996336 matches found
CVE-2020-13945-EXPLOIT
CVE-2020-13945 - Apache APISIX Remote Code Execution RCE This repository contains a proof-of-concept PoC exploit for a vulnerability in Apache APISIX. The vulnerability arises when the Admin API is enabled and the access IP restriction rules are deleted, allowing the default token to access APISI...
CVE-2024-7627-PoC
CVE-2024-7627-PoC Background This Proof-of-Concept PoC script is for WordPress plugin Bit File Manager version 6.0 - 6.5.5 Unauthenticated Remote Code Execution via Race Condition CVE-2024-7627 vulnerability. Information Description: The Bit File Manager plugin for WordPress is vulnerable to Remo...
CVE-2026-78480
This vulnerability affects Dell Secure Connect Gateway (SCG) 5.0 , specifically Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 . The issue is a Missing Authentication for Critical Function , allowing an unauthenticated remote attacker to gain unauthorized acce...
EUVD-2026-72451
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorize...
CVE-2026-78480
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorize...
EUVD-2026-72450
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/custedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the publ...
CVE-2026-86310
itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/cust_edit1.php , triggered by manipulating the ID argument. The attack can be launched remotely with low privileges and no user interaction. A proof-of-concept exploit has been disclosed to the p...
metasploitable2-vsftpd-writeup
Metasploitable2 β vsftpd 2.3.4 Backdoor Exploitation A hands-on lab demonstrating discovery and exploitation of a known backdoor vulnerability in vsftpd 2.3.4, using an isolated Kali Linux β Metasploitable2 environment. Objective Practice the core penetration testing workflow β reconnaissance,...
CraftCMS_CVE-2023-41892
Craft CMS CVE-2023-41892 There is a Unauthenticated Remote Code Execution RCE affecting CraftCMS 4.0.0-RC1 - 4.4.14. Usage root@kitploit: python3 craft-cms.py http://target Requirements The exploit make use of requests. Install it with : root@kitploit: python3 -m pip install requests...
CVE-2018-10517
CVE-2018-12613 Authenticated remote command execution by uploading a fake module, dropping PHP files on remote web server. Software Affected 1. CMS Made Simple 2.2.7; How to use This PowerShell scripts need two parameters to craft a exploit HTTP request: root@kitploit: 1. CMS Made Simple URL...
CVE-2020-10673
CVE-2020-10673 CVE-2020-10673:jackson-databind RCE...
CVE-2019-5475-EXP
CVE-2019-5475-EXP CVE-2019-5475-EXP γNexus Repository Manager 2.x Remote Command Execution Vulnerabilityγ Vulnerability Name: Nexus Repository Manager 2.x Remote Command Execution Vulnerability Vulnerability Description: Nexus Repository Manager 2.X has a remote command execution vulnerability. B...
CVE-2020-8958
CVE-2020-8958 CVE-2020-8958 : Authenticated Remote Code Execution Exploit for NetLink Routers using boa server. CVSS Score: 7.2 Vulnerability Types: OS Command Injection Authentication: Required Affected Models: HG323 Description The /boaform/admin/formPing resource in Netlink routers allows remo...
CVE-2023-43208-EXPLOIT
CVE-2023-43208 - Mirth Connect Remote Code Execution RCE Exploit π¨ Introduction π This repository contains a Proof-of-Concept PoC exploit for a critical vulnerability in NextGen Healthcare Mirth Connect versions prior to 4.4.1. The vulnerability, tracked as CVE-2023-43208, allows for...
CVE-2026-80170
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypa...
CVE-2026-80170
Dell SCG 5.0 Appliance (prior to 5.36.00.16 ) and Dell SCG 5.0 Application (prior to 5.36.00.00 ) are affected by a hard-coded credentials vulnerability. An unauthenticated attacker with remote network access could exploit this to achieve protection mechanism bypass , resulting in high confidenti...
EUVD-2026-72449
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypa...
Langflow < 1.9.0 - Remote Code Execution
Langflow versions prior to 1.9.0 are vulnerable to unauthenticated remote code execution RCE via the buildpublictmp endpoint. Attackers can submit a manipulated flow JSON containing Python code that is executed during the build process without proper sandboxing. id: CVE-2026-33017 info: name:...
CVE-2026-41089
CVE-2026-41089 root@kitploit: ββββββββββ βββββββββββ βββ βββ βββ βββββββ βββββββ βββββββββββ βββββββββββ βββ βββββββββββββββββββββββββ βββ βββ βββββββββ ββββββββββββββββββββββββββββββ βββ ββββ ββββββββββ ββββββββ βββββββββββββββββββββ ββββββββ βββββββ ββββββββ βββ βββ βββββββββββββββββββββ ββββββ...
CVE-2022-22909
CVE-2022-22909 Description A Code Injection vulnerability has been found on the Hotel Druid v3.0.3 application, which an attacker could exploit to execute remote code on the server. For a successful exploitation, an attacker should have the privilege to add a new room. Vulnerability description T...