Lucene search
+L

112985 matches found

RedhatCVE
RedhatCVE
added 2026/09/17 2:35 p.m.9 views

CVE-2026-92973

A flaw was found in ansi2html. This cross-site scripting XSS vulnerability exists in the OSC 8 hyperlink handling, where the component fails to properly validate or escape URL targets. A remote attacker, by controlling ANSI text input, can inject malicious JavaScript schemes or manipulate href...

6.1CVSS0.00225EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/17 12:11 p.m.9 views

CVE-2021-42013

CVE-2021-41773 / CVE-2021-42013 Apache Vulnerability Scanner A comprehensive Python-based vulnerability scanner for detecting CVE-2021-41773 and CVE-2021-42013 path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. Overview CVE-2021-41773 and...

9.8CVSS8.8AI score0.99992EPSS
SaveExploits191
Kitploit
Kitploit
added 2026/09/17 12:10 p.m.9 views

shiro-cve-2010-3863

Apache Shiro Path Traversal CVE-2010-3863 Vulnerability Reproduction Local environment setup with Docker Open Yakit to capture packets Payload: /./admin/ Successful...

5CVSS5.9AI score0.54521EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/17 11:31 a.m.10 views

CVE-2025-66956

CVE-2025-66956 Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and execute attachments via a computable URL. CVSS Vectors CVSS 3.1: 9.8, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS 4.0: 10.0,...

9.9CVSS6.1AI score0.00485EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 11:24 a.m.8 views

CVE-2025-11953-POC-

CVE-2025-11953 - React Native CLI RCE Research Environment 📋 Overview CVE-2025-11953 is a critical Remote Code Execution RCE vulnerability in the React Native CLI's Metro development server discovered by JFrog Security. This research environment provides the actual vulnerable implementation for...

9.8CVSS8AI score0.9398EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/17 11:05 a.m.7 views

CVE-2021-41773

Usage root@kitploit: usage: main.py -h -f FILE -s N --timeout SECONDS optional arguments: -h, --help show this help message and exit -f FILE, --file FILE File containing target URLs one per line -s N, --semaphore N Concurrent requests default: 10 --timeout SECONDS Request timeout in seconds...

9.8CVSS8.2AI score0.99992EPSS
SaveExploits165
Kitploit
Kitploit
added 2026/09/17 10:48 a.m.13 views

CVE-2022-4361

CVE-2022-4361 Description This repository contains a PoC for CVE-2022-4361. All the credits go to original author of the discovery, mulliken; IMPORTANT : this PoC is not complete as it does not cover the case for the AssertionConsumerServiceURL value on the SAML authentication protocol. Currently...

10CVSS7.1AI score0.00626EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 9:55 a.m.10 views

CVE-2022-1592

CVE-2022-1592 POC root@kitploit: pip install requests --break-system-packages root@kitploit: CVE-2022-1592.py https://tatget.com/...

9.4CVSS8.4AI score0.01168EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/17 7:37 a.m.8 views

tryhackme-monikerlink-writeup

TryHackMe: Moniker Link — CVE-2024-21413 Walkthrough A full walkthrough of TryHackMe's "Moniker Link" room: weaponizing CVE-2024-21413, a 2024 Microsoft Outlook vulnerability, to steal a victim's NTLMv2 hash the moment they click a link in a phishing email — no macro, no attachment, no obvious...

9.8CVSS7.9AI score0.9466EPSS
SaveExploits24
RedHat Linux
RedHat Linux
added 2026/09/17 7:10 a.m.7 views

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

7.5CVSS0.00728EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/17 7:06 a.m.6 views

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

5.9CVSS0.00518EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/17 6:30 a.m.11 views

URL_CHECKER

URL Phishing Checker A lightweight, web-based tool that detects whether a URL is likely phishing or safe using a hybrid approach of Machine Learning Random Forest/SVM and heuristic rule-based analysis. Built for educational purposes and experimentation in cybersecurity and applied AI. Overview...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 6:16 a.m.9 views

Olyx

Olyx A modern Android application for comprehensive URL security analysis, combining multiple threat detection APIs with advanced domain spoofing detection to protect users from malicious websites. Screenshots Features Multi-API Security Analysis AbuseIPDB : Scans IP reputation for reported...

6AI score
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/09/17 5:05 a.m.9 views

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

5.9CVSS0.00518EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/17 3:42 a.m.10 views

React2Shell

React2Shell - CVE-2025-55182 & CVE-2025-66478 Author: LAKSHMIKANTHAN K letchupkt Instagram: @letchupkt Version: 2.0.0 Obfuscated Date: 2025-12-07 🚀 Quick Start Run the Scanner root@kitploit: python react2shell.py That's it! The scanner will: 1. Verify its integrity 2. Decompress the code 3. Execu...

10CVSS7.8AI score0.99802EPSS
SaveExploits405
Kitploit
Kitploit
added 2026/09/17 1:48 a.m.23 views

CVE-2021-21017

CVE-2021-21017 又一个 Adobe Reader 字节序标记漏洞 : root@kitploit: IA32 插件,版本 2020.013.20074。 char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl != char 0x0 && relurl !=...

8.8CVSS8.3AI score0.86326EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/17 1:46 a.m.12 views

CVE-2021-41277_SSRF

CVE-2021-41277SSRF CVE-2021-41277 可扩展为 SSRF 描述 Metabase 是一个开源数据分析平台。Metabase 版本 0.40.5 受到 CVE-2021-41277 的影响,根据 CVE 描述,该漏洞可导致本地文件包含。 在分析 Metabase 安全公告 中描述的发现并对代码进行差异比对时,由于 URL 协议未被过滤,该漏洞似乎可以扩展为 SSRF 。 POC || GTFO 第一个测试是尝试调用外部服务器。如下所示,该操作可以成功执行。Metabase 实例会调用外部服务器。 第二个测试是扫描内部网络。首先利用 LFI 来识别网络:...

10CVSS6.9AI score0.97178EPSS
SaveExploits5References2
Kitploit
Kitploit
added 2026/09/17 1:43 a.m.13 views

CVE-2023-28432

CVE-2023-28432 Minio 是一个基于Go语言的对象存储服务。它实现了大部分亚马逊S3云存储服务接口,可以看做是是S3的开源版本,非常适合于存储大容量非结构化的数据,例如图片、视频、日志文件、备份数据和容器/虚拟机镜像等。MinIO verify接口存在敏感信息泄漏漏洞,攻击者通过构造特殊URL地址,读取系统敏感信息。 一个简易的漏洞测试、利用工具...

7.5CVSS8.2AI score0.83957EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/17 1:43 a.m.10 views

log4j-fuzzer

log4j-fuzzer For Single Target root@kitploit: chmod +x log4j After That Command Simply Put Your Target root@kitploit: ./log4j YOURTARGETURL YOURREMOTESERVER For Multiple Target Gether All Domain, Subdomain, Directroty in a list After That Simply Command This root@kitploit: chmod +x log4j You Can...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/17 1:41 a.m.12 views

CVE-2026-27180-MajorDoMo-unauthenticated-RCE

MajorDoMo RCE CVE-2026-27180 MajorDoMo 中通过更新 URL 投毒实现未认证远程代码执行 CWE-494 – 下载无完整性校验的代码 影响 :通过放置在 Web 根目录的 webshell 实现服务器完全沦陷 认证要求 :无 补丁 :PR 1177 📜 描述 本仓库包含针对 CVE-2026-27180 的概念验证漏洞利用程序——这是 MajorDoMo 智能家居自动化软件中的一个严重未认证远程代码执行漏洞。 攻击者可以: 在无需认证的情况下投毒更新源 URL 强制触发更新,下载并解压恶意 tarball 将任意 PHP 文件(包括...

9.8CVSS6.3AI score0.01105EPSS
SaveExploits4References1
Rows per page
Query Builder