Lucene search
+L

16045 matches found

Kitploit
Kitploit
โ€ขadded 2026/09/14 4:16 a.m.โ€ข4 views

CVE-2024-57427

CVE-2024-57427 - Reflected Cross-Site Scripting XSS PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting XSS. Multiple endpoints improperly handle user input, allowing malicious scripts to execute in a victimโ€™s browser. Attackers can craft malicious links to steal...

6.1CVSS8.1AI score0.00445EPSS
SaveExploits4
Kitploit
Kitploit
โ€ขadded 2026/09/14 3:50 a.m.โ€ข6 views

CVE-2024-4577

Orange Tsi ๐ŸŠ This vulnerability was found by Orange Tsai @orange8361 of DEVCORE @d3vc0r3. Make sure to follow his outstanding research, our role was to only recreate and develop the exploit for this issue. Security Alert: CVE-2024-4577 PHP CGI Argument Injection Vulnerability Overview CVE-2024-45...

9.8CVSS7.6AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
โ€ขadded 2026/09/14 3:20 a.m.โ€ข5 views

ParrotSec-Linux-Hardening-Project

ParrotSec Linux - Public Kiosk Project Designing & Implementing A restricted & Trustworthy Environment Hardened kernel root@kitploit: - GrSecurity Patched Kernel - PaX Hardening - x PaXctl - x PaXTest - x PaXctld - x Hardened Kernel Runtime Parameters root@kitploit: - x Kernel Self Protection...

6AI score
SaveExploits0References4
Kitploit
Kitploit
โ€ขadded 2026/09/14 3:18 a.m.โ€ข5 views

GetBlocked

GetBlocked! Cleaner pages. Fewer trackers. Local-only. GetBlocked! is a lightweight, local-only Chrome extension that helps reduce common third-party website tracking by blocking known tracker requests, cleaning tracking links, and explaining tracking attempts. It is built as a small, inspectable...

5.9AI score
SaveExploits0References14
Kitploit
Kitploit
โ€ขadded 2026/09/14 2:47 a.m.โ€ข4 views

CVE-2025-53652-Jenkins-Git-Parameter-Analysis

CVE-2025-53652: Jenkins Git Parameter Plugin Unvalidated Input Vulnerability. Summary This vulnerability arises because user-controlled input from Jenkins build parameters is injected unsafely into the Git checkout command. User input is provided as a build parameter e.g., gitParameters, which ca...

8.2CVSS7.9AI score0.0064EPSS
SaveExploits1
Kitploit
Kitploit
โ€ขadded 2026/09/14 2:20 a.m.โ€ข4 views

CVE-2025-52688

CVE-2025-52688 Affected Products Alcatel AP13161 - Enterprise WIFI access point Summary There are 2 main vulnerabilities being addressed here: Lack of input sanization on multiple JSON web parameters that allows malicious characters such as ; to be injected to caused a command injection attack La...

9.8CVSS6AI score0.2593EPSS
SaveExploits1
Kitploit
Kitploit
โ€ขadded 2026/09/14 1:51 a.m.โ€ข4 views

CVE-2022-32988

CVE-2022-32988 Affected products We have not yet tested Asus models other than those listed. However we suspect it may also work on other models with the same firmware version. root@kitploit: DSL-N14UB1 V.1.1.2.3805 Overview In router Asus DSL-N14U-B1 1.1.2.3805 was discovered to contain a stored...

5.4CVSS6.1AI score0.00632EPSS
SaveExploits2
Kitploit
Kitploit
โ€ขadded 2026/09/14 1:10 a.m.โ€ข53 views

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
โ€ขadded 2026/09/14 12:49 a.m.โ€ข10 views

param-miner

param-miner This extension identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities. It combines advanced diffing logic from Backslash Powered Scanner with a binary search technique to guess up to 65,000 param names per request. Param names...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
โ€ขadded 2026/09/14 12:36 a.m.โ€ข8 views

CVE-2025-15467

CVE-2025-15467: OpenSSL CMS AuthEnvelopedData Stack Buffer Overflow Overview CVE-2025-15467 is a critical stack buffer overflow vulnerability in OpenSSL's CMS Cryptographic Message Syntax parsing code. The vulnerability exists in the evpciphergetasn1aeadparams function when processing AES-GCM...

9.8CVSS7.2AI score0.48211EPSS
SaveExploits7
Kitploit
Kitploit
โ€ขadded 2026/09/14 12:09 a.m.โ€ข9 views

debugHunter

debugHunter Discover Hidden Debug Endpoints & Development Environments The essential Chrome extension for bug bounty hunters and penetration testers Passively detect debug parameters, sensitive headers, and exposed paths while you browse. Why debugHunter? Finding debug endpoints and exposed...

6AI score
SaveExploits0References4
Kitploit
Kitploit
โ€ขadded 2026/09/13 11:38 p.m.โ€ข64 views

autocrack

AUTOCRACK.py This python script is a Hashcat https://hashcat.net wrapper to help automate the cracking process. The script includes multiple functions to select a set of wordlists and rules, as well as the ability to run a bruteforce attack, with custom masks, before the wordlist/rule attacks...

5.7AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/13 11:26 p.m.โ€ข6 views

BurpSentinel

Burp Sentinel Eases discovery of common security holes in web applications. Intro / tutorial: https://github.com/dobin/BurpSentinel/wiki/BurpSentinel---HowTo-and-introduction Blog: http://dobin.github.io/ With BurpSentinel it is possible for the penetration tester to quickly and easily send a lot...

6AI score
SaveExploits0References2
Kitploit
Kitploit
โ€ขadded 2026/09/13 10:53 p.m.โ€ข6 views

CVE-2022-24342

CVE-2022-24342 JetBrains TeamCity - account takeover via CSRF in GitHub authentication PoC CVE-2022-24342 Requirements Usage How does it work? GitHub OAuth2: query parameters processing order CVE-2022-24342: HTTP requests flow Requirements JetBrains TeamCity If you run the exploit on the local...

8.8CVSS7.9AI score0.03252EPSS
SaveExploits2References1
Kitploit
Kitploit
โ€ขadded 2026/09/13 9:50 p.m.โ€ข5 views

DSSS

Damn Small SQLi Scanner Damn Small SQLi Scanner DSSS is a fully functional SQL injection vulnerability scanner supporting GET and POST parameters written in under 100 lines of code. As of optional settings it supports HTTP proxy together with HTTP header values User-Agent, Referer and Cookie...

6AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/13 8:39 p.m.โ€ข6 views

CVE-2024-36837

CVE-2024-36837 / CNVD-2024-30128 POC write URL in url.txt and run CVE-2024-36837.py CVE-2024-36837 In my freshman year, I found that an educational institution used CRMEB Mall as an online store in an Internet protection action. After testing, sql injection vulnerability was found. After setting ...

7.5CVSS5.9AI score0.08306EPSS
SaveExploits2References1
Kitploit
Kitploit
โ€ขadded 2026/09/13 7:55 p.m.โ€ข7 views

Modified-CVE-2019-15107

CVE-2019-15107 Make sure to manually change shellperl LHOST and LPORT on line 29 before execution. Modified from: https://github.com/ketlerd/CVE-2019-15107...

10CVSS8.4AI score0.99766EPSS
SaveExploits39References1
Kitploit
Kitploit
โ€ขadded 2026/09/13 7:37 p.m.โ€ข5 views

OTRS-4.0.1-6.0.1-Remote-Command-Execution

OTRS-4.0.1-6.0.1 Remote Command Execution This exploit is developed based on https://www.exploit-db.com/exploits/43853 It will perform the authentication against OTRS panel and provide a reverse shell. Usage: python3 CVE-2017-16921.py CVE-2017-16921: In OTRS 6.0.x up to and including 6.0.1, OTRS...

9CVSS7.8AI score0.19901EPSS
SaveExploits8
Kitploit
Kitploit
โ€ขadded 2026/09/13 7:18 p.m.โ€ข270 views

redpill

:octocat: Project Description The redpill project aims to assist reverse tcp shells in post-exploration tasks. Often, on redteam appointments we need to use unconventional ways to access the target system, like reverse tcp shells not metasploit in order to bypass the defenses implemented by the...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
โ€ขadded 2026/09/13 6:53 p.m.โ€ข116 views

bxss

Bxss - Blind XSS Scanner ๐Ÿš€ Description...

5.3AI score
SaveExploits0References4
Rows per page
Query Builder