Lucene search
+L

5813 matches found

Kitploit
Kitploit
added 2026/09/14 9:15 p.m.8 views

waymore

Acerca de - v8.9 La idea detrás de waymore es encontrar aún más enlaces de Wayback Machine además de otras fuentes que otras herramientas existentes. 👉 La mayor diferencia entre waymore y otras herramientas es que también puede descargar las respuestas archivadas para las URLs en Wayback Machine ...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/14 8:37 p.m.11 views

CVE-2019-19633

CVE-2019-19633 lib/G/functions.php in Chevereto 1.0.0 through 1.1.4 Free, and through 3.13.5 Core, allows an attacker to perform bruteforce attacks without triggering the implemented protection mechanism by manipulating the X-Forwarded-For header in the request. The IP in the header has to be...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 8:07 p.m.1277 views

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

5.6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/14 7:33 p.m.61 views

domain

Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 6:11 p.m.7 views

CVE-2020-35590

Exploit Information Exploit Title: WordPress Plugin Limit Login Attempts Reloaded 2.13.0 - Login Limit Bypass CVE: CVE-2020-35590 Date: 2020-06-09 Exploit Author: N4nj0 Software Link: https://wordpress.org/plugins/limit-login-attempts-reloaded/ Version: 2.13.0 Tested on: WordPress 5.4.1, 5.4.2...

9.8CVSS8AI score0.04348EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/14 5:50 p.m.7 views

rover

rover Proof of Concept code for CVE-2016-5696 Rover is a small python program to discover abitrary client source ports as shown in CVE-2016-569. Once the source port is known, the 4 tuple of information needed to confirm that two host are communicating can be completed. When run, rover establishe...

5.8CVSS7AI score0.15073EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/14 5:39 p.m.8 views

CVE-2021-39409

CVE-2021-39409 Admin account registration is possible in Online Student Rate System v1.0, allowing a malicious actor to create an admin account and access the admin panel. Vulnerability root@kitploit: POST /ajax.php?action=signup HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 X11; Linux x8664;...

9.8CVSS8.1AI score0.02783EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 5:31 p.m.10 views

subbrute

subdomain-bruteforcer SubBrute SubBrute es un proyecto impulsado por la comunidad con el objetivo de crear la herramienta de enumeración de subdominios más rápida y precisa. Parte de la magia de SubBrute es que utiliza resolvedores abiertos como una especie de proxy para evitar el límite de...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 4:52 p.m.27 views

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

5.9AI score
SaveExploits0References1
NVD
NVD
added 2026/09/14 4:17 p.m.4 views

CVE-2026-55795

Craft Commerce is an ecommerce platform for Craft CMS. From 4.0.0 until 4.11.2 and 5.6.5, CartController in src/controllers/CartController.php activates its RateLimiter only when the number POST or GET parameter is supplied. An unauthenticated attacker can submit couponCode values to...

6.9CVSS
SaveExploits0References5
CVE
CVE
added 2026/09/14 3:55 p.m.41 views

CVE-2026-55795

Craft Commerce (an ecommerce plugin for Craft CMS) is affected by a rate-limit bypass in CartController (src/controllers/CartController.php). The RateLimiter behavior activates only when the number POST/GET parameter is present. An unauthenticated attacker can omit number while submitting couponC...

6.9CVSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/14 3:55 p.m.14 views

CVE-2026-55795 Craft Commerce: Coupon Code Brute-Force via Rate Limit Bypass

Craft Commerce is an ecommerce platform for Craft CMS. From 4.0.0 until 4.11.2 and 5.6.5, CartController in src/controllers/CartController.php activates its RateLimiter only when the number POST or GET parameter is supplied. An unauthenticated attacker can submit couponCode values to...

6.9CVSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/14 3:55 p.m.6 views

EUVD-2026-77587

Craft Commerce is an ecommerce platform for Craft CMS. From 4.0.0 until 4.11.2 and 5.6.5, CartController in src/controllers/CartController.php activates its RateLimiter only when the number POST or GET parameter is supplied. An unauthenticated attacker can submit couponCode values to...

6.9CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/14 3:46 p.m.11 views

openclaw-dashboard

OpenClaw Agent Dashboard OpenClaw エージェント向けの美しく、安全で、リアルタイムな監視ダッシュボード。セッションの追跡、API 使用状況の監視、コストの表示、メモリファイルの管理、システムの健全性の把握をすべて一か所で行えます。 📸 スクリーンショット 概要| セッション| コスト ---|---|--- | | レート制限| ライブフィード| ログ ---|---|--- | | !Logshttps://assets.kitploit.com/production/public/readmes/11778/4b8b21...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/14 2:35 p.m.8 views

CVE-2023-38545-POC

CVE-2023-38545 POC para la herramienta de línea de comandos curl Este POC se basa en el POC anterior creado por UTsweetyfish, compartido en este repositorio:https://github.com/UTsweetyfish/CVE-2023-38545. A diferencia de ese POC, este es para la herramienta de línea de comandos y no para la...

9.8CVSS7.2AI score0.78483EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/14 2:24 p.m.12 views

batchql

BatchQL BatchQL es un script de auditoría de seguridad de GraphQL centrado en realizar consultas y mutaciones GraphQL por lotes. Este script no es complejo y agradecemos las mejoras. Al explorar el espacio problemático de los ataques de batching en GraphQL, encontramos que hay algunas publicacion...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 2:13 p.m.7 views

CrackQL

CrackQL CrackQL is a GraphQL password brute-force and fuzzing utility. CrackQL is a versatile GraphQL penetration testing tool that exploits poor rate-limit and cost analysis controls to brute-force credentials and fuzz operations. Table of Contents How it works Attack Use Cases Defense Evasion...

6AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/14 1:07 p.m.7 views

dheat_dos_attack_poc

DHeat DoS Attack POC CVE-2002-20001 POC for Testing the Existence of DHEat DOS Attack for CVE-2002-20001 in SSH Service Usage command: python3 dheatdosattackpoc.py : Replace with the actual IP address or hostname of the SSH server you have permission to test. : Target Port number running SSH...

7.5CVSS7.3AI score0.24639EPSS
SaveExploits1References1
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.11 views

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h6 – Reparenting the CPUX during PLL CPUX clock rate changes. While changes in the PLL CPUX clock rate when the CPU is running work in the vast majority of cases, occasionally they cause instability. This leads to...

5.5CVSS6.2AI score0.00269EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.9 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: tun: limits the printing rate when an illegal packet is received by the tun device. vhostworker calls tun callbacks to receive packets. If too many illegal packets arrive, tundoread continues to dump the packet contents. When...

5.5CVSS6.3AI score0.00273EPSS
SaveExploits0References2
Rows per page
Query Builder