Lucene search
+L

8071 matches found

Kitploit
Kitploit
added 2026/09/13 5:50 p.m.9 views

Arduino-Netcat-Backdoor

Arduino - Netcat - Backdoor for Windows Name suggestions welcome. root@kitploit: Proof Of Concept. Not intended for real life use. I can't take responsibillity for stuff other people do with this Attacks a Windows machine running Windows 7 or later, creating a persistent Backdoor. Funtionallity T...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 4:10 p.m.5 views

CVE-2023-28467

MyBB 1.8.33 User CP email persistent XSS root@kitploit: - MyBB 1.8.33 User CP email persistent XSS - Mybb version "@cve.com Solution Upgrade MyBB version 1.8.34 or higher...

6.1CVSS6.5AI score0.0051EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 2:34 p.m.10 views

islechat

isle.chat A ssh powered chat server with public and private invite-only channels Each channel has an owner who can change its banner and invite users anyone can join if its public Demo it with ssh [email protected] This project is very new right now so don't rely on it for anything critical...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 1:57 p.m.6 views

CVE-2021-40223

CVE-2021-40223 Application : Rittal CMC PU III Web management Devices : CMC PU III 7030.000 Software Revision : V3.11.002 Hardware Revision : V3.00 Attack type : Stored XSS Solution : Update to Software Revision V3.17.10 or later Summary : Web application fails to sanitize user input on Security...

5.4CVSS6AI score0.00624EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 1:39 p.m.7 views

CVE-2019-13633

CVE-2019-13633 Suggested description : Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. Additional Information : Blinger.io - is a platform which used by global clients such as FxPro, Alfa Bank, OneTwoTrip, Ivi, KupiVIP Group, Belavia, Wargaming, Yandex, OZON, TCS Group Holding and...

6.1CVSS6.5AI score0.00966EPSS
SaveExploits2
CVE
CVE
added 2026/09/13 10:45 a.m.8 views

CVE-2026-90767

Froxlor versions before 2.3.12 contain an SSH key injection vulnerability in the SshKeys::add() API endpoint. The root cause is improper validation of multi-line SSH public keys , allowing customers to inject arbitrary lines into authorized_keys files. An attacker can exploit this to inject malic...

7.1CVSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/13 10:45 a.m.5 views

EUVD-2026-76988

Froxlor before 2.3.12 fails to properly validate multi-line SSH public keys in the SshKeys::add endpoint, allowing customers to inject arbitrary lines into authorizedkeys files. Attackers can inject malicious SSH key entries with option directives to gain persistent unauthorized access that...

7.1CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 10:12 a.m.10 views

Metamorph

Metamorph Introduction This tool is a command-line utility for Windows written in C that creates and configures persistent Event Tracing for Windows ETW AutoLogger sessions. AutoLoggers automatically start tracing specific ETW providers upon system boot, making them useful for capturing events th...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 9:45 a.m.6 views

root-sonim-xp3800

Root Sonim XP3800 Root access for the Sonim XP3800. Two methods are available — choose whichever fits your situation. Root Manager App The Root Manager app exploits CVE-2019-2215 a binder use-after-free kernel vulnerability to gain root directly on the device. No computer, no bootloader unlock, n...

7.8CVSS8AI score0.72105EPSS
SaveExploits30References6
Kitploit
Kitploit
added 2026/09/13 9:34 a.m.6 views

chronomaly

Chronomaly Chronomaly is a kernel exploit for the Android / Linux kernel using CVE-2025-38352. The exploit was written specifically for Linux kernel v5.10.157, but should work against all vulnerable v5.10.x kernels, as it does not require any specific kernel text offsets to work. I covered the...

7.8CVSS6.8AI score0.01254EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/13 7:13 a.m.15 views

iOS18.6.2-Persistent-Automation-Exploit-in-Siri-Shortcuts-and-Apple-SWC

Validación de Entrada Inadecuada en Siri Shortcuts y Shared Web Credentials Descubierto por: Joseph Goydish II Fecha de descubrimiento: 20 de agosto de 2025 Gravedad: Alta Resumen Ejecutivo Este informe describe una cadena de vulnerabilidades de alta gravedad que afecta a Siri Shortcuts y al...

6.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:50 a.m.9 views

CVE-2026-3227-TP-Link-authenticated-RCE

CVE-2026-3227: Inyección de Comandos del SO en Router TP-Link Para más información, ver https://vulners.com/cve/CVE-2026-3227 Una vulnerabilidad persistente y autenticada de Inyección de Comandos del SO en el firmware de routers TP-Link que puede causar el brick del dispositivo o una posible toma...

8.5CVSS6AI score0.01935EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:30 a.m.9 views

CVE-2017-16568

CVE-2017-16568 1. Exploit Title: Logitech Media Server : HTML code injection and execution. 2. Shodan Dork: Search Logitech Media Server 3. Date: 11/03/2017 4. Exploit Author: Dewank Pant 5. Vendor Homepage: www.logitech.com 6. Version: 7.9.0 7. Tested on: Windows 10, Linux POC: 1. Access and go ...

5.4CVSS6.1AI score0.01985EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 5:03 a.m.6 views

CVE-2018-8062

CVE-2018-8062 Persistent XSS on Comtrend AR-5387un router Exploitation explanation: To exploit this vulnerability, once logged into the router, a WAN service must be created Click on "Advanced Setup", "WAN Service". "Add button", "Next" Then insert the payload into the "Enter Service Description"...

5.4CVSS6AI score0.00966EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 3:50 a.m.9 views

IoT-Vulnerability-Research-Public

Investigación de Seguridad de Hardware y Vulnerabilidades Este repositorio sirve como un archivo público centralizado para mi investigación independiente de vulnerabilidades, auditorías de hardware y Divulgaciones Coordinadas de Vulnerabilidades CVD. Todos los scripts de prueba de concepto,...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 3:15 a.m.3 views

CVE-2019-17427

CVE-2019-17427 CVE-2019-17427 Persistent XSS POC In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors. The vulnerability essentially exists on any wiki page which by default uses textile formatting. You can take advantage of it by using pre...

6.1CVSS6.4AI score0.01598EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 2:18 a.m.8 views

CVE-2017-16567

CVE-2017-16567 1. Exploit Title: Logitech Media Server : Persistent Cross Site ScriptingXSS 2. Shodan Dork: Search Logitech Media Server 3. Date: 11/03/2017 4. Exploit Author: Dewank Pant 5. Vendor Homepage: www.logitech.com 6. Version: 7.9.0 7. Tested on: Windows 10, Linux POC: 1. Access and go ...

5.4CVSS6.1AI score0.02239EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/13 1:04 a.m.4 views

CVE-2022-38691_38692

CVE-2022-38691/38692 persistently boot FDL1/SPL without signature NOTE: first remove sign check of Boot Chain images in FDL1/SPL ​ fdl1 use genfdl1-dl sourcecode ​ spl android 9/10, use genspl-unlock-legacy sourcecode ​ spl android 11+, use genspl-unlock sourcecode ​ windows prebuilt tools can be...

7.8CVSS6AI score0.00339EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 12:49 a.m.5 views

CVE-2024-36842-Backdooring-Oncord-Android-Sterio-

CVE-2024-36842 Backdooring-Oncord+ Android-Sterio We have conducted vulnerablity assessment on one of the most selling after marrket car infotainment unit. Creating Persistent Backdoor on Oncord+ android/ios car infotainment unit using malicious script! About Device: Android version : 12 Kernel...

7.3CVSS5.9AI score0.0088EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 11:27 p.m.6 views

android-locdump

Tras la indignación/sobrerreacción de los últimos días en internet ante la revelación de que el iPhone tiene una caché para su servicio de localización, decidí echar un vistazo a lo que mis dispositivos Android almacenan en caché para la misma función. Este es un volcador rápido que armé para...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder