Lucene search
+L

2041 matches found

Kitploit
Kitploit
added 2026/09/24 3:52 a.m.13 views

ipsourcebypass

此Python脚本可用于通过HTTP头绕过IP源限制。 功能 17个HTTP头。 多线程。 使用--json outputfile.json导出JSON。 自动检测最成功的绕过。 用法 root@kitploit: $ ./ipsourcebypass.py -h IP source bypass using HTTP headers, v1.2 usage: ipsourcebypass.py -h -v -i IP -t THREADS -x PROXY -k -L -j JSONFILE -C -H HEADERS -S url This Python script can be...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/24 12:49 a.m.11 views

CVE-2020-29607

CVE-2020-29607-Exploit Título del Exploit: Pluck CMS 4.7.13 - Carga de archivos que permite ejecución remota de código Autenticado Descripción del CVE: Una vulnerabilidad de omisión de restricciones de carga de archivos en Pluck CMS anterior a 4.7.13 permite que un usuario con privilegios de...

7.2CVSS7.8AI score0.33194EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/23 10:31 p.m.22 views

CVE-2022-24112-POC

CVE-2022-24112-POC Apache APISIX 2.12.1 Ejecución remota de código mediante evasión de restricción de IP y uso del token AIP de administrador predeterminado Guía completa https://kavigihan.medium.com/apache-apisix-2-12-1-remote-code-execution-5f920b22ccff...

9.8CVSS8.6AI score0.96069EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/23 6:37 p.m.12 views

Chankro

Chankro Tu herramienta favorita para evadir disablefunctions y openbasedir en tus pentests. Cómo funciona PHP en Linux llama a un binario sendmail cuando se ejecuta la función mail. Si tenemos permitido putenv, podemos establecer la variable de entorno "LDPRELOAD", para poder precargar un objeto...

6.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 7:18 a.m.11 views

Check-WP-CVE-2020-35489

Check-WP-CVE-2020-35489 CVE-2020-35489 La CVE-2020-35489 se descubrió en el plugin de WordPress Contact Form 7 5.3.1 y versiones anteriores. Al explotar esta vulnerabilidad, los atacantes podían simplemente cargar archivos de cualquier tipo, evitando todas las restricciones impuestas sobre los...

10CVSS8.5AI score0.8928EPSS
SaveExploits4
OSV
OSV
added 2026/09/22 4:08 p.m.2 views

SUSE-SU-2026:4286-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278681 - CVE-2026-78662:...

7.1CVSS5.8AI score0.00413EPSS
SaveExploits1References9
Kitploit
Kitploit
added 2026/09/22 7:49 a.m.12 views

CVE-2022-44276-PoC

CVE-2022-44276-PoC PoC for Responsive Filemanager 9.12.0 bypass upload restrictions lead to RCE Where's vuln? When uploading new file we go through function fixfilename: https://github.com/trippo/ResponsiveFilemanager/blob/9a7411f3eab3b7d8e2c78dcf40b4325bde2c548d/filemanager/upload.phpL112 In thi...

9.8CVSS8.4AI score0.02302EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/09/21 11:09 p.m.9 views

CVE-2025-29927_Scanner

CVE-2025-29927 Checker 📌 Introducción Este script verifica la vulnerabilidad CVE-2025-29927 en servidores Next.js, probando múltiples payloads en el encabezado x-middleware-subrequest para detectar accesos no autorizados. ❓ ¿Qué es CVE-2025-29927? CVE-2025-29927 es una vulnerabilidad que permite...

9.1CVSS7.5AI score0.99225EPSS
SaveExploits59
Kitploit
Kitploit
added 2026/09/21 12:37 p.m.9 views

Apache-APISIX-CVE-2022-24112

Apache APISIX Remote Code Execution CVE-2022-24112 Exploit Summary An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX with default API key is vulnerable to remote code execution. When the admin key w...

9.8CVSS8.5AI score0.96069EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/21 10:39 a.m.12 views

CVE-2023-44061

File-upload-Restriction-bypass...

8.8CVSS8AI score0.01238EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2026/09/21 7:38 a.m.16 views

openssh: OpenSSH: Tunnel forwarding restriction bypass

A flaw was found in OpenSSH's sshd component. The restrict keyword, designed to limit tunnel forwarding within the authorizedkeys file, was not correctly enforced for tunnel forwarding. This issue could allow a local attacker to bypass intended security restrictions, potentially leading to...

2.5CVSS5.8AI score0.00091EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/20 4:03 p.m.13 views

CVE-2022-31813

Launch the Range docker compose up --build Normal Access root@kitploit: GET / HTTP/1.1 Host: 127.0.0.1:8080 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/145.0.0.0 Safari/537.36 Accept:...

9.8CVSS7.9AI score0.03543EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 9:22 p.m.12 views

CVE-2021-21014

PoC Limited CVE-2021-21014 Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Affected version: = Magento 2.4.1 User...

9.1CVSS8.4AI score0.04213EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/09/18 7:53 p.m.39 views

CVE-2026-84241 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization...

8.1CVSS0.00299EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/18 7:21 p.m.35 views

CVE-2026-18869 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...

6.4CVSS0.00222EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 7:21 p.m.21 views

CVE-2026-18869

IBM i versions 7.3 through 7.6 are affected by a Server-Side Request Forgery (SSRF) vulnerability in the FTP service. Improper validation of PORT and EPRT commands allows a remote authenticated attacker to bypass security restrictions and access internal network services . The CVSS 3.1 base score...

6.4CVSS5.9AI score0.00222EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/18 7:20 p.m.42 views

CVE-2026-17262 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands...

5.4CVSS0.00194EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 7:20 p.m.20 views

CVE-2026-17262

IBM i versions 7.3 through 7.6 are vulnerable to denial of service and security restriction bypass due to improper validation of FTP authentication commands (CWE-78, OS Command Injection). A local attacker on an adjacent network with no required privileges can exploit this with low complexity, re...

5.4CVSS5.8AI score0.00194EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/18 7:20 p.m.9 views

CVE-2026-17262 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands...

5.4CVSS5.8AI score0.00194EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 6:30 a.m.9 views

dnsresolver

dnsresolver Un resolvedor DNS ultrarrápido Tabla de contenidos Instalación Uso Uso básico Resolviendo hosts con puertos Enumeración de hosts virtuales Usando dominios no resueltos Usando localhost Demostraciones Comentarios Licencia Instalación...

6.1AI score
SaveExploits0
Rows per page
Query Builder