Lucene search
+L

8699 matches found

Kitploit
Kitploit
added 2026/09/19 3:22 a.m.11 views

CVE-2024-50379-POC

CVE-2024-50379-POC このリポジトリには、CVE-2024-50379 を悪用する Python スクリプトが含まれています。この脆弱性を利用すると、攻撃者は脆弱なサーバーに JSP シェルをアップロードし、リモートで任意のコマンドを実行できます。このエクスプロイトは、対象サーバーの /uploads ディレクトリが保護されていない、または存在しない場合に特に有用です。 概要 CVE-2024-50379 は、ファイルアップロードを適切に処理しないサーバーに影響を与える脆弱性であり、攻撃者が JSP...

9.8CVSS8.6AI score0.44312EPSS
SaveExploits13References1
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.34 views

Adning Advertising <= 1.5.5 - Arbitrary File Upload

The Adning Advertising plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ninguploadimage function in versions up to, and including, 1.5.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites...

9.8CVSS8.5AI score0.06888EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.70 views

Ninja Forms File Uploads <= 3.3.26 - Arbitrary File Upload

Ninja Forms File Uploads plugin for WordPress versions up to and including 3.3.26 is vulnerable to unauthenticated arbitrary file upload which could lead to remote code execution. id: CVE-2026-0740 info: name: Ninja Forms File Uploads = 3.3.26 - Arbitrary File Upload author: whattheslime severity...

9.8CVSS7.9AI score0.62903EPSS
SaveExploits9References2
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.33 views

WordPress File Manager <= 7.2.1 - Directory Traversal

File Manager and File Manager Pro plugins for WordPress versions up to 7.2.1 and 8.3.4 contain a directory traversal caused by the 'target' parameter in mkfilefoldermanageractioncallbackshortcode, letting attackers read arbitrary files and upload files outside designated directories, exploit...

9.9CVSS8AI score0.06009EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.196 views

MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the authorization may be invalid, which would mean that as a client you can use any arbitrary secret to upload objects given the user already has prior WRITE permissions on...

8.7CVSS7.2AI score0.02428EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 9:41 p.m.13 views

cve-2020-10977

CVE-2020-10977 GitLab 12.9.0 Произвольное чтение файлов Цель : 12.9.0 и ниже Протестировано : GitLab 12.8.1 В ходе недавнего пентеста я обнаружил экземпляр GitLab на цели, нашёл PoC на Exploit-DB, но он использует LDAP для аутентификации, которая в данном случае была отключена, поэтому я создал...

5.5CVSS6.2AI score0.42741EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/18 9:19 p.m.5 views

CVE-2024-11680_PoC_Exploit

CVE-2024-11680 PoC Exploit Этот репозиторий содержит эксплойт Proof of Concept PoC для CVE-2024-11680 — критической уязвимости в ProjectSend r1605 и более старых версиях. Эксплойт нацелен на неправильную аутентификацию из-за проблем с неправильной конфигурацией привилегий. Возможности Использует...

9.8CVSS8.5AI score0.91697EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/18 8:55 p.m.8 views

CVE-2015-4133

CVE-2015-4133 root@kitploit: usage: CVE-2015-4133.py -h --RHOST RHOST --RPORT RPORT -v YEAR MONTH FILE ReFlex Gallery WordPress plugin = 3.1.3 CVE-2015-4133 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2015-4133 positional arguments: YEAR подкаталог wp-content/uploads MONTH подкаталог...

7.5CVSS6AI score0.61382EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/18 8:43 p.m.8 views

ADTrapper

ADTrapper - 액티브 디렉터리 보안 분석 플랫폼 전문 액티브 디렉터리 보안 분석 및 위협 탐지 플랫폼 Windows 인증 로그를 고급 위협 탐지 및 대화형 시각화를 통해 실행 가능한 보안 인사이트로 변환합니다 개요 ADTrapper는 사이버보안 전문가가 Windows Active Directory 인증 로그를 분석할 수 있도록 설계된 포괄적인 보안 분석 플랫폼입니다. 이 플랫폼은 고급 위협 탐지, 이상 징후 분석 및 대화형 시각화를 제공하여 보안 사고를 식별하고 조사하는 데 도움을 줍니다. 주요 기능 54+ 탐지 규칙 ...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/18 5:40 p.m.82 views

osi.ig

Open Source Information Instagram so recently ig started sending html response insted of json to "unknown" requests. i REALLY wanted this to work without login since i don't use ig anymore, tried few ways i knew to get it working without login but it didn't work :/ anyways since lot of people are...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 3:59 p.m.7 views

CVE-2020-10977

GitLab v12.4.0-12.8.1 RCE Полностью основано на https://github.com/dotPY-hax/gitlabRCE, который не сработал для меня, и разбор HTML казался громоздким, поэтому я переписал его на js. Использование Запустите обработчик обратной оболочки обычным способом, затем выполните этот скрипт: root@kitploit:...

5.5CVSS6AI score0.42741EPSS
SaveExploits10References1
Kitploit
Kitploit
added 2026/09/18 2:54 p.m.8 views

CVE-2019-10869

CVE-2019-10869 Wordpress Ninja Forms File Uploads Extension -----------------------------16345274557837-- Response: root@kitploit: HTTP/1.1 200 OK Server: nginx/1.14.0 "data": "files": "name":"test.png.doc", "type":"application/msword", "tmpname":"nftmp-14FpD-test.png.doc", "error":0, "size":19...

8.1CVSS7.9AI score0.07994EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 2:33 p.m.9 views

CVE-2024-1209

CVE-2024-1209 Раскрытие конфиденциальной информации через задания в LearnDash. Неаутентифицированные посетители могут просматривать и скачивать загруженные задания. Уязвимость: CVE-2024-1209 Раскрытие конфиденциальной информации через задания CVSS: 5.3 Средний Программное обеспечение: LearnDash...

5.3CVSS6.9AI score0.02399EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/17 1:53 a.m.5 views

Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated-POC

Atom-CMS-2.0---파일-업로드-원격-코드-실행-비인증- 원격 코드 실행 RCE Exploit 작성자: Ashish Koli Shikari 공급업체 홈페이지: https://thedigitalcraft.com/ 소프트웨어 링크: https://github.com/thedigicraft/Atom.CMS 버전: 2.0 CVE: CVE-2022-25487 설명: 이 스크립트는 Atom CMS에 webshell.php를 업로드합니다. 애플리케이션은 해당 파일을 저장하며, uploads 디렉터리의 고유 번호를 통해 Webshel...

9.8CVSS8.5AI score0.53839EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/17 1:49 a.m.14 views

CVE-2026-0740

CVE-2026-0740 : Ninja Forms - File Upload = 3.3.26 인증되지 않은 임의 파일 업로드. 설명 : WordPress용 Ninja Forms - File Uploads 플러그인은 3.3.26을 포함한 모든 버전에서 'NFFUAJAXControllersUploads::handleupload' 함수의 파일 유형 검증 누락 및 기능 검사 누락으로 인해 인증되지 않은 임의 파일 업로드에 취약합니다. 이 결함으로 인해 인증되지 않은 공격자는 다음을 수행할 수 있습니다: 모든 fieldid에 대한 유효한...

9.8CVSS8AI score0.62903EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/16 11:46 a.m.13 views

CVE-2024-22515-File-Upload-Vulnerability

CVE-2024-22515: Agent DVR의 파일 업로드 취약점 정보 설명 iSpyConnect.com Agent DVR 5.1.6.0에서 사운드 파일 업로드에 대한 파일 유형 검증이 부족합니다. 이로 인해 인증된 사용자가 파일 열기 대화상자에서 모든 파일로 전환하기만 하면 업로드 오디오 구성 요소를 통해 모든 파일 유형을 업로드할 수 있습니다. 추가 정보 이 취약점은 이전에 제출한 익스플로잇과 연계되어 임의 파일 업로드 및 임의 파일 실행을 모두 허용할 수 있습니다. 영향을 받는 버전 영향을 받는 버전: 5.1.6.0 참...

8.8CVSS7.9AI score0.01198EPSS
SaveExploits1References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.26 views

Astra Linux – Vulnerability in Tomcat9

Path Equivalence: The use of ‘file.Name’ an internal dot notation can lead to Remote Code Execution, information disclosure, or the addition of malicious content to uploaded files via the write-enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat versions as follows: 11.0.0-...

10CVSS7.2AI score0.99927EPSS
SaveExploits51References2
NVD
NVD
added 2026/09/14 9:17 a.m.7 views

CVE-2026-88932

multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...

5.3CVSS0.00314EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/14 8:46 a.m.12 views

CVE-2026-88932

multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0 , when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, leaving orphaned files on disk. A remote un...

5.3CVSS5.8AI score0.00314EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/14 8:46 a.m.8 views

CVE-2026-88932 multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads

multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...

5.3CVSS5.8AI score
SaveExploits0References4
Rows per page
Query Builder