Lucene search
+L

21119 matches found

Kitploit
Kitploit
added 2026/09/10 2:48 p.m.9 views

CVE-2024-2053

LFI to RCE Exploit via Log Poisoning Python3 exploit for CVE-2024-2053 Artica Proxy 📝 Description This Python3 script exploits Local File Inclusion LFI vulnerabilities to achieve Remote Code Execution RCE through log poisoning techniques. Specifically designed for Artica Proxy CVE-2024-2053 but...

7.5CVSS7.4AI score0.44579EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/10 2:01 p.m.8 views

rwsploit

Oracle Reports rwservlet Scanner ⚠️ For authorized use only. Only run this tool against systems you own or have explicit written permission to test. Unauthorized use is illegal. A focused exploitation scanner for Oracle Reports Server rwservlet targeting CVE-2012-3152 and CVE-2012-3153 — affecting...

9.1CVSS7.4AI score0.98793EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/10 1:57 p.m.6 views

CVE-2022-29597

CVE-2022-29597: Local File Inclusion in RSS v500 The RRS v500 application by Solutions Atlantic is vulnerable to a Local File Inclusion LFI vulnerability. Any authenticated user has the ability to reference internal system files within requests made to the...

6.5CVSS6.7AI score0.01927EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 1:54 p.m.6 views

CVE-2025-2294

CVE-2025-4403 Exploit Details Published : March 27, 2025 Updated : March 28, 2025 Severity : Critical CVSS Score: 9.8 CWE : CWE-22: CWE-22 Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' Affected Versions : All versions from n/a through 2.5.1 Researcher :...

9.8CVSS8.5AI score0.7836EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/10 1:10 p.m.5 views

CVE-2021-39433

CVE-2021-39433 A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-use...

7.5CVSS7.3AI score0.08687EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 12:44 p.m.3 views

Oracle-WebLogic-CVE-2022-21371

Oracle-WebLogic-CVE-2022-21371 Oracle WebLogic Server Local File Inclusion : CVE-2022-21371 Affected Version: Version: 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0 Description: The Oracle Fusion Middleware's Oracle WebLogic Server product Web Container component is vulnerable to local file...

7.5CVSS7.2AI score0.92649EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/10 12:41 p.m.6 views

Lfi-Space

🪐 LFI-SPACE TOOL 🪐 Written by TMRSWRR Version 1.0.0 All in one tools for LFI VULN FINDER -LFI DORK FINDER Instagram: TMRSWRR 📷 Screenshots 📷 👇 💫 How to use 💫 👇...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:33 p.m.6 views

cve-lfi-lab

🧠 CVE Lab: Tier 1 SOC Analyst Simulation CVE-2025-39507 | Local File Inclusion in WordPress Nasa Core Plugin 📝 Scenario: A Day in the SOC It’s a regular Monday. I’m logged into the SOC dashboard, reviewing alerts like usual. One comes in that catches my eye: ALERT: Possible Local File Inclusion L...

8.8CVSS8.1AI score0.00789EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:28 p.m.6 views

CVE-2025-66955

CVE-2025-66955 Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls. CVSS Vectors CVSS 3.1: 7.7,...

6.5CVSS5.9AI score0.0027EPSS
SaveExploits0
CVE
CVE
added 2026/09/10 12:15 p.m.9 views

CVE-2026-9166

CVE-2026-9166 is a Path Traversal vulnerability (local file inclusion) in GIS Informatics GisLab Laboratory Management System , affecting versions 1.4.03 through 1.5 (exclusive) . The flaw is classified as Improper Limitation of a Pathname to a Restricted Directory . The CVSS 3.1 score is 7.5 (HI...

7.5CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 10:19 a.m.8 views

Fonoster-LFI-PoC

CVE-2024-43035 - Fonoster LFI Proof of Concept This repository contains a Proof of Concept PoC script demonstrating a Local File Inclusion vulnerability in Fonoster. This tool is for educational and authorized testing purposes only. Usage Read Local File To retrieve a local file from the server:...

5.8CVSS8.1AI score0.02362EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 10:13 a.m.5 views

CVE-2020-25068

CVE-2020-25068 Python exploit for Conacwin v3.7.1.2. Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal files on the server via an http:IP:PORT/../../path/filetodisclose Directory Traversal...

7.5CVSS7.3AI score0.03899EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 9:15 a.m.4 views

LFiFreak

LFI Freak Features Works with Windows, Linux and OS X Includes bind and reverse shell for both Windows and Linux Written in Python 2.7 What is this all about? A unique tool for exploiting local file inclusions using PHP Input, PHP Filter and Data URI methods. Dependencies BeautifulSoup Disclaimer...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 9:08 a.m.297 views

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

6.5AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/10 6:28 a.m.7 views

LFI-aiohttp-CVE-2024-23334-PoC

LFI-aiohttp-CVE-2024-23334-PoC A Bash script to automate Local File Inclusion LFI attacks on vulnerable aiohttp servers, specifically targeting CVE-2024-23334. This exploit allows for unauthorized access to arbitrary files on systems running affected versions of aiohttp with improperly configured...

7.5CVSS6.8AI score0.76875EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/10 5:36 a.m.10 views

cve-2022-44268

CVE-2022-44268 ImageMagick is a free and open-source cross-platform software suite for displaying, converting, and editing raster image and vector image files. It can read and write over 200 image file formats. ImageMagick is licensed under the Apache License 2.0. It is available in the form of...

6.5CVSS7.5AI score0.89855EPSS
SaveExploits31
Kitploit
Kitploit
added 2026/09/10 5:30 a.m.6 views

CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC

Apache CXF XOP Include LFI CVE-2022-46364 Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2022-46364 , a Local File Inclusion LFI vulnerability in Apache CXF. The vulnerability arises due to improper handling of XOP XML-binary Optimized Packaging Include elements in SOAP...

9.8CVSS6.8AI score0.02371EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/10 5:10 a.m.7 views

apache_2.4.50

Apache HTTP Server 2.4.50 LFI & RCE A python3 script for the CVE-2021-42013 - Apache HTTP Server 2.4.50 LFI & RCE. RCE requires cgi-bin to be enabled Getting Started Executing program LFI root@kitploit: python3 apache2.4.50.py -t http://apache.hack/ -lfi /etc/passwd RCE root@kitploit: python3...

9.8CVSS8.2AI score0.99964EPSS
SaveExploits190
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.93 views

WordPress WPvivid Backup <0.9.76 - Local File Inclusion

WordPress WPvivid Backup version 0.9.76 is vulnerable to local file inclusion because the plugin does not sanitize and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server. id: CVE-2022-2863 info: name: WordPress...

4.9CVSS5.6AI score0.20668EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.68 views

IceWarp Mail Server <=10.4.4 - Local File Inclusion

IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal. id: CVE-2019-12593 info: name: IceWarp Mail Server =10.4.4 - Local File Inclusion author: pikpikcu severity: high description: | IceWarp Ma...

7.5CVSS7.2AI score0.40965EPSS
SaveExploits5References5
Rows per page
Query Builder