Lucene search
+L

333405 matches found

Kitploit
Kitploit
•added 2026/10/22 2:20 p.m.•19 views

CVE-2019-6340

CVE-2019-6340 CVE-2019-6340 POC Drupal rce python poc.py url php func command node number Example: python poc.py http://192.168.142.148/drupal-8.6.9/ system ipconfig 200 Twitter: @0w4ys...

8.1CVSS8.4AI score0.92017EPSS
SaveExploits25
Kitploit
Kitploit
•added 2026/10/22 2:18 p.m.•15 views

CVE-2024-32030-Nuclei-Template

CVE-2024-32030 Nuclei Template Description This repository contains a Nuclei template for detecting the CVE-2024-32030 vulnerability. This vulnerability allows for remote code execution via JMX Metrics Collection JNDI Resolution. Vulnerability Details ID: CVE-2024-32030 Name: JMX Metrics Collecti...

8.1CVSS8.3AI score0.51051EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/22 2:17 p.m.•22 views

apache_normalize_path

CVE-2021-41773|CVE-2021-42013: Path Traversal Zero-Day in Apache HTTP Server Exploited On October 5, the Apache HTTP Server Project patched CVE-2021-41773, a path traversal and file disclosure vulnerability in Apache HTTP Server, an open-source web server for Unix and Windows that is among the mo...

9.8CVSS8.9AI score0.99992EPSS
SaveExploits208References3
NVD
NVD
•added 2026/10/22 2:17 p.m.•3 views

CVE-2026-94502

In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...

7.5CVSS
SaveExploits0References1
NVD
NVD
•added 2026/10/22 2:17 p.m.•3 views

CVE-2026-85079

In EmberZNet 9.1.1 and earlier, a malformed SimpleDescreq response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a SimpleDescreq before the attack can be...

7.5CVSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/22 2:17 p.m.•20 views

CVE-2024-6387

Vulnerability Description CVE-2024-6387 exploit targets a signal handler race condition in the OpenSSH server sshd on glibc-based Linux systems. Due to calling an async-signal-unsafe function in the SIGALRM handler, this vulnerability allows remote code execution as root. Vulnerability Summary Th...

8.1CVSS7.8AI score0.99506EPSS
SaveExploits72
Kitploit
Kitploit
•added 2026/10/22 2:16 p.m.•25 views

CVE-2021-34473-Exchange-ProxyShell

python sendwebshellmail.py https://mail16.echod.com [email protected] Single retrieval python sendwebshellmail.py https://mail16.echod.com crack Batch read emails from mail.txt and attempt to obtain SID tokens python sendwebshellmail.py https://mail16.echod.com [email protected] send on...

10CVSS8.8AI score0.99999EPSS
SaveExploits18
Kitploit
Kitploit
•added 2026/10/22 2:16 p.m.•23 views

Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution

Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution Script that exploits the vulnerability that allows remote code execution in Ruby 2.3.8 ​​with CVE-2016-2098 Usage ./RubyOnRailsActionPackInlineERB-RemoteCodeExecution.py -h --target-host TARGETHOST --port PORT --target-uri TARGETURI...

7.5CVSS8AI score0.81445EPSS
SaveExploits8
Kitploit
Kitploit
•added 2026/10/22 2:13 p.m.•29 views

CVE-2022-21907

CVE-2022-21907 Vulnerability in HTTP Protocol Stack Enabling Remote Code Execution and Potential System Crash. Table of Contents CVE-2022-21907 Description Environment Victim Machine Configuration Attacker Machine Configuration Exploit Proof of Concept References Description CVE-2022-21907 is a...

10CVSS9AI score0.9279EPSS
SaveExploits21
Kitploit
Kitploit
•added 2026/10/22 2:13 p.m.•27 views

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 Scanner PoC by @JaGoTu and @zerosum0x0. In this repo A scanner fork of rdesktop that can detect if a host is vulnerable to CVE-2019-0708 Microsoft Windows Remote Desktop Services Remote Code Execution vulnerability. It shouldn't cause denial-of-service, but there is no...

10CVSS8.3AI score0.99999EPSS
SaveExploits126
Kitploit
Kitploit
•added 2026/10/22 2:13 p.m.•23 views

CVE-2021-40904

CVE-2021-40904 - RCE via CheckMk's Dokuwiki embedded application Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 1.5.0p25 Attack type: RCE Solution: Upgrade to version 1.6 or higher. Summary: The web management console of CheckMk Raw Edition versions 1.5.0 to 1.5.0p25...

8.8CVSS8.5AI score0.03692EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/22 2:13 p.m.•25 views

CVE-2018-7602

CVE-2018-7602 A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - High...

9.8CVSS8.2AI score0.99172EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/10/22 2:13 p.m.•29 views

WORDPRESS-CVE-2024-25600-EXPLOIT-RCE

WORDPRESS-CVE-2024-25600-EXPLOIT-RCE WORDPRESS-CVE-2024-25600-EXPLOIT-RCE - WordPress Bricks Builder Remote Code Execution RCE...

10CVSS8.9AI score0.88234EPSS
SaveExploits23
Kitploit
Kitploit
•added 2026/10/22 2:13 p.m.•27 views

CVE-2013-4710-WebView-RCE-Vulnerability

CVE-2013-4710-WebView-RCE-Vulnerability Vulnerability Description A lot of the time we use WebView to display a Webpage,for example many applications in order to achieve the server control, many results page is Webpage, rather than the local implementation, which has many advantages, such as...

9.3CVSS6.8AI score0.43356EPSS
SaveExploits7
Kitploit
Kitploit
•added 2026/10/22 2:12 p.m.•28 views

CVE-2021-21978

CVE-2021-21978 Exploit script with echo back, a simpler way 0. Vulnerability Information The VMware View Planner Web management interface has an entry for uploading log functionality files, which requires no authentication and the log file path written is user-controllable. By overwriting the...

9.8CVSS8.7AI score0.99005EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/10/22 2:11 p.m.•18 views

react2shell-poc-CVE-2025-55182

React2Shell PoC CVE-2025-55182 A Proof-of-Concept PoC script for React2Shell CVE-2025-55182, a critical remote code execution RCE vulnerability affecting Next.js applications using Server Actions. !WARNING Disclaimer : This tool is for educational and authorized testing purposes only. I am not...

10CVSS8.7AI score0.99802EPSS
SaveExploits402
Kitploit
Kitploit
•added 2026/10/22 2:11 p.m.•22 views

CVE-2019-0708-EXP-MSF-

CVE-2019-0708-EXP-MSF- CVE-2019-0708-EXPMSF Vulnerability exploit program for cve-2019-0708 要求msf版本在5.0.4以上 mkdir -p /usr/share/metasploit-framework/modules/exploit/windows/rdp/ mkdir -p /usr/share/metasploit-framework/modules/auxiliary/scanner/rdp/ mkdir -p...

10CVSS8.5AI score0.99999EPSS
SaveExploits126
Kitploit
Kitploit
•added 2026/10/22 2:11 p.m.•22 views

n8n-cve-2025-68613-thm

CVE-2025-68613 – n8n Critical RCE Exploitation Overview This repository documents a hands-on exploitation of CVE-2025-68613 CVSS 9.9 , a critical Remote Code Execution vulnerability affecting the n8n workflow automation platform versions 0.211.0 through 1.120.3. This exploitation was performed...

9.9CVSS9.5AI score0.98994EPSS
SaveExploits35
Kitploit
Kitploit
•added 2026/10/22 2:10 p.m.•17 views

CVE-2020-36184

Description FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource. How to RCE pom.xml 4.0.0 com.jacksonTest jacksonTest 1.0-SNAPSHOT com.fasterxml.jackson.core...

8.8CVSS8AI score0.08356EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/22 2:09 p.m.•19 views

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE. POST /mgmt/tm/util/bash HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Connection: close, X-F5-Auth-Token, X-Forwarded-For, Local-Ip-From-Httpd, X-F5-New-Authtok-Reqd, X-Forwarded-Server, X-Forwarded-Host Content-type:...

9.8CVSS9AI score0.99954EPSS
SaveExploits63
Rows per page
Query Builder