Lucene search
+L

271986 matches found

Kitploit
Kitploit
added 2026/09/16 5:53 a.m.8 views

CVE-2023-46012

CVE-2023-46012 LINKSYS AC1900 EA7500v3 IGD UPnP Stack Buffer Overflow Remote Code Execution Vulnerability This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of LINKSYS EA7500 routers. Authentication is not required to exploit this vulnerabilit...

9.8CVSS7.2AI score0.01623EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/16 5:52 a.m.6 views

CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template

CVE-2024-51568 - CyberPanel Command Injection PoC A proof-of-concept environment and Nuclei template for testing CVE-2024-51568, a critical pre-authentication command injection vulnerability in CyberPanel. Vulnerability Details CVE: CVE-2024-51568 Severity: Critical CVSS 9.8 Type:...

10CVSS8.6AI score0.45737EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/16 5:51 a.m.6 views

CVE-2021-21389

CVE-2021-21389 BuddyPress 7.2.1 - REST API Privilege Escalation to RCE PoC Full Affected version: 5.0.0 to 7.2.0 User requirement: Subscriber user Method: Privilege Escalation to Administrator and trigger RCE via REST API Endpoint: /v1/members/me endpoint. How to use Docker root@kitploit: git clo...

9CVSS8.1AI score0.13521EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/16 5:50 a.m.9 views

CVE-2015-1635-POC

️⃣ CVE-2015-1635-POC Remote Code Execution in HTTP.sys MS15-034...

10CVSS8.1AI score0.99999EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/16 5:50 a.m.10 views

CVE-2023-46805_CVE-2024-21887

CVE-2023-46805CVE-2024-21887 The script in this repository checks and exploits CVE-2023-46805 Auth Bypass and CVE-2024-21887 Remote Code Execution vulnerabilities specified in the Ivanti Connect Secure product exist. You can check vulnerability details this link...

9.1CVSS8.5AI score0.99999EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/16 5:48 a.m.8 views

CVE-2025-58434

CVE-2025-58434 - Flowise unauthenticated account takeover, chained to CustomMCP RCE Two Flowise 3.0.5 issues, chained: 1. CVE-2025-58434 - password-reset token disclosure. POST /api/v1/account/forgot-password returns the target user's tempToken directly in the JSON response. Feed it to POST...

9.8CVSS6.9AI score0.49894EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/16 5:48 a.m.12 views

CVE-2017-8291

Python PIL/Pillow Remote Command Execution GhostButt / CVE-2017-8291 中文版本Chinese version Python PIL Pillow is a popular image processing library for Python. It supports various image formats and provides powerful image manipulation capabilities. The Python image processing module PIL Pillow is...

7.8CVSS7.9AI score0.96968EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/16 5:48 a.m.9 views

xxl-job

xxl-job Executor RESTful API Unauthorized Access RCE Use the Execution Log Console to Obtain the Results of Successful Command Execution: Example: /joblog/logDetailPage?id=xxxx View the jdk Environment Variables root@kitploit: String var3 = System.getProperties.toString; System.out.printlnvar3;...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 5:48 a.m.8 views

cve-2025-55182-test-lab-windows

CVE-2025-55182 React2Shell Prueba ⚠️ Advertencia : Contiene una vulnerabilidad de ejecución remota de código RCE que funciona realmente. 📋 Índice Resumen Información de la vulnerabilidad Inicio rápido Demostración real del ataque Entorno de prueba Reglas de defensa WAF Estructura de archivos...

10CVSS8AI score0.99802EPSS
SaveExploits391
The Hacker News
The Hacker News
added 2026/09/16 5:48 a.m.3 views

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture, a premium WordPress plugin that has more than 6,000 active installs. "This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary files, including PHP backdoors, and achieve remot...

9CVSS6.5AI score0.02317EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/16 5:47 a.m.10 views

CVE-2025-55182

🚨 CVE-2025-55182 — React2Shell CVE-2025-55182 es una vulnerabilidad crítica de Ejecución Remota de Código RCE que afecta a los Componentes del Servidor de React RSC. 📌 Resumen Esta vulnerabilidad permite a atacantes no autenticados ejecutar código arbitrario en servidores vulnerables. El problema...

10CVSS8.3AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/16 5:47 a.m.8 views

CVE-2026-3300

CVE-2026-3300 - Everest Forms Pro Unauthenticated Stored Cross-Site Scripting Quick Usage root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: CRITICAL CVSS: 9.8 Impact: Confidentiality, Integrity, Availability Published:...

9.8CVSS6.7AI score0.39159EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 5:47 a.m.6 views

CVE-2025-24893

XWiki SSTI Exploit A Python exploit for XWiki Server-Side Template Injection SSTI vulnerability via Groovy template injection in the SolrSearch endpoint. Vulnerability Type : Server-Side Template Injection SSTI Component : XWiki SolrSearch RSS feed Impact : Remote Code Execution Affected Version ...

9.8CVSS8.4AI score0.99864EPSS
SaveExploits52
Kitploit
Kitploit
added 2026/09/16 5:46 a.m.6 views

CVE-2021-41773-L-

CVE-2021-41773 🐛 Vulnerabilidad de path traversal y divulgación de archivos en Apache HTTP Server 2.4.49 Se encontró una falla en un cambio realizado a la normalización de rutas en Apache HTTP Server 2.4.49. Un atacante podría usar un ataque de path traversal para asignar URLs a archivos fuera de...

9.8CVSS8.3AI score0.99992EPSS
SaveExploits165
Kitploit
Kitploit
added 2026/09/16 5:46 a.m.17 views

SGLang-0.5.9-RCE

SGLang SSTI to RCE PoC — Unsandboxed Jinja2 Chat Template Rendering CVE-2026-5760 Remote Code Execution via Server-Side Template Injection SSTI in SGLang's reranking endpoint. A malicious GGUF model file with a crafted tokenizer.chattemplate achieves arbitrary code execution when loaded into SGLa...

9.8CVSS9.2AI score0.00852EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/16 5:45 a.m.13 views

CVE-2025-25257

Table of Contents Overview Vulnerability Details Proof of Concept PoC Trolled2 Trolled3 Overview CVE-2025-25257 is a pre-authentication SQL Injection vulnerability in Fortinet FortiWeb Fabric Connector versions 7.0 through 7.6.x. This flaw allows attackers to inject malicious SQL commands into th...

9.8CVSS8.4AI score0.99775EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/16 5:43 a.m.11 views

-CVE-2014-6271

root@kitploit: / || | | | | | | | / || | | |/ \ / | |/ / \ | || | | | | | | \ | || | | | | | | ' / | | || || | | | || | || . \ |/|| |||||/|| ||/ ||\ CVE-2014-6271 — Shellshock Remote Code Execution via Bash Environment Variable Injection "Una falla que estuvo oculta en Bash durante décadas y...

10CVSS8.3AI score0.99999EPSS
SaveExploits146
Kitploit
Kitploit
added 2026/09/16 5:43 a.m.5 views

CVE-2024-25600-Bricks-Builder-plugin-for-WordPress

CVE-2024-25600 Exploit Tool 🚀 Description 📝 This tool 🛠️ is designed to exploit the CVE-2024-25600 vulnerability 🕳️ found in the Bricks Builder plugin for WordPress. The vulnerability allows for unauthenticated remote code execution on affected websites 💻. The tool automates the exploitation...

10CVSS9.1AI score0.88234EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/16 5:42 a.m.7 views

gitlab-rce-demo

GitLab Oj RCE Demo This repository contains a self-contained demo for the GitLab notebook-diff RCE chain described in our research. It starts a fresh GitLab 18.11.3 container, creates an ordinary user through the public HTTP interface, and runs the PoC against that instance. Technical details:...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 5:42 a.m.13 views

SuiteCRM-RCE

CVE-2020-28328 SuiteCRM Remote Code Execution via Log File System Setting and Log File Poisioning Overview I recently discovered two vulnerabilities in SuiteCRM that provides an attack chain for a low privileged user to achieve code execution on the underlying operating system. The attack chain i...

9CVSS8.1AI score0.63267EPSS
SaveExploits9References1
Rows per page
Query Builder