Lucene search
+L

2724 matches found

Kitploit
Kitploit
added 2026/09/13 5:24 a.m.9 views

CVE-2025-6058

🚨 CVE-2025-6058 — WordPress WPBookit ≤ 1.0.4 Unauthenticated File Upload Exploit Unauthenticated Arbitrary File Upload Exploit targeting WordPress WPBookit Plugin ≤ 1.0.4 Exploit allows remote shell upload and full command execution. Author: 0xgh057r3c0n 📌 About The Vulnerability CVE-2025-6058 is...

9.8CVSS5.8AI score0.05537EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/13 5:20 a.m.6 views

exploit-CVE-2020-5844

Exploit for CVE-2020-5844 Pandora FMS v7.0NG.742 - Remote Code Execution Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description...

7.2CVSS7.8AI score0.30254EPSS
SaveExploits6References2
Kitploit
Kitploit
added 2026/09/13 3:23 a.m.7 views

CVE-2025-44608

CVE-2025-44608 CloudClassroom-PHP Project v1.0 is vulnerable to RCE via SQL Injection. Vendor: https://github.com/mathurvishal/CloudClassroom-PHP-Project Software Link: https://github.com/mathurvishal/CloudClassroom-PHP-Project/archive/refs/heads/master.zip PoC Step 1: Navigate to the affected UR...

6.5CVSS5.9AI score0.00299EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/12 5:55 p.m.9 views

CVE-2024-34833-payroll-management-system-rce

CVE-2024-34833 Payroll Management System RCE Unauthenticated PoC RCE via file upload for https://www.sourcecodester.com/php/14475/payroll-management-system-using-phpmysql-source-code.html. The filenames have timestamp prepended with a minute accuracy. The script tries to guess the filename using...

9.8CVSS6.7AI score0.01923EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/12 4:33 p.m.7 views

CVE-2025-24801

CVE-2025-24801 PoC for GLPI RCE This repository contains a proof-of-concept script poc.py that exploits CVE-2025-24801, an LFI-to-RCE vulnerability in GLPI 10.0.17. It automates: Logging into GLPI Enabling .php uploads by updating document type settings Uploading a PHP reverse shell via the AJAX...

8.8CVSS6.3AI score0.20986EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/12 3:29 p.m.4 views

RCE-QloApps-CVE-2024-40318

RCE-QloApps-CVE-2024-40318 A remote code execution RCE attack allow an attacker run code on a computer. The ability to execute code could lead to deploying additional malware or stealing sensitive data or even harm the server. The remote code execution was discover in Qloapps version 1.6.0.0 whil...

7.2CVSS5.9AI score0.01183EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 3:28 p.m.4 views

CVE-2022-28368

CVE-2022-28368 - Dompdf RCE Dompdf RCE PoC Exploit alt text ExploitDB Dompdf versions 1.2.1 are vulnerable to Remote Code Execution RCE by injecting CSS into the data. The file can be tricked into storing a malicious font with a .php file extension in its font cache, which can later be executed b...

9.8CVSS8.2AI score0.82438EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/12 2:34 p.m.9 views

HTB_Nibbles

HTBNibbles In this repository you will find the technical report of Nibbles, the exploit pwned.py to abuse the CVE-2015-6967 and an autopwn tool autopwn.py in case you want to resolve the machine in HackTheBox. Pwned.py tool: This file will help you to exploit CVE-2015-6967. If you want to run th...

6.5CVSS5.9AI score0.49308EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/12 2:14 p.m.6 views

CVE-2026-48908-by-yora

🔐 CVE-2026-48908 스캐너 및 안전한 PoC Joomla SP Page Builder — 인증되지 않은 파일 업로드 / 잠재적 RCE yora 개발 📌 소개 이 프로젝트는 yora 가 개발한 보안 연구 및 취약점 탐지 도구 로, Joomla용 SP Page Builder 에 영향을 미치는 CVE-2026-48908 을 식별하는 데 도움을 주기 위한 것입니다. 이 취약점은 인증되지 않은 파일 업로드 메커니즘과 관련이 있습니다. 취약한 조건에서는 공격자가 예상치 못한 파일 형식을 업로드할 수 있으며, 이로 인해 잠재적으...

10CVSS8.5AI score0.15086EPSS
SaveExploits8References3
Kitploit
Kitploit
added 2026/09/12 10:23 a.m.7 views

Pluck-CMS-v4.7.18-Remote-Code-Execution-CVE-2023-50564

CVE-2023-50564 — Удалённое выполнение кода RCE в Pluck CMS v4.7.18 Описание Этот скрипт эксплуатирует уязвимость удалённого выполнения кода RCE в Pluck CMS v4.7.18. Уязвимость позволяет злоумышленнику загрузить вредоносный PHP-файл на сервер и выполнить его, получив удалённое выполнение команд на...

8.8CVSS7.8AI score0.29069EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/12 10:21 a.m.10 views

cve-2025-0364

CVE-2025-0364: BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE The BigAntSoft BigAnt Server, which provides a Windows hosted on-premises chat server that focuses on business use cases, is vulnerable to unauthenticated remote code execution via account registration and PHP...

9.8CVSS8.3AI score0.0193EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/12 7:59 a.m.8 views

CVE-2025-45955

CVE-2025-45955 Server-Side Request Forgery in DonWeb Ferozo CVE-2025-45955 Description An attacker can exploit this vulnerability by uploading and executing a specially crafted PHP file on the Ferozo hosting platform. When accessed, the file launches a series of SSRF attempts targeting internal...

6AI score
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 7:36 a.m.6 views

MSAPer

MSAPer | CVE-2023-3076 - MStore API Automatic Mass Tool for check and exploiting vulnerability in CVE-2023-3076 - MStore API install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh How To Use Make sure you already install Parallel! Then do: git clone...

9.8CVSS8.1AI score0.02168EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/12 7:24 a.m.7 views

CVE-2021-44967

CVE-2021-44967 - Authenticatedprivileged RCE Authenticated privileged remote command execution in LimeSurvey Version 5.2.4 via upload and install plugins allows a remote user to upload arbitrary PHP code file. Usage python3 exploit.py --url --user --password --lhost --lport A superadmin user is...

9CVSS7.8AI score0.13502EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/12 6:16 a.m.7 views

CVE-2022-4047

CVE-2022-4047 Return Refund and Exchange For WooCommerce 4.0.9 - Unauthenticated Arbitrary File Upload Usage root@kitploit: @@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@ @@@@@@@@ @@@@@@ @@@@@@ @@@ @@@@@@@@ @@@ @@@@@@@@ @@@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@@@ @@@@@@@@@@ @@@@@@@@ @@@@@@@@ @@@@ @@@@@@@@@@ @@@@ @@@@@@@...

9.8CVSS8.2AI score0.06152EPSS
SaveExploits3
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.33 views

Xerte Online Toolkits <= 3.15 - Remote Code Execution

Xerte Online Toolkits versions 3.15 and earlier expose the elFinder file manager connector at /editor/elfinder/php/connector.php without authentication CVE-2026-34413, because the access-control redirect for unauthenticated users does not call exit/die and execution continues server-side. This is...

9.8CVSS5.9AI score0.03575EPSS
SaveExploits2References6
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.29 views

Multiple Thrive Themes < 2.0.0 - Arbitrary File Upload

Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Squared by...

9.1CVSS7.8AI score0.03946EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/11 10:58 p.m.5 views

nate158g-m-w-n-l-p-d-a-o-e

nate158g-m-w-n-l-p-d-a-o-e Этот модуль требует Metasploit: https://metasploit.com/download Текущий источник: https://github.com/rapid7/metasploit-framework...

7.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 8:33 p.m.5 views

CVE-2026-37068

CVE-2026-37068 Arbitrary file write in /vfm-admin/index.php?section=translations&action=update in Veno File Manager Project 4.4.9 allows an authenticated user with the role of super administrator to overwrite any php file in the application via a specially crafted POST request to the affected...

8.1CVSS5.9AI score0.00367EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 8:03 p.m.10 views

CVE-2024-33113

CVE-2024-33113 Маршрутизатор D-LINK DIR-845L уязвим к раскрытию информации через файл bscsmsinbox.php. CVE-2024-33113 — это уязвимость в маршрутизаторе D-LINK DIR-845L, которая позволяет раскрывать информацию через файл bscsmsinbox.php. Уязвимость возникает из-за некорректной обработки функции...

5.3CVSS5.9AI score0.03419EPSS
SaveExploits1
Rows per page
Query Builder