Lucene search
+L

761 matches found

Kitploit
Kitploit
added 2026/09/13 5:38 a.m.4 views

cve-2026-16219-croogo-lab

CVE-2026-16219: Croogo FileManager defensive lab This repository documents and safely demonstrates the path-authorization flaw tracked as CVE-2026-16219 in Croogo CMS. It is intended for defenders, maintainers, students, and researchers testing systems they own or are explicitly authorized to...

6.5CVSS6.7AI score0.00425EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:20 a.m.8 views

CVE-2020-10567

POC-CVE-2020-10567 POC de RCE - RESPONSIVE filemanager v.9.14.0. ¡No es la rama principal! ⚠️ Proyecto en GitHub: https://github.com/trippo/ResponsiveFilemanager Requisitos: No se requiere nada, este exploit no necesita autenticación. La aplicación Responsive Filemanager es una herramienta de...

9.8CVSS8.2AI score0.1964EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/13 4:33 a.m.7 views

ResponsiveFileManager-CVE-2022-46604

ResponsiveFileManager-CVE-2022-46604 Responsive FileManager v.9.9.5 vulnerable a CVE-2022-46604 Bypass de extensión de creación de archivos que conduce a RCE. El exploit actual está realizado en Python 3 y explota la vulnerabilidad para subir una webshell que permite la ejecución remota de comand...

8.8CVSS7.8AI score0.08627EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 3:47 a.m.3 views

CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template

CVE-2024-51568 - CyberPanel Command Injection PoC A proof-of-concept environment and Nuclei template for testing CVE-2024-51568, a critical pre-authentication command injection vulnerability in CyberPanel. Vulnerability Details CVE: CVE-2024-51568 Severity: Critical CVSS 9.8 Type:...

10CVSS8.2AI score0.4546EPSS
SaveExploits4
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.178 views

BlogEngine.NET 3.3.7.0 - Local File Inclusion

BlogEngine.NET 3.3.7.0 allows /api/filemanager local file inclusion via the path parameter id: CVE-2019-10717 info: name: BlogEngine.NET 3.3.7.0 - Local File Inclusion author: arafatansari severity: high description: | BlogEngine.NET 3.3.7.0 allows /api/filemanager local file inclusion via the pa...

7.1CVSS7AI score0.05399EPSS
SaveExploits5References5
Kitploit
Kitploit
added 2026/09/12 7:37 p.m.8 views

CVE-2022-44276-PoC

CVE-2022-44276-PoC PoC for Responsive Filemanager . But, we can do a little trick: function getextensionfrommime works based on first several chars of file. So, if we start our payload with several 'a' chars, it can be detected with txt type. How to exploit 1. Intercept upload request with burp...

9.8CVSS8.1AI score0.02302EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/09/12 5:01 p.m.4 views

CVE-2023-44767_RiteCMS-File-Upload--XSS---Filemanager

RiteCMS 3.0 File Upload - XSS Author: Sergio Description: File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a svg file with XSS content. Attack Vectors: AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L POC: We create an svg file with the following content: root@kitploit: When logging...

4.8CVSS5.8AI score0.00455EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/12 4:56 p.m.12 views

CVE-2024-21546

CVE-2024-21546 Python Exploit 🔥 Description This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp , which allows authenticated users to bypass file restrictions and upload malicious files. This can lead to Remote Code Execution RCE when the uploaded payload is...

9.8CVSS8.2AI score0.01275EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 4:17 p.m.49 views

pyradm

🔮 pyradm Remote administration crossplatfrom tool via telegram Coded with ❤️ python3 + aiogram3 https://t.me/whlab Screenshots Disclaimer All information contained in this repository is provided for educational and research purposes only The author is not responsible for any illegal use of this...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 8:06 p.m.9 views

CVE-2024-21546

UniSharp Laravel Filemanager Unauthenticated RCE CVE-2024-21546 This repository contains security assessment tooling, detection templates, and an automated exploit toolkit for identifying and exploiting Unauthenticated Remote Code Execution RCE in applications utilizing the...

9.8CVSS8.2AI score0.01275EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/10 1:10 p.m.8 views

cpanel-cve-41940-detector

Detector de IOC de cPanel para CVE-2026-41940 Detector de IOC de solo lectura para servidores cPanel/WHM que puedan haber sido afectados por CVE-2026-41940 y actividad posterior al compromiso relacionada. El script ayuda a un operador a revisar indicadores de ransomware .sorry, rastros de backdoo...

9.8CVSS8.5AI score0.98527EPSS
SaveExploits75References1
Kitploit
Kitploit
added 2026/09/10 12:53 a.m.10 views

CVE-2026-37637

CVE-2026-37637 Proof of Concept for CVE-2026-37637 - Remote Code Execution in Alexantr filemanager v1.0 via unrestricted file upload in filemanager.php. Overview CVE-2026-37637 is a Remote Code Execution vulnerability affecting Alexantr filemanager v1.0. The vulnerability exists in the...

9.1CVSS5.8AI score0.00664EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/09 5:23 p.m.7 views

CVE-2023-26563-26564-26565

El proveedor ha reportado que todas las vulnerabilidades detalladas han sido corregidas a partir de las versiones lanzadas después de 2024. Ruptura InfoSecurity no ha verificado que estas correcciones sean completas. Consulte los comentarios del proveedor en...

9.8CVSS7.9AI score0.01886EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/09 2:36 a.m.10 views

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion 2018 RCE Este repositorio contiene mi código de exploit para la vulnerabilidad RCE en Adobe ColdFusion 2018. Descripción del Exploit El exploit envía una solicitud POST que contiene una reverse shell JSP a...

10CVSS8.5AI score0.9995EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/08 7:23 p.m.5 views

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE This repository contains my exploit code for the RCE vulnerability in Adobe ColdFusion 2021. Exploit Description The exploit sends a POST request containing a JSP reverse shell to /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. If successfull...

10CVSS8.5AI score0.9995EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/08 5:15 p.m.7 views

FileManager

FileManager Hacked together File Manager for CVE-2022-46689...

7CVSS7.3AI score0.44678EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/08 3:45 p.m.9 views

CVE-2026-39023

CVE-2026-39023 RCE poc - RESPONSIVE filemanager v.9.14.0 last version - not patched Github project : https://github.com/trippo/ResponsiveFilemanager Requirements: Nothing is required, this exploit is unauthenticated. The Responsive Filemanager application is a web-based file management tool used ...

5.9AI score
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/08 1:24 p.m.5 views

CVE-2025-58440

CVE-2025-58440 Remote Code Execution RCE via Polyglot File Attack and Null Byte Injection on Laravel FileManager Overview The unisharp/laravel-filemanager package versions 2.11 are vulnerable to Remote Code Execution RCE due to improper file type validation during file uploads. The vulnerability...

6.3AI score
SaveExploits1References1
Nuclei
Nuclei
added 2026/09/08 9:47 a.m.28 views

CWP (Control Web Panel) < 0.9.8.1205 - Remote Code Execution

CWP Control Web Panel 0.9.8.1205 contains a remote code execution caused by shell metacharacters in the ttotal parameter in filemanager changePerm request, letting unauthenticated attackers execute code remotely, exploit requires knowledge of a valid non-root username. id: CVE-2025-48703 info:...

9CVSS9.8AI score0.99655EPSS
SaveExploits3References2
Kitploit
Kitploit
added 2026/09/06 4:01 p.m.5 views

WordPress-HT-Contact-CVE-2025-7340-RCE

WordPress HT Contact Form Widget | CVE-2025-7340 File Upload Vulnerability Analysis Vulnerability Location Vulnerability Location: ht-contactform/admin/Includes/Services/FileManager.php Key Function: tempfileupload 1. Main Vulnerability Point: tempfileupload function root@kitploit: Line 63 public...

9.8CVSS6.2AI score0.01668EPSS
SaveExploits2
Rows per page
Query Builder