Lucene search
+L

274966 matches found

EUVD
EUVD
added 2026/09/02 5:29 a.m.8 views

EUVD-2026-69872

The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletesubmissionfiles function in all versions up to, and including, 1.4.11. This makes it possible for unauthenticated attackers to delete arbitra...

9.8CVSS6.4AI score0.00718EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/02 5:29 a.m.33 views

CVE-2026-78657

The SigmaForms Pro – AI Generated Forms WordPress plugin (versions ≤ 1.4.11) is affected by an unauthenticated arbitrary file deletion vulnerability rooted in insufficient file path validation in the delete_submission_files function. An attacker submits a malicious path traversal URL via the plug...

9.8CVSS6.4AI score0.00718EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/02 5:29 a.m.5 views

CVE-2021-26084

CVE-2021-26084 Atlassian Confluence RCE pre-autenticación...

9.8CVSS8AI score0.99999EPSS
SaveExploits46
EUVD
EUVD
added 2026/09/02 5:29 a.m.9 views

EUVD-2026-69873

The DevKit Pro plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.3.0. This is due to a missing capability check and missing nonce validation in the DPDEVinstallthemesfunc function registered on the wpajaxDPDEVinstallthemes action. This makes it possib...

8.8CVSS6.4AI score0.00646EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/02 5:29 a.m.39 views

CVE-2026-14357 DevKit Pro <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Installation / Remote Code Execution via 'qqfile' Parameter

The DevKit Pro plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.3.0. This is due to a missing capability check and missing nonce validation in the DPDEVinstallthemesfunc function registered on the wpajaxDPDEVinstallthemes action. This makes it possib...

8.8CVSS0.00646EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/02 5:29 a.m.25 views

CVE-2026-14357

The DevKit Pro plugin for WordPress is vulnerable to missing authorization in versions up to and including 2.3.0 . The root cause is a missing capability check and nonce validation in the DPDEV_install_themes_func() function registered on the wp_ajax_DPDEV_install_themes action. This allows authe...

8.8CVSS6.4AI score0.00646EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/02 5:28 a.m.5 views

CVE-2020-7961-Mass

CVE-2020-7961-Mass CVE-2020–7961 Exploit masivo para Script Kiddies Probado en: Kali Linux, Windows,... Requisitos: apt install python3 pip3 install requests colorama Uso: python3 rce.py target url | Para un solo objetivo python3 mass.py list url | Para una lista de objetivos Saved file to:...

9.8CVSS9.1AI score0.99905EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/02 5:24 a.m.8 views

CVE-2025-25706

CVE-2025-25706 Descripción del elemento: root@kitploit: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Tipo de vulnerabilidad:...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 5:23 a.m.4 views

CVE-2025-25705

CVE-2025-25705 설명 항목: root@kitploit: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix 취약점 유형: 원격 코드 실행 취약점 설명: 이 취약점은 사용자가 Unix 환경...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 5:20 a.m.4 views

Lab-for-cve-2018-15133

Resumen: Explotación de la vulnerabilidad de deserialización CVE-2018-15133 Este exploit aprovecha una vulnerabilidad de deserialización en Laravel Framework hasta 5.5.40 y 5.6.x hasta 5.6.29. Descripción La ejecución remota de código podría ocurrir como resultado de una llamada a unserialize sob...

8.1CVSS8AI score0.76814EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/02 5:20 a.m.4 views

CVE-2019-11447_CuteNews-AvatarUploadRCE

CVE-2019-11447 Exploit/PoC - CuteNews 2.1.2 Carga de avatar RCE Autenticado Código de Exploit para CVE-2019-11447 también conocido como CuteNews 2.1.2 Carga de avatar RCE Autenticado Enlaces del Exploit: Resultado esperado: Iniciar sesión/Registrar una cuenta, crear un archivo PHP seleccionado po...

8.8CVSS8AI score0.52272EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/02 5:18 a.m.5 views

CVE-2024-4577

CVE-2024-4577 Una prueba de concepto desarrollada por @watchTowr que explota la vulnerabilidad PHP CGI Argument Injection CVE-2024-4577 para obtener RCE en una versión vulnerable de PHP ejecutándose en un entorno Windows. Análisis técnico detallado de esta vulnerabilidad Orange Tsi 🍊 Esta...

9.8CVSS7.5AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/02 5:16 a.m.5 views

Apple-Safari-Remote-Code-Execution-CVE-2020-27930

此存储库没有 README。...

7.8CVSS7AI score0.22009EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 5:16 a.m.3 views

Apache-Struts-CVE-2017-5638-RCE-Mass-Scanner

Apache-Struts-CVE-2017-5638-RCE-Mass-Scanner...

10CVSS8.7AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/09/02 5:16 a.m.6 views

CVE-2025-55449

CVE-2025-55449 - AstrBot 远程代码执行 RCE 漏洞 概述 本仓库包含针对 CVE-2025-55449 的概念验证利用代码,该漏洞是 AstrBot 中的一个严重远程代码执行 RCE 漏洞。攻击者能够利用薄弱的 JWT 认证机制和插件安装机制,在目标系统上执行任意代码。 漏洞描述 该漏洞存在的原因如下: 1. 硬编码的 JWT Secret Key :AstrBot 在认证中使用硬编码的 JWT 密钥 AdvancedSystemforTextResponseandBotOperationsTool,使得攻击者能够伪造有效的认证令牌。 2. 不受限制的插件安装...

7.3CVSS5.9AI score0.00281EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 5:16 a.m.5 views

CVE-2025-41656

CVE-2025-41656 项目总结 本项目旨在模拟CVE-2025-41656 ——一个针对 NodeRED 的未认证远程代码执行漏洞。为此,我们创建了一个小型 SCADA 系统,包含树莓派、执行器和传感器。树莓派中运行着 NodeRED 和 OpenPLC 容器,两者通过 Modbus TCP 通信以控制执行器。此 Python 概念验证脚本用于执行 CVE-2025-41656 攻击。目标是成功构建 PoC 并找到加固系统安全的修复措施。 入门指南 实验环境将包含以下组件 树莓派 3b+ 包含 NodeRED 和 OpenPLC 容器的 Docker Compose 文件 一个执...

10CVSS7.2AI score0.1267EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 5:15 a.m.3 views

CVE-2023-46604-Analysis

CVE-2023-46604 分析 这是一个整理 Apache ActiveMQ CVE-2023-46604 的原因、代码路径、补丁要点和复现结果的技术分析仓库。 本文档是对公开漏洞 CVE-2023-46604 的技术分析及防御视角的学习资料。 所有实验仅在经批准的封闭测试环境中进行,对未授权系统的应用或复现可能违法。 本文档的内容仅供漏洞理解、补丁验证、检测及响应能力提升之目的。 Overview CVE-2023-46604 是 Apache ActiveMQ 在 OpenWire 反序列化处理过程中发生的远程代码执行漏洞。核心问题在于...

10CVSS6.9AI score0.99723EPSS
SaveExploits33References2
Kitploit
Kitploit
added 2026/09/02 5:14 a.m.10 views

CVE-CVSS--CVE-2024-38063-IPv6-TCP-IP-Remote-Code-Execution-Analysis

🔐 CVE-2024-38063 — IPv6 TCP/IP 远程代码执行分析 📌 项目描述 本项目提供了对关键漏洞 CVE-2024-38063 的技术分析与实际演示 ,该漏洞由微软在 2024年8月13日的补丁星期二 披露。 该漏洞影响 Windows TCP/IP 协议栈,特别是内核驱动中实现的 IPv6 组件 : C:\Windows\System32\drivers\tcpip.sys 由 昆仑实验室 的安全研究员 XiaoWei 发现,该漏洞可能允许攻击者通过利用 IPv6 扩展头的错误处理来实现远程代码执行(RCE) 。 🎯 目标 理解现代协议为何可能引入安全风险 分析...

9.8CVSS7.2AI score0.70564EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/02 5:13 a.m.6 views

phuip-fpizdam

PHuiP-FPizdaM 이게 뭐죠? 이것은 php-fpm CVE-2019-11043의 버그를 위한 익스플로잇입니다. 특정 nginx + php-fpm 설정에서 외부에서 버그를 트리거할 수 있습니다. 즉, 취약한 설정이 있다면 웹 사용자가 코드 실행을 할 수 있습니다 자세한 내용은 아래 참조. 분석글 저희는 분석글을 작성하기에는 너무 게을렀지만, Orange Tsai가 자신의 블로그에 완벽한 분석을 게시했습니다. 그에게 경의를 표합니다. 또한, ZeroNights 2019에서의 제 슬라이드는 여기에서 확인할 수 있습니다. 취약...

9.8CVSS7.5AI score0.9978EPSS
SaveExploits57References6
Kitploit
Kitploit
added 2026/09/02 5:12 a.m.6 views

EXPLOITING-CVE-2024-27956

利用 CVE-2024-27956 的 Python 脚本,该漏洞是 WordPress 中的一个 SQL 注入漏洞,可导致远程代码执行。...

9.9CVSS7.4AI score0.93971EPSS
SaveExploits16
Rows per page
Query Builder