Lucene search
+L

29 matches found

Kitploit
Kitploit
added 2026/09/10 10:04 p.m.7 views

CVE-2020-1938

cve-2020-1938 1.read file: python3 tomcat.py URL -f /WEB-INF/web.xml example: python3 tomcat.py 127.0.0.1 -f /WEB-INF/web.xml -p 8090 2.excute shell add --rec 1 refere: https://www.t00ls.net/articles-55062.html...

9.8CVSS7.5AI score0.9927EPSS
SaveExploits51
Kitploit
Kitploit
added 2026/09/10 8:47 a.m.8 views

CVE-2024-51378

CVE-2024-51378 Analysis of the CVE-2024-51378 vulnerability, scripts for searching vulnerable hosts, using the exploit in single-threaded and multi-threaded mode in Python and nuclei. The use of scripts is allowed only for educational purposes on test hosts. 1-CVE-2024-51378.pdf - main file with ...

10CVSS8.5AI score0.94734EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/09 3:03 p.m.8 views

CVE-2017-18349

Lab 6-CVE-2017-18349 I. SYSTEM ANALYSIS Attack Surface Identification Let's start with what is running in the environment. I list all active containers: root@kitploit: docker ps The victim exposes only a single port:8090 Currently, I am not yet fully clear on the target. From the docker ps result...

10CVSS8.2AI score0.3897EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/08 9:32 p.m.5 views

CVE-2026-52102-PoC

CVE-2026-52102 - Exploit PoC A Proof of Concept PoC demonstrating CVE-2026-52102. Usage root@kitploit: python3 CVE-2026-52102-PoC.py Targets Add one target per line to the targets.txt file. Note: Only include systems that you own or have explicit authorization to test. Example: root@kitploit:...

9.8CVSS5.9AI score0.01758EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 9:29 p.m.6 views

CVE-2019-13956

CVE-2019-13956 cd CVE-2019-13956 docker-compose up -d http://127.0.0.1:8090...

9.8CVSS8.8AI score0.04572EPSS
SaveExploits3
NVD
NVD
added 2026/07/13 10:16 a.m.11 views

CVE-2026-22095

The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection...

9.3CVSS0.01391EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/13 10:16 a.m.11 views

CVE-2026-22096

The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints...

9.3CVSS0.00546EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/13 10:16 a.m.9 views

CVE-2026-22103

The NPC start endpoint on the web server at port 8090 is vulnerable to command injection...

9.3CVSS0.01391EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/13 9:11 a.m.15 views

CVE-2026-22103 Command injection in NPC start web endpoint

The NPC start endpoint on the web server at port 8090 is vulnerable to command injection...

9.3CVSS6.1AI score0.01391EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/13 9:11 a.m.44 views

CVE-2026-22103 Command injection in NPC start web endpoint

The NPC start endpoint on the web server at port 8090 is vulnerable to command injection...

9.3CVSS0.01391EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/13 9:11 a.m.34 views

CVE-2026-22103

CVE-2026-22103 : The NPC start endpoint on the web server listening at port 8090 is vulnerable to command injection. The public CVSS v4.0 metrics indicate a base score of 9.3 (CRITICAL) with network attack vector, low attack complexity, no privileges required, and no user interaction. Impacts are...

9.3CVSS6.1AI score0.01391EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/13 9:10 a.m.40 views

CVE-2026-22096 Missing authentication for webserver endpoints

The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints...

9.3CVSS0.00546EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/13 9:10 a.m.11 views

CVE-2026-22096 Missing authentication for webserver endpoints

The webserver running on port 8090 does not require authentication. This allows for sensitive information leakage such as configured passwords, or uploading files through different endpoints...

9.3CVSS6.1AI score0.00546EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/13 9:10 a.m.34 views

CVE-2026-22096

CVE-2026-22096 concerns a webserver running on port 8090 that does not require authentication, enabling sensitive information leakage (e.g., configured passwords) and file uploads via multiple endpoints. The Connected documents provide the same description across NVD and CVE records, with no vend...

9.3CVSS6.1AI score0.00546EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/13 9:10 a.m.10 views

CVE-2026-22095 Command injection in diagnosis web endpoint

The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection...

9.3CVSS6.1AI score0.01391EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/13 9:10 a.m.41 views

CVE-2026-22095 Command injection in diagnosis web endpoint

The network diagnosis endpoint on the web server at port 8090 is vulnerable to command injection...

9.3CVSS0.01391EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/13 9:10 a.m.35 views

CVE-2026-22095

The CVE-2026-22095 entry describes a command injection vulnerability in the network diagnosis endpoint of a web server listening on port 8090. Details from connected sources confirm the affected component is the diagnosis endpoint (web server) and that exploitation would allow command execution w...

9.3CVSS6.1AI score0.01391EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/13 12:00 a.m.26 views

PT-2026-57672

Name of the Vulnerable Software and Affected Versions EVbee DC-80 affected versions not specified Description The built-in web server running on port 8090 lacks authentication. This flaw allows unauthorized access to sensitive information, including configured passwords and stored credentials, an...

9.3CVSS6.1AI score0.00546EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/05/29 9:40 a.m.180 views

Exploit for Improper Input Validation in Alibaba Fastjson

Lab 6-CVE-2017-18349 I. SYSTEM ANALYSIS Attack S...

10CVSS7.5AI score0.3897EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2022/07/23 2:38 p.m.359 views

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 A remote attacker can construct OGNL expressi...

9.8CVSS7.5AI score0.99999EPSS
SaveExploits77
Rows per page
Query Builder