Lucene search
+L

174320 matches found

Kitploit
Kitploit
added 2026/09/01 5:22 a.m.5 views

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 POC command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. Exploit Title:...

9.8CVSS7.4AI score0.99869EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/09/01 5:17 a.m.4 views

CVE-2024-24549

Prueba de Concepto PoC para la Vulnerabilidad de Denegación de Servicio DoS en Apache Tomcat Este repositorio contiene un script de Prueba de Concepto PoC que demuestra una vulnerabilidad de Denegación de Servicio DoS en Apache Tomcat. La vulnerabilidad surge de una validación incorrecta de las...

7.5CVSS7AI score0.23072EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 5:07 a.m.4 views

CVE-2024-20405

Description A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored XSS attack by exploiting an RFI vulnerability. This vulnerability is due to insufficient validation of user-supplied input for specific HTTP...

6.1CVSS6.2AI score0.00648EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 5:03 a.m.4 views

swagger-ui

Introducción: El Rol de Swagger UI Swagger UI es una librería ampliamente utilizada que renderiza especificaciones OpenAPI anteriormente Swagger en una interfaz web interactiva. Permite a desarrolladores e integradores explorar y probar APIs sin necesidad de tener la implementación del backend...

4.3CVSS6.7AI score0.42326EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/01 5:02 a.m.3 views

pngcheck-vulns

pngcheck-vulns A repository of proof-of-concept files demonstrating disclosed and patched vulnerabilities in pngcheck 2.4.0 - 3.0.1. Each POC is custom crafted with dedicated generation scripts to trigger specific bugs, covering both CVE-numbered and unnumbered vulnerabilities. For detailed...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 5:01 a.m.4 views

CVE-2024-57241

CVE-2024-57241CNNVD-2024-34500830 Para aplicaciones web que utilizan DEDECMS 5.71SP1 y anteriores, se producen redirecciones de URL debido a que el error de lógica en el código fuente del CMS no valida la solicitud GET de entrada. En aplicaciones web que usan DEDECMS 5.71SP1 y versiones inferiore...

6.5CVSS5.9AI score0.01135EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 5:01 a.m.5 views

CVE-2025-63571

Description During analysis of the AI ​​system ChatGPT GPT-5, a Server-Side Request Forgery SSRF vulnerability was discovered. This issue occurs because the application automatically fetches and executes external URLs submitted by users e.g., webhooks without any validation or sanitization. By...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 4:56 a.m.3 views

mailchecker

MailChecker Cross-language email validation. Backed by a database of over 55 000 throwable email domains. Validate the format of your email uses validator.js email regex underneath and FILTERVALIDATEEMAIL for PHP Validate if the email is not a temporary mail yopmail-like..., add your own dataset ...

5.8AI score
SaveExploits0References31
Kitploit
Kitploit
added 2026/09/01 4:53 a.m.4 views

CVE-2024-26229-lpe

CVE-2024-26229 CWE-781: Improper Address Validation in IOCTL with METHODNEITHER I/O Control Code in the csc.sys driver...

7.8CVSS7.2AI score0.09375EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/01 4:51 a.m.6 views

roundcube-cve-2025-49113-lab

"DISCLAIMER: Educational Use Only" Roundcube Webmail RCE – CVE-2025-49113 Lab This repository documents my step-by-step exploitation of Roundcube Webmail CVE-2025-49113 in a controlled lab to obtain the secret stored in /secret.txt. ⚠️ Disclaimer All work was performed against a lab / training...

9.9CVSS7.2AI score0.99032EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/09/01 4:48 a.m.3 views

CVE-2023-39115

CVE-2023-39115 Description: Campcodes Online Matrimonial Website System Script v3.3 is vulnerable to an arbitrary file upload vulnerability, potentially allowing attackers to execute arbitrary code on the targeted server. The vulnerability arises from insufficient validation of uploaded files,...

9.8CVSS7.7AI score0.07883EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/01 4:37 a.m.1 views

CVE-2025-69822-Atomberg_Erica_SmatFan_Security_Assessment

CVE-2025-69822-AtombergEricaSmatFanSecurityAssessment This vulnerability impacts device availability and reliable operation of Atomberg Erica Smart FanFirmware Version 1.0.36. The issue arises due to a lack of protection mechanisms against forged deauthentication frames and lack of fallback or...

7.4CVSS5.9AI score0.00353EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 4:33 a.m.4 views

cve-2021-3007-vulnerable

CVE-2021-3007 Entorno de Prueba Vulnerable Entorno de prueba intencionadamente vulnerable para validar la detección de CVE-2021-3007 en escáneres de seguridad. Resumen de la Vulnerabilidad...

9.8CVSS7.4AI score0.75313EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/01 4:31 a.m.4 views

Blackash-CVE-2025-20393

🛡️ CVE-2025-20393 – Critical Cisco AsyncOS Vulnerability 🔍 Overview CVE‑2025‑20393 is a critical remote code execution RCE vulnerability in Cisco AsyncOS Software , affecting: Cisco Secure Email Gateway physical & virtual Cisco Secure Email and Web Manager physical & virtual ⚠️ Only systems with...

10CVSS7.9AI score0.29875EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/01 4:28 a.m.6 views

CVE-2023-42222

CVE-2023-42222 Vulnerability summary WebCatalog before version 48.4.0 calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances. This vulnerability allows an attacker to execute code on the victims machine by sending...

8.8CVSS7.5AI score0.01407EPSS
SaveExploits4
EUVD
EUVD
added 2026/09/01 4:27 a.m.4 views

EUVD-2026-68973

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the movefolders function in all versions up to, and including, 3.29.12. This makes it possible for unauthenticated attackers to delete arbitrary files on the...

7.5CVSS6.4AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/01 4:16 a.m.7 views

dirty_sock

dirtysock: Linux Privilege Escalation via snapd In January 2019, current versions of Ubuntu Linux were found to be vulnerable to local privilege escalation due to a bug in the snapd API. This repository contains the original exploit POC, which is being made available for research and education. F...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 4:02 a.m.4 views

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro = 1.9.26 - Carga Arbitraria de Archivos No Autenticada Descripción El plugin WooCommerce Designer Pro para WordPress, utilizado por el tema Pricom - Printing Company & Design Services de WordPress, es vulnerable a cargas arbitrarias de archivos debido a la...

9.8CVSS7.3AI score0.31424EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/01 4:01 a.m.3 views

WAFNinja

WAFNinja root@kitploit: WAFNinja - Penetration testers favorite for WAF Bypassing WAFNinja is a CLI tool written in Python. It shall help penetration testers to bypass a WAF by automating steps necessary for bypassing input validation. The tool was created with the objective to be easily...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 3:42 a.m.5 views

security-audit-skill

security-audit A coding-agent skill that turns your agent into a security auditor. It orchestrates multiple parallel agents through a six-phase pipeline -- recon, hunting, validation, reporting, structured output, and independent verification -- to find exploitable vulnerabilities with real impac...

5.9AI score
SaveExploits0
Rows per page
Query Builder