Lucene search
+L

202894 matches found

Nuclei
Nuclei
added 2026/09/16 2:04 a.m.49 views

Blinko <= 1.8.3 - User Information Leak

Blinko = 1.8.4 contains an information disclosure caused by a publicly accessible endpoint exposing user information including usernames, roles, and account creation dates, letting remote attackers access sensitive user data, exploit requires no special privileges. id: CVE-2026-23486 info: name:...

6.9CVSS5.7AI score0.00711EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/16 2:04 a.m.31 views

WeGIA <= 3.6.4 - Remote Code Execution

WeGIA = 3.6.5 contains a remote code execution caused by improper validation of backup file names in the database restoration functionality, letting attackers with administrative access execute arbitrary OS commands id: CVE-2026-28409 info: name: WeGIA = 3.6.4 - Remote Code Execution author:...

10CVSS6.4AI score0.03315EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/16 2:04 a.m.42 views

PraisonAI AgentOS - Information Disclosure

PraisonAI's AgentOS FastAPI application server exposes an unauthenticated GET /api/agents endpoint that lists every registered agent's name, role and the opening of its instructions system prompt. No authentication is enforced on the route, allowing a remote attacker to enumerate agent...

7.3CVSS7.5AI score0.28571EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/16 1:45 a.m.35 views

rustbuster

rustbuster 一个全面的Web模糊测试与内容发现工具 简介 查看博文:介绍 Rustbuster——一个全面的Web模糊测试与内容发现工具 下载 你可以从这里下载预编译的二进制文件。 安装 root@kitploit: installrustbuster echo "Installing latest version of Rustbuster" latestversion=curl -s https://github.com/phra/rustbuster/releases | grep "rustbuster-v" | head -n1 | cut -d'/' -f6 ech...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 1:41 a.m.5 views

CVE-2023-23752

CVE-2023-23752 This is a proof-of-concept code for the CVE-2023-23752 vulnerability. It allows an attacker to extract sensitive information such as usernames, passwords, and database names from a target application. Usage To use this code, you can follow these steps: 1. Clone this repository or...

5.3CVSS7.1AI score0.99827EPSS
SaveExploits43
Kitploit
Kitploit
added 2026/09/16 1:10 a.m.20 views

pymeta

PyMeta PyMeta is a Python3 rewrite of the tool PowerMeta, created by dafthack in PowerShell. It uses specially crafted search queries to identify and download the following file types pdf, xls, xlsx, csv, doc, docx, ppt, pptx from a given domain using Google and Bing scraping. Once downloaded,...

6.1AI score
SaveExploits0References1
EUVD
EUVD
added 2026/09/16 12:31 a.m.6 views

EUVD-2026-80036

NR255-V version 1.5.130703 fails to sanitize QoS rule names before they are parsed via eval in qosxianzaddcgi, qosxianzshowcgi, qosfilteraddcgi, and qosfiltershowcgi handlers. An attacker can inject persistent script code through crafted QoS rule name input that executes when the stored data is...

4.8CVSS5.7AI score0.00194EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 11:39 p.m.16 views

dnspooq

dnspooq DNSpooq PoC - envenenamiento de caché de dnsmasq CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 Solo con fines educativos Requisitos Docker compose Docker Exploit Iniciar contenedores root@kitploit: $ docker-compose up -d Ejecutar exploit.py root@kitploit: $ docker-compose exec attacker...

4.3CVSS7.3AI score0.04873EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/15 10:27 p.m.29 views

pipe_finder

Pipe Finder 1.0 Automated script to search in SMB protocol for availables pipe names Screenshots Requirements metasploit-framework wget locate pipeauditv2.rb module https://github.com/peterpt/pipeauditorfb - It will be installed on first run Install Requirements apt-get install metasploit-framewo...

5.5AI score
SaveExploits0References2
NVD
NVD
added 2026/09/15 10:17 p.m.9 views

CVE-2026-76864

NR255-V version 1.5.130703 fails to sanitize QoS rule names before they are parsed via eval in qosxianzaddcgi, qosxianzshowcgi, qosfilteraddcgi, and qosfiltershowcgi handlers. An attacker can inject persistent script code through crafted QoS rule name input that executes when the stored data is...

4.8CVSS0.00194EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 10:11 p.m.14 views

CVE-2024-36401

CVE-2024-36401 Remote Code Execution RCE Vulnerability In Evaluating Property Name Expressions GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution RCE by...

9.8CVSS8.6AI score0.99813EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/15 10:06 p.m.41 views

whatportis

whatportis .. image:: https://github.com/opencve/opencve/workflows/Tests/badge.svg :target: https://github.com/ncrocfer/whatportis/actions/workflows/tests.yml .. image:: https://badge.fury.io/py/whatportis.svg :target: https://pypi.python.org/pypi/whatportis/ .. image::...

5.9AI score
SaveExploits0References5
CVE
CVE
added 2026/09/15 9:57 p.m.9 views

CVE-2026-76864

Netcore NR255-V version 1.5.130703 suffers from a stored cross-site scripting (XSS) vulnerability in its QoS management interface. QoS rule names are not sanitized before being parsed via eval() in the qos_xianz_add_cgi, qos_xianz_show_cgi, qos_filter_add_cgi, and qos_filter_show_cgi CGI handlers...

4.8CVSS5.7AI score0.00194EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 9:54 p.m.64 views

wordlistgen

wordlistgen What and why? wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application's context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, quer...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 9:47 p.m.9 views

CVE-2023-38831

CVE-2023-38831 Una demostración de prueba de concepto de CVE-2023-38831 Breve descripción de la vulnerabilidad CVE-2023-38831 es una vulnerabilidad de software. El software explotado es WinRAR, que es ampliamente utilizado por casi todo el mundo. Es un software que ayuda a comprimir diferentes...

7.8CVSS7.2AI score0.98022EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/15 8:53 p.m.11 views

CVE-2026-9806

CVE-2026-9806 CVE-2026-9806 is a Stored Cross-Site Scripting Stored XSS vulnerability affecting CTI Transmute versions prior to the patched release.The flaw exists in the notification panel, where notification messages containing user-controlled convert names are rendered in the notification bell...

6.3CVSS6.1AI score0.00258EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 8:51 p.m.24 views

weape

wEAPe Weape-Wireless-EAP-Extractor Script ============================================ Auto extracts EAP 802.1x user names Developed by Daniel Compton at Info-Assure Ltd https://github.com/commonexploits/weape.git Installing root@kitploit: git clone https://github.com/commonexploits/weape.git How...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 7:04 p.m.10 views

CVE-2020-8163

CVE-2020-8163 Entorno y exploit para CVE-2020-8163 Ejecución remota ciega de código de nombres locales proporcionados por el usuario en Rails 5.0.1 y 4.2.11.2 Crear el entorno 1. crear contenedor docker mapeando el puerto 4000 al 8001 root@kitploit: sudo docker run --rm -it -p 8001:4000 ruby:2.3...

8.8CVSS8.2AI score0.82047EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/15 7:01 p.m.7 views

CVE-2023-23752

CVE-2023-23752 This is a proof-of-concept code for the CVE-2023-23752 vulnerability. It allows an attacker to extract sensitive information such as usernames, passwords, and database names from a target application. Bulk scanner + get config + ip target from CVE-2023-23752 Screenshot Installation...

5.3CVSS7.1AI score0.99827EPSS
SaveExploits43
NVD
NVD
added 2026/09/15 6:17 p.m.5 views

CVE-2026-18113

In Concrete CMS 9.0 to 9.5.2, the Top Navigation Bar block did not HTML-escape dropdown child page names before writing them into the page, so a user who could create or rename pages could store a script through a child page name and have it run in the browser of any visitor, editor, or...

7.5CVSS0.00251EPSS
SaveExploits0References1
Rows per page
Query Builder