Lucene search
+L

7399 matches found

Kitploit
Kitploit
added 2026/09/22 10:24 a.m.10 views

CVE-2022-29359

School Club Application System Issue: Unauthenticated Stored Cross-Site Scripting to HTML injection to RCE Author: Zak Clifford Date: 12.04.2022 Vendor: https://www.sourcecodester.com/php/15266/school-club-application-system-phpoop-free-source-code.html Software:...

6.1CVSS6.7AI score0.0115EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/22 9:47 a.m.7 views

CVE-2024-25641-CACTI-RCE-1.2.26

CVE-2024-25641 - Cacti 1.2.26 - Arbitrary file write to RCE 🌵 Authenticated RCE Cacti version v1.2.26 Summary An arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code ...

9.1CVSS9AI score0.86303EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/22 7:02 a.m.8 views

Magento-CVE-2016-4010

Analysis and Exploitation of Magento Unauthenticated Remote Code Execution Vulnerability CVE-2016-4010 0x00 Preface On May 17, foreign security researcher Netanel Rubin publicly disclosed an unauthenticated remote code execution vulnerability in Magento CVE-2016-4010. This vulnerability actually...

9.8CVSS9AI score0.97511EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/22 6:20 a.m.10 views

CVE-2021-40964

Tiny File Manager = 2.4.6 - Remote Code Execution Authenticated 🚨 About the Exploit This is a Bash-based authenticated Remote Code Execution RCE exploit for Tiny File Manager versions = 2.4.6, vulnerable under CVE-2021-40964. The script leverages: Weak upload validation and webroot disclosure, An...

6.5CVSS7AI score0.08235EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/22 5:29 a.m.9 views

CVE-2021-40904

CVE-2021-40904 - RCE via CheckMk's Dokuwiki embedded application Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 1.5.0p25 Attack type: RCE Solution: Upgrade to version 1.6 or higher. Summary: The web management console of CheckMk Raw Edition versions 1.5.0 to 1.5.0p25...

8.8CVSS8.3AI score0.03692EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/22 4:18 a.m.19 views

CVE-2018-16763

Fuel CMS 1.4.1 - Ejecución Remota de Código FUEL CMS 1.4.1 permite la evaluación de código PHP a través del parámetro filter de pages/select/ o del parámetro data de preview/. Esto puede provocar una Ejecución Remota de Código sin autenticación previa. Instalación root@kitploit: git clone...

9.8CVSS8.4AI score0.82937EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/22 2:48 a.m.9 views

CVE-2024-7954

CVE-2024-7954 - Exploit de Ejecución Remota de Comandos RCE en SPIP 4.2.8 Este script explota una vulnerabilidad de Ejecución Remota de Código en SPIP versión 4.2.8 a través del endpoint porteplumeprevisu. La vulnerabilidad permite a atacantes no autenticados inyectar código PHP mediante la...

9.8CVSS8.6AI score0.90053EPSS
SaveExploits10
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.81 views

Shield Security WP Plugin <= 18.5.9 - Local File Inclusion

The Shield Security Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the renderactiontemplate parameter. This makes it possible for unauthenticated attacker to include and execute PHP fil...

9.8CVSS8.2AI score0.56567EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.145 views

MetInfo CMS <= 8.1 - Remote Code Execution

MetInfo CMS 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injection vulnerability caused by insufficient input neutralization in the execution path, letting remote attackers execute arbitrary code remotely, exploit requires crafted requests. id: CVE-2026-29014 info: name: MetInfo CMS = 8....

9.8CVSS9AI score0.3949EPSS
SaveExploits4References3
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.85 views

elFinder < 2.1.58 - Remote Code Execution

studio-42/elfinder before 2.1.58 contains a remote code execution caused by execution of PHP code in a .phar file, letting attackers execute arbitrary PHP code if the server parses .phar files as PHP, exploit requires server to parse .phar files as PHP. id: CVE-2021-23394 info: name: elFinder...

9.8CVSS8.6AI score0.18935EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.130 views

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

10CVSS8.5AI score0.17667EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.30 views

OpenCATS - Command Injection

OpenCATS prior to commit 3002a29 contains a command injection caused by injection of PHP statements into the installer AJAX endpoint's databaseConnectivity action parameter, letting unauthenticated attackers execute arbitrary code, exploit requires incomplete installation wizard. id: CVE-2026-277...

9.2CVSS6.2AI score0.34629EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.244 views

Invision Community <=5.0.6 Unauthenticated RCE via Template Injection

Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor controller /applications/core/modules/front/system/themeeditor.php, where a protected method named customCss can be invoked by unauthenticated...

10CVSS8.8AI score0.83732EPSS
SaveExploits7References5
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.127 views

HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the 'template' parameter of the wooftextsearch AJAX action. This makes it possible for unauthenticated attackers to include and...

9.8CVSS8.5AI score0.56382EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.36 views

Ads Pro Plugin <= 4.89 - Local File Inclusion

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsatemplate' parameter of the bsapreviewcallback function. This makes it possible for unauthenticated attackers to includ...

9.8CVSS6.3AI score0.40352EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/22 12:55 a.m.11 views

CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26

CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26 Exploit totalmente automatizado para CVE-2024-25641. Cuando un usuario está autenticado, Cacti versión 1.2.26 es vulnerable a una vulnerabilidad de escritura arbitraria de archivos, explotable a través de la función "Package Import", permite a...

9.1CVSS8.9AI score0.86303EPSS
SaveExploits17References1
Kitploit
Kitploit
added 2026/09/21 10:48 p.m.9 views

CVE-2020-8644-PlaySMS-1.4

CVE-2020-8644-PlaySMS-1.4 Script en Python para explotar PlaySMS anterior a 1.4.3 Ejecución Abre un puerto en tu máquina: Y luego ejecuta exploit.py: root@kitploit: ./exploit.py Modificando el exploit Puede que quieras cambiar la reverse shell creada por exploit.py Para hacerlo, puedes cambiar la...

9.8CVSS8.6AI score0.86689EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/21 8:36 p.m.14 views

php-jpeg-injector

php-jpeg-injector 将php载荷注入jpeg图片中。相关帖子:this post 使用场景 你有一个通过PHP的GD图形库处理jpeg图片的web应用程序。 描述 此脚本将PHP代码注入到指定的jpeg图片中。如果web应用程序解释该图片,它将执行载荷。请确保输入的jpeg未被压缩! 用法 python3 gd-jpeg.py JPEG PAYLOAD OUTPUTJPEG 例如:python3 gd-jpeg.py cat.jpeg '' infectedcat.jpeg 工作原理 PHP代码被注入到扫描头之后的无用/垃圾(棕色)空间中:...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 8:32 p.m.7 views

CVE-2018-16763_FuelCMS-1.4.1_RCE

CVE-2018-16763 FuelCMS - 1.4.1 - RCE PoC FuelCMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution. Exploit This works by exploiting the PHP filter parameter which allows you to use the system...

9.8CVSS8.4AI score0.82937EPSS
SaveExploits19References1
Kitploit
Kitploit
added 2026/09/21 8:08 p.m.8 views

CVE-2023-46818

CVE-2023-46818 An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled. Usage root@kitploit: ❯ python3 CVE-2023-46818.py Usage: python3 CVE-2023-46818.py Poc of CVE-2023-46818 ISPConfig =...

7.2CVSS7.2AI score0.15732EPSS
SaveExploits14
Rows per page
Query Builder