Lucene search
+L

3476 matches found

Kitploit
Kitploit
added 2026/09/13 5:33 p.m.4 views

debianopenssl

debianopenssl Private keys vulnerable to Debian OpenSSL bug CVE-2008-0166 In 2008 a bug in Debian's and Ubuntu's OpenSSL package led to predictable private keys. While the number of keys is limited, it takes a few considerations to create a proper list of all plausibly affected keys. This...

7.8CVSS7AI score0.70721EPSS
SaveExploits11References4
Kitploit
Kitploit
added 2026/09/13 4:59 p.m.5 views

Job-Manager-Disclosure

CV Filename Disclosure Scanner – CVE-2015-6668 This script automates the search for CV files such as .jpg, .png, .jpeg publicly exposed via the vulnerability CVE-2015-6668, related to the WP Job Manager plugin for WordPress versions ≤ 0.7.25. 🧠 Description The vulnerability allows knowing the exa...

7.5CVSS7.4AI score0.10031EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 4:24 p.m.6 views

CVE-2025-63353

CVE-2025-63353 A vulnerability in fiberhome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password WPA/WPA2 pre-shared key to be predicted from the SSID...

9.8CVSS5.9AI score0.01258EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 3:58 p.m.101 views

feroxbuster

!WARNING Security Notice – Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...

5.7AI score
SaveExploits0References12
Kitploit
Kitploit
added 2026/09/13 2:44 p.m.7 views

CVE-2021-38314

CVE-2021-38314 What is the vulnerability? The Gutenberg Template Library & Redux Framework plugin = 4.2.11 for WordPress registered several AJAX actions available to unauthenticated users in the includes function in redux-core/class-redux-core.php that were unique to a given site but deterministi...

5.3CVSS6.1AI score0.28961EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/13 12:53 p.m.7 views

CVE-2025-48461

CVE-2025-48461 Predictable session cookies that can be bruteforced to gain unauthorized access to Advantech WISE portal Summary During examination of Advantech WISE-4060 web portal, I have discovered that the session cookies used to authenticate to the web portal follows the pattern 60D01EXXXXX...

5CVSS6AI score0.0043EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 12:08 p.m.6 views

CVE-2020-0753-and-CVE-2020-0754

Writeup and POC for CVE-2020-0753, CVE-2020-0754 and six fixed Window DOS Vulnerabilities Exploit FileSystem race condition bug - analysis of CVE-2020-0753 and CVE-2020-0754 Windows Error Reporting service has fixed 2 Elevation of Privilege bugs in last Patch Tuesday, the two bugs are assigned wi...

7.8CVSS7.2AI score0.02313EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 11:50 a.m.7 views

Vulnerable-to-Debian-OpenSSL-bug-CVE-2008-0166

Búsqueda de monedas BTC en versiones anteriores de Bitcoin Core con la vulnerabilidad crítica OpenSSL 0.9.8 CVE-2008-0166 En este artículo, crearemos una herramienta que generará direcciones de Bitcoin P2PKH utilizando la vulnerabilidad CVE-2008-0166. Este es un proyecto de investigación para...

7.8CVSS6.9AI score0.70721EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/13 9:46 a.m.7 views

CVE-2026-11107-Insecure-Direct-Object-Reference-with-Predictable-UUIDv1

CVE-2026-11107 – Insecure Direct Object Reference with Predictable UUIDv1 Program Code Python Flask root@kitploit: idorserver.py - API with UUIDv1 user IDs import uuid, time from flask import Flask, request, jsonify app = Flaskname Generate predictable UUIDv1 based on timestamp + MAC users =...

4.3CVSS5.8AI score0.00227EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 9:21 a.m.5 views

passwordcheck

passwordcheck para archivos de configuración de rclone En https://github.com/rclone/rclone/issues/4783 se encontró un problema de seguridad que implicaba que las contraseñas generadas por "rclone config" podrían ser inseguras. Este programa comprueba tu archivo de configuración de rclone para...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 7:23 a.m.8 views

CVE-2021-38314

Divulgación de Información Sensible No Autenticada CVE-2021-38314 Exploit en Python para CVE-2021-38314 Use: python3 cve-2021-38314.py http://www.target.com El plugin Gutenberg Template Library & Redux Framework = 4.2.11 para WordPress registró varias acciones AJAX disponibles para usuarios no...

5.3CVSS6AI score0.28961EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/13 6:04 a.m.5 views

CVE-2025-7783-poc

Vulnerabilidad de aleatoriedad en el límite de form-data CVE-2025-7783 Basado en gran medida en https://hackerone.com/reports/2913312 por https://hackerone.com/parrot409?type=user Instalación: npm install Asegúrate de tener python3 instalado con el módulo z3 pip3 install -r requirements.txt -- el...

9.4CVSS6.7AI score0.01769EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:14 a.m.10 views

CVE-2025-27580

CVE-2025-27580: Unauthenticated Account Takeover in NIH BRICS NIH BRICS aka Biomedical Research Informatics Computing System through 14.0.0-67 generates predictable tokens that depend on username, time, and the fixed 7Dl9dj- string and thus allows unauthenticated users with a Common Access Card C...

7.5CVSS5.8AI score0.00681EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 3:23 a.m.12 views

debian-ssh

PRNG predecible de OpenSSL de Debian Enlaces URL original: http://metasploit.com/users/hdm/tools/debian-openssl/ Espejo Exploit: https://www.exploit-db.com/exploits/5622/ Perl https://www.exploit-db.com/exploits/5720/ Python https://www.exploit-db.com/exploits/5632/ Ruby Herramienta recomendada:...

7.8CVSS7AI score0.70721EPSS
SaveExploits11References1
Kitploit
Kitploit
added 2026/09/12 10:16 p.m.9 views

java-insecure-random-cve-2021-27568

java-insecure-random-cve-2021-27568 Demostración de CVE-2021-27568: Aleatoriedad insegura en la generación de tokens...

5.9CVSS6.9AI score0.0291EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 8:43 p.m.6 views

openCRX-CVE-2020-7378

openCRX-CVE-2020-7378 Unauthenticated Account Take Over Exploits Password Reset Vulnerability in OpenCRX, CVE-2020-7378. A Stealthy Python Implentation for CVE-2020-7378 Exploit is because, the developers used Random Class from java.util.Random to generate random tokens in order to reset a users...

9.1CVSS7.9AI score0.02617EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 5:24 p.m.7 views

CVE-2020-7378

CVE-2020-7378 – Exploit de token de restablecimiento de contraseña predecible y XXE en OpenCRX Este repositorio contiene un exploit de prueba de concepto PoC combinado para CVE-2020-7378 , una vulnerabilidad crítica en OpenCRX versiones hasta 5.0-20200717 inclusive. El exploit encadena dos...

9.1CVSS8AI score0.02617EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 4:45 p.m.4 views

keypairvuln

keypair vulnerable keys CVE-2021-41117 Keys generated with versions of the keypair javascript library vulnerable to CVE-2021-41117. Due to bugs in the random number generator this library will generate certain keys with higher likelyhood. The likelyhood of generating one of the keys in this repo...

9.1CVSS8.3AI score0.03091EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 12:52 p.m.11 views

CVE-2019-5420

CVE-2019-5420 Exploit for Rails CVE-2019-5420 The issue Until Rails v5.2.2, when secure the sessions in development mode, the application derives the key from the name of the application...

9.8CVSS7.5AI score0.92144EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/11 8:38 p.m.6 views

CVE-2026-25645

CVE-2026-25645 Insecure Temporary File Reuse in requests.utils.extractzippedpaths Executive Summary A vulnerability was identified in the requests library Python within the public utility function requests.utils.extractzippedpaths. The function utilizes a predictable, non-unique filename when...

5.5CVSS0.00182EPSS
SaveExploits0
Rows per page
Query Builder