Lucene search
+L

328891 matches found

Kitploit
Kitploit
•added 2026/10/23 3:27 p.m.•22 views

CVE-2021-26084

CVE-2021-26084 Atlassian Confluence Pre-Auth RCE...

9.8CVSS8.6AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
•added 2026/10/23 3:25 p.m.•21 views

CVE-2026-0073

ADB TLS Auth Bypass Exploit CVE-2026-0073 An automated network scanner and exploitation tool for CVE-2026-0073 , a vulnerability in the Android Debug Bridge daemon adbd that allows unauthenticated Remote Code Execution RCE and interactive shell access via Wireless Debugging. This tool is...

8.8CVSS8.1AI score0.00541EPSS
SaveExploits15
Kitploit
Kitploit
•added 2026/10/23 3:25 p.m.•19 views

Apache-Struts2-RCE-Exploit-v2-CVE-2017-5638

Modded-Apache-Struts2-RCE-Exploit-v2-CVE-2017-5638-AUTO-EXPLOITER...

10CVSS8.8AI score0.99999EPSS
SaveExploits51
Kitploit
Kitploit
•added 2026/10/23 3:25 p.m.•26 views

CVE-2021-34473-Exchange-ProxyShell

python sendwebshellmail.py https://mail16.echod.com [email protected] Single retrieval python sendwebshellmail.py https://mail16.echod.com crack Batch read emails from mail.txt and attempt to obtain SID tokens python sendwebshellmail.py https://mail16.echod.com [email protected] send on...

10CVSS8.8AI score0.99999EPSS
SaveExploits18
Kitploit
Kitploit
•added 2026/10/23 3:24 p.m.•20 views

CVE-2019-6340

CVE-2019-6340 CVE-2019-6340 POC Drupal rce python poc.py url php func command node number Example: python poc.py http://192.168.142.148/drupal-8.6.9/ system ipconfig 200 Twitter: @0w4ys...

8.1CVSS8.4AI score0.92017EPSS
SaveExploits25
Kitploit
Kitploit
•added 2026/10/23 3:24 p.m.•21 views

CVE-2024-7593

CVE-2024-7593 Description: CVE-2024-7593 is a critical vulnerability affecting multiple Pulse Secure products, including Pulse Secure VPN. This vulnerability allows an authenticated attacker with access to the management interface to execute arbitrary commands on the affected server. This can lea...

9.8CVSS9.3AI score0.99999EPSS
SaveExploits4
RedHat Linux
RedHat Linux
•added 2026/10/23 3:23 p.m.•2 views

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

9.2CVSS8.8AI score0.05991EPSS
SaveExploits350References6
RedHat Linux
RedHat Linux
•added 2026/10/23 3:23 p.m.•1 views

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

9.2CVSS8.8AI score0.05991EPSS
SaveExploits350References6
Kitploit
Kitploit
•added 2026/10/23 3:23 p.m.•18 views

CVE-2025-22604-Cacti-RCE

CVE-2025-22604-Cacti-RCE...

9.1CVSS8.9AI score0.05381EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/23 3:22 p.m.•22 views

CVE-2019-0708-EXP-MSF-

CVE-2019-0708-EXP-MSF- CVE-2019-0708-EXPMSF Vulnerability exploit program for cve-2019-0708 要求msf版本在5.0.4以上 mkdir -p /usr/share/metasploit-framework/modules/exploit/windows/rdp/ mkdir -p /usr/share/metasploit-framework/modules/auxiliary/scanner/rdp/ mkdir -p...

10CVSS8.5AI score0.99999EPSS
SaveExploits126
Kitploit
Kitploit
•added 2026/10/23 3:22 p.m.•20 views

CVE-2025-66478-Exploit-PoC

CVE-2025-66478 Exploit PoC This repository contains proof-of-concept PoC code for reproducing and researching the Next.js CVE-2025-66478 vulnerability. It includes a vulnerable Next.js application and a Node.js exploit script for testing the vulnerability. English · 中文 What is CVE-2025-66478? Thi...

8.1AI score
SaveExploits113References4
Kitploit
Kitploit
•added 2026/10/23 3:22 p.m.•29 views

CVE-2018-16763-FuelCMS-1.4.1-RCE

CVE-2018-16763 - FuelCMS = 1.4.1 RCE Exploit to trigger RCE for CVE-2018-16763 on FuelCMS = 1.4.1 and interactive shell. Features Automatically uploads a php webshell API in FuelCMS using CVE-2018-16763. Execute system commands via an API with ?action=exec. Download files from the remote system t...

9.8CVSS9.1AI score0.82937EPSS
SaveExploits22References4
Kitploit
Kitploit
•added 2026/10/23 3:20 p.m.•27 views

CVE-2026-34159

CVE-2026-34159 0 Click RCE exploit for CVE-2026-34159 Lama.cpp RPC server version b8487 exploit was developed by Hassan Ali @Casp3r0x0 you can find the full write up at https://www.pwntricks.com/ZeroClick-RCE-CVE-2026-34159-llama.cpp...

9.8CVSS7.4AI score0.01242EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/23 3:20 p.m.•17 views

CVE-2020-24186-wpDiscuz-7.0.4-RCE

POC CVE-2020-24186-wpDiscuz-7.0.4-RCE WordPress wpDiscuz 7.0.4 Remote Code Execution A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the...

10CVSS8.6AI score0.94616EPSS
SaveExploits19
Kitploit
Kitploit
•added 2026/10/23 3:18 p.m.•12 views

CVE-2026-4480-POC

CVE-2026-4480 - Samba Printing Subsystem Remote Code Execution Overview Proof-of-concept and research material related to CVE-2026-4480 , a critical Remote Code Execution RCE vulnerability affecting the Samba printing subsystem. The vulnerability is caused by improper handling of user-controlled...

9.8CVSS8.6AI score0.1393EPSS
SaveExploits12
Kitploit
Kitploit
•added 2026/10/23 3:17 p.m.•23 views

CVE-2024-4577

PHP-CGI Windows Platform Remote Code Execution Vulnerability CVE-2024-4577 Introduction PHP is an acronym for Hypertext Preprocessor. It is now a widely used open-source scripting language that is particularly suitable for web development and embedding in HTML, and is very simple to use. CGI, whi...

9.8CVSS8.5AI score0.99987EPSS
SaveExploits74
NVD
NVD
•added 2026/10/23 3:17 p.m.•6 views

CVE-2026-46652

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.03 to before version 26.05, ExternalFilesDownloader.getFilename extracts the destination filename from a server-supplied Content-Disposition response header and passes it directl...

9.8CVSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/23 3:17 p.m.•27 views

CVE-2022-22963

Spring Cloud Function VulnerabilityCVE-2022-22963 Vulnerable Application to CVE-2022-22963 CVE-2022-22963 Exploit Demo https://user-images.githubusercontent.com/57348147/161266562-51d025f0-54d4-488f-ac50-2317e29bfbdf.mp4 Build docker pull me2nuk/cves:2022-22963 docker run -it -p 8080:8080...

9.8CVSS8.2AI score0.99938EPSS
SaveExploits39References3
NVD
NVD
•added 2026/10/23 3:17 p.m.•4 views

CVE-2026-106763

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...

7.5CVSS
SaveExploits0References3
NVD
NVD
•added 2026/10/23 3:17 p.m.•5 views

CVE-2026-106764

An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function...

7.5CVSS
SaveExploits0References3
Rows per page
Query Builder