Lucene search
+L

1404 matches found

Kitploit
Kitploit
•added 2026/09/28 9:53 a.m.•16 views

Spip-Go

Spip - Sensor de honeypot de red Spip es un sensor de honeypot de red ligero y de baja interacción. Escucha tráfico TCP entrante arbitrario simple y TLS, captura lo que los escáneres y bots envían, y registra cada conexión como JSON estructurado con forma ECS para facilitar su ingesta en tu SIEM ...

6AI score
SaveExploits0
Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•28 views

SPIP Saisies - Remote Code Execution

SPIP Saisies plugin 5.4.0 through 5.11.0 contains a remote code execution caused by an unspecified flaw, letting attackers execute arbitrary code on the server, exploit requires no special conditions. id: CVE-2025-71243 info: name: SPIP Saisies - Remote Code Execution author: omarkurt severity:...

9.8CVSS6.7AI score0.05126EPSS
SaveExploits5References4
Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•172 views

SPIP <3.1.2 - Cross-Site Scripting

SPIP 3.1.2 and earlier contains a cross-site scripting vulnerability in validerxml.php which allows remote attackers to inject arbitrary web script or HTML via the varurl parameter in a validerxml action. id: CVE-2016-7981 info: name: SPIP 3.1.2 - Cross-Site Scripting author: pikpikcu severity:...

6.1CVSS6.9AI score0.08216EPSS
SaveExploits2References5
Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•13 views

SPIP < 4.4.22 - Unauthenticated RCE

SPIP 4.4.21 contains a remote code execution caused by mishandling of the X-Spip-Filtre HTTP request header in analyseresultatskel, letting unauthenticated remote attackers execute arbitrary code. id: CVE-2026-77806 info: name: SPIP 4.4.22 - Unauthenticated RCE author: 0xAkoko severity: critical...

9.8CVSS8.9AI score0.04479EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/27 11:53 p.m.•12 views

CVE-2023-27372

CVE-2023-27372 SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1. This PoC exploits a PHP code injection in SPIP. The vulnerability exists in the oubli parameter and allows...

9.8CVSS8.6AI score0.99682EPSS
SaveExploits23
Kitploit
Kitploit
•added 2026/09/27 8:30 p.m.•14 views

CVE-2023-27372

Exploit CVE-2023-27372 Exploit para CVE-2023-27372 , una vulnerabilidad de ejecución remota de código no autenticada en el CMS SPIP que afecta a versiones anteriores a la 4.2.1. ⚠️ Solo con fines educativos. Utilícelo exclusivamente en sistemas de su propiedad o para los que tenga permiso explícit...

9.8CVSS8.3AI score0.99682EPSS
SaveExploits23
Kitploit
Kitploit
•added 2026/09/27 5:13 p.m.•15 views

RCE_CVE-2024-7954

RCECVE-2024-7954 Description: The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request. CRITICAL Exploit:...

9.8CVSS8.9AI score0.90053EPSS
SaveExploits10
Kitploit
Kitploit
•added 2026/09/27 4:41 p.m.•15 views

CVE-2023-27372-POC

CVE-2023-27372-POC Resumen Este código es un POC Proof of Concept en Python para detectar si un sitio web objetivo es vulnerable a CVE-2023-27372. Puede ejecutar el código proporcionando una sola URL o un archivo de texto que contenga múltiples URLs. Versiones afectadas: SPIP "; Funcionalidades...

9.8CVSS8.5AI score0.99682EPSS
SaveExploits23
Kitploit
Kitploit
•added 2026/09/27 2:46 p.m.•13 views

CVE-2024-7954-RCE

Descripción El plugin porteplume utilizado por SPIP anterior a 4.30-alpha2, 4.2.13 y 4.1.16 es vulnerable a una vulnerabilidad de ejecución de código arbitrario. Un atacante remoto no autenticado puede ejecutar PHP arbitrario como el usuario de SPIP mediante el envío de una solicitud HTTP...

9.8CVSS8.3AI score0.90053EPSS
SaveExploits10
Kitploit
Kitploit
•added 2026/09/27 2:11 p.m.•10 views

SPIP-BigUp-Unauthenticated-RCE-Exploit-CVE-2024-8517

SPIP BigUp Unauthenticated RCE Exploit CVE-2024-8517 Description This Python script exploits an unauthenticated Remote Code Execution RCE vulnerability in the BigUp plugin of the SPIP CMS Système de Publication pour l'Internet Partagé. The flaw lies in the listerfichiersparchamps function, which...

9.8CVSS8.8AI score0.94614EPSS
SaveExploits7
Kitploit
Kitploit
•added 2026/09/27 12:53 p.m.•10 views

spip-cve-2023-27372-rce

Exploit de RCE no autenticada CVE-2023-27372 en SPIP Subida de Web Shell Este script de Python explota CVE-2023-27372, una vulnerabilidad de ejecución remota de código no autenticada en SPIP CMS versiones anteriores a 4.2.1. Aprovecha una falla de envenenamiento de caché en el mecanismo de...

9.8CVSS8.4AI score0.99682EPSS
SaveExploits23References1
Kitploit
Kitploit
•added 2026/09/27 12:46 p.m.•11 views

CVE-2024-7954

CVE-2024-7954 Este exploit intentará ejecutar comandos del sistema en objetivos SPIP CVE-2024-7954. Visión general Esta es una herramienta de escaneo y explotación masiva para CVE-2024-7954: SPIP 4.2.8 permite a atacantes no autenticados lanzar RCE en objetivos SPIP. Esta herramienta está basada ...

9.8CVSS8.7AI score0.90053EPSS
SaveExploits10
Kitploit
Kitploit
•added 2026/09/27 12:42 a.m.•9 views

RCE-CVE-2024-7954

RCE-CVE-2024-7954 Description The porteplume plugin, utilized by SPIP versions prior to 4.30-alpha2 , 4.2.13 , and 4.1.16 , is susceptible to a critical arbitrary code execution RCE vulnerability. This flaw allows a remote, unauthenticated attacker to execute arbitrary PHP code as the SPIP user b...

9.8CVSS8.7AI score0.90053EPSS
SaveExploits10
Kitploit
Kitploit
•added 2026/09/26 1:54 p.m.•14 views

CVE-2024-7954POC

CVE-2024-7954POC The porteplume plugin used in SPIP versions before 4.30-alpha2, 4.2.13, and 4.1.16 has an arbitrary code execution vulnerability. Remote unauthenticated attackers can execute arbitrary PHP code as SPIP users by sending specially crafted HTTP requests...

9.8CVSS8.8AI score0.90053EPSS
SaveExploits10
Kitploit
Kitploit
•added 2026/09/26 3:25 a.m.•13 views

SPIP-CVE-2024-23659-

SPIP-CVE-2024-23659- Script en Python 3 para validación/explotación de RCE no autenticado en SPIP BigUp Descripción cve.py automatiza: 1. Descubrimiento de formulario SPIP formulaireaction y formulaireactionargs. 2. Envío de payload multipart para ejecutar comandos en el servidor objetivo. 3...

6.1CVSS6.7AI score0.00445EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/25 3:08 a.m.•22 views

CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC

CVE-2023-27372 — SPIP Unauthenticated remote code execution vulnerability in SPIP before 4.2.1. The oubli parameter in the password reset form is vulnerable to PHP object injection due to mishandled deserialization. A crafted serialized payload is executed server-side as the web user, and the...

9.8CVSS8.7AI score0.99682EPSS
SaveExploits23
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•134 views

SPIP BigUp Plugin - Remote Code Execution

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request. id: CVE-2024-8517 info: name: SPIP BigUp Plugin - Remote Code Execution...

9.8CVSS8.5AI score0.94614EPSS
SaveExploits7References5
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•106 views

SPIP Porte Plume Plugin - Remote Code Execution

The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request. id: CVE-2024-7954 info: name: SPIP Porte Plume...

9.8CVSS8.8AI score0.90053EPSS
SaveExploits10References5
Kitploit
Kitploit
•added 2026/09/24 6:54 p.m.•11 views

SPIPScan

SPIPScan SPIP CMS Scanner for penetration testing purpose written in Python, and released under MIT License. This tool has been designed to perform detection of SPIP installs during penetration testing. Currently, the tool detects the version of the SPIP install and tries to detect if the platfor...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 2:08 p.m.•11 views

CVE-2023-27372

Research Project: CVE-2023-27372 — SPIP RCE, Lab Environment + Safe PoC 1 Description This repository contains: stand/ — a lab environment vulnerable setup on Docker: SPIP + MariaDB. poc/ — a Python verification tool scanner implementing safe confirmation of the vulnerability Safe PoC without...

9.8CVSS8.4AI score0.99682EPSS
SaveExploits23
Rows per page
Query Builder