Lucene search
+L

419 matches found

Kitploit
Kitploit
•added 2026/09/14 7:21 a.m.•6 views

MSAPer

MSAPer | CVE-2023-3076 - MStore API Automatic Mass Tool for check and exploiting vulnerability in CVE-2023-3076 - MStore API install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh How To Use Make sure you already install Parallel! Then do: git clone...

9.8CVSS8.1AI score0.02168EPSS
SaveExploits2References2
Kitploit
Kitploit
•added 2026/09/14 6:49 a.m.•7 views

CVE-2025-44608

CVE-2025-44608 CloudClassroom-PHP Project v1.0 is vulnerable to RCE via SQL Injection. Vendor: https://github.com/mathurvishal/CloudClassroom-PHP-Project Software Link: https://github.com/mathurvishal/CloudClassroom-PHP-Project/archive/refs/heads/master.zip PoC Step 1: Navigate to the affected UR...

6.5CVSS5.9AI score0.00299EPSS
SaveExploits2References2
Kitploit
Kitploit
•added 2026/09/14 6:23 a.m.•7 views

CVE-2022-4047

CVE-2022-4047 Return Refund and Exchange For WooCommerce 4.0.9 - Unauthenticated Arbitrary File Upload Usage root@kitploit: @@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@ @@@@@@@@ @@@@@@ @@@@@@ @@@ @@@@@@@@ @@@ @@@@@@@@ @@@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@@@ @@@@@@@@@@ @@@@@@@@ @@@@@@@@ @@@@ @@@@@@@@@@ @@@@ @@@@@@@...

9.8CVSS8.2AI score0.06152EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/14 3:08 a.m.•9 views

CVE-2025-6058

🚨 CVE-2025-6058 — WordPress WPBookit ≤ 1.0.4 Unauthenticated File Upload Exploit Unauthenticated Arbitrary File Upload Exploit targeting WordPress WPBookit Plugin ≤ 1.0.4 Exploit allows remote shell upload and full command execution. Author: 0xgh057r3c0n šŸ“Œ About The Vulnerability CVE-2025-6058 is...

9.8CVSS5.8AI score0.05537EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/09/14 2:19 a.m.•6 views

exploit-CVE-2020-5844

Exploit para CVE-2020-5844 Pandora FMS v7.0NG.742 - Ejecución remota de código ¿Te gusta este repo? ”Danos una ⭐! Solo para fines educativos y de investigación de seguridad autorizada. Autor del exploit @UNICORDev por @NicPWNs y @Dev-Yeoj Descripción de la vulnerabilidad...

7.2CVSS7.8AI score0.30254EPSS
SaveExploits6References2
Kitploit
Kitploit
•added 2026/09/13 8:34 p.m.•5 views

CVE-2020-5844

CVE-2020-5844 Authenticated RCE in PandoraFMS 7.0-NG 742 Admin privileged attackers can upload malicious PHP documents. By decoding the base64 file location users can gain a shell as apache user. Discovered by TheCyberGeek PoC python script root@kitploit: Usage: python3 CVE-2020-5844.py URL USER...

7.2CVSS7.3AI score0.30254EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/13 5:13 p.m.•8 views

CVE-2025-24801

CVE-2025-24801 PoC for GLPI RCE This repository contains a proof-of-concept script poc.py that exploits CVE-2025-24801, an LFI-to-RCE vulnerability in GLPI 10.0.17. It automates: Logging into GLPI Enabling .php uploads by updating document type settings Uploading a PHP reverse shell via the AJAX...

8.8CVSS6.3AI score0.20986EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/13 4:04 p.m.•3 views

CVE-2023-4220

Chamilo LMS Unauthenticated Remote Code Execution Exploit CVE-2023-4220 Overview This repository contains a Bash script that exploits an unauthenticated remote code execution RCE vulnerability in Chamilo LMS via arbitrary file write. The vulnerability is identified as CVE-2023-4220. This exploit...

8.1CVSS7.2AI score0.76084EPSS
SaveExploits27
Kitploit
Kitploit
•added 2026/09/12 11:18 p.m.•12 views

CVE-2023-24249-Exploit

CVE-2023-24249 Exploit Script Description This repository contains an exploit script for CVE-2023-24249, a critical vulnerability found in laravel-admin version 1.8.19. This vulnerability allows for arbitrary file upload, enabling attackers to execute arbitrary code via a crafted PHP file. The...

7.2CVSS7.3AI score0.02382EPSS
SaveExploits3References1
Kitploit
Kitploit
•added 2026/09/12 2:34 p.m.•9 views

HTB_Nibbles

HTBNibbles In this repository you will find the technical report of Nibbles, the exploit pwned.py to abuse the CVE-2015-6967 and an autopwn tool autopwn.py in case you want to resolve the machine in HackTheBox. Pwned.py tool: This file will help you to exploit CVE-2015-6967. If you want to run th...

6.5CVSS5.9AI score0.49308EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/12 2:12 p.m.•6 views

CVE-2026-48908-by-yora

šŸ” CVE-2026-48908 Scanner & Safe PoC Joomla SP Page Builder — Unauthenticated File Upload / Potential RCE Developed byyora šŸ“Œ About This project is a security research and vulnerability detection tool developed by yora to help identify CVE-2026-48908 affecting SP Page Builder for Joomla. The...

10CVSS8.5AI score0.15086EPSS
SaveExploits8References3
Kitploit
Kitploit
•added 2026/09/12 10:23 a.m.•7 views

Pluck-CMS-v4.7.18-Remote-Code-Execution-CVE-2023-50564

CVE-2023-50564 - Pluck CMS v4.7.18 Remote Code Execution RCE Exploit Description This script exploits a Remote Code Execution RCE vulnerability in Pluck CMS v4.7.18. The vulnerability allows a malicious user to upload a malicious PHP file to the server and execute it, gaining remote command...

8.8CVSS7.8AI score0.29069EPSS
SaveExploits11
Kitploit
Kitploit
•added 2026/09/12 10:21 a.m.•10 views

cve-2025-0364

CVE-2025-0364: BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE The BigAntSoft BigAnt Server, which provides a Windows hosted on-premises chat server that focuses on business use cases, is vulnerable to unauthenticated remote code execution via account registration and PHP...

9.8CVSS8.3AI score0.0193EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/09/12 7:59 a.m.•8 views

CVE-2025-45955

CVE-2025-45955 Server-Side Request Forgery in DonWeb Ferozo CVE-2025-45955 Description An attacker can exploit this vulnerability by uploading and executing a specially crafted PHP file on the Ferozo hosting platform. When accessed, the file launches a series of SSRF attempts targeting internal...

6AI score
SaveExploits1
Kitploit
Kitploit
•added 2026/09/11 10:58 p.m.•5 views

nate158g-m-w-n-l-p-d-a-o-e

nate158g-m-w-n-l-p-d-a-o-e This module requires Metasploit: Current source: MetasploitModule 'Wordpress Popular Posts Authenticated RCE', 'Description' = %q This exploit requires Metasploit to have a FQDN and the ability to run a payload web server on port 80, 443, or 8080. The FQDN must also not...

8.8CVSS7.8AI score0.79823EPSS
SaveExploits5
Cvelist
Cvelist
•added 2026/09/11 6:00 a.m.•52 views

CVE-2026-14560 Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Arbitrary File Upload

The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preserving the original filename, allowing unauthenticated attackers to upload arbitrary PHP files and execute code on the server...

0.00442EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/10 6:08 p.m.•50 views

Unrestricted-File-Upload-on-SiteMagic-CMS-4.4.2

Unrestricted File Upload on SiteMagic CMS 4.4.2 This repo describe how to exploit unrestricted file upload vulnerability on SiteMagic CMS 4.4.2 About SiteMagic CMS 4.4.2 Website: https://sitemagic.org/ Download: https://sitemagic.org/Download.html PoC - Exploiting unrestricted file upload...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/10 5:41 p.m.•6 views

tpadmin-CVE-2026-2113-poc

tpadmin-CVE-2026-2113-poc A proof-of-concept exploiting a Remote Code Execution with web server privileges via Arbitrary File Upload. Vulnerability Description A critical Remote Code Execution vulnerability exists in H-ui.admin system's WebUploader preview component. The...

9.8CVSS7.5AI score0.02034EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/10 5:19 p.m.•8 views

CVE-2026-7537

MDJM Event Management = 1.7.8.3 - Authenticated Administrator+ Arbitrary File Upload via 'mdjmemailuploadfile' Parameter The WordPress MDJM Event Management plugin version 1.7.8.3 and prior contains an arbitrary file upload vulnerability that allows authenticated administrators to upload maliciou...

7.2CVSS6AI score0.00659EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/10 4:03 p.m.•8 views

CVE-2026-1357

CVE-2026-1357 -- WPvivid RCE Unauthenticated Remote Code Execution RCE in WPvivid Backup & Migration 800%2C000-brightgreen?style=for-the-badge" alt="Installs" Critical flaw impacting over 800,000–900,000+ WordPress sites Unauthenticated arbitrary PHP upload → full server compromise šŸŒ©ļø Overview...

9.8CVSS8.2AI score0.32714EPSS
SaveExploits14References1
Rows per page
Query Builder