Lucene search
+L

274370 matches found

Kitploit
Kitploit
added 2026/08/31 3:54 a.m.3 views

CVE-2026-48908

🚨 CVE-2026-48908 — Full Server Compromise via Arbitrary File Upload Critical Unauthenticated File Upload → Remote Code Execution RCE A critical vulnerability in SP Page Builder allows unauthenticated attackers to upload arbitrary files and achieve Remote Code Execution RCE , potentially leading t...

10CVSS7.5AI score0.14824EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/08/31 3:54 a.m.3 views

CVE-2026-25212

CVE-2026-25212 – Percona PMM RCE PoC Critical – CVSS 9.9 – Authenticated Remote Code Execution in PMM 3.7. Description This proof‑of‑concept exploits a vulnerability where an internal PostgreSQL user in PMM retains 'SUPERUSER' privileges. An authenticated attacker with 'pmm-admin' rights can abus...

9.9CVSS5.9AI score0.00289EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 3:54 a.m.3 views

CVE-2024-23897

CVE-2024-23897 Jenkins CI Authenticated Arbitrary File Read Through the CLI Leads to Remote Code Execution RCE Jenkins is a self-contained open source continuous integration/continuous delivery and deployment CI/CD automation software DevOps tool written in the Java programming language. It is us...

9.8CVSS7.4AI score0.99999EPSS
SaveExploits50References1
Kitploit
Kitploit
added 2026/08/31 3:54 a.m.2 views

CVE-2017-0144

🔵 EternalBlue CVE-2017-0144 Critical Microsoft SMBv1 Remote Code Execution Vulnerability 📌 Overview EternalBlue is a critical vulnerability in Microsoft's Server Message Block version 1 SMBv1 protocol that allows remote attackers to execute arbitrary code on vulnerable Windows systems without...

9.3CVSS7.8AI score0.9923EPSS
SaveExploits64
Kitploit
Kitploit
added 2026/08/31 3:54 a.m.5 views

Codiad-CVE-2018-14009

install codiad @ git clone https://github.com/Codiad/Codiad.git Steps to reproduction 1. Setup a vulnerable environment on ubuntu server with Codiad 2.8.4 latest version root@kitploit: @ chmod o+w config.php @ chmod o+w workspace @ chmod o+w plugins @ chmod o+w themes @ chmod o+w data 2. @ git...

10CVSS7.2AI score0.38444EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/08/31 3:54 a.m.4 views

CVE-2026-35196

CVE-2026-35196 · Chamilo LMS · OS Command Injection → RCE Researcher: K Disclosure Type: Responsible Disclosure Status: Patched Affected Product: Chamilo LMS 2.0 Confirmed on v1.11.32 📋 Vulnerability Summary...

8.8CVSS5.9AI score0.0176EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/31 3:53 a.m.4 views

CVE-2025-32433

CVE-2025-32433 Erlang/OTP SSH RCE EXP Description A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in SSH protocol message handling, a malicious actor could gain...

10CVSS7.5AI score0.98594EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/08/31 3:50 a.m.3 views

CVE-2024-47176

CVE-2024-47176 — CUPS RCE Exploit Lab CyberSecurity & Virtualisation 2025-2026 Isolated lab environment to demonstrate CVE-2024-47176 CUPS Remote Code Execution via cups-browsed. Setup Required VDIs Ubuntu 22.04 NOT 24.04! — https://www.osboxes.org/ubuntu/ → VirtualBox VDI Kali Linux 2026.1 —...

5.3CVSS7AI score0.50605EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/08/31 3:50 a.m.6 views

HTB-DevHub

HackTheBox — DevHub CVE-2026-23744 | MCPJam Inspector Unauthenticated RCE Difficulty: Medium OS: Linux Exploitation Chain root@kitploit: ┌─────────────────────────────────────────────────────┐ │ CVE-2026-23744 │ │ Unauthenticated POST → /api/mcp/connect │...

9.8CVSS6.1AI score0.45026EPSS
SaveExploits39
Kitploit
Kitploit
added 2026/08/31 3:50 a.m.4 views

CVE-2019-15107

Webmin applications for versions 1.890 and below are vulnerable to Unauthenticated Remote Code Execution. CVE-2019-15107. Reference : https://github.com/foxsin34/WebMin-1.890-Exploit-unauthorized-RCE...

10CVSS7.4AI score0.99766EPSS
SaveExploits39References1
Kitploit
Kitploit
added 2026/08/31 3:50 a.m.3 views

CVE-2020-17530

OGNL Injection Exploit Summary Simple Python script to exploit OGNL injection vulnerabilities in Apache Struts2/Tomcat and execute system commands. Usage root@kitploit: pip install requests colorama python3 exploit.py -u http://target/index.action -c "id"...

9.8CVSS6.8AI score0.95931EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/08/31 3:49 a.m.5 views

CVE-2022-30190-Follina-Lab

🔴 CVE-2022-30190 — Follina MSDT RCE Lab Researcher: Abhimanyu Rawat Role: Technical Research & Cyber Security Operations Intern Date: May 8, 2026 📌 What is Follina? CVE-2022-30190 nicknamed "Follina" is a zero-day Remote Code Execution RCE vulnerability in Microsoft Windows that allows an attacke...

9.3CVSS7.5AI score0.99234EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/08/31 3:49 a.m.3 views

CVE-2026-25089

🚨 CVE-2026-25089 - Critical OS Command Injection in FortiSandbox 📖 Overview CVE-2026-25089 is a critical OS Command Injection CWE-78 vulnerability affecting multiple Fortinet FortiSandbox deployments. An unauthenticated remote attacker can exploit this flaw by sending specially crafted HTTP...

9.8CVSS7.4AI score0.76112EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 3:49 a.m.3 views

CVE-2026-20251

CVE-2026-20251 — Splunk Secure Gateway jsonpickle Deserialization RCE Researcher: Fady Oueslati · ReactiveZero Security Research Reference: 2026FO-SPLUNK-20251 CVSS: 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Status: Open — patch available Summary A low-privileged authenticated user can...

8.8CVSS6AI score0.32215EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 3:48 a.m.6 views

CVE-2018-1000533

GitList 0.6.0 Remote Code Execution Vulnerability CVE-2018-1000533 GitList is a modern Git repository viewer. In GitList versions 0.6.0 and below, there is a vulnerability that passes improperly validated input to system functions, allowing arbitrary commands to be executed with PHP user...

9.8CVSS7.3AI score0.72967EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 3:48 a.m.5 views

CVE-2026-44963

CVE-2026-44963 — Veeam Backup & Replication RCE Research repository bySentinelX — for authorized security testing and defensive purposes only. Overview Field| Detail ---|--- CVE ID| CVE-2026-44963 Vendor| Veeam Product| Backup & Replication Affected Versions| 12.3.2.4854 all v12 builds Fixed...

9.4CVSS7.8AI score0.02351EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/31 3:48 a.m.6 views

CVE-2023-52076-PoC

CVE-2023-52076-PoC Proof-of-concept for CVE-2023-52076, a critical path traversal and arbitrary file write vulnerability in Atril/Xreader document viewers affecting MATE Desktop environments. The script generates a crafted EPUB payload with zip-slip paths targeting either SSH configuration or...

8.5CVSS7.5AI score0.01076EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/31 3:48 a.m.6 views

CVE-2026-0770

CVE-2026-0770: Langflow execglobals Ejecución Remota de Código No Autenticada PoC CVE-2026-0770 es una vulnerabilidad de Ejecución Remota de Código RCE no autenticada que afecta a Langflow. El fallo se origina por una validación de entrada incorrecta en el manejo del parámetro execglobals...

9.8CVSS7.8AI score0.63417EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/31 3:45 a.m.3 views

CVE-2019-0232

CVE-2019-0232 Description This is a tool that automates the exploitation workflow for CVE‑2019‑0232 by providing both command execution mode and reverse‑shell mode. It supports automatic URL encoding for commands, spins up a temporary HTTP server to host nc.exe, uploads it to the vulnerable Apach...

9.3CVSS7.3AI score0.99652EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/31 3:45 a.m.4 views

By-Poloss..-..CVE-2026-48939

CVE-2026-48939 - iCagenda Unauthenticated File Upload to RCE Overview...

10CVSS6.1AI score0.19727EPSS
SaveExploits5
Rows per page
Query Builder