Lucene search
+L

1742 matches found

Kitploit
Kitploit
added 2026/09/16 4:03 a.m.6 views

vcenter-log4j

VMware vCenter log4j workaround Script to workaround VMware vCenter log4j vulnerability CVE-2021-44228, as per the VMware KB article. 2021-12-13 02:09 UTC - Added Secure Token & Identity Management services 2021-12-13 12:46 UTC - Added PSC Client for 6.5 - see below VMware have released a python...

10CVSS7.5AI score0.99999EPSS
SaveExploits370References1
Kitploit
Kitploit
added 2026/09/16 3:20 a.m.11 views

CVE-2021-22005_PoC

CVE-2021-22005PoC CVE-2021-22005PoC getshell: https://gist.github.com/testanull/c2f6fd061c496ea90ddee151d6738d2e verify: https://github.com/knownsec/pocsuite3/blob/master/pocsuite3/pocs/20210923WEBVmwarevCenterServerFIleUploadCVE-2021-20050.py...

9.8CVSS7.9AI score0.99999EPSS
SaveExploits11References2
Kitploit
Kitploit
added 2026/09/16 2:22 a.m.6 views

cve-2021-22005-exp

cve-2021-22005-exp 0x01 Vulnerability Overview On September 21, 2021, VMware released a security advisory disclosing 19 security vulnerabilities in vCenter Server, with CVSSv3 scores ranging from 4.3 to 9.8. Among them, the most critical vulnerability is an arbitrary file upload vulnerability in...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/16 1:16 a.m.9 views

CVE-2021-21972

Check CVE-2021-21972 CVE-2021-21972 vCenter-6.5-7.0 RCE POC...

10CVSS8.7AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/16 12:16 a.m.11 views

vmware_vcenter_cve_2020_3952

Proof of concept for CVE-2020-3952 This is a short piece of code that exploits of CVE-2020-3952, which is described in detail at the Guardicore Labs post over here. This vulnerability was published by VMware in April 2020 with a maximum CVSS score of 10.0. It allows an attacker with a network...

9.8CVSS8AI score0.90384EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/16 12:08 a.m.5 views

CVE-2021-22005

CVE-2021-22005 VMware vCenter Server Arbitrary File Upload Vulnerability Code By: Junsheng @Orange Network Security Lab Orange Network Security Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read...

9.8CVSS8.3AI score0.99999EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/15 11:24 p.m.8 views

vSphereyeeter

vsphereyeeter.sh is an automated bash script to exploit vulnerabilty CVE-2021-21972 in the vSphere Client for vCenter servers. Once executed simply give it the IP Address of your vulnerable target and you will be presented with an SSH shell. "The vSphere Client HTML5 contains a remote code...

10CVSS9AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/15 11:23 p.m.8 views

CVE-2021-21985_PoC

Vulnerability Details VMWARE VCENTER SERVER VIRTUAL SAN HEALTH CHECK PLUG-IN RCE CVE-2021-21985 The vSphere Client HTML5 contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with...

10CVSS9.2AI score0.99999EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/15 10:56 p.m.9 views

CVE-2021-21972

CVE-2021-21972 Nmap script to check vulnerability CVE-2021-21972 - vCenter Server RCE Vulnerability References: https://app.howlermonkey.io/vulnerabilities/CVE-2021-21972 https://www.vmware.com/security/advisories/VMSA-2021-0002.html Example nmap -p443 --script cve-2021-21972.nse --script-args...

10CVSS8.6AI score0.99865EPSS
SaveExploits48References2
Kitploit
Kitploit
added 2026/09/15 10:08 p.m.9 views

CVE-2021-21972

CVE-2021-21972 checker VMware vCenter Server CVE-2021-21972 Remote Code Execution Vulnerability This script looks the existence of CVE-2021-21972 based on the following PATH "/ui/vropspluginui/rest/services/uploadova" trough a POST request and looking in response body 500 the words...

10CVSS8.7AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/15 9:57 p.m.6 views

CVE-2021-21972-vCenter-6.5-7.0-RCE-POC

CVE-2021-21972-vCenter-6.5-7.0-RCE-POC poc Just verify the return status of someone's path POC For testing only, NO EXP module is added POC仅用于测试,未加入exp模块...

10CVSS8.6AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/15 9:36 p.m.6 views

VMware_vCenter_CVE-2021-21972

VMwarevCenterCVE-2021-21972 VMware vCenter CVE-2021-21972 Related tools Invoke-CVE-2021-21972-Scan.ps1 This script will scan the specified target hosts and attempt to detect those that are vulnerable to VMware vCenter CVE-2021-21972. The script will execute in the following order: Create a log...

10CVSS8.6AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/15 9:23 p.m.9 views

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 Works On VMware-VCSA-all-6.7.0-8217866, VMware-VIM-all-6.7.0-8217866 ✔ VMware-VCSA-all-6.5.0-16613358 ✔ For vCenter6.7 U2+ vCenter 6.7U2+ runs the website in memory, so this exploit cannot work for 6.7 u2+. Needs Testing vCenter 6.5 Linux VCSA/WindowsAwaiting Testing...

10CVSS8.7AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/15 9:01 p.m.6 views

CVE-2021-21972

CVE-2021-21972 Proof of Concept Exploit for vCenter CVE-2021-21972 Research credit to: https://swarm.ptsecurity.com/unauth-rce-vmware/, http://noahblog.360.cn/vcenter-6-5-7-0-rce-lou-dong-fen-xi/ Tested on both Windows and Unix vCenter VCSA targets. Usage To benignly check if the target is...

10CVSS8.4AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/15 8:41 p.m.8 views

Log4jCenter

Log4jCenter Exploiting CVE-2021-44228 in vCenter for remote code execution and more. Blog post detailing exploitation linked below: How to exploit Log4j vulnerabilities in VMWare vCenter Why? Proof of concepts for this vulnerability are scattered and have to be performed manually. This repository...

10CVSS7.8AI score0.99999EPSS
SaveExploits370
Kitploit
Kitploit
added 2026/09/15 8:21 p.m.9 views

vcsa-hardening-tool

VCSA Hardening & Logging Tool An automated hardening script for the VMware vCenter Server Appliance VCSA designed to enforce Zero Trust network segmentation and deep forensic auditing. This tool is engineered to mitigate critical risks associated with advanced persistent threats APTs and...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 7:38 p.m.7 views

CVE-2021-21972

VMware vCenter Server RCE — CVE-2021-21972 Research Lab Author: Niranjan Pokhrel Independent research project reproducing and documenting a critical, publicly disclosed VMware vCenter Server vulnerability in an isolated home lab, to understand the vulnerability class, exploitation path, and...

10CVSS8.8AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/15 7:19 p.m.11 views

CVE-2021-21985-Checker

CVE-2021-21985 Checker. Simple Powershell implementation of @alt3kx nmap script. Usage .\CVE-2021-21985.ps1 vcenter.hostname.com Output TARGET VULNERABLE or TARGET NOT VULNERABLE...

10CVSS8.4AI score0.99999EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/15 6:26 p.m.10 views

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 Unauthorized RCE in VMware vCenter metasploit exploit script preparation root@kitploit: git clone https://github.com/TaroballzChen/CVE-2021-21972 cd CVE-2021-21972 mkdir -p /.msf4/modules/exploits/multi/http cp /.msf4/modules/exploits/multi/http chmod +x...

10CVSS8.8AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/15 6:06 p.m.4 views

CVE-2021-21972

CVE-2021-21972 VMware vSphere Client Unauthorized File Upload to Remote Code Execution RCE The vSphere Web Client HTML5 is essentially an administrative interface that enables management of a vSphere installation. The vSphere Client provides an administrator with access to the key functions of...

10CVSS8.6AI score0.99865EPSS
SaveExploits48
Rows per page
Query Builder