Lucene search
+L

873871 matches found

Kitploit
Kitploit
added 2026/09/09 4:34 a.m.5 views

CVE-2021-44228-Apache-Log4j-Rce

CVE-2021-44228Apache Log4j Remote Code Execution) all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x have other vulnerabilities, we recommend that you update the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: download this project, compile...

10CVSS7.5AI score0.99999EPSS
SaveExploits368References3
Kitploit
Kitploit
added 2026/09/09 4:32 a.m.6 views

CVE-2024-1642470

Windows USB Generic Parent Driver Remote Code Execution Vulnerability CVE-2024-1642470 Overview This repository contains a proof-of-concept PoC exploit code and a detection script for the Windows USB Generic Parent Driver Remote Code Execution Vulnerability, identified as CVE-2024-1642470...

5.9AI score
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 4:31 a.m.6 views

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit 🛡️ Description CVE-2026-3891 is a critical Unauthenticated Arbitrary File Upload vulnerability found in the Pix for WooCommerce WordPress plugin in versions up to and including 1.5.0. The vulnerability exists in the lknpixforwoocommercec6savesetting...

9.8CVSS5.8AI score0.2506EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/09 4:31 a.m.3 views

CVE-2026-48282

CVE-2026-48282-POC CVE-2026-48282 is a path traversal vulnerability in Adobe ColdFusion's Remote Development Service RDS with a CVSS score of 10.0 Critical. It allows unauthenticated attackers to read & write arbitrary files via the /CFIDE/main/ide.cfm endpoint, leading to Remote Code Execution...

10CVSS8.4AI score0.42388EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/09 4:31 a.m.4 views

CVE-2026-23744

CVE-2026-23744 — MCPJam Inspector Unauthenticated RCE Unauthenticated remote code execution PoC for CVE-2026-23744. MCPJam Inspector 1.4.2 and earlier expose functionality through /api/mcp/connect that can launch an attacker-controlled MCP server command without authentication. For authorized...

9.8CVSS6.3AI score0.65845EPSS
SaveExploits41References4
Kitploit
Kitploit
added 2026/09/09 4:31 a.m.9 views

CVE-2020-2034-POC

CVE-2020-2034-POC Determine the Version Running on the Palo Alto Network Firewall for the Global Protect Portal Recently a lot of critical vulnerabilities were announced by Palo Alto Networks here: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date This is a PoC to...

9.3CVSS8AI score0.07152EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 4:30 a.m.7 views

CVE-2018-20580

CVE-2018-20580 A proof of concept for ReadyAPI 2.5.0/2.6.0 Remote Code Execution with interactions. Intro In December 2018 I found a new vulnerability in the ReadyAPI. It allows an attacker to execute a remote code on the local machine putting in danger the ReadyAPI users including developers,...

9.3CVSS7.9AI score0.09786EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/09 4:30 a.m.5 views

CVE-2015-57115

CVE-2015-57115 Mass Checker For CVE-2015-57115 Description The CVE-2015-57115 Checker Script is a Python tool for detecting vulnerabilities related to CVE-2015-57115, which is a path traversal vulnerability in certain PHP applications. The script checks multiple URLs for the presence of this...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 4:29 a.m.8 views

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql Unauthorized SQL injection batch scanning poc Jeecg-Boot is a rapid development platform based on Spring Boot and Jeecg-Boot-Plus. The latest jeecg-boot 3.5.0 has been exposed to multiple SQL injection vulnerabilities. Tool Usage python3 CVE-2023-1454-scan.py -u...

9.8CVSS7AI score0.35825EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/09 4:29 a.m.5 views

CVE-2022-40684

CVE-2022-40684 by 1vere$k For now it's a POC copy for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Coppied from https://github.com/horizon3ai/CVE-2022-40684 Analysis The exploit uses the simple payload: root@kitploit: PUT /api/v2/cmdb/system/admin/admi...

9.8CVSS8.4AI score0.99984EPSS
SaveExploits25References1
Kitploit
Kitploit
added 2026/09/09 4:27 a.m.5 views

CVE-2022-21661

CVE-2022-21661 CVE-2022-21661 docker and poc functions.php needs to replace the original functions.php in the image, and mount it directly in docker-compose.yml poc root@kitploit: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: your-ip:8080 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:132...

8CVSS7.6AI score0.97795EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/09 4:27 a.m.8 views

CVE-2026-2005

CVE-2026-2005 - PostgreSQL pgcrypto Heap Overflow Exploit PoC exploit for a heap-based buffer overflow in the PostgreSQL pgcrypto extension's PGP session key parsing, leading to arbitrary memory read/write and privilege escalation to superuser. For full technical details, see the Zeroday Cloud...

8.8CVSS7.8AI score0.01274EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/09 4:27 a.m.4 views

cve-2022-31705

CVE-2022-31705 Intro https://www.vmware.com/content/vmware/vmware-published-sites/us/security/advisories/VMSA-2022-0033.html.html Test on windows vmware workstation 16.2.0, with guest os ubuntu server 22 At leat one usb device is be attached to guest machine change the 'qh-field4' in the ehci.c...

8.2CVSS7.9AI score0.01564EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2026/09/09 4:27 a.m.1 views

N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a maximum-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities KEV catalog, requiring Federal Civilian Executive Branch FCEB agencies to apply the fixes by September 11, 2026. The...

10CVSS0.00411EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 4:26 a.m.9 views

CVE-2023-6019

CVE-2023-6019 - Anyscale Ray Dashboard Unauthenticated RCE PoC exploit for CVE-2023-6019 — Remote Code Execution via unauthenticated Ray Dashboard Jobs API. Made by oguiii Description Anyscale Ray is an open-source framework for distributed ML/AI workloads. Versions prior to 2.6.4 expose a Jobs...

9.8CVSS7.9AI score0.7463EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/09 4:25 a.m.6 views

nextjs-CVE-2025-29927-hunter

About A simple Python tool that automates Shodan searches and filters target IPs/domains to identify assets potentially vulnerable to CVE-2025-29927 in Next.js deployments. Usage Extract both IPs and domains root@kitploit: python3 nextjs-CVE-2025-29927-hunter.py -t target.com Only extract domains...

9.1CVSS7.3AI score0.99225EPSS
SaveExploits59References2
Kitploit
Kitploit
added 2026/09/09 4:25 a.m.5 views

CVE-2014-8731-PoC

CVE-2014-8731-PoC - PHPMemcachedAdmin Remote Code Execution I do not host in Github anymore, but on my own Git hosting instance. Go here to see code: https://git.sbani.net/sbani/CVE-2014-8731-PoC...

10CVSS8.1AI score0.11763EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 4:25 a.m.8 views

Log4jShell-Scan

Overview log4j2 RCE vulnerability CVE-2021-44228 intranet scanner, can be used for vulnerability scanning under the condition of no internet access, helping enterprises quickly discover Log4Shell vulnerabilities. Modified from: https://github.com/fullhunt/log4j-scan JNDIMonitor from:...

10CVSS7.3AI score0.99999EPSS
SaveExploits368References2
Kitploit
Kitploit
added 2026/09/09 4:23 a.m.5 views

CVE-2023-23752

CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023–23752 This readme file provides information about the Joomla Unauthorized Access Vulnerability CVE-2023–23752 and how to detect. This vulnerability allows an attacker to bypass the Joomla access control system and gain unauthorized...

5.3CVSS7AI score0.99827EPSS
SaveExploits43
Kitploit
Kitploit
added 2026/09/09 4:22 a.m.3 views

CVE-2023-20198

CVE-2023-20198 CVE-2023-20198 PoC ! Description perform actions on a target web server. The script demonstrates how to create a local user account, install an implant, restart the web server, check for the presence of the implant, and finally, clean up by deleting the created user account...

10CVSS7.9AI score0.99571EPSS
SaveExploits27
Rows per page
Query Builder