Lucene search
+L

11312 matches found

Nuclei
Nuclei
added 2026/09/13 2:04 a.m.45 views

WP Cerber < 8.9.3 - Broken Access Control

WP Cerber 8.9.3 contains a bypass of /wp-json access control caused by improper handling of trailing '?' character, letting unauthorized users access protected REST API endpoints, exploit requires sending a request with a trailing '?'. id: CVE-2021-37598 info: name: WP Cerber 8.9.3 - Broken Acces...

5.3CVSS5.9AI score0.0235EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.80 views

OptinMonster Plugin < 2.6.5 - Unprotected REST-API

The OptinMonster WordPress plugin is vulnerable to sensitive information disclosure and unauthorized setting updates due to insufficient authorization validation via the loggedinorhasapikey function in the /OMAPI/RestApi.php file that can used to exploit inject malicious web scripts on sites with...

8.2CVSS7.3AI score0.21929EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/13 1:36 a.m.7 views

wpUsersScan

wpUsersScan About wpUsersScan Enumerate the users list of the wordpress websites through the REST API / CVE-2017-5487,WordPress 4.7.1 - Username Enumeration Usage root@kitploit: $ python wpUsersScan.py URL How to install Clone Clone the repository with: root@kitploit: $ git clone...

5.3CVSS7AI score0.87299EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/13 1:21 a.m.61 views

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

6.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 1:12 a.m.4 views

CVE-2022-1388

BIG-IP iControl REST vulnerability CVE-2022-1388 PoC This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services PoC You can...

9.8CVSS8.5AI score0.99958EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/13 1:12 a.m.8 views

CVE-2025-6085

Make Connector shello.php ".shellexec$GET"cmd".""; ? EOF curl -k -X POST https://lab1.hacker/wp-json/wp/v2/media \ -H "IWC-API-KEY: YOURFRIENDLYKEYHERE" \ -F "[email protected]" \ -F "title=Hacker World" \ -F "description=A test file" \ -F "caption=Hacker Caption" \ Leveraging the shell once...

7.2CVSS5.9AI score0.01242EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 12:58 a.m.4 views

WordPress-CVE-2026-63030-Analysis

🛡️ CVE-2026-63030: Technical Analysis & Audit Comprehensive defensive teardown, threat analysis, and non-destructive verification guidelines. Summary • Matrix • Technical Deep Dive • Verification • Remediation 📑 Executive Summary !IMPORTANT Defensive Purpose Only: This repository provides purely...

9.8CVSS8.3AI score0.97271EPSS
SaveExploits77References1
Kitploit
Kitploit
added 2026/09/13 12:34 a.m.9 views

struts2-rce-cve-2017-9805-ruby

Struts2 Vulnerability - CVE-2017-9805 Description Apache Struts2 REST Plugin XStream RCECVE-2017-9805 Usage root@kitploit: Usage: cve20179805poc.rb targeturi cmd ruby cve20179805poc.rb 127.0.0.1 ping -c 4 192.168.0.1...

8.1CVSS7.5AI score0.99396EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/13 12:26 a.m.6 views

Gurp

Requirements BurpSuite Professional version v2.0.0beta or greater from PortSwigger Enable the API under User Options Misc REST API. Dependencies root@kitploit: go get -u -v github.com/joanbono/Gurp Add rsrc to the $PATH to build Windows binaries using the icon. Run make all to build binaries for...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 12:26 a.m.5 views

traccar

Traccar Resumen Traccar es un sistema de seguimiento GPS de código abierto. Este repositorio contiene un servicio back-end basado en Java. Es compatible con más de 200 protocolos GPS y más de 2000 modelos de dispositivos de seguimiento GPS. Traccar puede utilizarse con cualquier sistema de base d...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 12:20 a.m.10 views

api-scanner-docker

API Scanner - Self-Hosted Deployment API Scanner is an automated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specifications and WSDL files. Prerequisites Docker Engine 20.10+ Docker Compose v2 Python 3.6+ for setup script 8 GB RAM minimum 16 G...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 12:14 a.m.4 views

CVE-2022-1388-POC

CVE-2022-1388 Poc by PsychoSec Improved POC for CVE-2022-1388 that affects multiple F5 products. This is an improved version of Horizon3's Proof of Concept for CVE-2022-1388: https://github.com/horizon3ai/CVE-2022-1388 This version contains multiple improvements as well as an interactive shell to...

9.8CVSS8.5AI score0.99958EPSS
SaveExploits63References1
Kitploit
Kitploit
added 2026/09/13 12:11 a.m.10 views

ibmsecurity

IBM Sample Code Este repositorio contiene código Python para gestionar IBM Security Appliances mediante sus respectivas API REST. El appliance ISAM es el que tiene el código más maduro. El código para el appliance ISDS está en desarrollo. El código para el appliance ISVG es nuevo probado solo con...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 11:59 p.m.6 views

apicheck

APICheck - The DevSecOps toolset for REST APIs .. image:: https://img.shields.io/badge/License-Apache%202.0-blue.svg :target: https://github.com/BBVA/apicheck/blob/master/LICENSE :alt: License .. image:: https://readthedocs.org/projects/apicheck/badge/?version=latest :target:...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/12 11:58 p.m.10 views

caronte

caronte$ Caronte es una herramienta para analizar el flujo de red durante eventos de capture the flag de tipo ataque/defensa. Reensambla los paquetes TCP capturados en archivos pcap para reconstruir las conexiones TCP y analiza cada conexión en busca de patrones definidos por el usuario. Los...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/12 11:58 p.m.160 views

caronte

caronte$ Caronte is a tool to analyze the network flow during capture the flag events of type attack/defence. It reassembles TCP packets captured in pcap files to rebuild TCP connections, and analyzes each connection to find user-defined patterns. The patterns can be defined as regex or using...

5.5AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/12 11:53 p.m.118 views

owtf

Offensive Web Testing Framework OWTF OWASP OWTF helps penetration testers stay efficient and aligned with security standards such as the OWASP Web Security Testing Guide, the OWASP Top 10, PTES, and NIST so that they have more time to: See the big picture and think outside the box. Efficiently...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 11:49 p.m.9 views

CVE-2022-1388

CVE-2022-1388 BIG-IP iControl REST vulnerability CVE-2022-1388 Usage This POC is Verified! root@kitploit: curl -i -s -k -X $'POST' \ -H $'Host: localhost' -H $'Connection: keep-alive, X-F5-Auth-Token' -H $'Authorization: Basic YWRtaW46' -H $'X-F5-Auth-Token: a' -H $'Content-Length: 39' ...

9.8CVSS8.5AI score0.99958EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/09/12 11:41 p.m.3 views

CVE-2017-9805

CVE-2017-9805 CVE-2017-9805 POC The issue comes from a lack of filtering on the deserialization class used by the REST plugin. Struts uses Xstream with a lot of filtering for deserialization in multiple places, however this filtering was not in place for the REST plugin...

8.1CVSS7.4AI score0.99396EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/12 11:31 p.m.3 views

CVE-2026-63030-CVE-2026-60137-wp2shell-poc

wp2shell — WordPress REST API Time-Based Blind SQLi → RCE Proof‑of‑Concept Description pocwptot.py is a proof‑of‑concept PoC to exploit a time‑based blind SQL injection vulnerability on the WordPress REST API batch endpoint, and perform an escalation chain up to Remote Code Execution RCE...

9.8CVSS8.4AI score0.97271EPSS
SaveExploits79
Rows per page
Query Builder