Lucene search
+L

112625 matches found

Kitploit
Kitploit
added 2026/09/14 1:35 p.m.7 views

CVE-2023-36845

Automation for Juniper CVE:2023-36845 by Asbawy - Modified by Ak1t4 Overview is a bash script designed to check for the CVE-2023-36845 vulnerability. This script processes a list of Juniper URLS addresses, sends a request to each & determines whether the system is vulnerable based on the response...

9.8CVSS7.4AI score0.9507EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/09/14 1:33 p.m.41 views

crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin...

5.5AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/14 1:33 p.m.66 views

ph0neutria

ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...

5.9AI score
SaveExploits0References4
EUVD
EUVD
added 2026/09/14 1:24 p.m.3 views

EUVD-2026-77477

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Apache Syncope. When the Syncope SRA is configured for CAS authentication, the target Apereo CAS instance's URL is calculated by unconditionally looking at client-supplied forwarded HTTP headers. This issue affects Apache Syncope:...

SaveExploits0References1
Cvelist
Cvelist
added 2026/09/14 1:24 p.m.4 views

CVE-2026-73191 Apache Syncope: CAS service URL injection via Forwarded HTTP headers

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Apache Syncope. When the Syncope SRA is configured for CAS authentication, the target Apereo CAS instance's URL is calculated by unconditionally looking at client-supplied forwarded HTTP headers. This issue affects Apache Syncope:...

SaveExploits0References1
CVE
CVE
added 2026/09/14 1:24 p.m.4 views

CVE-2026-73191

Apache Syncope is vulnerable to Open Redirect when its SRA is configured for CAS authentication . The root cause is that the target Apereo CAS instance's URL is calculated by unconditionally trusting client-supplied forwarded HTTP headers , allowing an attacker to inject a malicious service URL. ...

SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 1:21 p.m.5 views

CVE-2024-6387

CVE-2024-6387 Installation and Execution of the Script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: root@kitploit: git...

8.1CVSS7.1AI score0.99506EPSS
SaveExploits71
Kitploit
Kitploit
added 2026/09/14 1:13 p.m.11 views

Oralyzer

Introduction Oralyzer, a simple python script that probes for Open Redirection vulnerability in a website. It does that by fuzzing the URL that is provided in the input. Features Oralyzer can identify following types of Open Redirect Vulnerabilities: Header Based Javascript Based Meta Tag Based...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 1:06 p.m.8 views

CVE-2018-11776-Python-PoC

CVE-2018-11776-Python-PoC hook-s3c github.com/hook-s3c, @hooks3c on twitter Working Python test and PoC for CVE-2018-11776, originally appearing on; https://github.com/hook-s3c/CVE-2018-11776-Python-PoC What's going on? Man Yue Mo from Semmle has disclosed an Struts2 RCE vulnerability, delivered ...

10CVSS8.2AI score0.99999EPSS
SaveExploits85References1
Kitploit
Kitploit
added 2026/09/14 1:03 p.m.74 views

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

6.5AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/14 12:55 p.m.11 views

CVE-2023-44813

CVE-2023-44813 A reflected cross-site scripting XSS vulnerability in the mode parameter on Invite Friend function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. Vulerable Parameter: mode Exploit - Proof of Concept POC...

6.1CVSS6.4AI score0.01754EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 12:52 p.m.5 views

CVE-2021-22005-

CVE-2021-22005- CVE-2021-22005 Batch Verification Python Script Running environment: python3 Run: Put the URLs to be verified into a text file, e.g., url.txt, then run python3 url.txt...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/14 12:48 p.m.6 views

py-CVE-2021-41773

CVE-2021-41773 Python语言poc&exp项目。 声明:该项目来自作者日常学习笔记。 请勿利用相关技术以及工具从事非法测试,如因此产生的一切不良后果作者无关。 使用: python main.py -h 查看帮助 python main.py -u 利用漏洞 python main.py -f url.txt 批量测试漏洞是否存在 python main.py -f url.txt -o bug.txt 批量测试漏洞是否存在,存在的写入bug.txt中...

9.8CVSS8.1AI score0.99992EPSS
SaveExploits165
Kitploit
Kitploit
added 2026/09/14 12:37 p.m.9 views

privaxy

Privaxy Next generation tracker and advertisement blocker About Privaxy is a MITM HTTPs proxy that sits in between HTTPs talking applications, such as a web browser and HTTP servers, such as those serving websites. By establishing a two-way tunnel between both ends, Privaxy is able to block netwo...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 12:37 p.m.7 views

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 python CVE-2022-46169.py tageturl...

9.8CVSS9AI score0.99826EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/14 12:27 p.m.154 views

Parth

Parth Heuristic Vulnerable Parameter Scanner Introduction Some HTTP parameter names are more commonly associated with one functionality than the others. For example, the parameter ?url= usually contains URLs as the value and hence often falls victim to file inclusion, open redirect and SSRF...

5.6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/14 12:25 p.m.5 views

CVE-2024-22024

CVE-2024-22024 Check for CVE-2024-22024 vulnerability in Ivanti Connect Secure !WARNING FOR EDUCATIONAL PURPOSE AND AUTHORIZED TESTING ONLY. Parameters -u or --targeturl: The target Ivanti Connect Secure ICS URL or file with list of URLs. -c or --attackerurl: The attacker URL generate one using...

8.3CVSS8AI score0.94721EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 12:25 p.m.7 views

CVE-2019-1010174

CVE-2019-1010174 CImg Library v.2.3.3 - command injection CVE-2019-1010174 Detail Modified This vulnerability has been modified since it was last analyzed by the NVD. It is awaiting reanalysis which may result in further changes to the information provided. Description CImg The CImg Library v.2.3...

9.8CVSS7.5AI score0.04912EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 12:14 p.m.6 views

CVE-2026-51564

CVE-2026-51564 Security Advisory for CVE-2026-51564 Description An issue in the redirect parameter in Milk admin =0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted request. Affected Components: App/Route.php, publichtml/index.php Mitigation At the time of...

4.9CVSS5.8AI score0.00436EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/09/14 12:11 p.m.3 views

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

5.9CVSS0.00518EPSS
SaveExploits0References8
Rows per page
Query Builder