Lucene search
+L

488148 matches found

Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•49 views

Monsta FTP <= 2.11.2 - Unauthenticated Remote Code Execution

Monsta FTP = 2.11 contains an unrestricted file upload vulnerability caused by lack of authentication on file uploads, letting unauthenticated attackers execute arbitrary code by uploading crafted files. id: CVE-2025-34299 info: name: Monsta FTP = 2.11.2 - Unauthenticated Remote Code Execution...

9.8CVSS7.9AI score0.72854EPSS
SaveExploits6References3
Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•75 views

Apache Flink 1.5.1 - Local File Inclusion

Apache Flink 1.5.1 is vulnerable to local file inclusion because of a REST handler that allows file uploads to an arbitrary location on the local file system through a maliciously modified HTTP HEADER. id: CVE-2020-17518 info: name: Apache Flink 1.5.1 - Local File Inclusion author: pdteam severit...

7.5CVSS7.5AI score0.51398EPSS
SaveExploits1References5
Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•37 views

WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload

WPvivid Backup & Migration plugin for WordPress = 0.9.123 contains an unauthenticated arbitrary file upload vulnerability caused by improper error handling in RSA decryption and lack of path sanitization, letting unauthenticated attackers upload arbitrary PHP files and achieve remote code executi...

9.8CVSS8.8AI score0.33329EPSS
SaveExploits14References4
Kitploit
Kitploit
•added 2026/09/28 2:13 a.m.•14 views

CVE-2019-14450

Este repositorio no tiene un README...

10CVSS8.3AI score0.10447EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 2:07 a.m.•10 views

Automated-Next.js-Security-Scanner-for-CVE-2025-29927

Next.js CVE-2025-29927 Vulnerability Scanner A command-line security scanner for identifying publicly accessible Next.js applications that may be exposed to CVE-2025-29927. Disclaimer This tool is intended for authorized security testing, vulnerability assessment, research, and defensive security...

9.1CVSS7.6AI score0.99225EPSS
SaveExploits59
Kitploit
Kitploit
•added 2026/09/28 1:24 a.m.•9 views

CVE-2022-31897

CVE-2022-31897 Date: 06/22/2022 Exploit Author: Angelo Pio Amirante Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html Version: 1.0 Tested on: Server: XAMPP on Windows 10 CVE: CVE-2022-31897...

6.1CVSS6.4AI score0.00898EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/28 1:10 a.m.•12 views

CVE-2025-4524

CVE-2025-4524 WordPress Madara Theme 2.2.2.1 - Local File Inclusion...

9.8CVSS8.4AI score0.10373EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/28 12:58 a.m.•9 views

CVE-2021-40513

CVE-2021-40513 OSCAR McMaster 19.401235 反射型跨站脚本漏洞 OSCAR McMaster 应用程序 19.401235 版本的多个页面中存在一个反射型跨站脚本漏洞,允许任意执行 JavaScript 命令。 CVE mitre 占位符 存在漏洞的 JSP 页面: documentReport.jsp - functionid、function、curUser 参数 addappointment.jsp - duration、endtime、starttime、day、month、year、providerno 参数 unLock.jsp -...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 12:57 a.m.•15 views

CVE-2024-8856

CVE-2024-8856 Esta herramienta escanea sitios web de WordPress en busca de vulnerabilidades en el plugin WP Time Capsule relacionadas con CVE-2024-8856. Identifica las versiones del plugin inferiores a "1.22.22" como vulnerables y registra los resultados en "vuln.txt". Simple y eficiente, ayuda a...

9.8CVSS8.4AI score0.94135EPSS
SaveExploits7References1
Kitploit
Kitploit
•added 2026/09/28 12:25 a.m.•15 views

activemq-cve-lab

ActiveMQ Message Broker Resumen Aplicación de broker de mensajes ActiveMQ con funcionalidad de importación/exportación de mensajes. Versión: 5.11.1 Características Gestión de colas de mensajes Estadísticas y monitoreo de colas Importación/exportación de archivos de mensajes Estado del broker en...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 12:18 a.m.•8 views

CVE-2021-41773

CVE-2021-41773 - Apache HTTP Server 2.4.49 Cómo ejecutar el laboratorio CVE-2021-41773-Path Traversal 1. Instala y ejecuta Docker en tu PC/portátil 2. Clona este repositorio de GitHub 3. Ve a la carpeta Path Traversal 4. Ingresa el siguiente comando docker build -t cve-2021-41773-path-traversal ....

9.8CVSS8.2AI score0.99992EPSS
SaveExploits167
Kitploit
Kitploit
•added 2026/09/27 11:49 p.m.•18 views

SCCMVersionGuesser

SCCMVersionGuesser Herramienta automatizada de detección del nivel de compilación y parches de SCCM Requisitos requests Uso $ python3 SCCMVersionGuesser.py https://sccm.example.com Referencia https://learn.microsoft.com/en-us/intune/configmgr/hotfix/...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/27 11:41 p.m.•18 views

exploit-CVE-2017-6090

容器化的可利用CVE-2017-6090 本项目构建了一个运行 PhpCollab 2.5.1 的容器,其中包含 CVE-2017-6090 中详述的远程代码执行漏洞。此外,还提供了一个 docker-compose 文件,用于启动该容器和 MySQL 以演示该漏洞,利用说明如下。 构建 docker build -t 容器名称 . 或使用镜像 jlkinsel/exploit-cve-2017-6090 运行与配置 启动该程序最简单的方法是使用附带的 docker-compose.yml 文件。如果我有空——或者有人感兴趣——我会创建一个 Kubernetes 部署或 Helm...

8.8CVSS8.2AI score0.96385EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/09/27 11:39 p.m.•16 views

CVE-2025-39436

🚨 WordPress 插件漏洞:CVE-2025-39436 📝 描述 在“I Draw”WordPress 插件中存在一个危险类型文件的不受限制上传 漏洞。此漏洞允许攻击者不受限制地上传恶意文件。该问题影响 I Draw 版本 1.0 及之前版本 。 🛠️ 漏洞详情 该漏洞利用插件的文件上传功能来执行 PHP 有效载荷。以下是使用的默认有效载荷: phpcode = "" 🚀 使用方法 usage: CVE-2025-39436.py -h -u URL -un USERNAME -p PASSWORD options: -h, --help 显示此帮助信息并退出 -u, --url...

9.1CVSS8.6AI score0.00719EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/27 11:16 p.m.•10 views

CVE-2023-27163---Maltrail-0.53---RCE

CVE-2023-27163---Maltrail-0.53---RCE Create by TheAlchimist cve-2023-27163-maltrail.py for reverse shell...

6.5CVSS7AI score0.06591EPSS
SaveExploits29
Kitploit
Kitploit
•added 2026/09/27 11:12 p.m.•13 views

netty-http2-check

netty-http2-check Offline checker for the 7io.netty:netty-codec-http2 CVEs. Tells you which ones you are actually exposed to — and the single version that fixes all of them: 4.1.136.Final / 4.2.16.Final, a number that appears on none of the seven advisories. CVE-2025-55163 · CVE-2026-33871 ·...

8.7CVSS7AI score0.012EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/09/27 10:58 p.m.•10 views

jenkins_scan

jenkinsscan Encuentra entornos Jenkins y comprueba el CVE-2024-23897 Cómo funciona Detección de Jenkins Prueba las rutas: /, /login, /oops, /api/json, /cli, /jenkins/, /jenkins/api/json Identifica vía: 1. Header X-Jenkins — más confiable, también devuelve la versión 2. Header X-Hudson — instancia...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits51
Kitploit
Kitploit
•added 2026/09/27 10:46 p.m.•19 views

docker-confluence-patched

docker-confluence-patched 已修补的 Confluence 7.12.2 CVE-2021-26084...

9.8CVSS8.1AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
•added 2026/09/27 10:01 p.m.•10 views

CVE-2019-9053---CMS-Made-Simple-SQL-Injection-Exploit-Modified-

CVE-2019-9053 - CMS Made Simple SQL Injection Exploit Modificado Descripción Esta es una versión modificada del exploit de inyección SQL basada en tiempo para CMS Made Simple = 2.2.9. El exploit fue creado originalmente por Daniele Scanu y se ha actualizado para una mejor compatibilidad y práctic...

8.1CVSS7.9AI score0.68581EPSS
SaveExploits38
Kitploit
Kitploit
•added 2026/09/27 9:57 p.m.•14 views

nextjs-react2shell-detect

Chrome扩展,在本地运行next.version,如果网站运行的Next版本存在react2shell漏洞,则注入一个警告弹出框。 这是一个使用plasmo init初始化的Plasmo扩展项目。 开始 首先,运行开发服务器: bun dev 打开浏览器并加载相应的开发构建版本。例如,如果你正在为Chrome浏览器开发并使用manifest v3,请使用:build/chrome-mv3-dev。...

5.9AI score
SaveExploits0
Rows per page
Query Builder