Lucene search
+L

1225 matches found

Kitploit
Kitploit
added 2026/09/13 11:10 a.m.3 views

CVE-2022-36804-POC

CVE-2022-36804-POC 🕷️ Bitbucket CVE-2022-36804 unauthenticated remote command execution Exploitation Find publicly visible repositories - example.com/repos?visibility=public...

8.8CVSS8.1AI score0.99174EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/13 6:40 a.m.13 views

CVE-2006-2842

Badges License MIT Installation Install cve-2006-2842 with npm root@kitploit: npm install cve-2006-2842 -g Usage Example for single url root@kitploit: cve-2006-2842 -u http://example.com Usage Example for list of urls root@kitploit: cve-2006-2842 -l urls.txt -o out.txt Screenshots Help menu Get a...

7.5CVSS5.9AI score0.47196EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/13 5:58 a.m.6 views

st2-046-poc

Struts2 Content-Disposition filename null-byte variant of CVE-2017-5638 Struts2 Security Bulletin S2-046 A null byte \x00 in a request¡¯s Content-Disposition header filename field can trigger a InvalidFileNameException with the same client controlled filename string in the exception message that ...

10CVSS8.1AI score0.99999EPSS
SaveExploits46References1
Kitploit
Kitploit
added 2026/09/13 3:34 a.m.7 views

Blackash-CVE-2025-47812

🛡️ CVE-2025-47812 – RCE crítico en Wing FTP Server 🛡️ 🔎 Resumen: CVE-2025-47812 es una vulnerabilidad crítica de ejecución remota de código RCE que afecta a Wing FTP Server versiones anteriores a la 7.4.4. Fue descubierta por un investigador de seguridad y se ha confirmado que se está explotando...

10CVSS8.4AI score0.92862EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/13 3:19 a.m.7 views

SharpHide

SharpHide Just a nice persistence trick to confuse DFIR investigation. Uses NtSetValueKey native API to create a hidden null terminated registry key. This works by adding a null byte in front of the UNICODESTRING key valuename. More info about this technique can be found in the following...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 2:53 a.m.6 views

CVE-2025-47812

=========================================================== CVE-2025-47812 - Wing FTP Server Remote Code Execution RCE =========================================================== Author: blindma1den Date: July 2025 Exploit Type: Remote Code Execution Unauthenticated Target: Wing FTP Server 7.4.4...

10CVSS8.3AI score0.92862EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/12 5:38 p.m.8 views

CVE-2019-17137

CVE-2019-17137 Info CVE: https://vulners.com/cve/CVE-2019-17137 POC root@kitploit: GET /index.htm%00currentsetting.htm HTTP/1.1 Host: 192.168.1.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0 Accept: / Accept-Language:...

9.4CVSS8.2AI score0.02737EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 4:52 p.m.9 views

CVE-2023-1177

CVE-2023-1177 | | MLFlow Path Traversal | Tested on MLflow 2.2.0 | src: https://github.com/iumiro/CVE-2023-1177-MLFlow | .. code-block:: bash !/bin/bash RAND="EXPLOIT-$1+$RANDOM%9999" URL="http://172.17.0.2:6001" FILE='/root/.ssh/idrsa' curl -vX POST...

9.8CVSS8AI score0.6968EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/12 3:10 p.m.5 views

CVE-2016-6187_LPE

CVE-2016-6187 - Linux Kernel Exploit Kernel Exploit for CVE-2016-6187 Local Privilege Escalation affected versions: 4.6.5 Exploit was developed against a custom compiled 4.6 kernel + buildroot kconfig coming soon and defeats KASLR, SMEP, SMAP KPTI not available for 4.6 Presentation slides...

7.8CVSS7.3AI score0.02397EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/12 7:55 a.m.9 views

CVE-2024-27956

CVE-2024-27956 Note Build wordpress: docker-compose -f stack.yml up Install plugin: 1. WordPress dashboard, choose Plugins Add New 2. Click Upload Plugin 3. Choose File - wp-automatic.zip - Install Now 4. After the installation is complete, click Activate Plugin Exploit...

9.9CVSS8.5AI score0.93971EPSS
SaveExploits16
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.40 views

Control Web Panel (CWP) - File Inclusion

In CWP Control Web Panel, previously CentOS Web Panel before version 0.9.8.1107, an unauthenticated attacker can abuse null byte %00 injection with the "scripts" parameter in the /user/loader.php or /user/login.php endpoints to register arbitrary API keys or access sensitive files. This can be...

9.8CVSS8.3AI score0.70745EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/11 1:26 p.m.6 views

CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC

CVE-2025-47812 — Wing FTP Server Vulnerabilidad de ejecución remota de código no autenticada en Wing FTP Server = 7.4.3. Un byte NULL inyectado en el parámetro username durante el inicio de sesión provoca que se escriba código Lua en el archivo de sesión. Cuando se accede a /dir.html con la cooki...

10CVSS8.3AI score0.92862EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/10 11:31 p.m.7 views

THM-Steel_Mountain-CVE-2014-6287

THM-SteelMountain-CVE-2014-6287 Un análisis de la máquina Steel Mountain de TryHackMe.com y el exploit para CVE-2014-6287 Créditos No me atribuyo el mérito del descubrimiento y la explotación originales de esta vulnerabilidad. ¡Gracias a las siguientes personas! Descubrimiento: Daniele Linguaglos...

10CVSS8.2AI score0.99323EPSS
SaveExploits23References1
Kitploit
Kitploit
added 2026/09/10 4:53 a.m.6 views

CVE-2014-6287

CVE-2014-6287 - Rejetto HTTP File Server RCE Exploit A Rust implementation of the CVE-2014-6287 exploit targeting Rejetto HTTP File Server HFS versions 2.3x before 2.3c. Vulnerability Overview CVE-2014-6287 is a critical remote code execution vulnerability in Rejetto HTTP File Server HFS. Technic...

10CVSS8.2AI score0.99323EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/10 4:51 a.m.6 views

CVE-2009-2265

CVE-2009-2265 - Adobe ColdFusion 8 Subida de Archivos RCE Una implementación en Rust del POC para el exploit CVE-2009-2265, dirigida a Adobe ColdFusion 8. Resumen de la Vulnerabilidad Esta vulnerabilidad permite a un atacante no autenticado subir archivos arbitrarios a un directorio accesible des...

7.5CVSS6.8AI score0.83744EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/09 5:22 p.m.8 views

Orbit-Fox_SSRF_CVE-2025-10874

CVE-2025-10874 - Orbit Fox SSRF Proof of Concept Proof of concept exploit demonstrating Server-Side Request Forgery SSRF vulnerability in the Orbit Fox WordPress plugin with null byte injection bypass. Detailed blog post: https://ryanmroth.com/articles/orbit-fox-ssrf Vulnerability Details...

5.5CVSS5.8AI score0.00176EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 11:13 a.m.9 views

PoC-CVE-2026-1357

PoC CVE-2026-1357: WPvivid Backup & Migration The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process...

9.8CVSS8.4AI score0.32714EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/09 2:29 a.m.7 views

CVE-2021-3156

exploit.py Forked from @worawit, shorter&optimized. Only works for sudo=1.8.23 on Centos7 Works on both the web server and linux machines backdoor.php php backdoor generated through weevely, password: "H@rmWsH4rE!". Gives access to an ssh session as Apache if sucessfully uploaded to the server...

7.8CVSS7.3AI score0.99969EPSS
SaveExploits83
Kitploit
Kitploit
added 2026/09/08 3:44 p.m.7 views

CVE-2026-22356

CVE-2026-22356: Jetpack CRM Path Traversal Vulnerability and RCE Warning: This tool should only be used in authorized test environments. The user is solely responsible for illegal use. 📥 Requirements root@kitploit: pip3 install requests urllib3 $ python3 exploit.py https://example.com --rce --cmd...

7.5CVSS5.9AI score0.00423EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 1:24 p.m.5 views

CVE-2025-58440

CVE-2025-58440 Remote Code Execution RCE via Polyglot File Attack and Null Byte Injection on Laravel FileManager Overview The unisharp/laravel-filemanager package versions 2.11 are vulnerable to Remote Code Execution RCE due to improper file type validation during file uploads. The vulnerability...

6.3AI score
SaveExploits1References1
Rows per page
Query Builder