Lucene search
+L

40443 matches found

Kitploit
Kitploit
added 2026/09/13 12:34 p.m.5 views

CVE-2021-38647-noimages

CVE-2021-38647 AKA "OMIGOD" A Zeek package which detects CVE-2021-38647 AKA OMIGOD exploit attempts. https://corelight.com/blog/detecting-cve-2021-38647-omigod https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38647...

9.8CVSS7.4AI score0.99933EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/13 12:28 p.m.4 views

vaf

vaf Un fuzzer web rápido, simple y con muchas características escrito en nim vaf es un fuzzer web multiplataforma con muchas características. Algunas de sus características incluyen: Enhebrado rápido Fuzzing de cabeceras HTTP Proxying ¡tu propia característica! Y más...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 12:19 p.m.6 views

MS15-034

MS15-034 MS15-034 POC "The current IIS server version is a vulnerable version with a known vulnerability CVE-2015-1635, MS15-034. Exploiting this vulnerability poses a risk of remote code execution or causing a blue screen of death. Test command: wget --header=""Range:...

10CVSS8.2AI score0.99999EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/13 12:19 p.m.3 views

IIS-Raid

IIS-Raid IS Raid es un módulo nativo de IIS que abusa de la extensibilidad de IIS para backdoor el servidor web y realizar acciones personalizadas definidas por un atacante. Documentación Cuando está instalado, IIS-Raid procesa cada solicitud y método, verifica si el encabezado X-Password existe ...

5.9AI score
SaveExploits0
EUVD
EUVD
added 2026/09/13 11:42 a.m.4 views

EUVD-2026-77002

SIPp through 3.7.7 contains a buffer overflow vulnerability in getpeertag function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow the static buffer and crash the...

8.7CVSS
SaveExploits0References5
CVE
CVE
added 2026/09/13 11:42 a.m.9 views

CVE-2026-90778

SIPp through 3.7.7 is vulnerable to a buffer overflow in the get_peer_tag() function when processing SIP To headers containing tag parameters of 2049 bytes or more . Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow a static buffer and crash ...

8.7CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 11:38 a.m.11 views

CVE-2019-5418

CVE-2019-5418 Test case Run : root@kitploit: $ rails s PoC : root@kitploit: Accept: ../../../../../../../../etc/passwd Req 1 - root@kitploit: GET /shitblock HTTP/1.1 Host: REDACTED:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:65.0 Gecko/20100101 Firefox/65.0 Accept:...

7.5CVSS7.2AI score0.98507EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/13 11:32 a.m.101 views

go_parser

Yet Another Golang binary parser for IDAPro English |中文 NOTE : Now the latest master branch is the Python3 version. The old master branch has been changed to branch py2 , and temporarily not maintained. Instructions for Python3 branch This version is developed and tested on macOS/Windows, IDA7.4+...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 11:22 a.m.5 views

BurpSuite_403Bypasser

403Bypasser Una extensión de Burp Suite para saltarse directorios restringidos con código 403. Al usar PassiveScan habilitado por defecto, cada petición 403 será escaneada automáticamente por esta extensión, así que solo agrégala a Burp Suite y disfruta. Payloads: $1: HOSTNAME $2: PATH...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 11:20 a.m.7 views

cve-2022-22963

Spring Cloud Function SpEL - cve-2022-22963 Build root@kitploit: $ git clone https://github.com/twseptian/cve-2022-22963.git $ cd cve-2022-22963 $ docker build . -t spring-spel-0day $ docker run -p 8080:8080 --name spring-spel-0day spring-spel-0day Payload root@kitploit:...

9.8CVSS7.6AI score0.99938EPSS
SaveExploits37
NVD
NVD
added 2026/09/13 11:17 a.m.3 views

CVE-2026-90774

rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply path traversal sequences in the filename header to write files outside the configured upload directory to...

8.7CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 11:16 a.m.6 views

CVE-2026-27944

CVE-2026-27944 - Nginx UI Unauthenticated Backup Download & Decryption https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/PoC-Exploit-red A proof‑of‑concept PoC exploit for CVE‑2026‑27944, a critical vulnerability in Nginx...

9.8CVSS7.5AI score0.22162EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/13 11:14 a.m.8 views

CVE-2026-53625-GLPI-PoC

CVE-2026-53625 - GLPI Privilege Escalation via authtype Manipulation PoC 📌 Overview This repository provides an ethical Proof-of-Concept PoC for CVE-2026-53625 , a High severity privilege escalation vulnerability in GLPI affecting all versions from 0.70 through 11.0.7. A low-privilege user...

5.9AI score
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 11:11 a.m.8 views

CVE-2026-54806

WP Activity Log PHP Object Injection CVE-2026-54806 PoC 📜 Description CVE-2026-54806 is a critical CVSS 9.8 unauthenticated PHP Object Injection vulnerability in the WP Activity Log WordPress plugin wp-security-audit-log by Melapress. An unauthenticated attacker can inject serialized PHP objects...

9.8CVSS5.9AI score0.00699EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 11:00 a.m.6 views

CVE-2017-5638

CVE-2017-5638 This script is intended to validate Apache Struts 2 vulnerability CVE-2017-5638, AKA Struts-Shock. This is a completely harmless as it does not inject any malicious payload, only inject an HTTP header named 'STRUTS2-VALIDATION' in order to be able to validate whether is vulnerable...

10CVSS8.2AI score0.99999EPSS
SaveExploits46
EUVD
EUVD
added 2026/09/13 10:45 a.m.5 views

EUVD-2026-76995

rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply path traversal sequences in the filename header to write files outside the configured upload directory to...

8.7CVSS
SaveExploits0References5
CVE
CVE
added 2026/09/13 10:45 a.m.9 views

CVE-2026-90774

rustypaste before 0.18.1 is vulnerable to a path traversal via the optional custom filename HTTP header. The root cause is that the destination path is validated before the filename header is applied, so an attacker can supply traversal sequences (e.g., ../) in the header to write files outside t...

8.7CVSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/13 10:45 a.m.6 views

CVE-2026-90774 rustypaste before 0.18.1 Path Traversal via filename header

rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply path traversal sequences in the filename header to write files outside the configured upload directory to...

8.7CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 10:44 a.m.4 views

truehunter

Truehunter El objetivo de Truehunter es detectar contenedores cifrados mediante un enfoque rápido y eficiente en memoria, sin dependencias externas para facilitar la portabilidad. Fue diseñado para detectar contenedores de Truecrypt y Veracrypt, aunque puede detectar cualquier archivo cifrado cuy...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 10:44 a.m.37 views

truehunter

Truehunter The goal of Truehunter is to detect encrypted containers using a fast and memory efficient approach without any external dependencies for ease of portability. It was designed to detect Truecrypt and Veracrypt containers, however it may detect any encrypted file with a 'header' not...

5.6AI score
SaveExploits0
Rows per page
Query Builder