Lucene search
+L

770792 matches found

Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

CVE-2023-6329

CVE-2023-6329 — Control iD iDSecure Authentication Bypass A Python proof-of-concept exploit for CVE-2023-6329 , an improper access control vulnerability in Control iD iDSecure versions 4.7.43.0 and below. The flaw allows an unauthenticated remote attacker to reconstruct valid login credentials by...

9.8CVSS9AI score0.64996EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

cve-2026-8697

CVE-2026-8697: Login Rate Limit Bypass on TP-Link Archer C64 CVE-2026-8697 is a logic flaw in the TP-Link Archer C64's OS called TPOS in the debug message. It lets any unprivileged user connected to the router to bypass the web UI rate limit by using a residual SSH service. A simple Python script...

8.8CVSS5.8AI score0.0051EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

CVE-2025-68705

CVE-2025-68705 - RustFS Path Traversal Exploit Description This script exploits a path traversal vulnerability CVE-2025-68705 in RustFS that allows reading arbitrary files on the server. Requirements Python 3.6+ See requirements.txt for dependencies Installation root@kitploit: git clone...

9.8CVSS0.06808EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

ADC-19781

ADC-19781 Several checks for CVE-2019-19781 Module installation Download the two files ADC-19781.psd1 & ADC-19781.psm1 and put them in one of the following locations: C:\Users%USERNAME%\Documents\WindowsPowerShell\Modules\ADC-19781 C:\Program Files\WindowsPowerShell\Modules\ADC-19781 Import Modul...

9.8CVSS7.6AI score0.99999EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

CVE-2026-49777

CVE-2026-49777 CVE-2026-49777 - ShapedPlugin Product Slider Pro for WooCommerce Backdoor RCE In-Depth Technical Analysis: Product Slider Pro Backdoor Vulnerability Vulnerability Basis and Cause CWE-1284 The technical origin of the vulnerability is classified as CWE-1284: "Improper Validation of...

10CVSS5.7AI score0.01656EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

FOXCMS-CVE-2025-29306-POC

FOXCMS Parameter Injection RCE – CVE-2025-29306 This repository contains a Python-based PoC for a Remote Code Execution RCE vulnerability affecting FOXCMS v1.2, a Chinese open-source content management system. CVE-ID: CVE-2025-29306 Affects: FOXCMS v1.2 Type: Service Parameter Injection → Code...

9.8CVSS0.4628EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.0 views

CVE-2023-50564

CVE-2023-50564 How to use First setup a listener for the reverse shell. Terminal 1 root@kitploit: nc -nlvp Execute the script which will attempt to install a pluck module sending the reverse shell back to us. Terminal 2 root@kitploit: go run exploit.go -url -password -i -p...

8.8CVSS0.29069EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

CVE-2015-6967-EXPLOIT

CVE-2015-6967-EXPLOIT CVE-2015-6967 PoC Exploit This Python script exploits a vulnerability in Nibbleblog CVE-2015-6967 to upload a reverse shell on a vulnerable target. The script takes user input for the target URL, user credentials, and your host IP/port, and then proceeds to exploit the...

6.5CVSS0.49308EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

CVE-2025-53770-Vulnerable-Scanner

Pre-Exploit Vulnerability Check for CVE-2025-53770 with Burp Suite Proxy This script checks a list of SharePoint hosts for vulnerability to CVE-2025-53770 using a custom payload and routes all requests through Burp Suite's proxy for interception and analysis. Features Checks single or multiple...

9.8CVSS0.99982EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

CVE-2023-21036

Acropalypse detection and sanitization tools You can use the python script acropalypsedetection.py or the yara rule acropalypsedetection.yar to detect cropped images affected by acropalypse: root@kitploit: $ for i in testimgs/; do python3 acropalypsedetection.py $i; done...

5.5CVSS0.00499EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

ViteVulScan

ViteVulScan Vulnerability Introduction This project covers 3 vulnerabilities: CVE-2025-30208, CVE-2025-31125, CVE-2025-31486. All are arbitrary file reading vulnerabilities in the Vite development server. These three vulnerabilities have broad coverage and are easy to exploit without restrictions...

7.5CVSS6.4AI score0.74784EPSS
SaveExploits35
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

fortinet-cve-2024-46671

CVE-2024-46671 0-day vulnerability discovered in FortiWeb waf version 7.4.3 build 638GA Exploit Mainly this script automate the exploitation of an authenticated IDOR vulnerability leading to account delection & default account re-creation with no password due to a logical bug in fortiweb Exploit...

7.2CVSS5.5AI score0.00424EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

CVE-2025-2825

CVE-2025-2825/CVE-2025-31161 Introduction This document presents a security analysis of vulnerability CVE-2025-2825 affecting the server component of CrushFTP — a commercial solution for file transfer and storage FTP, SFTP, HTTP/S, S3-like interfaces, etc.. The defect is classified as an...

9.8CVSS8.2AI score0.99947EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

Heartbleed-PoC-Exploit-Script

Heartbleed-PoC-Exploit-Script This Python Proof-of-Concept PoC script detects the Heartbleed vulnerability CVE-2014-0160 by performing a TLS handshake with the heartbeat extension and sending a crafted heartbeat request. It parses server responses to identify leaked memory, helping assess...

7.5CVSS0.99999EPSS
SaveExploits93References1
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

CVE-2020-16898-Bad-Neighbor

================================================================================= Simple policy to detect CVE-2020-16898: Bad Neighbor Following functionality are provided by the script :: 1 Script checks on heuristic described here:...

8.8CVSS0.1094EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

xmlrpc-common-deserialization

xmlrpc-common deserialization vulnerability This note is a technical note to detail the root cause and the associated exploit. You can find the initial disclosure here. The associated CVE is CVE-2019-17570. Description xmlrpc-common forms a shared code base between xmlrpc-client and xmlrpc-server...

9.8CVSS0.49285EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

CVE-2022-22965

Spring Boot CVE-2022-22965 Docker PoC for CVE-2022-22965 with Spring Boot version 2.6.5 🚀 Getting Started 1. Download the distribution code from https://github.com/itsecurityco/CVE-2022-22965/archive/refs/heads/master.zip and unzip it. 2. Run docker compose up --build to build and start the...

9.8CVSS7.4AI score0.99638EPSS
SaveExploits105References1
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

CVE-2025-11771

Exploit: Unauthenticated Sale Record Creation Browser console root@kitploit: fetch'http://localhost/wordpress/wp-json/tokenico/create-sale-record', method: 'POST', headers: 'Content-Type': 'application/x-www-form-urlencoded' , body: new URLSearchParams networkId: "137", presaleKey: "TESTKEY1234",...

5.3CVSS5.4AI score0.00316EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.1 views

CVE-2021-36934

CVE-2021-36934 CVE-2021-36934 HiveNightmare vulnerability checker and workaround Flow The script has the following flow: Requires it to run with Administrator privileges Check Windows 10 version is affected by the vulnerability. IF affected by vulnerability: Show Windows version may be affected b...

7.8CVSS0.67252EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/25 4:21 a.m.0 views

CVE-2024-10140

CVE-2024-10140 The script exploits a SQL Injection vulnerability found in the endpoint /php/managesupplier.php?action=delete&id=32. The vulnerability allows an attacker to inject arbitrary SQL commands through the id parameter, potentially compromising the database and exposing sensitive...

9.8CVSS0.01378EPSS
SaveExploits2
Rows per page
Query Builder