Lucene search
+L

273934 matches found

Kitploit
Kitploit
added 2026/08/28 4:59 a.m.2 views

CVE-2024-38063

CVE-2024-38063 – Windows IPv6-Stack-Sicherheitslücke Analyse & PoC -red Technische Analyse und Proof-of-Concept PoC für CVE-2024-38063 , eine kritische Remote-Codeausführungs-Sicherheitslücke RCE im Windows-IPv6-Stack tcpip.sys. Entdeckt von KunLun Lab, ist dieser Fehler zero-click , d.h. er kann...

9.8CVSS7.2AI score0.70564EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/08/28 4:59 a.m.1 views

CVE-2023-0669-Analysis

CVE-2023-0669 Questa repository contiene i pacchetti e gli script utilizzati in questa analisi https://www.vicarius.io/vsociety/blog/unauthenticated-rce-in-goanywhere La versione vulnerabile di GoAnywhere per Linux https://www.dropbox.com/s/j31l8lgvapbopy3/ga703linuxx64.sh?dl=0...

7.2CVSS7AI score0.99999EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/08/28 4:58 a.m.2 views

CVE-2026-57517

Control Web Panel ≤ 0.9.8.1224 — Blind SQL Injection zu Remote Code Execution Port 2083 → userRes POST → INTO DUMPFILE → Port 2031 Webshell → cwpsvc 🔴 Schwachstellenübersicht CVE-2026-57517 ist eine kritische Blind-SQL-Injection vor der Authentifizierung in in Versionen ≤ 0.9.8.1224. Der...

9.8CVSS6AI score0.00963EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/28 4:58 a.m.2 views

CVE-2022-41544

CVE-2022-41544 Exploit-Skript für CVE-2022-41544 - RCE in get-simple CMS Verwendung Usage: python3 CVE-2022-41544.py Beispiel...

9.8CVSS7.2AI score0.10409EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/08/28 4:58 a.m.4 views

CVE-2022-30507-PoC

Descrizione Esecuzione di codice remoto RCE tramite esecuzione di codice JavaScript - Cross-site-scripting XSS e processo di rendering tramite nodeintegration, che è responsabile del processo di rendering e dell'accesso al codice Node.js Video PoC Riferimenti...

5.9AI score
SaveExploits2
Kitploit
Kitploit
added 2026/08/28 4:58 a.m.3 views

Blackash-CVE-2025-53770

🧠 CVE-2025-53770 : Kritische SharePoint-RCE-Sicherheitslücke, die durch ViewState-Fälschung ausgenutzt wird 📌 Sicherheitslücken-Übersicht Typ : Remote Code Execution RCE CVSS-Score : 9.8 Kritisch Komponente : Microsoft SharePoint Server on-prem Grundursache : Unsichere Deserialisierung von...

9.8CVSS7.3AI score0.99982EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/08/28 4:58 a.m.3 views

CVE-2024-23897

CVE-2024-23897 CVE-2024-23897 - La vulnerabilità di lettura arbitraria dei file tramite la CLI può portare a RCE Prodotti e versioni interessati: Prodotto| Versioni interessate ---|--- Jenkis Server| = 2.441 = LTS 2.426.3 CVSS: CRITICAL Sfruttata attivamente: SÌ Patch: SÌ Mitigazione: SÌ Aiuto...

9.8CVSS7.3AI score0.99999EPSS
SaveExploits50References1
Kitploit
Kitploit
added 2026/08/28 4:57 a.m.3 views

CVE-2023-22527

CVE-2023-22527 CVE-2023-22527 - Vulnerabilidade de Server-side Template Injection SSTI que permite Execução Remota de Código RCE no Confluence Data Center e Confluence Server Produtos e versões afetados:...

10CVSS7.4AI score0.99984EPSS
SaveExploits34
Kitploit
Kitploit
added 2026/08/28 4:57 a.m.4 views

Rocket-Chat-3.12.1-PoC-CVE-2021-22911-

Rocket-Chat-3.12.1-PoC-CVE-2021-22911- 1. Gehe zur Login-Seite 2. Registriere ein neues Konto, setze das Passwort auf P@$$w0rd!1234 3. Führe das Skript aus -u = E-Mail des Benutzers mit niedrigen Rechten Kein 2FA -a = Administrator-E-Mail -t = URL z. B.: http://rocketchat.local python3...

9.8CVSS7.3AI score0.95242EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/08/28 4:57 a.m.3 views

CVE-2025-55182-analysis

1. Panoramica della vulnerabilità Negli ultimi giorni, c'è stato un gran parlare di una vulnerabilità RCE di deserializzazione in React, con il CVSS ufficiale che ha raggiunto il massimo di 10.0, alla pari del Log4j di qualche anno fa. Immediatamente si sono diffuse voci che la definivano il...

10CVSS7AI score0.99802EPSS
SaveExploits386
Kitploit
Kitploit
added 2026/08/28 4:57 a.m.3 views

CVE-2024-21413

CVE-2024-21413 - Vulnerabilità critica di esecuzione di codice in remoto in Microsoft Outlook Configurazione 1. Crea un file config.ini nella stessa directory dello script con il seguente formato: root@kitploit: emailcredentials senderemail = [email protected] senderpassword = yourapppasswor...

9.8CVSS7.3AI score0.9466EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/08/28 4:55 a.m.2 views

CVE-2025-21298

Inhalt Dies ist ein Proof-of-Concept für CVE-2025-21298 - Windows OLE Remote Code Execution Vulnerability CVSS 9.8. Es handelt sich um einen Memory-Corruption-PoC , nicht um einen Exploit. Vollständiger Patch-Diff via ghidriff: LINK Schwachstelle Die Schwachstelle befindet sich in...

9.8CVSS7.3AI score0.80912EPSS
SaveExploits6References3
Kitploit
Kitploit
added 2026/08/28 4:55 a.m.3 views

CVE-2023-24871

CVE-2023-24871 Questo repository contiene materiali relativi a CVE-2023-24871, che ho trattato in questa serie di articoli. Troverai maggiori informazioni all'interno delle cartelle specifiche, poiché la vulnerabilità consentiva sia RCE che LPE...

8.8CVSS7.2AI score0.03217EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/28 4:54 a.m.2 views

hook

amalmurali47/hook Questo repository fa parte del PoC per lo sfruttamento di CVE-2024-32002, una vulnerabilità in Git che consente RCE durante un'operazione di git clone. Questo repository contiene l'hook malevolo utilizzato nell'exploit. Panoramica Per istruzioni dettagliate e una spiegazione di...

9CVSS7.1AI score0.29234EPSS
SaveExploits32References2
Kitploit
Kitploit
added 2026/08/28 4:54 a.m.3 views

NextRce

NextRce - Strumento di exploit RSC per Next.js CVE-2025-55182 Scanner di vulnerabilità avanzato ed exploiter per Next.js App Router Sviluppato daMitsec 🔥 Nuova funzionalità: Modalità di bypass WAF UTF-16LE I payload standard che contengono parole chiave come childprocess o execSync vengono spesso...

10CVSS7AI score0.99802EPSS
SaveExploits386References1
Kitploit
Kitploit
added 2026/08/28 4:54 a.m.3 views

CVE-2025-3248-Langflow-RCE

mitsec - CVE-2025-3248 Langflow RCE-Exploit Remote-Code-Execution-Exploit RCE für Langflow -Anwendungen, die anfällig für CVE-2025-3248 sind. Betroffener Endpunkt: /api/v1/validate/code 🚀 Exploit-Funktionen Remote- und nicht authentifizierter RCE Keine Authentifizierung erforderlich...

9.8CVSS7.4AI score0.99996EPSS
SaveExploits36
Kitploit
Kitploit
added 2026/08/28 4:54 a.m.2 views

CVE-2019-16113

CVE-2019-16113 Dies ist eine Python-Implementierung eines Proof-of-Concept PoC für die Bludit Directory Traversal Image File Upload Schwachstelle CVE-2019-16113 Bludit 3.9.2 ermöglicht Remote-Code-Ausführung über bl-kernel/ajax/upload-images.php, da PHP-Code mit einem .jpg- oder .png- Dateinamen...

8.8CVSS6.7AI score0.77962EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/08/28 4:53 a.m.3 views

RCity-CVE-2024-27198

RCity - CVE-2024-27198 RCE & Erstellung von Admin-Konten & CVE-2024-27199 Auth-Bypass Ausnutzung von CVE-2024-27198 & CVE-2024-27199 RCity ist ein Python-Skript, das mit einem verwundbaren TeamCity-Server interagiert. Die CVE ermöglicht die Erstellung unbefugter Admin-Konten und umgeht 403-Fehler...

9.8CVSS7.3AI score0.99991EPSS
SaveExploits26References1
Kitploit
Kitploit
added 2026/08/28 4:53 a.m.5 views

CVE-2020-0688-Scanner

CVE-2020-0688-Scanner Strumento C rapido per verificare CVE-2020-0688 su più host con un metodo non intrusivo. Caratteristiche Scansiona gli host da un file di input. Controllo passivo: recupera la versione di Exchange tramite scraping del contenuto HTML. Genera un file di output. Demo Come usare...

9CVSS7.3AI score0.99965EPSS
SaveExploits29References2
Kitploit
Kitploit
added 2026/08/28 4:52 a.m.1 views

CVE-2024-50379-POC

CVE-2024-50379 शोषण और POC इस रिपॉजिटरी में CVE-2024-50379 के लिए एक प्रूफ ऑफ कॉन्सेप्ट POC है, जो Apache Tomcat को प्रभावित करने वाली एक कमजोरी है। इस समस्या में Time-of-Check Time-of-Use TOCTOU रेस कंडीशन शामिल है, जो विशेष रूप से Windows जैसी केस-असंवेदनशील फाइल सिस्टम पर रिमोट कोड एक्जीक्यूशन...

9.8CVSS7.3AI score0.44312EPSS
SaveExploits13
Rows per page
Query Builder