server/src/filemanagement/filemanagement.service.ts. Performing a manipulation of the argument imagePath results in path traversal. The attack must be initiated...

4.8CVSS5AI score0.00137EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/05 8:16 a.m.13 views

CVE-2026-54416

Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management feature using a fixed blacklist in data/inc/files.php '.php','php3','php4','php5','php6','php7','phtml','.phtm','.pht','.ph3','.ph4','.ph5','.asp','.cgi','.phar', checked against the last 4-5 characters of the...

7.2CVSS0.00342EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/05 6:58 a.m.13 views

EUVD-2026-53192

Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management feature using a fixed blacklist in data/inc/files.php '.php','php3','php4','php5','php6','php7','phtml','.phtm','.pht','.ph3','.ph4','.ph5','.asp','.cgi','.phar', checked against the last 4-5 characters of the...

7.2CVSS6AI score0.00342EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/04 7:16 a.m.14 views

CVE-2026-15958

The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the...

9.3CVSS0.00204EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/31 3:34 a.m.16 views

EUVD-2026-51393

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...

4.3CVSS5.9AI score0.00243EPSS
SaveExploits0References3
Rows per page
Query Builder