Lucene search
+L

11618 matches found

Kitploit
Kitploit
added 2026/08/26 7:39 p.m.2 views

CVE-2026-32488

CVE-2026-32488 CVE-2026-32488 nonce値を変数に代入する $NONCE = "c82a4f80ba" curl.exe -s -X POST "http://localhost/wp-admin/admin-ajax.php" -d "action=userregistrationuserformsubmit" -d "urfrontendformnonce=$NONCE" -d "formid=6" -d...

8.1CVSS5.2AI score0.00345EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 7:23 p.m.1 views

twitterBFTD

twitterBFTD 죽음에서 돌아온 트위터: 사용자의 트윗 기록에서 등록 가능한 도메인 이름을 찾습니다. 블로그 글 참조: 내가 케이티 페리, 샤키라 등 톱 셀럽들의 트윗을 하이재킹한 방법 pip install pythonwhois tweepy 사용법: 폴더 루트에서 실행하면 BFTDresults.txt 파일이 생성됩니다...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 7:20 p.m.2 views

Pachine

Pachine PythonによるCVE-2021-42278 Active Directoryの権限昇格 の実装です。 インストール root@kitploit: $ pip3 install impacket 使用法 root@kitploit: Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: pachine.py -h -scan -spn SPN -impersonate IMPERSONATE -domain-netbios NETBIOSNAME -computer-name...

8.8CVSS7.2AI score0.76109EPSS
SaveExploits10References4
Kitploit
Kitploit
added 2026/08/26 6:09 p.m.72 views

poastal

Poastal - the Email OSINT tool Poastal is an email OSINT tool that provides valuable information on any email address. With Poastal, you can easily input an email address and it will quickly answer several questions, providing you with crucial information. ✨ Features Determine the name of the...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 5:56 p.m.4 views

WebLogic-Shiro-shell

Java逆シリアライズ技術の共有 今回の共有で扱う内容は以下のとおりです。 1. Javaのシリアライズと逆シリアライズの基礎 2. なぜ逆シリアライズの際に脆弱性が発生するのか? 3. Javaリフレクション 4. ysoserial CommonsCollections2、CommonsCollections5 5. Java ClassLoader でクラスをロードするいくつかの方法 6. WebLogic CVE-2020-2555 CVE-2020-2883 RCE 7. Shiro-550 rememberMe のハードコードによる逆シリアライズRCE 8. WebLogic...

9.8CVSS9.1AI score0.97116EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/08/26 4:20 p.m.51 views

OSINT-Framework

OSINT Framework http://osintframework.com Notes OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get...

5.4AI score
SaveExploits0References1
CVE
CVE
added 2026/08/26 2:37 p.m.5 views

CVE-2026-80559

CVE-2026-80559 affects the Linux kernel's sur40 driver, a SUR40 USB camera controller. The root cause is an incorrect initialization ordering in sur40_probe(): input_register_device() was called before the V4L2 video device and vb2_queue structures were fully initialized. If userspace opens the i...

5.4AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/08/26 11:58 a.m.2 views

CVE-2022-44830

Descrizione suggerita È stato scoperto che Sourcecodester Event Registration App v1.0 contiene molteplici vulnerabilità di iniezione CSV nei campi First Name, Contact e Remarks. Queste vulnerabilità consentono agli aggressori di eseguire codice arbitrario tramite un file Excel appositamente...

7.8CVSS7.5AI score0.00558EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 11:52 a.m.1 views

CVE-2006-0450-phpBB-2.0.15-Multiple-DoS-Vulnerabilities

Neo Security Team NST® - Advisory 15 - 00/00/06 Programma: phpBB 2.0.15 Homepage: http://www.phpbb.com Versioni Vulnerabili: phpBB 2.0.15 e versioni precedenti Rischio: Alto!! Impatto: Molteplici vulnerabilità DoS. Descrizione phpBB è un potente sistema di bacheca open source completamente...

5CVSS5.3AI score0.05089EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 11:42 a.m.2 views

CVE-2025-4334

🔓 Simple User Registration = 6.3 - Escalata dei Privilegi Non Autenticata 📄 Descrizione Il plugin Simple User Registration per WordPress è vulnerabile all'Escalata dei Privilegi in tutte le versioni fino alla 6.3 inclusa. Ciò è dovuto a insufficienti restrizioni sui metadati utente che possono...

9.8CVSS5.2AI score0.02055EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/26 10:35 a.m.1 views

CVE-2021-34621-EXPLOIT

CVE-2021-34621 - Escalation dei privilegi di WordPress È stata identificata una vulnerabilità critica nel componente di registrazione utente del plugin WordPress ProfilePress. Questa falla di sicurezza, identificata come CVE-2021-34621, consente a utenti non autorizzati di registrarsi su siti web...

9.8CVSS8.7AI score0.68862EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/08/26 10:33 a.m.2 views

CVE-2021-22210

0x01 Vorwort Erklärung: Dieses Projekt dient nur zu Lern- und Kommunikationszwecken. Bitte nicht für unbefugte Tests verwenden! Änderungsprotokoll 10.30 burp-Proxy-Pool hinzugefügt Befehlszeilenargumente neu geschrieben gitlab-Massen- und Einzelprüfung auf nicht autorisierten Zugriff hinzugefügt...

10CVSS7.6AI score0.99731EPSS
SaveExploits29References3
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.1 views

CVE-2022-43097

CVE-2022-43097 Alle Details zu CVE-2022-43097 Software: Phpgurukul Benutzerregistrierungs- und Benutzerverwaltungssystem v3.0 Software-Link: https://phpgurukul.com/user-registration-login-and-user-management-system-with-admin-panel/ Beschreibung: Es wurde festgestellt, dass Phpgurukul User...

5.4CVSS5.6AI score0.00546EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

CVE-2026-5118

🔥 CVE-2026-5118 Divi Form Builder Ein verstecktes Feld. Ein geänderter Wert. Vollzugriff auf die gesamte Website. 🧨 Was kann ein Angreifer tun? 🔬 Schwachstellenanalyse Schwachstellenort root@kitploit: includes/shared/handlers/FormSubmissionHandler.php → createuser Angreifbarer Code root@kitploit:...

9.8CVSS5.3AI score0.00487EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.1 views

CVE-2024-49328-exploit

CVE-2024-49328-exploit 🌟 Descrizione: Questo script sfrutta una vulnerabilità di escalation dei privilegi nel plugin WP REST API FNS per WordPress. La vulnerabilità interessa tutte le versioni fino alla 1.0.0 inclusa, consentendo a utenti non autenticati di ottenere privilegi di amministratore. ⚙️...

9.8CVSS5.4AI score0.01503EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.3 views

SharpSCOM

SharpSCOM Uno strumento C per interagire con Microsoft System Center Operations Manager SCOM. Questo strumento è stato testato con il server SCOM versione 10.22.10118.0. L'integrazione SSPI è fornita tramite la libreria nsspi di Kevin Thompson antiduh, rilasciata sotto licenza BSD-2. Utilizzo da...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.3 views

CVE-2017-8367

CVE-2017-8367 PoC-Exploit für die Schwachstelle CVE-2017-8367: Stack-basierter Pufferüberlauf in der Registrierungsfunktion von Easy Mov Converter. Verwendung Führen Sie das Skript aus und die Datei POCPayload.txt wird erstellt, die den Payload enthält. root@kitploit: python3...

7.8CVSS7.4AI score0.05507EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

CVE-2025-2563

CVE-2025-2563 — User Registration & Membership | Escalation Admin a Catena Completa root@kitploit: ██╗ ██╗███████╗███████╗██████╗ ██████╗ ███████╗ ██████╗ ██║ ██║██╔════╝██╔════╝██╔══██╗ ██╔══██╗██╔════╝██╔════╝ ██║ ██║███████╗█████╗ ██████╔╝ ██████╔╝█████╗ ██║ ███╗ ██║ ██║╚════██║██╔══╝ ██╔══██╗...

8.1CVSS8.7AI score0.46384EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.1 views

CVE-2022-1162

CVE-2022-1162 In GitLab CE/EE wurde für Konten, die über einen OmniAuth-Anbieter z. B. OAuth, LDAP, SAML registriert wurden, in den Versionen 14.7 vor 14.7.7, 14.8 vor 14.8.5 und 14.9 vor 14.9.2 ein hartcodiertes Passwort festgelegt, das es Angreifern potenziell ermöglicht, Konten zu übernehmen...

9.8CVSS8.9AI score0.76177EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.4 views

CVE-2021-46362

CVE-2021-46362: FreeMarker Server-seitige Template-Injection in Magnolia CMS Eine Schwachstelle für Server-seitige Template-Injection SSTI in den Formularen zur Registrierung und zum vergessenen Passwort von Magnolia v6.2.3 und niedriger erlaubt es nicht authentifizierten Angreifern, beliebigen...

9.8CVSS8.8AI score0.04663EPSS
SaveExploits1References1
Rows per page
Query Builder