Lucene search
+L

3406 matches found

Kitploit
Kitploit
added 2026/09/15 5:52 a.m.7 views

CVE-2026-35029-PoC

CVE-2026-35029 — Vulnerabilidad de control de acceso roto en /config/update de LiteLLM Broken Access Control El endpoint /config/update de LiteLLM no comprueba los permisos de rol del solicitante. Cualquier usuario autenticado con una API Key válida sin necesidad de permisos de administrador pued...

8.8CVSS5.9AI score0.30374EPSS
SaveExploits2
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.42 views

Nextjs <2.4.1 - Local File Inclusion

ZEIT Next.js before 2.4.1 is susceptible to local file inclusion via the /next and /static request namespace, allowing attackers to obtain sensitive information. id: CVE-2017-16877 info: name: Nextjs 2.4.1 - Local File Inclusion author: pikpikcu severity: high description: ZEIT Next.js before 2.4...

7.5CVSS7.3AI score0.14104EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.45 views

White Star Software ProTop - Directory Traversal

A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences. id: CVE-2025-44177 info: name:...

8.2CVSS8.1AI score0.04341EPSS
SaveExploits3References4
Kitploit
Kitploit
added 2026/09/15 2:44 a.m.8 views

CVE-2019-14678

CVE-2019-14678: Entidad Externa XML en SAS XML Mapper SAS XML Mapper 9.45 tiene una vulnerabilidad de Entidad Externa XML XXE que puede ser aprovechada por atacantes malintencionados de múltiples maneras. Algunos ejemplos son la Lectura de Archivos Locales, la Exfiltración de Archivos Fuera de...

10CVSS8AI score0.02951EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/15 1:24 a.m.5 views

CISCO-CVE-2020-3452-Scanner-Exploiter

Escáner y explotador de CISCO CVE-2020-3452 Escaneará los servidores objetivo desde shodan y luego encontrará los servidores vulnerables a CVE-2020-3452 lectura remota no autorizada de archivos en Cisco Adaptive Security Appliance y FTD. Acerca de Una vulnerabilidad en la interfaz de servicios we...

7.5CVSS7.8AI score0.99992EPSS
SaveExploits25References1
Kitploit
Kitploit
added 2026/09/15 1:22 a.m.221 views

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/15 1:18 a.m.963 views

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

5.8AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/15 12:14 a.m.10 views

CVE-2019-11510-poc

CVE-2019-11510-poc Pulse Secure SSL VPN Lectura de archivos antes de autenticación Referencia 1. https://hackerone.com/reports/591295 2. https://github.com/projectzeroindia/CVE-2019-11510/blob/master/CVE-2019-11510.sh 3...

10CVSS8.2AI score0.99999EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/09/14 9:25 p.m.39 views

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 5:10 p.m.6 views

CVE-2024-24919

Introducción Script POC en Python simple que verifica y aprovecha la vulnerabilidad CVE-2024-24919 de Check Point Wrong Check Point; vulnerable a lectura arbitraria de archivos. Requisitos Python 3 Pip Librería/Módulo requerido Instalar vía PIP requests urllib3 tqdm Cómo Ejecutar root@kitploit: P...

8.6CVSS7.9AI score0.99978EPSS
SaveExploits53
Kitploit
Kitploit
added 2026/09/14 2:30 p.m.25 views

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 2:10 p.m.7 views

CVE-2024-24919

CVE-2024-24919 Exploit Overview This repository contains a proof-of-concept PoC exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerability allows for reading system files. CVE ID : CVE-2024-24919 Severity : Critical Table of Contents Vulnerability-detail...

8.6CVSS7.9AI score0.99978EPSS
SaveExploits53
Kitploit
Kitploit
added 2026/09/14 12:56 p.m.9 views

CVE-2021-3019

CVE-2021-3019 CVE-2021-3019 Vulnerabilidad de lectura de archivos arbitrarios y directory traversal en lanproxy Uso Descargar root@kitploit: git clone https://github.com/FanqXu/CVE-2021-3019.git cd CVE-2021-3019 Ayuda Al ejecutarlo sin argumentos muestra la información de ayuda. URL única Realiza...

7.5CVSS7.5AI score0.16622EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/11 10:29 p.m.9 views

adminer_CVE-2021-43008

CVE-2021-43008 — Vulnerabilidad Adminer Lectura arbitraria de archivos a través de un servidor MySQL malicioso 1. ¿Qué es Adminer? Adminer es una herramienta web PHP que permite administrar fácilmente bases de datos MySQL, PostgreSQL, SQLite o SQL Server. Se despliega comúnmente como una...

7.5CVSS7.4AI score0.13641EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.5 views

checker-cve2020-3452

Comprobador CVE-2020-3452 Este script de Python comprueba si el servidor objetivo es vulnerable a CVE-2020-3452. Cisco Adaptive Security Appliance y FTD: lectura remota no autorizada de archivos Una vulnerabilidad en la interfaz de servicios web del software Cisco Adaptive Security Appliance ASA ...

7.5CVSS7.8AI score0.99992EPSS
SaveExploits25References1
Kitploit
Kitploit
added 2026/09/10 1:36 a.m.8 views

CVE-2021-43798-mass_scanner

Grafana CVE 2021-43798 Vulnerabilidad de lectura arbitraria de archivos no autorizada en Grafana CVE-2021-43798 deps root@kitploit: python3 -m pip install -r requirements.txt or pipenv install -r requirements.txt Dorks Dorks Shodan | Google Google Dorks Shodan Dorks Uso Objetivos sin / al final. ...

7.5CVSS8.1AI score0.88503EPSS
SaveExploits45References3
Kitploit
Kitploit
added 2026/09/09 12:33 a.m.9 views

CVE-2024-7928

CVE-2024-7928: Vulnerabilidad de lectura arbitraria de archivos en FastAdmin V1.3.4.20220530 CVEHunter es una herramienta de detección y explotación de vulnerabilidades para recuperar los detalles de la base de datos de instancias de FastAdmin para CVE-2024-7928, con mayor precisión y concurrenci...

7.5CVSS6.3AI score0.16882EPSS
SaveExploits5
EUVD
EUVD
added 2026/09/08 8:11 a.m.7 views

EUVD-2026-72669

A vulnerability has been identified in SIMOVE Fleetmanager V3.1 All versions V3.1.13, SIMOVE Fleetmanager V3.2 All versions V3.2.4, SIMOVE Fleetmanager V3.3 All versions V3.3.2, SIMOVE Fleetmanager V4.0 All versions V4.0.1, SIPLANT V1.7 All versions, SIPLANT V2.2 All versions, SIPLANT V3.0 All...

9.2CVSS0.00811EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/04 2:32 p.m.6 views

EUVD-2026-71227

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pgreadfile through FROM-clause syntax to read arbitrary files despite restricted-mode...

9.2CVSS5.6AI score0.00371EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.13 views

PT-2026-85544

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pg read file through FROM-clause syntax to read arbitrary files despite restricted-mode...

9.2CVSS5.6AI score0.00371EPSS
SaveExploits0References9
Rows per page
Query Builder