Lucene search
+L

2041 matches found

Kitploit
Kitploit
added 2026/09/23 10:31 p.m.22 views

CVE-2022-24112-POC

CVE-2022-24112-POC Apache APISIX 2.12.1 Ejecución remota de código mediante evasión de restricción de IP y uso del token AIP de administrador predeterminado Guía completa https://kavigihan.medium.com/apache-apisix-2-12-1-remote-code-execution-5f920b22ccff...

9.8CVSS8.6AI score0.96069EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/23 6:37 p.m.12 views

Chankro

Chankro Your favourite tool to bypass disablefunctions and openbasedir in your pentests. How it works PHP in Linux calls a binary sendmail when the mail function is executed. If we have putenv allowed, we can set the environment variable "LDPRELOAD", so we can preload an arbitrary shared object...

6.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 7:18 a.m.11 views

Check-WP-CVE-2020-35489

Check-WP-CVE-2020-35489 CVE-2020-35489 La CVE-2020-35489 se descubrió en el plugin de WordPress Contact Form 7 5.3.1 y versiones anteriores. Al explotar esta vulnerabilidad, los atacantes podían simplemente cargar archivos de cualquier tipo, evitando todas las restricciones impuestas sobre los...

10CVSS8.6AI score0.8928EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/23 1:24 a.m.13 views

ipsourcebypass

此Python脚本可用于通过HTTP头绕过IP源限制。 功能 17个HTTP头。 多线程。 使用--json outputfile.json导出JSON。 自动检测最成功的绕过。 用法 root@kitploit: $ ./ipsourcebypass.py -h IP source bypass using HTTP headers, v1.2 usage: ipsourcebypass.py -h -v -i IP -t THREADS -x PROXY -k -L -j JSONFILE -C -H HEADERS -S url This Python script can be...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/22 11:47 p.m.11 views

CVE-2020-29607

CVE-2020-29607-Exploit Título del Exploit: Pluck CMS 4.7.13 - Carga de archivos que permite ejecución remota de código Autenticado Descripción del CVE: Una vulnerabilidad de omisión de restricciones de carga de archivos en Pluck CMS anterior a 4.7.13 permite que un usuario con privilegios de...

7.2CVSS7.8AI score0.33194EPSS
SaveExploits6References1
OSV
OSV
added 2026/09/22 4:08 p.m.2 views

SUSE-SU-2026:4286-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278681 - CVE-2026-78662:...

7.1CVSS5.8AI score0.00413EPSS
SaveExploits1References9
Kitploit
Kitploit
added 2026/09/22 7:49 a.m.12 views

CVE-2022-44276-PoC

CVE-2022-44276-PoC PoC para Responsive Filemanager 9.12.0: evasión de las restricciones de subida que conduce a RCE ¿Dónde está la vulnerabilidad? Al subir un archivo nuevo pasamos por la función fixfilename:...

9.8CVSS8.4AI score0.02302EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/09/21 11:09 p.m.9 views

CVE-2025-29927_Scanner

CVE-2025-29927 Checker 📌 Introduction This script checks for the CVE-2025-29927 vulnerability in Next.js servers by testing multiple payloads in the x-middleware-subrequest header to detect unauthorized access. ❓ What is CVE-2025-29927? CVE-2025-29927 is a vulnerability that allows security...

9.1CVSS7.5AI score0.99225EPSS
SaveExploits59
Kitploit
Kitploit
added 2026/09/21 12:37 p.m.9 views

Apache-APISIX-CVE-2022-24112

Exploit de Ejecución Remota de Código en Apache APISIX CVE-2022-24112 Resumen Un atacante puede abusar del plugin batch-requests para enviar solicitudes y eludir la restricción de IP de la Admin API. Una configuración predeterminada de Apache APISIX con la clave de API predeterminada es vulnerabl...

9.8CVSS8.5AI score0.96069EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/21 10:39 a.m.12 views

CVE-2023-44061

File-upload-Restriction-bypass...

8.8CVSS8AI score0.01238EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2026/09/21 7:38 a.m.16 views

openssh: OpenSSH: Tunnel forwarding restriction bypass

A flaw was found in OpenSSH's sshd component. The restrict keyword, designed to limit tunnel forwarding within the authorizedkeys file, was not correctly enforced for tunnel forwarding. This issue could allow a local attacker to bypass intended security restrictions, potentially leading to...

2.5CVSS5.8AI score0.00091EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/20 4:03 p.m.13 views

CVE-2022-31813

Iniciar el laboratorio docker compose up --build Acceso normal root@kitploit: GET / HTTP/1.1 Host: 127.0.0.1:8080 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/145.0.0.0 Safari/537.36 Accept:...

9.8CVSS7.9AI score0.03543EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 9:22 p.m.12 views

CVE-2021-21014

PoC Limitada CVE-2021-21014 Las versiones de Magento 2.4.1 y anteriores, 2.4.0-p1 y anteriores y 2.3.6 y anteriores son vulnerables a un bypass de la restricción de carga de archivos. La explotación exitosa podría permitir a un atacante autenticado ejecutar código arbitrario. Versión afectada: =...

9.1CVSS8.4AI score0.04213EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/09/18 7:53 p.m.39 views

CVE-2026-84241 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization...

8.1CVSS0.00299EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/18 7:21 p.m.35 views

CVE-2026-18869 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...

6.4CVSS0.00222EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 7:21 p.m.21 views

CVE-2026-18869

IBM i versions 7.3 through 7.6 are affected by a Server-Side Request Forgery (SSRF) vulnerability in the FTP service. Improper validation of PORT and EPRT commands allows a remote authenticated attacker to bypass security restrictions and access internal network services . The CVSS 3.1 base score...

6.4CVSS5.9AI score0.00222EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 7:20 p.m.20 views

CVE-2026-17262

IBM i versions 7.3 through 7.6 are vulnerable to denial of service and security restriction bypass due to improper validation of FTP authentication commands (CWE-78, OS Command Injection). A local attacker on an adjacent network with no required privileges can exploit this with low complexity, re...

5.4CVSS5.8AI score0.00194EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/18 7:20 p.m.42 views

CVE-2026-17262 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands...

5.4CVSS0.00194EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/18 7:20 p.m.9 views

CVE-2026-17262 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands...

5.4CVSS5.8AI score0.00194EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 6:30 a.m.9 views

dnsresolver

dnsresolver Un resolvedor DNS ultrarrápido Tabla de contenidos Instalación Uso Uso básico Resolviendo hosts con puertos Enumeración de hosts virtuales Usando dominios no resueltos Usando localhost Demostraciones Comentarios Licencia Instalación Asegúrate de tener Rust instalado y luego ejecuta el...

6.1AI score
SaveExploits0
Rows per page
Query Builder