Lucene search
+L

21108 matches found

Kitploit
Kitploit
added 2026/09/09 7:10 a.m.4 views

PoC-RCE-Rukovoditel

PoC-RCE-Rukovoditel Prueba de concepto para CVE-2020-11819 y CVE-2020-15946. Probado en Rukovoditel 2.4.x, 2.5.x y 2.6.1 Descripción: Este exploit tiene dos modos de ejecución, usando la vulnerabilidad de fijación de sesión CVE-2020-15946 o usando las credenciales de acceso de cualquier cuenta ba...

9.8CVSS8.2AI score0.26778EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/09 6:43 a.m.8 views

cve-2021-45043

cve-2021-45043 HD-Network Real-time Monitoring System 2.0 permite la navegación de directorios ../ para leer /etc/shadow a través del parámetro sLanguage de /language/lang. publicación inicial https://cyberguy0xd1.medium.com/my-cve-2021-45043-lfi-write-up-441dad30dd7f explotación mediante burp GE...

7.5CVSS7.4AI score0.33133EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/09 5:35 a.m.4 views

CVE-2025-60574

Vulnerability Discoverers & Exploit Authors Stefano Andreatta & Jacopo Candido Augelli CVE-2025-60574 Vulnerability Description A Local File Inclusion LFI vulnerability has been identified in tQuadra CMS 4.2.1117. The issue exists in the "/styles/" path, which fails to properly sanitize...

7.5CVSS6AI score0.00455EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 4:51 a.m.8 views

CVE-2025-49132-Mods

CVE-2025-49132 - RCE Simple 📝 Overview This repository contains a specialized exploit for CVE-2025-49132, a critical unauthenticated Remote Code Execution RCE vulnerability in the Pterodactyl Panel prior to v1.11.11. The vulnerability exists in the /locales/locale.json endpoint. By manipulating t...

10CVSS5.9AI score0.53389EPSS
SaveExploits30
Kitploit
Kitploit
added 2026/09/09 4:49 a.m.9 views

CVE-2023-49031

LFI Tikit eMarketing CVE-2023-49031 Discovery On November 2023, a novel local file inclusion vulnerability was identified in the “eMarketing” platform developed by Tikit now Advanced during a client engagement. This issue was resolved with Advanced on February 2024 Affected Versions This...

5.1CVSS8.2AI score0.00753EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 4:44 a.m.7 views

CVE-2021-41277

CVE-2021-41277 Usage 1. show help info root@kitploit: /CVE-2021-41277 ❯ go run main.go -h Usage of main: -f string File containing list of targets to verfity -o string File to write output to optional -s Show VulnInfo output -t int Number of concurrent goroutines for resolving default 10 -u strin...

10CVSS6.9AI score0.97178EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/09 4:37 a.m.6 views

CVE-2024-4040-SSTI-LFI-PoC

CVE-2024-4040 SSTI & LFI PoC - Exploitation | CrushFTP This is a proof of concept for a Server Side Template Injection SSTI & Local File Inclusion LFI vulnerability in CrushFTP. Features Taking leverage of Critical Severity Vulnerabilities in CrushFTP servers through Server Side Template Injectio...

10CVSS7.5AI score0.99539EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/09 4:24 a.m.6 views

OA-tongda-RCE

OA-tongda-RCE | Office Anywhere Web-based Intelligent Office System Backend Getshell No Authentication Required 1. Arbitrary file upload vulnerability /ispirit/im/upload.php 2. Local file inclusion vulnerability /ispirit/interface/gateway.php Command Execution Bypass: root@kitploit: exec"cmd /c...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 4:16 a.m.7 views

apache_2.4.50

Apache HTTP Server 2.4.50 LFI & RCE Un script python3 para el CVE-2021-42013 - Apache HTTP Server 2.4.50 LFI y RCE. RCE requiere que cgi-bin esté habilitado. Comenzando Ejecutando el programa LFI root@kitploit: python3 apache2.4.50.py -t http://apache.hack/ -lfi /etc/passwd RCE root@kitploit:...

9.8CVSS8.2AI score0.99964EPSS
SaveExploits190
Kitploit
Kitploit
added 2026/09/09 4:08 a.m.8 views

rwsploit

Escáner Oracle Reports rwservlet ⚠️ Solo para uso autorizado. Ejecute esta herramienta únicamente contra sistemas que posea o para los que tenga permiso explícito por escrito. El uso no autorizado es ilegal. Un escáner de explotación enfocado para Oracle Reports Server rwservlet que apunta a...

9.1CVSS7.4AI score0.98793EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/09 3:51 a.m.6 views

CVE-2025-11371

CVE-2025-11371 In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet...

7.5CVSS6.6AI score0.92094EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/09 3:29 a.m.6 views

cve-2021-41773-lab

CVE-2021-41773 — Minimal FastAPI Lab A small, self-contained FastAPI lab demonstrating how decoding user input before validating filesystem boundaries can lead to directory traversal and local file inclusion LFI, modeled after the Apache HTTP Server issues CVE-2021-41773. Features Minimal,...

9.8CVSS8.1AI score0.99992EPSS
SaveExploits164References3
Kitploit
Kitploit
added 2026/09/09 3:26 a.m.4 views

CVE-2025-1661

CVE-2025-1661 - Unauthenticated Local File Inclusion LFI in HUSKY – Products Filter Professional for WooCommerce Description The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion LFI in all versions up to and including 1.3.6.5 via the...

9.8CVSS8.1AI score0.56382EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 3:06 a.m.8 views

f5scan

f5scan Escáner F5 BIG IP para CVE-2020-5902 por bt0 Más información sobre la vulnerabilidad: https://support.f5.com/csp/article/K52145254?sf235665517=1 Requisitos: python3+ shodan colorama urlopen pyOpenSSL $ pip3 install -r requirements Opciones root@kitploit: -h, --help muestra este mensaje de...

10CVSS7.6AI score0.99999EPSS
SaveExploits62
Kitploit
Kitploit
added 2026/09/09 3:05 a.m.10 views

cve-2022-44268

CVE-2022-44268 ImageMagick es un paquete de software multiplataforma gratuito y de código abierto para visualizar, convertir y editar imágenes rasterizadas y vectoriales. Puede leer y escribir más de 200 formatos de archivo de imagen. ImageMagick está bajo la licencia Apache 2.0. Está disponible...

6.5CVSS7.5AI score0.89855EPSS
SaveExploits31
Kitploit
Kitploit
added 2026/09/09 2:52 a.m.4 views

CVE-2023-34598

Gibbon v25.0.0 - Local File Inclusion - CVE-2023-34598 Gibbon v25.0.0 is vulnerable to a Local File Inclusion LFI vulnerability where it's possible to include the content of several files present in the installation folder in the server's response. Proof of Concept In order to exploit the...

9.8CVSS8.1AI score0.47238EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/09 2:31 a.m.5 views

CVE-2019-3396

CVE-2019-3396 Confluence Widget Connector path traversal CVE-2019-3396 RCE POC root@kitploit: POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: x.x.x.x Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 X11; Linux x8664; rv:60.0 Gecko/20100101 Firefox/60.0...

10CVSS8.4AI score0.99913EPSS
SaveExploits20
CVE
CVE
added 2026/09/09 2:27 a.m.5 views

CVE-2026-15406

The Eventin – Event Calendar, Event Registration, Tickets & Booking AI Powered plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.1.22 via the 'eventlayout' parameter parameter. This makes it possible for authenticated attackers, with custom-level...

7.5CVSS
SaveExploits0References10
CVE
CVE
added 2026/09/09 2:27 a.m.5 views

CVE-2026-15667

The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is affected by a Local File Inclusion vulnerability in all versions up to and including 4.1.22 , exploitable via the event_layout parameter. Because the etn_manage_event capability is assigned to...

7.5CVSS
SaveExploits0References7
EUVD
EUVD
added 2026/09/09 2:27 a.m.3 views

EUVD-2026-74542

The Eventin – Event Calendar, Event Registration, Tickets & Booking AI Powered plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.1.22 via the 'eventlayout' parameter parameter. This makes it possible for authenticated attackers, with...

7.5CVSS6.3AI score
SaveExploits0References7
Rows per page
Query Builder