Lucene search
+L

8699 matches found

Kitploit
Kitploit
added 2026/09/19 3:22 a.m.11 views

CVE-2024-50379-POC

CVE-2024-50379-POC Ce dépôt contient un script Python conçu pour exploiter CVE-2024-50379 , une vulnérabilité qui permet à un attaquant de télécharger un shell JSP sur un serveur vulnérable et d'exécuter des commandes arbitraires à distance. Cette exploitation est particulièrement utile lorsque l...

9.8CVSS8.6AI score0.44312EPSS
SaveExploits13
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.34 views

Adning Advertising <= 1.5.5 - Arbitrary File Upload

The Adning Advertising plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ninguploadimage function in versions up to, and including, 1.5.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites...

9.8CVSS8.5AI score0.06888EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.70 views

Ninja Forms File Uploads <= 3.3.26 - Arbitrary File Upload

Ninja Forms File Uploads plugin for WordPress versions up to and including 3.3.26 is vulnerable to unauthenticated arbitrary file upload which could lead to remote code execution. id: CVE-2026-0740 info: name: Ninja Forms File Uploads = 3.3.26 - Arbitrary File Upload author: whattheslime severity...

9.8CVSS7.9AI score0.62903EPSS
SaveExploits9References2
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.33 views

WordPress File Manager <= 7.2.1 - Directory Traversal

File Manager and File Manager Pro plugins for WordPress versions up to 7.2.1 and 8.3.4 contain a directory traversal caused by the 'target' parameter in mkfilefoldermanageractioncallbackshortcode, letting attackers read arbitrary files and upload files outside designated directories, exploit...

9.9CVSS8AI score0.06009EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.196 views

MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the authorization may be invalid, which would mean that as a client you can use any arbitrary secret to upload objects given the user already has prior WRITE permissions on...

8.7CVSS7.2AI score0.02428EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 9:41 p.m.13 views

cve-2020-10977

CVE-2020-10977 GitLab 12.9.0 Lecture arbitraire de fichiers Cible : 12.9.0 et versions antérieures Testé : GitLab 12.8.1 Lors d'une récente mission, j'ai trouvé une instance GitLab sur la cible. J'ai trouvé un PoC sur Exploit-DB, mais il utilise LDAP pour l'authentification, et LDAP était désacti...

5.5CVSS6.2AI score0.42741EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/18 9:19 p.m.5 views

CVE-2024-11680_PoC_Exploit

CVE-2024-11680 Exploit PoC Ce dépôt contient un exploit de Preuve de Concept PoC pour CVE-2024-11680, une vulnérabilité critique dans ProjectSend r1605 et versions antérieures. L'exploit cible un défaut d'authentification inappropriée dû à des problèmes de mauvaise configuration des privilèges...

9.8CVSS8.5AI score0.91697EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/18 8:55 p.m.8 views

CVE-2015-4133

CVE-2015-4133 root@kitploit: usage: CVE-2015-4133.py -h --RHOST RHOST --RPORT RPORT -v YEAR MONTH FILE ReFlex Gallery WordPress plugin = 3.1.3 CVE-2015-4133 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2015-4133 positional arguments: YEAR wp-content/uploads sub directory MONTH...

7.5CVSS6AI score0.61382EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/18 8:43 p.m.8 views

ADTrapper

ADTrapper - Plateforme d'analyse de sécurité Active Directory Plateforme professionnelle d'analyse de sécurité Active Directory et de détection des menaces Transformez les journaux d'authentification Windows en informations de sécurité exploitables grâce à une détection avancée des menaces et des...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 5:40 p.m.82 views

osi.ig

Open Source Information Instagram so recently ig started sending html response insted of json to "unknown" requests. i REALLY wanted this to work without login since i don't use ig anymore, tried few ways i knew to get it working without login but it didn't work :/ anyways since lot of people are...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 3:59 p.m.7 views

CVE-2020-10977

GitLab v12.4.0-12.8.1 RCE Basé entièrement sur https://github.com/dotPY-hax/gitlabRCE, qui n'a pas fonctionné pour moi et le traitement HTML semblait fastidieux, donc je l'ai réécrit en JS. Utilisation Lancez un gestionnaire de reverse shell de la manière habituelle, puis exécutez ce script avec ...

5.5CVSS6AI score0.42741EPSS
SaveExploits10References1
Kitploit
Kitploit
added 2026/09/18 2:54 p.m.8 views

CVE-2019-10869

CVE-2019-10869 WordPress Extension de téléchargement de fichiers Ninja Forms -----------------------------16345274557837--...

8.1CVSS7.9AI score0.07994EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 2:33 p.m.9 views

CVE-2024-1209

CVE-2024-1209 Exposition d'informations sensibles via les devoirs dans LearnDash. Les visiteurs non authentifiés peuvent parcourir et télécharger les devoirs téléversés. Vulnérabilité : CVE-2024-1209 Exposition d'informations sensibles via les devoirs CVSS : 5,3 Moyen Logiciel : LearnDash sfwd-lm...

5.3CVSS6.9AI score0.02399EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/17 1:53 a.m.5 views

Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated-POC

Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated- Exécution de code à distance RCE Auteur de l'exploit : Ashish Koli Shikari Page d'accueil du fournisseur : https://thedigitalcraft.com/ Lien du logiciel : https://github.com/thedigicraft/Atom.CMS Version : 2.0 CVE : CVE-2022-25487...

9.8CVSS8.5AI score0.53839EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/17 1:49 a.m.14 views

CVE-2026-0740

CVE-2026-0740 : Ninja Forms - File Upload = 3.3.26 Неаутентифицированная произвольная загрузка файлов. Описание : Плагин Ninja Forms - File Uploads для WordPress уязвим к неаутентифицированной произвольной загрузке файлов из-за отсутствия проверки типа файлов и отсутствия проверки прав доступа в...

9.8CVSS8AI score0.62903EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/16 11:46 a.m.13 views

CVE-2024-22515-File-Upload-Vulnerability

CVE-2024-22515 : Vulnérabilité de téléchargement de fichiers dans Agent DVR Informations Description Dans iSpyConnect.com Agent DVR 5.1.6.0, il manque une vérification du type de fichier pour les téléchargements de fichiers audio. Cela permet à un utilisateur authentifié de télécharger n'importe...

8.8CVSS7.9AI score0.01198EPSS
SaveExploits1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.7 views

Astra Linux – Vulnerability in Velocity

An attacker who is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify Velocity templates running Apache...

9CVSS7.3AI score0.22709EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.26 views

Astra Linux – Vulnerability in Tomcat9

Path Equivalence: The use of ‘file.Name’ an internal dot notation can lead to Remote Code Execution, information disclosure, or the addition of malicious content to uploaded files via the write-enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat versions as follows: 11.0.0-...

10CVSS7.2AI score0.99927EPSS
SaveExploits51References2
NVD
NVD
added 2026/09/14 9:17 a.m.7 views

CVE-2026-88932

multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...

5.3CVSS0.00314EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/14 8:46 a.m.12 views

CVE-2026-88932

multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0 , when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, leaving orphaned files on disk. A remote un...

5.3CVSS5.8AI score0.00314EPSS
SaveExploits0References2
Rows per page
Query Builder