Lucene search
+L

8979 matches found

Kitploit
Kitploit
added 2026/08/27 8:32 a.m.2 views

CVE-2023-45878

CVE-2023-45878 GibbonEdu: Escritura arbitraria de archivos para ejecución de una web shell Descripción Este repositorio contiene un exploit para CVE-2023-45878 , una vulnerabilidad de escritura arbitraria de archivos en GibbonEdu. La vulnerabilidad afecta al endpoint rubricsvisualisesaveAjax.php ...

9.8CVSS8.6AI score0.63113EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/08/27 8:31 a.m.3 views

CVE-2022-28113

Fantec MWiD25-DS Informe para CVE-2022-28113 por @code-byter ========================== Este es un informe sobre la explotación del enrutador de viaje Fantec MWiD25-DS versión de firmware: 2.000.030. Esta vulnerabilidad permite a cualquier usuario no autorizado ejecutar comandos arbitrarios como...

9CVSS7.1AI score0.03652EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/27 8:30 a.m.3 views

CVE-2018-7600

CVE-2018-7600 CVE-2018-7600 Exploit Cambia TARGET en exploit.py root@kitploit: $ python3 exploit.py Success: Check http://127.0.0.1:8080/hello.txt...

9.8CVSS8AI score0.99991EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/08/27 8:10 a.m.5 views

CVE-2025-61686_docker

CVE-2025-61686docker Inicio 1. construir root@kitploit: docker-compose up --build 2. iniciar root@kitploit: docker-compose up Proceso de reproducción 1. Construir una sesión que cumpla con las condiciones de path traversal root@kitploit: └─$ echo -en '"AAAA../../../tmp/flower"'|base64 -w0 | tr '+...

9.1CVSS5.7AI score0.16177EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 8:09 a.m.2 views

cve-2025-59532-poc

CVE-2025-59532 Docker Environment A Docker-based research environment for analyzing CVE-2025-59532, a path traversal vulnerability in OpenAI Codex CLI that allows arbitrary file write outside the intended workspace sandbox. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025...

8.6CVSS5.9AI score0.00874EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 8:05 a.m.1 views

CVE-2026-5027

This post is a research article published by EQSTLab. Thanks toYahia Hamza, who reported and analyzed this vulnerability. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ Description CVE-2026-5027 : Langflow Arbitrary File Write Vulnerability description: A path...

8.8CVSS5.5AI score0.31661EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/08/27 7:50 a.m.1 views

CVE-2026-25732-NiceGUI-3.6.1

著者: Mohammed Idrees Banyamer 連絡先: Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer CVE-2026-25732 — NiceGUI FileUpload におけるパストラバーサル → 任意ファイル書き込み エクスプロイトタイトル: NiceGUI FileUpload のパストラバーサルによる任意ファイル書き込み 日付: 2025-06-06 テスト環境: NiceGUI ≤ 3.6.1 Linux / Windows 上の Python 3.8 – 3.12...

7.5CVSS5.2AI score0.03212EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/08/27 7:16 a.m.2 views

cve-2026-21440-writeup-poc

cve-2026-21440 @adonisjs/bodyparser におけるパストラバーサルによる任意ファイル書き込み 概要 @adonisjs/bodyparser パッケージには、リモート攻撃者が意図したアップロードディレクトリの外部に任意のファイルを書き込むことができる深刻なパストラバーサル脆弱性が存在します。multipartfile.move 関数がサニタイズされたファイル名を明示的に指定せずに呼び出されると、パーサーはクライアントから提供されたファイル名を適切なサニタイズなしにデフォルトで使用します。 実装が path.join を使用し、options.overwrit...

9.2CVSS8.9AI score0.01034EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/27 6:57 a.m.3 views

CVE-2024-22263_Scanner

CVE-2024-22263Scanner Solo para uso ético, no se permiten actividades dañinas o maliciosas. Es tu propia responsabilidad. CVE-2024-22263: Escritura arbitraria de archivos en Spring Cloud Dataflow Uso root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ██████╗ ██████╗ ██████╗...

8.8CVSS6.5AI score0.17537EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 6:46 a.m.1 views

CVE-2026-39973-PoC

CVE-2026-39973-PoC This is a small C apk file builder for CVE-2026-39973. Credits OnlyToxi - Helping with the path will be helping further & emotional support. iBotPeaches/Apktool - Documentation & parsing. Disclaimer This is a proof of concept , which is made for educational purposes only! AI...

7.1CVSS7AI score0.00182EPSS
SaveExploits1References4
EUVD
EUVD
added 2026/08/27 6:31 a.m.5 views

EUVD-2026-66379

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can levera...

7.5CVSS5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/27 6:17 a.m.2 views

ProxyLogon-CVE-2021-26855-metasploit

ProxyLogon-CVE-2021-26855-metasploit CVE-2021-26855 proxyLogon exchange ssrf to arbitrary file write metasploit exploit script preparation root@kitploit: git clone https://github.com/TaroballzChen/ProxyLogon-CVE-2021-26855-metasploit cd ProxyLogon-CVE-2021-26855-metasploit mkdir -p...

9.8CVSS8.9AI score0.99996EPSS
SaveExploits65
Kitploit
Kitploit
added 2026/08/27 5:58 a.m.2 views

CVE-2024-25641-CACTI-RCE-1.2.26

CVE-2024-25641 - Cacti 1.2.26 - Escritura arbitraria de archivos a RCE 🌵 RCE autenticado Cacti versión v1.2.26 Resumen Una vulnerabilidad de escritura arbitraria de archivos, explotable a través de la función "Importación de Paquetes", permite a usuarios autenticados que tengan el permiso "Import...

9.1CVSS8.9AI score0.86303EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/27 5:50 a.m.2 views

CVE-2022-0847

CVE-2022-0847 mi PoC personal y exploit de CVE-2022-0847 dirty pipe Uso PoC: escribir archivos arbitrariamente Simplemente un PoC de este CVE, compile el archivo poc.c de la siguiente manera: root@kitploit: $ gcc poc.c -o poc -static Deberá ejecutarlo de la siguiente manera: root@kitploit: ./poc...

7.8CVSS7AI score0.89721EPSS
SaveExploits101
CVE
CVE
added 2026/08/27 5:50 a.m.6 views

CVE-2026-77991

Joomla Event Manager (a Joomla extension from joomlaeventmanager.net) versions prior to 5.0.1 are vulnerable to privileged remote code execution due to a flaw in the administrator source model , which allows writing dangerous file types including PHP. An authenticated attacker with high privilege...

9.4CVSS6.4AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/27 5:50 a.m.3 views

EUVD-2026-66866

Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager 5.0.1 - The administrator source model allows to write dangerous file type incl. PHP, leading to remote code execution...

9.4CVSS6.2AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/27 5:30 a.m.2 views

CVE-2017-1000117

Repositorio de Prueba de Concepto para CVE-2017-1000117 VulApps Fork de joernchen/CVE-2017-1000117 git clone --recursive https://github.com/VulApps/CVE-2017-1000117.git escribirá la salida de id en un archivo llamado vul en /var/www/html. Ver más en VulApps...

8.8CVSS7.1AI score0.77823EPSS
SaveExploits9References2
Kitploit
Kitploit
added 2026/08/27 5:00 a.m.2 views

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto 파일 쓰기 익스플로잇 이 익스플로잇은 Global Protect URL 인스턴스를 검색하고 CVE-2024-3400을 사용하여 파일 쓰기를 시도합니다 주의해서 사용하세요 교육 목적으로만 제작되었습니다 사용법: root@kitploit: chmod +x gp-exploit.sh ./gp-exploit.sh filenametowrite urls.txt Shodan 검색 및 URL 필터링: root@kitploit: shodan search --fields...

10CVSS9AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/08/27 4:56 a.m.2 views

cve-2026-16219-croogo-lab

CVE-2026-16219:Croogo FileManager 防御性实验室 本仓库记录并安全地演示了 Croogo CMS 中编号为 CVE-2026-16219 的路径授权缺陷。它面向防御者、维护者、学生以及对自己拥有或获明确授权评估的系统进行测试的研究人员。 安全边界: 附带的 HTTP 概念验证仅接受字面回环地址 127.0.0.1,仅在固定的非 Web 目标目录 /tmp/croogo-cve-2026-16219/ 中写入一个生成的 .txt 标记文件,不跟随重定向,并且在没有明确实验室确认的情况下拒绝运行。它不包含可执行载荷,也没有远程目标模式。 状态快照...

6.5CVSS6.2AI score0.00425EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 4:41 a.m.2 views

ProxyLogon

ProxyLogon ProxyLogonは、CVE-2021-26855の正式な総称です。これはMicrosoft Exchange Serverの脆弱性であり、攻撃者が認証をバイパスして管理者になりすますことを可能にします。また、このバグを別の認証後任意ファイル書き込みの脆弱性であるCVE-2021-27065と連鎖させて、コード実行を達成しました。 Python3 用 ProxyLogon root@kitploit: usage: sudo python3 proxylogon.py --host=target.com [email protected] sudo...

9.8CVSS8.7AI score0.99996EPSS
SaveExploits67
Rows per page
Query Builder