Lucene search
+L
KitploitRecent

44445 matches found

Kitploit
Kitploit
added 2026/09/09 9:51 p.m.5 views

React2Shell-PoC

React2Shell-PoC A proof-of-concept exploit for CVE-2025-55182 and CVE-2025-66478 , critical Remote Code Execution vulnerabilities in React Server Components RSC and Next.js applications. Overview React2Shell demonstrates the exploitation of unsafe deserialization in Next.js server action handlers...

10CVSS8AI score0.99802EPSS
SaveExploits390
Kitploit
Kitploit
added 2026/09/09 9:50 p.m.5 views

laravel-phpunit-rce-masscaner

laravel phpunit rce masscanner CVE-2017-9841 Masscanner for Laravel phpunit RCE CVE-2017-9841 deps root@kitploit: python3 -m pip install -r requirements.txt or pipenv install -r requirements.txt Usage root@kitploit: usage: tool -h --file --range , --single SINGLE optional arguments: -h, --help sh...

9.8CVSS7.9AI score0.99999EPSS
SaveExploits20References1
Kitploit
Kitploit
added 2026/09/09 9:49 p.m.6 views

CVE-2019-3719

Dell SupportAssist RCE Proof of Concept This is the proof of concept source code for CVE-2019-3719, a vulnerability in most of all Dell machines that allowed for remote code execution. Usage python3 main.py Interface Name Victim IP Gateway IP Payload Filename...

8CVSS7.5AI score0.16145EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 9:49 p.m.8 views

CVE-2025-66034-htb-ctf

CVE-2025-66034-htb-ctf VariaType Variable Font Generator Exploit This repository contains a specialized exploit for the VariaType machine on Hack The Box. The exploit leverages a vulnerability in how the fontTools library or the web application handles .designspace XML files and metadata...

9.8CVSS7.5AI score0.00547EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/09 9:48 p.m.5 views

CVE-2025-24813

CVE-2025-24813 Proof of Concept PoC script for CVE-2025-24813, vulnerability in Apache Tomcat. The script has been modified based on the related link and tailored to my needs. Setup Vulnerable Tomcat Environment Given environment based on the official Tomcat 9.0.90 image. It removes the server's...

10CVSS8.2AI score0.99927EPSS
SaveExploits49References1
Kitploit
Kitploit
added 2026/09/09 9:48 p.m.7 views

Windows-ZTE-Loader

Windows-ZTE-Loader Windows ZTE Loader CVE-2014-2321 Requires ZMAP For Windows Or BigEar The application works by handling the output of a running scan via zmap or bigear, that output is piped into the zte application, see your operating systems documentation for piping output from a running progr...

10CVSS7.4AI score0.59259EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 9:46 p.m.6 views

CVE-2025-29927-NextJS

📦 Next.js CVE-2025-29927 - Proof of Concept This repository contains a minimal Proof of Concept PoC for exploiting CVE-2025-29927, a high-severity vulnerability affecting specific versions of Next.js that allows unauthorized access to internal application files through crafted URLs. ⚠️ Disclaimer...

9.1CVSS7.5AI score0.99225EPSS
SaveExploits59References1
Kitploit
Kitploit
added 2026/09/09 9:46 p.m.12 views

CVE-2021-31956-POC

" CVE-2021-31956" WIP PoC code for CVE-2021-31956 in preparation for OSEE. Will improve it further after my OSEE exams and free time. A lot of hardcoded offsets need to be changed if it is different on the target system but if it is anything similar to 2020 - 2021 builds then no change should be...

9.3CVSS7.1AI score0.81107EPSS
SaveExploits5References2
Kitploit
Kitploit
added 2026/09/09 9:44 p.m.5 views

CVE-2023-3824

PHP Malicious Phar File PoC CVE-2023-3824 Description This Proof of Concept PoC demonstrates how to create a malicious Phar file in PHP and trigger a buffer overflow vulnerability. Usage Creating the Malicious Phar File 1. Create a new PHP file e.g., createphar.php and add the following code:...

9.8CVSS7.5AI score0.21786EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/09 9:44 p.m.4 views

CVE-2017-7529

CVE-2017-7529 Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. Installation $ git clone...

7.5CVSS6.9AI score0.62597EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/09 9:43 p.m.5 views

CVE-2024-36877

CVE-2024-36877 Exploit POC for CVE-2024-36877 Detailed write-up can be found on my blog - https://jjensn.com/at-home-in-your-firmware https://github.com/user-attachments/assets/71f30cda-61e3-49ea-b856-959746349f2d...

8.2CVSS5.9AI score0.00682EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/09 9:43 p.m.9 views

CVE-2016-5195

Description: dcow is a possible exploit of the vulnerability CVE-2016-5195. Running the program as unprivileged user on a vulnerable system, it'll modify the /etc/passwd file, forcing the password "dirtyCowFun" SHA-512, but could be modified for older standards. In case of successful execution,...

7.2CVSS7.1AI score0.83524EPSS
SaveExploits91
Kitploit
Kitploit
added 2026/09/09 9:42 p.m.7 views

CVE-2023-2982

CVE-2023-2982 WordPress Social Login and Register Discord, Google, Twitter, LinkedIn = 7.6.4 - Authentication Bypass Info The WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4...

9.8CVSS8.4AI score0.46242EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/09 9:42 p.m.7 views

CVE-2018-15982_EXP

CVE-2018-15982EXP Usage root@kitploit: msfvenom -p windows/exec cmd=notepad.exe -f raw 86.bin msfvenom -p windows/x64/exec cmd=notepad.exe -f raw 64.bin python CVE201815982.py -i 86.bin -I 64.bin output exp.swf and index.html。 Demo https://twitter.com/Evi1cg/status/1071284773169950721...

10CVSS8AI score0.81971EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/09 9:42 p.m.7 views

CVE-2024-22534

CVE-2024-22534 Information Leakage vulnerability found on OneinStack Deployment tool which is leaking Sensitive information endpoints via Dashboard. The vulnerability leaks to Sensitive information Leakage through phpinfo.php, xprober.php and ocp.php...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 9:41 p.m.7 views

watchguard-sso-client

Proof of Concept for Watchguard SSO Agent Vulnerabilitites CVE-2024-6592, CVE-2024-6593, CVE-2024-6594 Details are described in our advisories available at: CVE-2024-6592 CVE-2024-6593 CVE-2024-6594 The script requires the Python click library to run. Examples Issue Arbitrary Commands to SSO...

9.3CVSS7.8AI score0.01158EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 9:41 p.m.5 views

CVE-2025-55184

This repository does not have a README...

7.5CVSS7.6AI score0.66882EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/09 9:40 p.m.8 views

cve-2025-8110-GOGS-RCE

GOGS RCE cve-2025-8110 Gogs is a lightweight and self-hosted Git service similar to a private version of GitHub, designed to run easily on low-resource servers. The CVE-2025-8110 vulnerability is a critical security flaw that allows an attacker to bypass path restrictions by using symlinks. By...

8.8CVSS7.7AI score0.82471EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/09 9:40 p.m.7 views

IOFireWireFamily-overflow

IOFireWireFamily-overflow IOFireWireFamily-overflow is a proof-of-concept exploit for CVE-2016-7608, a buffer overflow in IOFireWireUserClient that was fixed in macOS Sierra 10.12.2. This vulnerability can be triggered to cause denial of service or possibly arbitrary code execution on devices wit...

5.5CVSS7.2AI score0.01101EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 9:40 p.m.5 views

CVE-2025-60188-Atarim-Plugin-Exploit

CVE-2025-60188-Atarim-Plugin-Exploit CVE-2025-60188: Atarim Plugin Authentication Bypass via HMAC Forgery Overview This repository contains a Proof of Concept PoC and technical analysis for CVE-2025-60188, a critical vulnerability discovered in the Atarim WordPress plugin. This flaw allows...

7.5CVSS5.9AI score0.03485EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 9:39 p.m.7 views

vulnerable-next-js-poc

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ SECURITY RESEARCH ONLY This repository contains a proof of concept for CVE-2025-55182 , a critical remote code execution vulnerability in React Server Components. This is for authorized security testing and research purposes only. Vulnerability...

10CVSS7.8AI score0.99802EPSS
SaveExploits390
Kitploit
Kitploit
added 2026/09/09 9:39 p.m.9 views

CVE-2024-34833-payroll-management-system-rce

CVE-2024-34833 Payroll Management System RCE Unauthenticated PoC RCE via file upload for https://www.sourcecodester.com/php/14475/payroll-management-system-using-phpmysql-source-code.html. The filenames have timestamp prepended with a minute accuracy. The script tries to guess the filename using...

9.8CVSS6.7AI score0.01923EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/09 9:38 p.m.6 views

CVE-2024-23740

CVE-2024-23740 A An issue in Kap through 3.6.0 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. There is a tool designed to automate the process of searching for vulnerabilities in electron:...

9.8CVSS8.2AI score0.01456EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 9:38 p.m.6 views

CVE-2024-50379-POC

CVE-2024-50379-POC This repository contains a Python script designed to exploit CVE-2024-50379 , a vulnerability that allows attackers to upload a JSP shell to a vulnerable server and execute arbitrary commands remotely. This exploit is particularly useful when the /uploads directory is either...

9.8CVSS8.4AI score0.44312EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/09 9:38 p.m.5 views

CVE-2023-4863

CVE-2023-4863 root@kitploit: checkout webp git clone https://chromium.googlesource.com/webm/libwebp/ webptest cd webptest/ checkout vulnerable version git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 enable AddressSanitizer sed -i 's/^EXTRAFLAGS=./& -fsanitize=address/' makefile.unix build...

8.8CVSS7.2AI score0.99979EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/09 9:38 p.m.7 views

CVE-2024-56924

CVE-2024-56924 Vulnerability Description A Cross-Site Request Forgery CSRF vulnerability exists in the code astro Internet Banking System version 2.0.0, which allows remote attackers to perform unauthorized actions on behalf of authenticated users, such as administrators, without their knowledge...

7.3CVSS6.2AI score0.00454EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 9:38 p.m.7 views

-SOC342---CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-and-RCE

SOC342---CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-and-RCE This is an investigation conducted on the Let's Defend platform, based on a recent SharePoint CVE. Let's take a look. 1. Examine the rule name. Rule names are usually created specifically for the attack to be detected. By examining...

9.8CVSS7.9AI score0.99998EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/09 9:38 p.m.4 views

pwnage24mtk

pwnage24mtk Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696. Patched. CVE-2023-20696 CVE-2025-20730 There are some issues about architecture detect.Need to be fixed when I am free.Or anyone can make a pull request. This is a vibe-coded...

6.7CVSS6.8AI score0.00104EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 9:37 p.m.7 views

CVE-2019-19634

CVE-2019-19634 - class.upload.php = 2.0.4 Arbitrary file upload Author - Jinny Ramsmark Affected vendor - Verot.net Affected product - class.upload.php = 2.0.4 Tested on newly installed Ubuntu 14.04 with PHP5 and Apache Specifically Debian/Ubuntu has been found to be vulnerable since they add the...

9.8CVSS8.1AI score0.04187EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/09 9:37 p.m.7 views

CVE-2020-1938

cve-2020-1938 1.read file: python3 tomcat.py URL -f /WEB-INF/web.xml example: python3 tomcat.py 127.0.0.1 -f /WEB-INF/web.xml -p 8090 2.excute shell add --rec 1 refere: https://www.t00ls.net/articles-55062.html...

9.8CVSS7.5AI score0.9927EPSS
SaveExploits51
Kitploit
Kitploit
added 2026/09/09 9:37 p.m.7 views

S2-045

S2-045 Struts2 S2-045 Vulnerability environment...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 9:36 p.m.5 views

CVE-2016-2067

ADRENO GPU IOMMU DMA EXPLOIT Tested under Nexus 6p google/angler/angler:6.0.1/MMB29M/2431559:user/release-keys About the bug Discussed in 2016 via Blackhat EU About the exploit With iommu dma writes, vdso.so is overwritten with shellcode. So after /init executes kernelclockgettime, the shellcode...

9.3CVSS7.5AI score0.00679EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 9:36 p.m.6 views

scaredycat

SCAREDYCAT! version 0.1 beta Python script to generate a malicious MP4 file and start a web server hosting a page with the embedded 'video' file on port 8080. This exploits another Stagefright vulnerability, the integer overflow vulnerability CVE-2015-3864, published by Exodus Intelligence. autho...

10CVSS6.2AI score0.87125EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/09 9:36 p.m.6 views

CVE-2024-32002

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...

9CVSS7.8AI score0.29234EPSS
SaveExploits32
Kitploit
Kitploit
added 2026/09/09 9:35 p.m.8 views

CVE-2021-22205

CVE-2021-22205 Pocsuite3 For CVE-2021-22205, Unauthorized RCE...

10CVSS8.2AI score0.99731EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/09/09 9:35 p.m.4 views

cve-2024-53259

cve-2024-53259 Reproduction of cve-2024-53259...

6.5CVSS6.6AI score0.00599EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 9:35 p.m.7 views

CVE-2020-13640

This repository does not have a README...

9.8CVSS8AI score0.12605EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 9:35 p.m.5 views

CVE-2021-1675

CVE-2021-1675 / CVE-2021-34527 Impacket implementation of the PrintNightmare PoC originally created by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Tested on a fully patched 2019 Domain Controller Execute malicious DLL's remote or locally Installation Before running the exploit you need t...

9.3CVSS8AI score0.99792EPSS
SaveExploits75References1
Kitploit
Kitploit
added 2026/09/09 9:35 p.m.7 views

CVE-2024-4956

CVE-2024-4956 - Unauthenticated Path Traversal in Nexus Repository Manager 3 The Nexus Repository Manager is a repository manager that organizes, stores, and distributes artifacts needed for development. A path traversal vulnerability has been discovered in Nexus Repository 3, in versions prior t...

7.5CVSS7.7AI score0.18245EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/09 9:35 p.m.7 views

CVE-2018-20250

This repository does not have a README...

7.8CVSS7AI score0.96274EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/09 9:34 p.m.9 views

writeup_split

Abstract CVE-2024-0684 A vulnerability in the GNU coreutils "split" program allows for a heap buffer overflow with user controlled data. It was introduced in 40bf1591bb4362fa91e501bcec7c2029c5f65a43 on 2023-03-04. A fix has been released with c4c5ed8f4e9cd55a12966d4f520e3a13101637d9 on 2024-01-17...

5.5CVSS6.1AI score0.0049EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/09 9:34 p.m.5 views

CVE-2024-36842-Backdooring-Oncord-Android-Sterio-

CVE-2024-36842 Backdooring-Oncord+ Android-Sterio We have conducted vulnerablity assessment on one of the most selling after marrket car infotainment unit. Creating Persistent Backdoor on Oncord+ android/ios car infotainment unit using malicious script! About Device: Android version : 12 Kernel...

7.3CVSS5.9AI score0.0082EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 9:34 p.m.4 views

CVE-2022-41040-POC

CVE-2022-41040-POC CVE-2022-41040 - Server Side Request Forgery SSRF in Microsoft Exchange Server Manual exploiation 1. Replace COLLABHERE with your OOB domain - sed 's/COLLABHERE//g 2. Add payloads next to URLs you want to test - echo http://target.com|unfurl format %s://%d/ 3. Visit crafted URL...

8.8CVSS7.6AI score0.99956EPSS
SaveExploits9References4
Kitploit
Kitploit
added 2026/09/09 9:34 p.m.4 views

CVE-2023-34830---Reflected-XSS-found-in-I-doit-Open-v24-and-below

CVE-2023-34830 - Reflected XSS found in i-doit Open v24 and below i-doit Open v24 and below are vulnerable to Reflected XSS vulnerability. These vulnerabilities could allows remote authenticated attackers to inject arbitrary web script or HTML. Description of product : i-doit is a web based Open...

5.4CVSS6.2AI score0.00651EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 9:33 p.m.5 views

CVE-2021-43798-Grafana-POC

CVE-2021-43798: Grafana Arbitrary File Read Vulnerability POC Usage: python3 exp.py IP:PORT...

7.5CVSS8.1AI score0.88503EPSS
SaveExploits45
Kitploit
Kitploit
added 2026/09/09 9:33 p.m.10 views

CVE-2024-50379

Manual exploitation is troublesome, so I whipped up an exp.. Usage: shell.jsp is the shell file, ggsl.jsp is the name/path saved to the target server. ./CVE-2024-50379 -u http://192.168.2.245:8080 -f shell.jsp -p ggsl.jsp Disclaimer This tool is only intended for legally authorized enterprise...

9.8CVSS8AI score0.44312EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/09 9:33 p.m.7 views

CVE-2018-15912-PoC

This repository does not have a README...

7.8CVSS7.2AI score0.00789EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 9:33 p.m.7 views

CVE-2025-3969-Exploit

This repository does not have a README...

9.8CVSS6.6AI score0.00488EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 9:33 p.m.6 views

CVE-2024-11616

This repository does not have a README...

5.6CVSS5.7AI score0.00298EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 9:33 p.m.6 views

RancidCrisco

RancidCrisco Minimum Viable PoC for CVE-2023-20126 This is the initial release. It works, but its the 'simplest case' exploit. Tested and working on SPA112/SPA122 - SPA232D requires a different firmware image. Gives a root-shell on port 23000/tcp. I still need to clean up the toolchain used for...

9.8CVSS8.2AI score0.36679EPSS
SaveExploits1
Total number of security vulnerabilities44445