Lucene search
+L

319977 matches found

CVE
CVE
added 2026/09/11 2:40 p.m.2 views

CVE-2026-85979

Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the javakeystorepasswd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is...

8.6CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/11 2:40 p.m.3 views

CVE-2026-85979

Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the javakeystorepasswd parameter. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is...

8.6CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 2:08 p.m.15 views

CVE-2024-42327

Write-up CVE-2024-42327 Zabbix Vulnerability Target: 10.129.231.176 Information: I know my target is a Zabbix server. I received a default user account to log into Zabbix: user matthew passwd 96qzn0h2e1k3. This account is a default user, without additional groups or privileges. As usual, we start...

9.9CVSS8.1AI score0.78716EPSS
SaveExploits13References2
GithubExploit
GithubExploit
added 2026/09/11 2:06 p.m.4 views

practical-penetration-testing-lab

Practical Penetration Testing Lab Project Overview This p...

SaveExploits0
Kitploit
Kitploit
added 2026/09/11 2:05 p.m.8 views

CVE-2019-6693

CVE-2019-6693 Decrypt FortiGate configuration secrets Original advisory Vendor advisory For Fortigate VM/appliances below versions 6.2.0, 6.0.0 to 6.0.6, 5.6.10 configuration secrets are stored encrypted with a unique key. For versions above the non-default private-data-encryption parameter lets...

6.5CVSS6.8AI score0.05617EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/11 2:04 p.m.6 views

CVE-2023-49977

CVE-2023-49977 Customer Support System 1.0 - Cross-Site Scripting XSS Vulnerability in "Address" field/parameter on "customerlist" Page Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious actor...

5.4CVSS5.9AI score0.0045EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 1:52 p.m.7 views

WingFTP-CVE-2025-47812-illdeed

CVE-2025-47812 - Wing FTP Server RCE Exploit This repository provides a proof-of-concept exploit for CVE-2025-47812 , a remote command execution RCE vulnerability in Wing FTP Server. An attacker can inject and execute arbitrary Lua-based system commands by abusing the username parameter during...

10CVSS8.5AI score0.92862EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/11 1:40 p.m.11 views

Reflected-XSS-on-Opentext-Portal-v7.4.4

Cross-site scripting XSS vulnerability in OpenText Portal v7.4.4 allows remote attackers to inject arbitrary web script or HTML code via the vgnextoid URI parameter. Attack vector: Javascript injection in vgnextoid parameter preceded of "--" html comment closing sequence RESULT: Found by Héctor...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 1:37 p.m.6 views

CVE-2025-58780

CVE-2025-58780 Vulnerability Disclosure: SQL Injection in ScienceLogic Overview This document outlines a responsibly disclosed SQL injection vulnerability found in ScienceLogic's web platform. The vulnerability has been reported to the project maintainers in accordance with responsible disclosure...

7.2CVSS5.9AI score0.00229EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 1:36 p.m.9 views

CVE-2020-0796

CVE-2020-0796 Overview: The compression feature added to SMBv3 starting from Windows 10/Server version 1903 contains an integer overflow vulnerability confirmed by Microsoft on 12/03/2020. It allows an attacker to perform Local Privilege Escalation LPE and Remote Code Execution RCE. Here we will...

10CVSS8.4AI score0.9981EPSS
SaveExploits126References1
Kitploit
Kitploit
added 2026/09/11 1:33 p.m.6 views

CVE-2022-29597

CVE-2022-29597: Local File Inclusion in RSS v500 The RRS v500 application by Solutions Atlantic is vulnerable to a Local File Inclusion LFI vulnerability. Any authenticated user has the ability to reference internal system files within requests made to the...

6.5CVSS6.7AI score0.01927EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/11 1:33 p.m.6 views

CVE-2022-23614

CVE-2022-23614 PoC for CVE-2022-23614, GHSA-5mv2-rx3q-4w2v Twig sort filter code execution/sandbox bypass As seen in this commit - https://github.com/twigphp/Twig/commit/.., twig was passing user supplied function name as a callback parameter to uasort here, thus leading to arbitrary code executi...

9.8CVSS8.3AI score0.08209EPSS
SaveExploits3References3
Kitploit
Kitploit
added 2026/09/11 1:30 p.m.5 views

CVE-2020-12124

CVE-2020-12124 An implementation of a proof-of-concept for CVE-2020-12124 https://vulners.com/cve/CVE-2020-12124 root@kitploit: The following is an actualization of CVE-2020-12124, a vulnerability which exploits a command injection in the Wavlink WN530H4 router in which certain parameters are tak...

10CVSS8.2AI score0.7465EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 1:29 p.m.6 views

CVE-2017-5638

CVE-2017-5638 This script is intended to validate Apache Struts 2 vulnerability CVE-2017-5638, AKA Struts-Shock. This is a completely harmless as it does not inject any malicious payload, only inject an HTTP header named 'STRUTS2-VALIDATION' in order to be able to validate whether is vulnerable...

10CVSS8.2AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/09/11 1:28 p.m.5 views

CVE-2021-39408

CVE-2021-39408 A reflected Cross Site Scripting XSS vulnerability exists in multiple version 1.0 of the Online Student Rate System application that allows for arbitrary execution of JavaScript commands. Vulnerable Page On index.php, the page parameter is vulnerable, allowing an attacker to includ...

6.1CVSS6.4AI score0.01313EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 1:27 p.m.8 views

CVE-2020-12077

CVE-2020-12077 MapPress Maps Pro 2.53.9 - Remote Code Execution RCE due to Incorrect Access Control in AJAX Actions Description The pro version of this plugin registers several AJAX actions that call functions which lack capability checks and nonce checks, specifically the ‘ajaxget’, ‘ajaxsave’,...

8.8CVSS7.9AI score0.05606EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/11 1:27 p.m.5 views

NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256

CVE-2026-9256 NGINX ngxhttprewritemodule PoC Derivation Process and Thoughts Scope: Only for local ranges, authorized reproduction environments, vulnerability verification, and protection rule analysis. Do not use against unauthorized targets. The PoC ideas in this document only verify remotely...

9.2CVSS7.4AI score0.10856EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/11 1:26 p.m.7 views

CVE-2023-51801

CVE-2023-51801 Simple Student Attendance System v.1.0 - Multiple SQL injection vulnerabilities - studentform.php and classform.php Description :Simple Student Attendance System v.1.0 is prone to multiple SQL injection vulnerabilities that can be exploited by authenticated attackers. These...

9.8CVSS5.9AI score0.01182EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/11 1:26 p.m.6 views

CVE-2025-2304-Camaleon-CMS-Mass-Assignment-Privilege-Escalation-PoC

CVE-2025-2304 — Camaleon CMS Mass Assignment Privilege Escalation PoC Privilege escalation vulnerability in Camaleon CMS /updatedajax with passwordrole=admin injected into the password parameters. 4. Verifies the role has been updated to admin. Requirements Python 3 Install dependencies:...

9.4CVSS6AI score0.00605EPSS
SaveExploits17References2
Kitploit
Kitploit
added 2026/09/11 1:22 p.m.5 views

CVE-2021-35042

CVE-2021-35042 SQL injection via unsanitized QuerySet.orderby input Setup: Run ./setup.sh for initial setup Open the docker image to initiate the database: docker exec -it containerid /bin/bash And run the following commands: root@kitploit: python manage.py makemigrations cve202135042 python...

9.8CVSS7.6AI score0.44369EPSS
SaveExploits1
Rows per page
Query Builder