996262 matches found
CVE-2026-78480
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorize...
EUVD-2026-72450
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/custedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the publ...
CVE-2026-86310
itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/cust_edit1.php , triggered by manipulating the ID argument. The attack can be launched remotely with low privileges and no user interaction. A proof-of-concept exploit has been disclosed to the p...
metasploitable2-vsftpd-writeup
Metasploitable2 β vsftpd 2.3.4 Backdoor Exploitation A hands-on lab demonstrating discovery and exploitation of a known backdoor vulnerability in vsftpd 2.3.4, using an isolated Kali Linux β Metasploitable2 environment. Objective Practice the core penetration testing workflow β reconnaissance,...
CraftCMS_CVE-2023-41892
Craft CMS CVE-2023-41892 There is a Unauthenticated Remote Code Execution RCE affecting CraftCMS 4.0.0-RC1 - 4.4.14. Usage root@kitploit: python3 craft-cms.py http://target Requirements The exploit make use of requests. Install it with : root@kitploit: python3 -m pip install requests...
CVE-2018-10517
CVE-2018-12613 Authenticated remote command execution by uploading a fake module, dropping PHP files on remote web server. Software Affected 1. CMS Made Simple 2.2.7; How to use This PowerShell scripts need two parameters to craft a exploit HTTP request: root@kitploit: 1. CMS Made Simple URL...
CVE-2020-10673
CVE-2020-10673 CVE-2020-10673:jackson-databind RCE...
CVE-2019-5475-EXP
CVE-2019-5475-EXP CVE-2019-5475-EXP γNexus Repository Manager 2.x Remote Command Execution Vulnerabilityγ Vulnerability Name: Nexus Repository Manager 2.x Remote Command Execution Vulnerability Vulnerability Description: Nexus Repository Manager 2.X has a remote command execution vulnerability. B...
CVE-2020-8958
CVE-2020-8958 CVE-2020-8958 : Authenticated Remote Code Execution Exploit for NetLink Routers using boa server. CVSS Score: 7.2 Vulnerability Types: OS Command Injection Authentication: Required Affected Models: HG323 Description The /boaform/admin/formPing resource in Netlink routers allows remo...
CVE-2023-43208-EXPLOIT
CVE-2023-43208 - Mirth Connect Remote Code Execution RCE Exploit π¨ Introduction π This repository contains a Proof-of-Concept PoC exploit for a critical vulnerability in NextGen Healthcare Mirth Connect versions prior to 4.4.1. The vulnerability, tracked as CVE-2023-43208, allows for...
CVE-2026-80170
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypa...
CVE-2026-80170
Dell SCG 5.0 Appliance (prior to 5.36.00.16 ) and Dell SCG 5.0 Application (prior to 5.36.00.00 ) are affected by a hard-coded credentials vulnerability. An unauthenticated attacker with remote network access could exploit this to achieve protection mechanism bypass , resulting in high confidenti...
EUVD-2026-72449
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypa...
Langflow < 1.9.0 - Remote Code Execution
Langflow versions prior to 1.9.0 are vulnerable to unauthenticated remote code execution RCE via the buildpublictmp endpoint. Attackers can submit a manipulated flow JSON containing Python code that is executed during the build process without proper sandboxing. id: CVE-2026-33017 info: name:...
CVE-2026-41089
CVE-2026-41089 root@kitploit: ββββββββββ βββββββββββ βββ βββ βββ βββββββ βββββββ βββββββββββ βββββββββββ βββ βββββββββββββββββββββββββ βββ βββ βββββββββ ββββββββββββββββββββββββββββββ βββ ββββ ββββββββββ ββββββββ βββββββββββββββββββββ ββββββββ βββββββ ββββββββ βββ βββ βββββββββββββββββββββ ββββββ...
CVE-2022-22909
CVE-2022-22909 Description A Code Injection vulnerability has been found on the Hotel Druid v3.0.3 application, which an attacker could exploit to execute remote code on the server. For a successful exploitation, an attacker should have the privilege to add a new room. Vulnerability description T...
CVE-2026-79734
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism...
CVE-2026-79734
Dell Secure Connect Gateway (SCG) 5.0 (Virtual Appliance and Application editions) contains an Improper Certificate Validation vulnerability that allows an unauthenticated remote attacker to bypass protection mechanisms. Affected versions are Appliance prior to 5.36.00.16 and Application prior to...
CVE-2024-45519
CVE-2024-45519 SMTP Vulnerability Exploit Script Overview This script checks for vulnerabilities in an SMTP server and, if found, exploits the vulnerability by establishing a reverse shell connection to your machine. Features root@kitploit: Port Checking: Verifies if the target SMTP port is open...
CVE-202122986-EXP
F5 BIG-IP Remote Command Execution Vulnerability CVE-2021-22986 Affected Versions F5 BIG-IP 16.x: 16.1.0.3 F5 BIG-IP 15.x: 15.1.0.4 F5 BIG-IP 14.x: 14.1.2.6 F5 BIG-IP 13.x: 13.1.3.4 F5 BIG-IP 12.x: 12.1.5.2 F5 BIG-IP 11.x: 11.6.5.2 fofa iconhash="-335242539" POC root@kitploit: POST...