Lucene search
+L

153653 matches found

Kitploit
Kitploit
added 2026/09/08 10:11 p.m.9 views

CVE-2023-23752

CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023-23752 Vulnerability Description Joomla is an open-source content management system CMS, written in PHP, supporting multiple database systems such as MySQL, MSSQL, and PostgreSQL. Improper access restrictions lead to unauthorized...

5.3CVSS7AI score0.99827EPSS
SaveExploits43
Kitploit
Kitploit
added 2026/09/08 10:10 p.m.5 views

CVE-2023-49982

CVE-2023-49982 School Fees Management System v1.0 - Incorrect Access Control - Privilege Escalation Description : Broken access control in School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts...

8.8CVSS5.9AI score0.00842EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 9:57 p.m.3 views

Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS

CVE-2021-46080 Exploit Title: Vehicle Service Management System - 'Multiple' Cross-Site Request Forgery CSRF Leads to Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIUM References:...

4.8CVSS5.7AI score0.0058EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 9:56 p.m.6 views

CVE-2025-65881

CVE-2025-65881 The Project Zoo Management System v1.00 is vulnerable to Cross-site scripting XSS on /zms/classes/Login.php?f=login due to: 1. Invalid Content-type of JSON Responses on /zms/classes/Login.php?f=login 2. Unsanitized User Input in Responses Allowing unauthenticated attackers to injec...

6.1CVSS5.2AI score0.00234EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 9:47 p.m.8 views

zabbix-threat-control

Zabbix Threat Control ztc Turn the Zabbix you already run into a vulnerability-management console. ztc reads each host's software inventory through the stock zabbix-agent2 no extra agent to deploy, audits it against Vulners, and pushes scored, per-host findings — problems, dashboards and CVSS...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/08 9:46 p.m.8 views

cve-2018-16509

CVE-2018-16509 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-16509 Image author: https://github.com/knqyf263/CVE-2018-16509...

9.3CVSS7.5AI score0.92499EPSS
SaveExploits4References3
Kitploit
Kitploit
added 2026/09/08 9:34 p.m.3909 views

jok3r

.. raw:: html Jok3r v3 beta...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 9:28 p.m.6 views

POC-ES-File-Explorer-CVE-2019-6447

PoC ES File Explorer 4.1.9.7.4 CVE-2019-6447 This is a very simple implementation in bash of the CVE-2019-6447 PoC. It basically uses curl to send the requests with the right parameters. I've built it as I was looking for a similar script during a CTF and couldn't find any. You can play around wi...

8.1CVSS7.5AI score0.6378EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/08 9:24 p.m.8 views

CVE-2023-33817---SQL-Injection-found-in-HotelDruid-3.0.5

CVE-2023-33817 - SQL Injection found in HotelDruid V3.0.5 HotelDruid v3.0.5 are vulnerable to SQL injection. An attacker could issue arbitrary sql command to retrieve data in databases or even execute remote code execution on target database system This is my second repo. Don't beat me if i didn'...

8.8CVSS7.8AI score0.01546EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/08 9:20 p.m.4 views

CVE-2020-28148

CVE-2020-28148 A common way to attack WIFI, not only applicable to Xinrui a subsidiary of Sangfor WIFI products. Through multiple offensive and defensive engagements, it has been found that this exploitation method can bypass multiple AC vendors. This article is intended to disclose the...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 9:19 p.m.7 views

CVE-2024-34833-payroll-management-system-rce

CVE-2024-34833 Payroll Management System RCE Unauthenticated PoC RCE via file upload for https://www.sourcecodester.com/php/14475/payroll-management-system-using-phpmysql-source-code.html. The filenames have timestamp prepended with a minute accuracy. The script tries to guess the filename using...

9.8CVSS6.7AI score0.01923EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/08 9:14 p.m.7 views

cve-2018-19207

CVE-2018-19207 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-19207 Image author: https://github.com/cved-sources/cve-2018-19207...

9.8CVSS8.1AI score0.88065EPSS
SaveExploits4References2
Kitploit
Kitploit
added 2026/09/08 9:03 p.m.11 views

AcuAutomate

AcuAutomate AcuAutomate is an unofficial Acunetix CLI tool that simplifies automated pentesting and bug hunting across extensive targets. It's a valuable aid during large-scale pentests, enabling the easy launch or stoppage of multiple Acunetix scans simultaneously. Additionally, its versatile...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 8:52 p.m.823 views

beanshooter

beanshooter beanshooter is a JMX enumeration and attacking tool, which helps to identify common vulnerabilities on JMX endpoints. https://user-images.githubusercontent.com/49147108/183278179-4a5566a7-5af8-4ce8-a73d-1016876a36d5.mp4 Installation beanshooter is a maven project and installation shou...

5.7AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/08 8:50 p.m.7 views

CVE-2022-41358

Exploit Title: Garage Management System 1.0 - 'categoriesName' - Stored XSS Exploit Author: Sam Wallace Software Link: https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html Version: 1.0 Tested on: Debian ID: CVE-2022-41358 Summary:...

5.4CVSS5.9AI score0.0312EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/08 8:46 p.m.8 views

cve-2021-45232-exp

apisixdashboardrce Don't be evil...

9.8CVSS8.1AI score0.85943EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/08 8:35 p.m.7 views

cve-2018-9206

CVE-2018-9206 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-9206 Image author: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9206...

9.8CVSS8.2AI score0.97255EPSS
SaveExploits17References3
Kitploit
Kitploit
added 2026/09/08 8:28 p.m.8 views

DirtyTooth-RaspberryPi

DirtyTooth for Raspberry Pi Raspbian Stretch Bluetooth communications are on the increase. Millions of users use the technology to connect to peripherals that simplify and provide greater comfort and experience. There is a trick or hack for iOS 11.1.2 and earlier that takes advantage of the...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 8:27 p.m.7 views

CVE-2024-10557

Versión afectada: BloodBank Management System : 1.0 Información de la vulnerabilidad: Tipo de vulnerabilidad: Cross Site Request Forgery CSRF Gravedad: ALTA Estado: Sin parche Endpoint vulnerable: Ruta: /file/updateprofile.php Descripción de la vulnerabilidad: Existe una vulnerabilidad CSRF en es...

6.9CVSS5.6AI score0.00575EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 8:27 p.m.9 views

College-Management-System-course_code-SQL-Injection-Authenticated

College Management System - 'coursecode' SQL Injection Authenticated 1. Description: College Management System 1.0 allows SQL Injection via parameter 'coursecode' in /College-Management-System/admin/asign-single-student-subjects.php. Exploiting this issue could allow an attacker to compromise the...

6AI score
SaveExploits0
Rows per page
Query Builder