Lucene search
+L

3426 matches found

Kitploit
Kitploit
added 2026/09/13 6:05 a.m.10 views

monitorr-exploit-toolkit

Monitorr exploit toolkit RCE via unsecure file upload PHP reverse shell, webshell, etc. Administrator account creation via Authorization bypass Technical information leakage : Monitorr version, PHP version, System version & kernel, PHP config, etc. Exploit for CVE-2020-28872 and CVE-2020-28871...

9.8CVSS8.1AI score0.85785EPSS
SaveExploits9References4
Kitploit
Kitploit
added 2026/09/13 1:59 a.m.8 views

CVE-2021-21972

CVE-2021-21972 checker VMware vCenter Server CVE-2021-21972 Remote Code Execution Vulnerability This script looks the existence of CVE-2021-21972 based on the following PATH "/ui/vropspluginui/rest/services/uploadova" trough a POST request and looking in response body 500 the words...

10CVSS8.5AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/12 9:47 p.m.6 views

CVE-2025-32206

CVE-2025-32206 - Exploit de Subida Arbitraria de Archivos en WordPress Processing Projects "La vulnerabilidad de subida sin restricciones de archivos con tipo peligroso en LABCAT Processing Projects permite a atacantes subir una web shell a un servidor web. Esto puede llevar a un compromiso total...

9.1CVSS8.1AI score0.00599EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 9:43 p.m.8 views

CVE-2026-32475

🔴 CVE-2026-32475 — Elementor Pro Unrestricted File Upload → RCE Critical Unrestricted File Upload vulnerability in Elementor Pro Potentially leading to Remote Code Execution RCE ⚠️ Overview CVE-2026-32475 is a critical security vulnerability affecting Elementor Pro , a widely deployed WordPress...

9CVSS6.2AI score0.02374EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/12 9:28 p.m.7 views

TFTPlunder

TFTPlunder: un exploit para CVE-2023-29930 Este es un script de exploit para una vulnerabilidad de lectura/escritura ciega de archivos en el servidor de aprovisionamiento TFTP de Genesys anteriormente InIn. Información sobre la vulnerabilidad Esta vulnerabilidad se debe a opciones de configuració...

8.8CVSS7.8AI score0.02014EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 6:52 p.m.6 views

CVE-2025-4389

CVE-2025-4389 Exploit Details Published : May 16, 2025 Updated : May 17, 2025 Severity : Critical CVSS Score: 9.8 CWE : CWE-434: CWE-434 Unrestricted Upload of File with Dangerous Type Affected Versions : All versions from n/a through 2.6.8.1 Researcher :...

9.8CVSS8.2AI score0.01006EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 5:16 p.m.7 views

CVE-2021-40870

CVE-2021-40870 Unrestricted upload of file with dangerous type in Aviatrix allows an authenticated user to execute arbitrary code https://attackerkb.com/assessments/970a9fa9-223d-4d07-bafa-a338147934f3...

9.8CVSS8.1AI score0.93019EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/12 5:06 p.m.7 views

Better-CVE-2022-29464

Mejor CVE-2022-29464 Ciertos productos WSO2 permiten la subida de archivos sin restricciones, lo que resulta en la ejecución remota de código. El atacante debe usar un endpoint /fileupload con una secuencia de directory traversal en Content-Disposition para alcanzar un directorio bajo la raíz web...

10CVSS8.6AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/12 3:57 p.m.5 views

CVE-2023-26852-Textpattern-v4.8.8-and-

CVE-2023-26852-Textpattern-v4.8.8-and version below Textpattern v4.8.8 and Below are vulnerable to Unrestricted File Upload – Dangerous File Content Leading to Remote Code Execution This is my first repo. Don't beat me if i didn't explain well... Textpattern is a free and open-source content...

7.2CVSS7.3AI score0.01994EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 3:43 p.m.8 views

CVE-2025-31324

CVE-2025-31324 Prueba de concepto 0day para SAP NetWeaver creada por ShinyHunters CVE-2025-31324 es una vulnerabilidad crítica de "Subida de archivos sin restricciones" que afecta al SAP NetWeaver Application Server AS Java. Específicamente, reside dentro del componente Visual Composer VCFRAMEWOR...

10CVSS8.2AI score0.99512EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/12 2:45 p.m.8 views

Exploit-CVE-2024-26503

Herramienta de Explotación RCE para Open eClass Esta herramienta está diseñada para explotar una vulnerabilidad conocida CVE-2024-26503 en plataformas Open eClass, permitiendo la ejecución remota de código RCE a través de una falla de carga de archivos sin restricciones. La vulnerabilidad permite...

9.1CVSS5.9AI score0.01131EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 2:35 p.m.6 views

CVE-2024-10410

Source code Online Hotel Reservation System in PHP/MySQLi with Source Code | SourceCodester Description A high risk vulnerability was found in Online Hotel Reservation System, affecting the upload function of /marimar/admin/modroom/controller.php file. The bypass detection operation of image...

7.2CVSS6.6AI score0.01151EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 2:21 p.m.7 views

CVE-2024-50623

POC - CVE-2024-50623- Cleo Unrestricted file upload and download Overview CVE-2024-50623 is a critical vulnerability identified in Cleo's file transfer software products—Cleo Harmony, Cleo VLTrader, and Cleo LexiCom—versions prior to 5.8.0.21. This flaw allows for unrestricted file uploads and...

9.8CVSS8.4AI score0.98607EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/12 1:00 p.m.6 views

CVE-2026-Pending-Django-Summernote-RCE

CVE-2026-XXXXX Pendiente: django-summernote Carga Arbitraria de Archivos RCE Este repositorio contiene una Prueba de Concepto PoC para una vulnerabilidad de Ejecución Remota de Código RCE Condicional descubierta en django-summernote versión 0.8.20.0 y anteriores. Detalles de la Vulnerabilidad...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 12:53 p.m.7 views

CVE-2025-26892

CVE-2025-26892 – Tema Celestial Aura de WordPress = 2.2 Subida Arbitraria de Archivos Autenticado 📄 Descripción Existe una vulnerabilidad de Subida de Archivos Sin Restricciones en el tema Celestial Aura de WordPress desarrollado por dkszone hasta la versión 2.2. Un usuario autenticado con bajos...

9.9CVSS8.1AI score0.00624EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 12:26 p.m.5 views

CVE-2019-10869

CVE-2019-10869 Wordpress Ninja Forms File Uploads Extension -----------------------------16345274557837-- Response: root@kitploit: HTTP/1.1 200 OK Server: nginx/1.14.0 "data": "files": "name":"test.png.doc", "type":"application/msword", "tmpname":"nftmp-14FpD-...

8.1CVSS7.7AI score0.07994EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 11:42 a.m.6 views

CVE-2022-40471

CVE-2022-40471 Remote code execution via unrestricted file upload vulnerability in the Clinic's Patient Management System v 1.0 Technical description: Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload...

9.8CVSS8.2AI score0.21769EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/12 11:42 a.m.8 views

CVE-2021-40870

CVE-2021-40870 Aviatrix에서 위험한 유형의 파일을 무제한으로 업로드할 수 있어 인증된 사용자가 임의 코드를 실행할 수 있습니다...

9.8CVSS8.1AI score0.93019EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/12 10:13 a.m.5 views

CVE-2023-4220-RCE

CVE-2023-4220-RCE Resumen Aviso de Starlabs Producto afectado: Chamilo , -p --port REMOTE PORT -c --comand Banderas para reverse shell -lh/--localhost: IP del atacante -lp/--localtcat listener port...

8.1CVSS7.2AI score0.76084EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/12 9:22 a.m.4 views

CVE-2022-42092

CVE-2022-42092 Exploit en Python 🔥 Descripción Este script de exploit en Python ataca una subida de archivos sin restricciones en Backdrop CMS para lograr una Ejecución Remota de Código RCE. ⚠️ Versiones Afectadas Versión 1.22.0 y versiones anteriores Nota: Backdrop CMS disputa esto y argumenta qu...

8.8CVSS7.3AI score0.01654EPSS
SaveExploits2
Rows per page
Query Builder