Lucene search
+L

40446 matches found

CVE
CVE
added 2026/09/13 7:15 p.m.6 views

CVE-2026-90580

FlowiseAI Flowise (up to version 3.0.2) contains a server-side request forgery (SSRF) vulnerability in the Evaluations Endpoint . The flaw resides in the axios.post function within packages/server/src/controllers/evaluations/index.ts, where manipulation of the Host or X-Forwarded-Proto header all...

6.5CVSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/13 6:14 p.m.7 views

py-log4shellscanner

PY-Log4ShellScanner A simple, one-file DNSLog server with HTTP endpoint for log retrieval Credit Based on the Log4jScanner by fullhunt.io, modified with multithreading and custom DNS Callback server Features Support for lists of URLs Fuzzing for more than 60 HTTP request headers, with ability to...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 5:53 p.m.7 views

CVE-2024-5737

CVE-2024-5737 AdmirorFrames Joomla! Extension HTML tag: root@kitploit: $height=0x3c; $im = imagecreate$width, $height; $hex=unpack'H',$payload; $chunks=strsplit$hex1, 6; for$i=0; $i count$chunks; $i++ $colorchunks=strsplit$chunks$i, 2;...

6.3CVSS5.9AI score0.01084EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 5:51 p.m.4 views

cisco-ios-xe-implant-detection

Cisco IOS XE implant scanning & network detection Network detection of CVE-2023-20198 exploitation and fingerprinting of post-exploitation of Cisco IOS XE devices. CVE-2023-20198 Suricata network detection The suricata/ folder contains Suricata detection rules for exploitation of CVE-2023-20198...

10CVSS7.8AI score0.99571EPSS
SaveExploits28References3
Kitploit
Kitploit
added 2026/09/13 5:48 p.m.11 views

WEBFANG

WEBFANG v2.0 Disclaimer: Webfang is a CLI developed and engineered as a Reconnaissance toolkit for ethical hackers, blue teamers, and red teamers. It performs passive and active reconnaissance using spidering, Subdomain Scanning, WHOIS, DNS, Shodan, and header fingerprinting. WEBFANG is intended...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:45 p.m.7 views

CVE-2025-29927-PoC

CVE-2025-29927 - Next.js Middleware Authorization Bypass PoC This repository contains a Proof of Concept PoC exploit for CVE-2025-29927 , a critical vulnerability in Next.js that allows attackers to bypass authorization checks by abusing a middleware-specific HTTP header. Overview CVE ID:...

9.1CVSS7.3AI score0.99225EPSS
SaveExploits59
Kitploit
Kitploit
added 2026/09/13 5:41 p.m.4 views

POC-CVE-2025-29927-

Affected Next.js 15.x 15.2.3, 14.x 14.2.25, Next.js 13.x 13.5.9 Self-hosted setups that use Middleware for critical functionality, such as authentication. Guide root@kitploit: npm run dev root@kitploit: curl --compressed -X GET http://localhost:3000/dashboard \ -H "Host: localhost:3000" \ -H...

9.1CVSS7.5AI score0.99225EPSS
SaveExploits59
Kitploit
Kitploit
added 2026/09/13 5:33 p.m.6 views

CVE-2025-29927

CVE-2025-29927 Critical - 9.1 Next.js Middleware Bypass Vulnerability Hands-On of CVE-2025-29927 vulnerability in Next.js application where the internal header x-middleware-subrequest can be used to bypass middleware authentication and restricted access. Explained Next.js use an internal header...

9.1CVSS7.4AI score0.99225EPSS
SaveExploits59
Kitploit
Kitploit
added 2026/09/13 5:31 p.m.4 views

CVE-2017-5638

CVE-2017-5638 Table of Contents 1. Overview 2. Dependencies 3. Usage Overview This project is a prove-of-concept for the Apache Struts vulnerabilty. The goal was to create software that can generate and test random IPs for the vulnerabilty described above. Use this project on your own risk and fo...

10CVSS8.2AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/09/13 5:17 p.m.11 views

CVE-2024-24919-Bulk-Scanner

CVE-2024-24919 Bulk Scanner CVE-2024-24919 Check Point Security Gateway Information Disclosure Script based on and the credit goes to: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/ This Python script scans lisy of URLs for CVE-2024-24919 vulnerability by sending specifi...

8.6CVSS7.8AI score0.99978EPSS
SaveExploits53References1
Kitploit
Kitploit
added 2026/09/13 5:16 p.m.5 views

exploit-CVE-2025-29927

Exploit for CVE-2025-29927 Next.js - Authorization Bypass Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description Next.js is a React framework for building full-stack web application...

9.1CVSS7.4AI score0.99225EPSS
SaveExploits59References2
Kitploit
Kitploit
added 2026/09/13 5:11 p.m.5 views

CVE-2024-38828

CVE-2024-38828 Vulnerability Description The test checks behavior/reaction in Spring Framework with and without the CVE-2024-38828 vulnerability. In ByteArrayHttpMessageConverter, memory is allocated in ByteArrayOutputStream based on the Content-Length request header, which may not match reality ...

5.3CVSS6.8AI score0.00724EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:10 p.m.15 views

cloudfrunt

CloudFrunt CloudFrunt is a tool for identifying misconfigured CloudFront domains. Background CloudFront is a Content Delivery Network CDN provided by Amazon Web Services AWS. CloudFront users create "distributions" that serve content from specific sources an S3 bucket, for example. Each CloudFron...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:09 p.m.5 views

CVE-2024-40324

CVE-2024-40324 Description A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return CR and Line Feed LF characters into input fields, leading to HTTP response splitting and header manipulation. Vulnerability Type CRLF Vendor of Product E-Staff Affected Product Cod...

9.8CVSS5.9AI score0.00691EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:00 p.m.8 views

cve-2018-11714_POC

cve-2018-11714POC An issue was discovered on TP-Link TL-WR840N. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of "Referer: http://192.168.0.1/mainFrame.htm" then no authentication is required for any action. artigo pt-br:...

10CVSS8.1AI score0.68053EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 4:55 p.m.9 views

CVE-2022-24181

CVE-2022-24181 and CVE-2022-26616. both are probably same Open-journal-system-Vulnerability XSS via Host Header injection and Steal Password Reset Token of another user Step to reproduce: 1. Go to this site: https://who's-using-ojs-software.com 2. And capture this request in burp , and send to...

6.1CVSS6.3AI score0.0608EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 4:44 p.m.6 views

CVE-2024-34328

CVE-2024-34328 Open Redirection via Host Header 📝 Overview Vulnerability Title : Open Redirection via Host Header Product : Sielox AnyWare Version Affected : 2.1.2 CVE ID : CVE-2024-34328 Severity : Medium Attack Vector : Remote Impact : Open Redirection / Phishing 🧨 Description An attacker can...

6.3CVSS5.9AI score0.00168EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:32 p.m.8 views

spring-cloud-function-rce

Spring Cloud Function SPEL Expression Injection Vulnerability CVE-2022-22963 Spring framework provides a comprehensive programming and configuration model for modern Java-based enterprise applications on any type of deployment platform. The serverless framework in Spring Cloud, the RoutingFunctio...

9.8CVSS7.6AI score0.99938EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/13 4:26 p.m.6 views

CVE-2021-45105

tejas-nagchandi/CVE-2021-45105 Replicating CVE-2021-45105 API root@kitploit: curl -I localhost:8080/currentDateTime -H 'Time-Zone: GMT' Output: Attack root@kitploit: curl -I localhost:8080/currentDateTime -H 'Time-Zone: $$::-$::-$$::-$' Output: Logs: Reference: https://vulners.com/cve/CVE-2021-45...

5.9CVSS7.5AI score0.99999EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/13 4:25 p.m.7 views

CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS

CVE-2024-54160-Opensearch-HTML-Injection + Stored XSS It was found that the Opensearch plugin called "reports" was vulnerable to HTML-injection in version 2.18.0. The report functionality allowed users to store HTML in the header and footer while creating a new report definition. Below is a quick...

6.4CVSS6.9AI score0.00603EPSS
SaveExploits2
Rows per page
Query Builder