Lucene search
+L

16609 matches found

Kitploit
Kitploit
•added 2026/09/24 4:52 p.m.•11 views

CVE-2019-11043

CVE-2019–11043: PHP-FPM Nginx Remote Code Execution Vulnerability Vulnerability Description and Impact CVE-2019–11043 is a remote code execution RCE vulnerability. It affects PHP-FPM, which is a FastCGI Process Manager that is commonly used with Nginx web servers. The flaw arises from inadequate...

9.8CVSS8.1AI score0.9978EPSS
SaveExploits57
Kitploit
Kitploit
•added 2026/09/24 11:11 a.m.•60 views

yeti

Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...

5.7AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 10:48 a.m.•15 views

jira-mobile-ssrf-exploit

CVE-2022-26135 - Full-Read Server Side Request Forgery in Mobile Plugin for Jira Data Center and Server About Assetnote Assetnote automatically maps your external assets and monitors them for changes and security issues to help prevent serious breaches. This research was performed by Assetnote's...

6.5CVSS7.1AI score0.71616EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 10:24 a.m.•18 views

porterminal

Hand a computer to an agent, full control, and watch it. One command, one URL. Also a slick terminal for your own phone. 1. uvx ptn 2. Hand the URL to an AI agent, or scan the QR yourself 3. Watch it work in any browser, and take over anytime !WARNING That complete URL is full access to this...

6.5AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/24 10:17 a.m.•18 views

PhoneSploit-Pro

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Installing dependencies Getting started Device setup...

6.5AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/24 9:46 a.m.•12 views

CVE-2024-21545-PoC

CVE-2024-21545-PoC Proxmox VE Arbitrary File Read - Full System Compromise . Not Testeted yet... will test them this week...

8.2CVSS7.8AI score0.00363EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 9:22 a.m.•39 views

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

6AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/24 8:36 a.m.•11 views

CVE-2024-45440

CVE-2024-45440 Drupal CVE-2024-45440 core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist. 使用 root@kitploit: python CVE-2024-45440.py 靶场部署 settings.php将通过挂载的方式替换掉容器中的settings.php...

5.3CVSS6.3AI score0.09269EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/24 8:14 a.m.•10 views

433Screen-SignalHacker

433Screen-SignalHacker Estado del proyecto: Este repositorio es un prototipo más antiguo de hacking de señales de 433 MHz. Fue sustituido por EMWaver , la plataforma de exploración de hardware de Continual MI, que a su vez fue retirada y archivada en julio de 2026. La historia completa de EMWaver...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/24 8:00 a.m.•11 views

CVE-2017-3000

CVE-2017-3000 A full exploit of CVE-2017-3000 on Flash Player Constant Blinding PRNG Insert WANG and wang into dynamically generated code heap in the end...

6.5CVSS7.7AI score0.0836EPSS
SaveExploits1
NVD
NVD
•added 2026/09/24 6:17 a.m.•5 views

CVE-2026-74991

The WPForms WordPress plugin before 2.0.2 does not verify that a Stripe payment object supplied during a public form submission belongs to it before acting on it, allowing unauthenticated users to trigger a full refund and an immediate subscription cancellation against payments created by other...

6.8CVSS0.00136EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/24 6:03 a.m.•11 views

AgentWard

AgentWard · 玄甲OS AgentWard 玄甲 is a full-stack security operating system purpose-built for trustworthy, scalable AI agent deployment, with native code adaptation to OpenClaw. AgentWard unifies agent onboarding, secure reasoning, and trusted execution in one cohesive security architecture, with...

6.2AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 6:00 a.m.•3 views

EUVD-2026-85794

The WPForms WordPress plugin before 2.0.2 does not verify that a Stripe payment object supplied during a public form submission belongs to it before acting on it, allowing unauthenticated users to trigger a full refund and an immediate subscription cancellation against payments created by other...

6.8CVSS5.6AI score0.00136EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/24 5:50 a.m.•728 views

Malcolm

Malcolm Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind: Easy to use – Malcolm accepts network traffic data in the form of full packet capture PCAP files, Zeek logs, and Suricata alerts. These artifacts can be uploaded via a simple browser-based...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 4:46 a.m.•88 views

fluffi

FLUFFI FLUFFI - A distributed evolutionary binary fuzzer for pentesters. About the project High level overview Beginner Tutorial Getting started Usage HOWTOs Technical Details Contributing to FLUFFI LICENSE Bugs found So far, FLUFFI was almost exclusively used on SIEMENS products and solutions...

5.3CVSS6.8AI score0.04082EPSS
SaveExploits0References9
Kitploit
Kitploit
•added 2026/09/24 4:29 a.m.•13 views

CVE-2018-18387

CVE-2018-18387 playSMS = 1.4.2 - Privilege escalation TMHC TEAM found a vulnerability that lead to a priviledge escalation through playSMS/web/init.php that can lead to a complete system compromise. The attacker need to get access on the box where playSMS is installed and be able to edit playSMS...

9CVSS7.9AI score0.01795EPSS
SaveExploits0References1
Nuclei
Nuclei
•added 2026/09/24 2:06 a.m.•125 views

Drupal 11.x-dev - Full Path Disclosure

core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist. id: CVE-2024-45440 info: name: Drupal 11.x-dev - Full Path Disclosure author: DhiyaneshDK severity: medium description: |...

5.3CVSS6AI score0.09269EPSS
SaveExploits4
Nuclei
Nuclei
•added 2026/09/24 2:06 a.m.•30 views

KevinLAB BEMS (Building Energy Management System) - Backdoor Account

KevinLAB BEMS has an undocumented backdoor account, and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution through the RMI. An attacker could exploit this vulnerability by logging in using the backdoor account with highes...

9CVSS7.1AI score0.0655EPSS
SaveExploits2References2
Nuclei
Nuclei
•added 2026/09/24 2:06 a.m.•52 views

GiveWP Donation Plugin <= 3.16.1 - Unauthenticated PHP Object Injection

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.1. This is due to insufficient input validation on user-supplied data. An unauthenticated attacker can inject a serialized PHP object, which...

9.8CVSS8.5AI score0.2872EPSS
SaveExploits3References4
Nuclei
Nuclei
•added 2026/09/24 2:06 a.m.•55 views

WP Popups - Information Disclosure

WP Popups - WordPress Popup builder plugin for WordPress contains a full path disclosure caused by using mobiledetect without access restrictions, letting unauthenticated attackers retrieve server paths, exploit requires no specific conditions. id: CVE-2024-6555 info: name: WP Popups - Informatio...

5.3CVSS5.8AI score0.00919EPSS
SaveExploits0References4
Rows per page
Query Builder