Lucene search
+L

924 matches found

Kitploit
Kitploit
added 2026/09/12 9:31 a.m.5 views

CVE-2022-26134

CVE-2022-26134 A pre-authenticated RCE vulnerability in Atlassian Confluence Summary of the CVE In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data...

9.8CVSS8.1AI score0.99999EPSS
SaveExploits77References1
Kitploit
Kitploit
added 2026/09/12 8:59 a.m.6 views

cve-2022-36804

CVE-2022-36804: Pre-Auth RCE in Atlassian Bitbucket Server A critical command injection vulnerability was found in multiple API endpoints of the Atlassian Bit bucket Server and Data center. This vulnerability affects all versions of Bitbucket Server and Data Center released before versions 7.6.17...

8.8CVSS8.2AI score0.99174EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/12 8:15 a.m.8 views

CVE-2023-27997-check

Herramienta de Evaluación de Vulnerabilidad CVE-2023-27997 Detecte de forma segura si una instancia de FortiGate SSL VPN es vulnerable a CVE-2023-27997 basándose en el tiempo de respuesta. Consulte el artículo completo en el blog de Bishop Fox, que incluye un recorrido completo de la metodología...

9.8CVSS8.4AI score0.85689EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/12 2:57 a.m.7 views

CVE-2025-47227_CVE-2025-47228

ScriptCase - Ejecución Remota de Comandos Pre-Autenticada Encadenamiento del restablecimiento de contraseña del administrador bypass de autenticación, CVE-2025-47227 e inyección de shell ejecución remota de comandos autenticada, CVE-2025-47228 La ejecución remota de comandos pre-autenticada se...

7.5CVSS7.8AI score0.17212EPSS
SaveExploits5
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.40 views

Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)

Microsoft Exchange Server contains a remote code execution caused by improper input validation in the server component, letting remote attackers execute arbitrary code, exploit requires network access to the server. id: CVE-2021-28480 info: name: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass...

10CVSS8.8AI score0.83214EPSS
SaveExploits4References5
Kitploit
Kitploit
added 2026/09/12 1:59 a.m.6 views

beyondtrust-rce-scanner

CVE-2026-1731 — BeyondTrust Remote Support & PRA Pre-auth RCE Overview Critical pre-authentication RCE in BeyondTrust Remote Support and Privileged Remote Access. Unauthenticated remote attacker can execute OS commands...

9.9CVSS8.2AI score0.895EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/12 1:48 a.m.5 views

cohort-htb

Cohort — HTB writeup & exploit chain Machine Cohort HackTheBox. Full kill chain: 1. SSRF in the Flask API /api/validate → internal vhost discovery 2. Pre-auth RCE in Marimo 0.20.4 WebSocket terminal CVE-2026-39987 → shell as marimo 3. Privilege escalation via PackageKit 1.2.8 D-Bus TOCTOU...

9.8CVSS0.98945EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/12 1:47 a.m.5 views

CVE-2026-39987_POC

PoC — CVE-2026-39987 · Marimo Pre-Auth RCE CVSS 4.0: 9.3 Critical · AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H Affects: marimo 2 calls to...

9.8CVSS0.98945EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/12 12:01 a.m.7 views

watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428

CVE-2025-4427 and CVE-2025-4428 Ivanti EPMM Chain Ivanti EPMM Pre-Auth RCE Chain 1day Detection Artifact Generator Tool Detection in Action root@kitploit: $ python3 watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428.py -H https://192.168.1.100 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ /...

8.8CVSS7.6AI score0.99927EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/11 11:50 p.m.9 views

cve-2026-39987

cve-2026-39987 Installation • Usage • Examples I'm just trying out Go :D Btw: CVE-2026-39987 PoC: Marimo:PORT/terminal/ws REDACTED@REDACTED:$ uname -a Linux ... REDACTED@REDACTED:$ exit exit INF:normalclose websocket: close 1000 normal: Terminal session ended Custom Command -c: r...

9.8CVSS8AI score0.98945EPSS
SaveExploits25References1
Kitploit
Kitploit
added 2026/09/11 9:44 p.m.5 views

vbulletin-exploits

vbulletin-exploits Exploits targeting vBulletin. CVE-2023-25135: Pre-authentication RCE See: https://www.ambionics.io/blog/vbulletin-unserializable-but-unreachable root@kitploit: ./vbulletin-rce-cve-2023-25135.py --help Usage: vbulletin-rce-cve-2023-25135.py -h -p PROXY url command Exploit for...

9.8CVSS8.3AI score0.23926EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 9:24 p.m.7 views

CVE-2025-55182

CVE-2025-55182 - React2Shell Ejecución remota de código sin autenticación en React Server Components. Resumen del CVE Existe una vulnerabilidad de ejecución remota de código sin autenticación en las versiones 19.0.0, 19.1.0, 19.1.1 y 19.2.0 de React Server Components, que incluye los paquetes...

10CVSS7.5AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/11 8:22 p.m.6 views

CVE-2026-48907

CVE-2026-48907 — Unauthenticated RCE in Joomla Content Editor JCE ≤ 2.9.99.4 Proof-of-concept exploit for CVE-2026-48907 — a CVSS 10.0 pre-authentication remote code execution vulnerability in the Joomla Content Editor JCE extension. Research by Grayxploit Security Team Table of Contents...

10CVSS8.4AI score0.781EPSS
SaveExploits27References1
Kitploit
Kitploit
added 2026/09/11 6:29 p.m.6 views

CVE-2024-5243-pwn2own-toronto-2023

CVE-2024-5243-pwn2own-toronto-2023 TP-Link ER605 Pre-Auth RCE CVE-2024-5242 / CVE-2024-5243 / CVE-2024-5244 Proof-of-Concept PoC exploit chain targeting the TP-Link Omada ER605 DDNS client daemon cmxddnsd when the device is configured to use the Comexe DDNS service. ⚠️ Legal / Ethics : This...

7.5CVSS6.7AI score0.00808EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 5:55 p.m.6 views

WP2Shell

WP2Shell - WordPress Pre-Auth RCE Exploit CVE-2026-63030 + CVE-2026-60137 Version: 4.0.0 Author: G0D150NE 📌 Overview WP2Shell is a full-chain exploit tool for WordPress pre-authentication remote code execution. It combines two critical vulnerabilities: CVE-2026-63030 - SQL Injection in REST API...

9.8CVSS8.4AI score0.97271EPSS
SaveExploits79
Kitploit
Kitploit
added 2026/09/11 4:34 p.m.5 views

CVE-2026-39987-Poc

CVE-2026-39987-Poc Proof of Concept PoC WebSocket client for CVE-2026-39987 Marimo Pre-Auth RCE, intended for authorized security testing. ⚠️ Disclaimer This script/tool is provided for educational, research, and authorized testing purposes only. It is designed to be used on systems where you have...

9.8CVSS7.9AI score0.98945EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/11 4:32 p.m.5 views

Blackash-CVE-2025-61757

🚨 CVE-2025-61757 — Pre-Auth RCE Alert 🚨 🧩 Summary ID: CVE-2025-61757 Product: Oracle Identity Manager Oracle Fusion Middleware Component: REST WebServices Affected Versions: 12.2.1.4.0 & 14.1.2.1.0 Severity: 🔴 Critical — 9.8 CVSS 3.1 Published: Oct 21, 2025 Type: Missing Authentication for Critic...

9.8CVSS7.9AI score0.88312EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 2:58 p.m.5 views

metasploitable-pentest-lab

Explotación de vulnerabilidades en Metasploitable Ciclo completo de un ataque real sobre un entorno controlado y aislado: preparación del laboratorio, reconocimiento con nmap, priorización de superficie de ataque, mapeo a CVE, explotación con Metasploit, post-explotación, extracción y cracking de...

6CVSS8.1AI score0.49759EPSS
SaveExploits18References1
Kitploit
Kitploit
added 2026/09/11 1:54 p.m.8 views

xss2shell

🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit Behavior-first mass scanner and evidence-grade PoC generator for the WordPress pre-auth XSS-to-RCE chain affecting 500M+ websites. Detection only. No weaponization. Built for bug bounty programs and blue teams. Official Checker:...

8.9CVSS7.8AI score0.31204EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/09/11 1:25 p.m.4 views

Exploiting-a-vulnerability-using-reverse-shell

Fundamentos de Seguridad de la Información — Proyecto Primavera 2026 Puntos Totales: 20 | Fecha Límite: No se aceptan entregas tardías Resumen Este proyecto simula un escenario real de ataque y defensa en dos máquinas virtuales. Explotarás una vulnerabilidad crítica de RCE antes de la autenticaci...

10CVSS7.8AI score0.98754EPSS
SaveExploits38References1
Rows per page
Query Builder