Lucene search
+L

16045 matches found

Kitploit
Kitploit
added 2026/09/14 4:16 a.m.4 views

CVE-2024-57427

CVE-2024-57427 - Cross-Site Scripting XSS Reflejado PHPJabbers Cinema Booking System v2.0 es vulnerable a cross-site scripting XSS reflejado. Múltiples endpoints manejan de forma incorrecta la entrada del usuario, permitiendo que scripts maliciosos se ejecuten en el navegador de la víctima. Los...

6.1CVSS8.1AI score0.00445EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/14 3:50 a.m.6 views

CVE-2024-4577

Orange Tsi 🍊 This vulnerability was found by Orange Tsai @orange8361 of DEVCORE @d3vc0r3. Make sure to follow his outstanding research, our role was to only recreate and develop the exploit for this issue. Security Alert: CVE-2024-4577 PHP CGI Argument Injection Vulnerability Overview CVE-2024-45...

9.8CVSS7.6AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/14 3:28 a.m.5 views

sqlmc

SQLMC - Comprobador Masivo de Inyección SQL Demo Información Esta herramienta es solo con fines educativos, el uso de SQLMC para atacar objetivos sin consentimiento mutuo previo es ilegal. Los desarrolladores no asumen ninguna responsabilidad y no se hacen responsables de cualquier uso indebido o...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 3:20 a.m.5 views

ParrotSec-Linux-Hardening-Project

ParrotSec Linux - Public Kiosk Project Designing & Implementing A restricted & Trustworthy Environment Hardened kernel root@kitploit: - GrSecurity Patched Kernel - PaX Hardening - x PaXctl - x PaXTest - x PaXctld - x Hardened Kernel Runtime Parameters root@kitploit: - x Kernel Self Protection...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/14 3:18 a.m.5 views

GetBlocked

GetBlocked! Páginas más limpias. Menos rastreadores. Solo local. GetBlocked! es una extensión ligera y solo local para Chrome que ayuda a reducir el seguimiento común de terceros en sitios web bloqueando peticiones de rastreadores conocidos, limpiando enlaces de seguimiento y explicando los...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 2:47 a.m.4 views

CVE-2025-53652-Jenkins-Git-Parameter-Analysis

CVE-2025-53652: Jenkins Git Parameter Plugin Unvalidated Input Vulnerability. Summary This vulnerability arises because user-controlled input from Jenkins build parameters is injected unsafely into the Git checkout command. User input is provided as a build parameter e.g., gitParameters, which ca...

8.2CVSS7.9AI score0.0064EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 2:20 a.m.4 views

CVE-2025-52688

CVE-2025-52688 Productos afectados Alcatel AP13161 - Punto de acceso WiFi empresarial Resumen Hay 2 vulnerabilidades principales que se abordan aquí: Falta de saneamiento de entrada en múltiples parámetros web JSON que permite inyectar caracteres maliciosos como ; para causar un ataque de inyecci...

9.8CVSS6AI score0.2593EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 1:51 a.m.4 views

CVE-2022-32988

CVE-2022-32988 Affected products We have not yet tested Asus models other than those listed. However we suspect it may also work on other models with the same firmware version. root@kitploit: DSL-N14UB1 V.1.1.2.3805 Overview In router Asus DSL-N14U-B1 1.1.2.3805 was discovered to contain a stored...

5.4CVSS6.1AI score0.00632EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/14 1:10 a.m.53 views

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/14 12:49 a.m.10 views

param-miner

param-miner Esta extensión identifica parámetros ocultos y no vinculados. Es particularmente útil para encontrar vulnerabilidades de envenenamiento de caché web. Combina la lógica avanzada de diferenciación de Backslash Powered Scanner con una técnica de búsqueda binaria para adivinar hasta 65,00...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 12:36 a.m.8 views

CVE-2025-15467

CVE-2025-15467: Desbordamiento de Búfer en la Pila en OpenSSL CMS AuthEnvelopedData Resumen CVE-2025-15467 es una vulnerabilidad crítica de desbordamiento de búfer en la pila en el código de análisis de CMS Cryptographic Message Syntax de OpenSSL. La vulnerabilidad existe en la función...

9.8CVSS7.2AI score0.48211EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/14 12:09 a.m.9 views

debugHunter

debugHunter Descubre endpoints de depuración ocultos y entornos de desarrollo La extensión esencial de Chrome para cazadores de bugs y testers de penetración Detecta pasivamente parámetros de depuración, cabeceras sensibles y rutas expuestas mientras navegas. ¿Por qué debugHunter? Encontrar...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 11:38 p.m.64 views

autocrack

AUTOCRACK.py This python script is a Hashcat https://hashcat.net wrapper to help automate the cracking process. The script includes multiple functions to select a set of wordlists and rules, as well as the ability to run a bruteforce attack, with custom masks, before the wordlist/rule attacks...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 11:26 p.m.6 views

BurpSentinel

Burp Sentinel Eases discovery of common security holes in web applications. Intro / tutorial: https://github.com/dobin/BurpSentinel/wiki/BurpSentinel---HowTo-and-introduction Blog: http://dobin.github.io/ With BurpSentinel it is possible for the penetration tester to quickly and easily send a lot...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 10:53 p.m.6 views

CVE-2022-24342

CVE-2022-24342 JetBrains TeamCity - toma de control de cuenta mediante CSRF en autenticación de GitHub PoC CVE-2022-24342 Requisitos Uso ¿Cómo funciona? GitHub OAuth2: orden de procesamiento de parámetros de consulta CVE-2022-24342: flujo de solicitudes HTTP Requisitos JetBrains TeamCity...

8.8CVSS7.9AI score0.03252EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/13 9:50 p.m.5 views

DSSS

Damn Small SQLi Scanner Damn Small SQLi Scanner DSSS es un escáner de vulnerabilidades de inyección SQL completamente funcional que soporta parámetros GET y POST escrito en menos de 100 líneas de código. En cuanto a las configuraciones opcionales, soporta proxy HTTP junto con los valores de...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 8:39 p.m.6 views

CVE-2024-36837

CVE-2024-36837 / CNVD-2024-30128 POC write URL in url.txt and run CVE-2024-36837.py CVE-2024-36837 In my freshman year, I found that an educational institution used CRMEB Mall as an online store in an Internet protection action. After testing, sql injection vulnerability was found. After setting ...

7.5CVSS5.9AI score0.08306EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/13 7:55 p.m.7 views

Modified-CVE-2019-15107

CVE-2019-15107 Asegúrate de cambiar manualmente shellperl LHOST y LPORT en la línea 29 antes de la ejecución. Modificado de: https://github.com/ketlerd/CVE-2019-15107...

10CVSS8.4AI score0.99766EPSS
SaveExploits39References1
Kitploit
Kitploit
added 2026/09/13 7:37 p.m.5 views

OTRS-4.0.1-6.0.1-Remote-Command-Execution

OTRS-4.0.1-6.0.1 Remote Command Execution This exploit is developed based on https://www.exploit-db.com/exploits/43853 It will perform the authentication against OTRS panel and provide a reverse shell. Usage: python3 CVE-2017-16921.py CVE-2017-16921: In OTRS 6.0.x up to and including 6.0.1, OTRS...

9CVSS7.8AI score0.19901EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/13 7:18 p.m.270 views

redpill

:octocat: Project Description The redpill project aims to assist reverse tcp shells in post-exploration tasks. Often, on redteam appointments we need to use unconventional ways to access the target system, like reverse tcp shells not metasploit in order to bypass the defenses implemented by the...

5.9AI score
SaveExploits0References2
Rows per page
Query Builder