Lucene search
+L

271606 matches found

Kitploit
Kitploit
•added 2026/09/13 3:12 p.m.•5 views

Cacti-CVE-2020-8813

Cacti-CVE-2020-8813 root@kitploit: Usage: cactirce.py options Options: -h, --help show this help message and exit -u URL, --url=URL Required target URL eg:. http://Cacti/ -l LHOST, --lhost=LHOST Required Attacker IP addr -p LPORT, --lport=LPORT Default 443 Attacker IP Port Example: root@kitploit:...

9.3CVSS7AI score0.73779EPSS
SaveExploits24
Kitploit
Kitploit
•added 2026/09/13 3:12 p.m.•4 views

CVE-2022-39197-POC

CVE-2022-39197-POC 中文版本READMECN.md Vulnerability Intro According to the Update Log of the latest version 4.7.1 officially released by CobaltStrike on 20 September, teamserver version We were contacted by an independent researcher named "Beichendream" to inform us of an XSS vulnerability they foun...

6.1CVSS7.4AI score0.46446EPSS
SaveExploits6References1
Kitploit
Kitploit
•added 2026/09/13 3:10 p.m.•12 views

CVE-CVSS--CVE-2024-38063-IPv6-TCP-IP-Remote-Code-Execution-Analysis

🔐 CVE-2024-38063 — IPv6 TCP/IP Remote Code Execution Analysis 📌 Project Description This project presents a technical analysis and practical demonstration of the critical vulnerability CVE-2024-38063 , disclosed by Microsoft during Patch Tuesday August 13, 2024. The vulnerability affects the...

9.8CVSS8.1AI score0.70564EPSS
SaveExploits26
Kitploit
Kitploit
•added 2026/09/13 3:10 p.m.•6 views

exploit-cve-2018-7448

exploit-cve-2018-7448 Purpose This is a python script to automate CMS Made Simple 2.1.6 - Remote Code Execution - CVE-2018-7448. It was created based on https://www.exploit-db.com/exploits/44192. Usage root@kitploit: python3 exploit-CVE-2018-7448.py -t 127.0.0.1/cmsms -d cms -u root -p password...

8.5CVSS7.4AI score0.12759EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/13 3:10 p.m.•5 views

CVE-2022-31144

CVE-2022-31144 CVE-2022-31144 dos redis. Rce not finished yet...

8.8CVSS6.5AI score0.03219EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/13 3:09 p.m.•7 views

WHS3_vulhub

CVE-2017-8386: git-shell Sandbox Bypass to RCE PoC 정수진@suz1n Overview Git-shell provides an environment that only allows restricted git commands via SSH. However, in specific versions of git-shell such as 2.12.2, a vulnerability CVE-2017-8386 exists that exploits the less command to bypass the...

8.8CVSS7.2AI score0.12387EPSS
SaveExploits2References2
Kitploit
Kitploit
•added 2026/09/13 3:09 p.m.•9 views

cve-2025-62726-poc

CVE-2025-62726 POC - n8n Git Node RCE Educational Purpose This is a proof-of-concept demonstration for CVE-2025-62726, created for educational purposes as part of a class project. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025 Vulnerability Overview CVE ID: CVE-2025-62726...

8.8CVSS6.2AI score0.0076EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/13 3:07 p.m.•5 views

CVE-2024-23692-RCE

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP POC CVE-2024-23692-RCE-EXP CVE-2024-23692 Rejetto HTTP HFS Server RCE FOFA "HttpFileServer" Notes Affected range: HFS 2.3 and below Usage How To Use ulimit -n 999999; zmap -p PORT -B500M | go...

9.8CVSS8.4AI score0.99471EPSS
SaveExploits21
Kitploit
Kitploit
•added 2026/09/13 3:06 p.m.•7 views

CVE-2026-10523-Ivanti-sentry

CVE-2026-10523 - Ivanti Sentry RCE Detection Tool A comprehensive proof-of-concept detection tool for testing Ivanti Sentry vulnerabilities related to authentication bypass and remote code execution. This tool identifies systems vulnerable to CVE-2026-10520 and CVE-2026-10523. Overview This proje...

10CVSS8.3AI score0.99915EPSS
SaveExploits7
Kitploit
Kitploit
•added 2026/09/13 3:03 p.m.•7 views

CVE-2018-5767-AC9

CVE-2018-5767-AC9 An implementation of a proof-of-concept for CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 root@kitploit: The following is an actualization of CVE-2018-5767, a vulnerability which exploits an unguarded call to sscanf that occurs when parsing the 'Cookie' header for a...

9.8CVSS8.2AI score0.47372EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/13 3:03 p.m.•8 views

Exploit-CVE-2025-24801

CVE-2025-24801 This exploit uses CVE-2025-24801 to get Remote Code Execution RCE via Local File Inclusion LFI at GLPI 10.0.17. Proof of Concept PoC of this CVE with explaination to this vulnerability in GLPI. Observation Some applications expose the /glpi/ endpoint e.g.,...

8.8CVSS6.3AI score0.20986EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/13 3:02 p.m.•5 views

CVE-2021-26121

CS-Cart templates.manage Server Side Template Injection Remote Code Execution Vulnerability Found by: Steven Seeley of 360 Vulcan Team Version: = 4.12.x latest Date: 2021-01-08 12:49 CVE: CVE-2021-26121 Disclosure Timeline 2021-01-26 – Sent to CSCart dev team 2021-01-27 – Notification of reciept...

7.3AI score
SaveExploits2
Kitploit
Kitploit
•added 2026/09/13 3:01 p.m.•6 views

CVE-2018-11736

CVE-2018-11736 PHP RCE Exploit Pluck CMS Disclaimer ⚠️: This exploit was developed in Rust primarily as an introductory programming learning exercise. Please excuse any lack of technical rigor or non-idiomatic code patterns. Also, this is not my discovery; I relied on official reports to write thi...

9.8CVSS8.3AI score0.08573EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/13 3:01 p.m.•6 views

CVE-2021-41773m

CVE-2021-41773 🐛 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like...

9.8CVSS8.1AI score0.99992EPSS
SaveExploits165
Kitploit
Kitploit
•added 2026/09/13 3:01 p.m.•5 views

CVE-2025-64512-Polyglot-PoC

CVE-2025-64512 Polyglot Payload In the last weeks in November 2025, an interesting vulnerability CVE-2025-64512 was disclosed in pdfminer.six, a popular Python project to process PDF files, used in particular in AI pipelines. The vulnerability enables remote code execution by deserializing...

8.6CVSS7.4AI score0.00312EPSS
SaveExploits9References1
Kitploit
Kitploit
•added 2026/09/13 3:01 p.m.•10 views

CVE-2023-38408

OpenSSH Vulnerability - CVE-2023-38408 📚 Introduction A vulnerability was found in OpenSSH before 9.3p2 version. The PKCS11 feature in the ssh-agent in OpenSSH has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system...

9.8CVSS8AI score0.797EPSS
SaveExploits10
Kitploit
Kitploit
•added 2026/09/13 3:00 p.m.•6 views

fix-react2shell-next

fix-react2shell-next One command to fix CVE-2025-66478 React 2 Shell RCE in your Next.js / React RSC app. root@kitploit: npx fix-react2shell-next Deterministic version bumps per the official advisories. What it does 1. Recursively scans all package.json files handles monorepos 2. Checks for...

7AI score
SaveExploits112
Kitploit
Kitploit
•added 2026/09/13 3:00 p.m.•7 views

poc-cve-2018-1273

CVE-2018-1273 Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted...

9.8CVSS8.4AI score0.97002EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/09/13 2:58 p.m.•7 views

CVE-2024-50623

POC - CVE-2024-50623- Cleo Unrestricted file upload and download Overview CVE-2024-50623 is a critical vulnerability identified in Cleo's file transfer software products—Cleo Harmony, Cleo VLTrader, and Cleo LexiCom—versions prior to 5.8.0.21. This flaw allows for unrestricted file uploads and...

9.8CVSS8.4AI score0.98607EPSS
SaveExploits6References1
Kitploit
Kitploit
•added 2026/09/13 2:57 p.m.•9 views

CVE-2024-24590-ClearML-RCE-Exploit

CVE-2024-24590 — ClearML Pickle Artifact RCE Overview...

8.8CVSS7.8AI score0.02473EPSS
SaveExploits9
Rows per page
Query Builder