Lucene search
+L

780128 matches found

Kitploit
Kitploit
added 2026/08/31 11:54 a.m.2 views

Graver

Graver Descripción Script de prueba de concepto para explotar la SSTI+RCE autenticada en Grav CMS CVE-2024-28116. Crea una página RCE maliciosa en el servidor que ejecuta el Grav CMS vulnerable. Referencias: https://nvd.nist.gov/vuln/detail/CVE-2024-28116 Notas Dado que es una vulnerabilidad...

8.8CVSS7.2AI score0.0576EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/31 11:54 a.m.4 views

CVE-2017-11882

CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Investigación: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about Análisis del parche:...

9.3CVSS7.4AI score0.99945EPSS
SaveExploits33
Kitploit
Kitploit
added 2026/08/31 11:54 a.m.6 views

FOCA

FOCA Fingerprinting Organizations with Collected Archives FOCA is a tool used mainly to find metadata and hidden information in the documents it scans. These documents may be on web pages, and can be downloaded and analysed with FOCA. It is capable of analysing a wide variety of documents, with t...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 11:54 a.m.3 views

CallStranger

CallStranger This script created by Yunus Çadırcı https://twitter.com/yunuscadirci to check against CallStranger CVE-2020-12695 vulnerability. An attacker can use this vulnerability for: Bypassing DLP for exfiltrating data Using millions of Internet-facing UPnP device as source of amplified...

7.8CVSS6.8AI score0.15193EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/08/31 11:54 a.m.4 views

phuip-fpizdam

PHuiP-FPizdaM What's this This is an exploit for a bug in php-fpm CVE-2019-11043. In certain nginx + php-fpm configurations, the bug is possible to trigger from the outside. This means that a web user may get code execution if you have vulnerable config see below. Writeup While we were too lazy t...

9.8CVSS7.2AI score0.9978EPSS
SaveExploits57References1
Kitploit
Kitploit
added 2026/08/31 11:53 a.m.3 views

Joomla3.7-SQLi-CVE-2017-8917

Summary It is a simple script to use ZoomEye API to batch-scan Joomla 3.7 SQL injection CVE-2017-8917. Usage git clone https://github.com/brianwrf/Joomla3.7-SQLi-CVE-2017-8917.git cd Joomla3.7-SQLi-CVE-2017-8917 python CVE-2017-8917.py Go!!! Reference...

9.8CVSS7.4AI score0.99826EPSS
SaveExploits21References1
Kitploit
Kitploit
added 2026/08/31 11:53 a.m.2 views

weblogicScanner

source: https://github.com/rabbitmask/WeblogicScan weblogicScaner 简体中文 | English As of November 27, 2020, weblogic Vulnerability Scanning Tool. If there is an unrecorded and open POC vulnerability, please submit issue. Some bug fixes were made, some POC did not take effect, or configuration error...

10CVSS6.9AI score0.99997EPSS
SaveExploits233References2
Kitploit
Kitploit
added 2026/08/31 11:53 a.m.3 views

weblogic_wls_wsat_rce

weblogicwlswsatrce Script de explotación de la vulnerabilidad de deserialización del componente wls-wsat de Weblogic CVE-2017-10271, modificado con referencia ahttps://github.com/s3xy/CVE-2017-10271. Ejecución de comandos con salida en pantalla Subida directa de shell Probado en Weblogic 10.3.6.0...

7.5CVSS7.3AI score0.99993EPSS
SaveExploits45References1
Kitploit
Kitploit
added 2026/08/31 11:53 a.m.3 views

PowerShx

SharpShx Unmanaged PowerShell execution using DLLs or a standalone executable. Introduction PowerShx is a rewrite and expansion on the PowerShdll project. PowerShx provide functionalities for bypassing AMSI and running PS Cmdlets. Features Run Powershell with DLLs using rundll32.exe,...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 11:52 a.m.7 views

CVE-2024-9466

CVE-2024-9466 Prueba de Concepto PoC de CVE-2024-9466 Descripción Este script verifica la vulnerabilidad CVE-2024-9466 añadiendo /home/userSpace/devices/debug.txt a una lista de URLs o direcciones IP objetivo. Determina si el objetivo es vulnerable basándose en el código de estado de la respuesta...

8.2CVSS6.8AI score0.13476EPSS
SaveExploits1
EUVD
EUVD
added 2026/08/31 11:52 a.m.6 views

EUVD-2026-68488

AjaxEditableChoiceLabel in wicket-extensions, when constructed with a non-null IChoiceRenderer, writes the display value obtained from that renderer into the label's markup without applying the HTML escaping Wicket performs by default for component model values. An attacker who can influence the...

5.1CVSS5.8AI score
SaveExploits0References1
CVE
CVE
added 2026/08/31 11:52 a.m.11 views

CVE-2026-75802

Apache Wicket (module wicket-extensions ) contains an XSS vulnerability in AjaxEditableLabel , AjaxEditableChoiceLabel , and AjaxEditableMultiLineLabel . The display value obtained from a non-null IChoiceRenderer, and the value returned by the overridden defaultNullLabel(), are written into the l...

5.1CVSS5.8AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/31 11:52 a.m.19 views

CVE-2026-75802 Apache Wicket: XSS in AjaxEditableLabel and its subclasses via IChoiceRenderer and defaultNullLabel

AjaxEditableChoiceLabel in wicket-extensions, when constructed with a non-null IChoiceRenderer, writes the display value obtained from that renderer into the label's markup without applying the HTML escaping Wicket performs by default for component model values. An attacker who can influence the...

5.1CVSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/31 11:52 a.m.4 views

CVE-2026-75802 Apache Wicket: XSS in AjaxEditableLabel and its subclasses via IChoiceRenderer and defaultNullLabel

AjaxEditableChoiceLabel in wicket-extensions, when constructed with a non-null IChoiceRenderer, writes the display value obtained from that renderer into the label's markup without applying the HTML escaping Wicket performs by default for component model values. An attacker who can influence the...

5.1CVSS5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 11:52 a.m.2 views

Forklift_LPE

Escalada de Privilegios Local en Forklift 3.3.9 Al instalar Forklift, un nuevo helper llamado com.binarynights.ForkLiftHelper para Mac OS X se instala automáticamente en el directorio /Library/PrivilegedHelperTools/. El análisis de este helper, que maneja mensajes XPC, dio como resultado diferent...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 11:51 a.m.4 views

CVE-2017-12149

CVE-2017-12149 Jboss Java Deserialization RCE CVE-2017-12149 The python script uses ysoserial to dynamically generate the payload. Therefore java is required as well...

9.8CVSS7.4AI score0.90713EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/08/31 11:51 a.m.4 views

CVE-2019-19652

CVE-2019-19652 Chevereto downgrade attack - 1.0.0 - 1.1.4 Free, = 3.13.5 Core. An admin user can instruct the updater script to downgrade to another version instead of upgrade, reintroducing previous flaws. Due to the lack of a CSRF token this attack can also be used in a CSRF attack, meaning an...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 11:51 a.m.4 views

wifi-framework

Wi-Fi Framework We present a framework to more easily perform Wi-Fi experiments. It can be used to create fuzzers, implement new attacks, create proof-of-concepts to test for vulnerabilities, automate experiments, implement test suites, and so on. The main advantage of the framework is that it...

5.9AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/08/31 11:50 a.m.6 views

CVE-2022-22077

✅ CVE-2022-22077 exploitation framework RTCore64.sys: This document provides a comprehensive overview of the CVE-2022-22077 exploitation framework, a sophisticated BYOVD Bring Your Own Vulnerable Driver attack toolkit that targets the RTCore64.sys driver vulnerability. This framework demonstrates...

8.4CVSS7.3AI score0.00134EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/31 11:50 a.m.4 views

CVE-2024-32019-Netdata-ndsudo-PATH-Vulnerability-Privilege-Escalation

🚨 CVE-2024-32019 - Netdata ndsudo PATH Vulnerability Exploit LPE to Root A Python-based exploit for CVE-2024-32019 , a high-severity Local Privilege Escalation vulnerability in the Netdata Agent , leveraging a misconfigured SUID binary ndsudo that fails to securely handle the PATH environment...

8.8CVSS7.4AI score0.01165EPSS
SaveExploits15References1
Rows per page
Query Builder