Lucene search
+L

21119 matches found

Kitploit
Kitploit
β€’added 2026/09/10 6:57 p.m.β€’9 views

HTB-Pterodactyl-Writeup

Penetration Test Report β€” HackTheBox: Pterodactyl Date: April 8, 2026 Target: Pterodactyl HackTheBox Difficulty: Medium OS: Linux openSUSE Leap 15.6 Tester: V0idW1re Executive Summary The Pterodactyl machine on HackTheBox presented a realistic attack scenario involving a misconfigured web...

10CVSS6AI score0.53389EPSS
SaveExploits49
Kitploit
Kitploit
β€’added 2026/09/10 6:55 p.m.β€’7 views

gitlab-12.9.0-file-read

The warn For demonstration purpose and ethical hacking only. The what A wanted to be better script than what can be found on exploit-db about the authenticated arbitrary read file on GitLab v12.9.0 CVE-2020-10977 The how 1. Meet the dependency you probably already have the rest pip3 install...

5.5CVSS6.1AI score0.42741EPSS
SaveExploits10References1
Kitploit
Kitploit
β€’added 2026/09/10 5:45 p.m.β€’8 views

-Grafana-LFI-CVE-2021-43798

πŸš€ Grafana LFI Exploit CVE-2021-43798 Automation script in Python 3 to exploit the Local File Inclusion LFI vulnerability in Grafana versions 8.0.0 to 8.3.0. This exploit allows directory traversal to read sensitive operating system files without authentication. ✨ Features Python 3.10+ compatibili...

7.5CVSS8AI score0.88503EPSS
SaveExploits45
Kitploit
Kitploit
β€’added 2026/09/10 5:20 p.m.β€’7 views

CVE-2025-49132

CVE-2025-49132 - Pterodactyl Panel Unauthenticated RCE root@kitploit: / |\ \ / /| | | / | | | | || | / | || / | | \ V / | || / / | |/ / | | | | , /| || \ / / | / || /| //||/ || // ||/ /| Exploit for Pterodactyl Panel ≀ 1.11.10 - unauthenticated LFI to RCE. The Vulnerability The...

10CVSS6AI score0.53389EPSS
SaveExploits30
Kitploit
Kitploit
β€’added 2026/09/10 4:44 p.m.β€’5 views

CVE-2024-24919

CVE-2024-24919 This project aims to create an automation to better study CVE-2024-24919. api.py : Collects possible vulnerable IPs. CVE-2024-24919.py : Performs brute force given the IP file and the directories file. worldListLFI.txt : List of Linux directories. Usage Clone this repository on you...

8.6CVSS7.9AI score0.99978EPSS
SaveExploits53
Kitploit
Kitploit
β€’added 2026/09/10 4:25 p.m.β€’6 views

CVE-2021-41277

CVE-2021-41277 Metabase GeoJSON map local file inclusion Version: x.40.0-x.40.4 Usage : root@kitploit: chmod -x CVE-2021-41277.sh ./CVE-2021-41277.sh http://ip:port/ /etc/passwd References https://vulners.com/cve/CVE-2021-41277...

10CVSS7.1AI score0.97178EPSS
SaveExploits5
Kitploit
Kitploit
β€’added 2026/09/10 4:01 p.m.β€’9 views

CVE-2017-12637_SAP-NetWeaver-URL-Traversal

CVE-2017-12637SAP-NetWeaver-URL-Traversal Proof-of-concept LFI Scanner: Automated detection of /etc/passwd exposures via directory traversal and regex matching. root@kitploit: LFI Scanner A lightweight Python proof-of-concept to scan target hosts for Local File Inclusion LFI vulnerabilities by...

7.5CVSS8.1AI score0.95111EPSS
SaveExploits3References1
Kitploit
Kitploit
β€’added 2026/09/10 3:19 p.m.β€’7 views

CVE-2018-19410-POC

CVE-2018-19410-POC Proof of concept for the vulnerability CVE-2018-19410 Details PRTG Network Monitor Version: 18.2.39.1661 and earlier Severity level: High Impact: Authentication Bypass, Improper Authorization, Local File Inclusion Access Vector: Remote The vulnerability permits remote and...

9.8CVSS8.3AI score0.97939EPSS
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/10 3:16 p.m.β€’9 views

CVE-2025-49132-Mods

CVE-2025-49132 - RCE Simple πŸ“ Overview This repository contains a specialized exploit for CVE-2025-49132, a critical unauthenticated Remote Code Execution RCE vulnerability in the Pterodactyl Panel prior to v1.11.11. The vulnerability exists in the /locales/locale.json endpoint. By manipulating t...

10CVSS5.9AI score0.53389EPSS
SaveExploits30
Kitploit
Kitploit
β€’added 2026/09/10 3:09 p.m.β€’6 views

CVE-2025-55853

CVE-2025-55853 - Local File Inclusion via Server Side Request Forgery SoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery SSRF. About This PoC for CVE-2025-55853 demonstrates Server Side Request Forgery in the webPDF tool webPDF. used to convert files to PDF. The PDF...

9.1CVSS6AI score0.00373EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/10 2:48 p.m.β€’9 views

CVE-2024-2053

LFI to RCE Exploit via Log Poisoning Python3 exploit for CVE-2024-2053 Artica Proxy πŸ“ Description This Python3 script exploits Local File Inclusion LFI vulnerabilities to achieve Remote Code Execution RCE through log poisoning techniques. Specifically designed for Artica Proxy CVE-2024-2053 but...

7.5CVSS7.4AI score0.44579EPSS
SaveExploits4
Kitploit
Kitploit
β€’added 2026/09/10 2:01 p.m.β€’8 views

rwsploit

Oracle Reports rwservlet Scanner ⚠️ For authorized use only. Only run this tool against systems you own or have explicit written permission to test. Unauthorized use is illegal. A focused exploitation scanner for Oracle Reports Server rwservlet targeting CVE-2012-3152 and CVE-2012-3153 β€” affecting...

9.1CVSS7.4AI score0.98793EPSS
SaveExploits11
Kitploit
Kitploit
β€’added 2026/09/10 1:57 p.m.β€’6 views

CVE-2022-29597

CVE-2022-29597: Local File Inclusion in RSS v500 The RRS v500 application by Solutions Atlantic is vulnerable to a Local File Inclusion LFI vulnerability. Any authenticated user has the ability to reference internal system files within requests made to the...

6.5CVSS6.7AI score0.01927EPSS
SaveExploits2
Kitploit
Kitploit
β€’added 2026/09/10 1:54 p.m.β€’6 views

CVE-2025-2294

CVE-2025-4403 Exploit Details Published : March 27, 2025 Updated : March 28, 2025 Severity : Critical CVSS Score: 9.8 CWE : CWE-22: CWE-22 Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' Affected Versions : All versions from n/a through 2.5.1 Researcher :...

9.8CVSS8.5AI score0.7836EPSS
SaveExploits14
Kitploit
Kitploit
β€’added 2026/09/10 1:18 p.m.β€’8 views

Eaton-Intelligent-Power-Manager-Local-File-Inclusion

Eaton-Intelligent-Power-Manager-Local-File-Inclusion Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file, it can lead to sensitive information disclosure, denial of service and code execution. CVE-2018-12031 To exploit vulnerability, someone could use...

9.8CVSS8.3AI score0.17313EPSS
SaveExploits2
Kitploit
Kitploit
β€’added 2026/09/10 1:12 p.m.β€’3 views

CVE-2025-2294

Kubio Page Builder LFI Exploit CVE-2025-2294 Local File Inclusion LFI exploit for Kubio Page Builder WordPress plugin versions ≀ 2.5.1. πŸ“Œ Description This tool exploits an unauthenticated LFI vulnerability in Kubio Page Builder plugin CVE-2025-2294, allowing attackers to read sensitive files on...

9.8CVSS8.4AI score0.7836EPSS
SaveExploits12
Kitploit
Kitploit
β€’added 2026/09/10 1:10 p.m.β€’5 views

CVE-2021-39433

CVE-2021-39433 A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-use...

7.5CVSS7.3AI score0.08687EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/10 12:44 p.m.β€’3 views

Oracle-WebLogic-CVE-2022-21371

Oracle-WebLogic-CVE-2022-21371 Oracle WebLogic Server Local File Inclusion : CVE-2022-21371 Affected Version: Version: 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0 Description: The Oracle Fusion Middleware's Oracle WebLogic Server product Web Container component is vulnerable to local file...

7.5CVSS7.2AI score0.92649EPSS
SaveExploits6
Kitploit
Kitploit
β€’added 2026/09/10 12:41 p.m.β€’6 views

Lfi-Space

πŸͺ LFI-SPACE TOOL πŸͺ Written by TMRSWRR Version 1.0.0 All in one tools for LFI VULN FINDER -LFI DORK FINDER Instagram: TMRSWRR πŸ“· Screenshots πŸ“· πŸ‘‡ πŸ’« How to use πŸ’« πŸ‘‡...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/10 12:33 p.m.β€’6 views

cve-lfi-lab

🧠 CVE Lab: Tier 1 SOC Analyst Simulation CVE-2025-39507 | Local File Inclusion in WordPress Nasa Core Plugin πŸ“ Scenario: A Day in the SOC It’s a regular Monday. I’m logged into the SOC dashboard, reviewing alerts like usual. One comes in that catches my eye: ALERT: Possible Local File Inclusion L...

8.8CVSS8.1AI score0.00789EPSS
SaveExploits0
Rows per page
Query Builder