Lucene search
+L

13565 matches found

Kitploit
Kitploit
•added 2026/10/03 6:46 p.m.•14 views

CVE-2025-63943

CVE-2025-63943 — SQL Injection in Grocery Store Management System 1.0 Overview A high-severity SQL Injection vulnerability was identified in the searchproducts.php component of Grocery Store Management System 1.0 , a PHP/MySQL-based web application created by anirudhkannan. The issue arises from...

5.8AI score
SaveExploits1References1
Kitploit
Kitploit
•added 2026/10/03 4:28 p.m.•8 views

CVE-2026-93659-writeup

CVE-2026-93659: Stored XSS in Concrete CMS Community Store Leads to Admin Dashboard Takeover Summary | ---|--- CVE| CVE-2026-93659 Component| concretecms-community-store/communitystore Type| Stored Cross-Site Scripting CWE-79 Severity| CVSS v4.0 9.3 Critical / v3.1 8.7 High Affected| All versions...

8.6CVSS6.3AI score0.00372EPSS
SaveExploits1References3
Kitploit
Kitploit
•added 2026/10/03 1:42 p.m.•14 views

CVE-2020-13996

Exploit Title: Joomla J2 Store 3.3.11 - 'filterorderDir' SQL Injection Authenticated Date: 2020-04-17 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Vendor Homepage: https://www.j2store.org/ Software Link: https://www.j2store.org/download.html Reference:...

8.8CVSS7.9AI score0.01343EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/03 10:27 a.m.•17 views

CVE-2021-30632

From: https://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE-2021-30632 The analysis of this bug can be found here. This is a Chrome bug that is reported by an anonymous researcher and was believed to be exploited in the wild. The exploit here is tested on v8 version...

8.8CVSS7.5AI score0.6319EPSS
SaveExploits3References1
Kitploit
Kitploit
•added 2026/10/02 10:36 p.m.•13 views

SnatchBox

SnatchBox SnatchBox CVE-2020-27935 is a sandbox escape vulnerability affecting macOS up to version 10.15, as well as early beta versions of macOS 11.0. The most significant impact of SnatchBox is that it allows a malicious publisher to escape the non-optional macOS App Store sandbox and obtain...

6.3CVSS7.5AI score0.01684EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/02 10:01 p.m.•13 views

CVE-2024-51788

💀 CVE-2024-51788 - WordPress The Novel Design Store Directory Plugin = 4.3.0 - Unauthenticated Arbitrary File Upload 🚨 Overview CVE-2024-51788 is a newly disclosed critical vulnerability affecting the The Novel Design Store Directory WordPress plugin = v4.3.0. This flaw allows unauthenticated...

10CVSS8.4AI score0.01499EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/02 9:41 p.m.•12 views

auto-repeater

AutoRepeater: Automated HTTP Request Repeating With Burp Suite tl;dr Within extender import AutoRepeater.jar Some Brief Instructions AutoRepeater will only resend requests which are changed by a defined replacement. When AutoRepeater receives a request that matches the conditions set for a given...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/02 6:43 p.m.•9 views

Hundred OSINT

h-osint h-osint A local-first, keyboard-driven OSINT workbench for the terminal — Neovim-style keybinds, Lua config, 12 themes, and a local SQLite case store. No account, no cloud backend, no telemetry. kitty » h-osint Repository: h-osint · Binary: h-osint · Website:...

10CVSS8.6AI score0.85974EPSS
SaveExploits42References12
NVD
NVD
•added 2026/10/02 11:17 a.m.•8 views

CVE-2026-59668

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTamano” parameter is affected – endpoint “/es/companysizebills/store”...

4.8CVSS0.00234EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/02 11:17 a.m.•7 views

CVE-2026-59666

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomOrigen” parameter is affected – endpoint “/es/origins/store”...

4.8CVSS0.00288EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/02 10:17 a.m.•9 views

CVE-2026-59668

The Repasat application is susceptible to a Cross-Site Scripting (XSS) vulnerability. An attacker can exploit the "nomTamano" parameter on the "/es/companysizebills/store" endpoint to trick a user into executing arbitrary code within their browser. No specific remediation steps, exploit links, or...

4.8CVSS6.2AI score0.00234EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/02 10:17 a.m.•6 views

EUVD-2026-91370

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTamano” parameter is affected – endpoint “/es/companysizebills/store”...

4.8CVSS6.2AI score0.00234EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/02 10:17 a.m.•7 views

CVE-2026-95662

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomCompetidor” parameter is affected – endpoint “/es/competitors/store”...

4.8CVSS0.00234EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/02 10:17 a.m.•8 views

CVE-2026-59665

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomMotivo” parameter is affected – endpoint “/es/lostmotives/store”...

4.8CVSS0.00234EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/02 10:17 a.m.•8 views

CVE-2026-59664

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomServicioPrestado” parameter is affected – endpoint “/es/providedservices/store”...

4.8CVSS0.00234EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/02 10:17 a.m.•8 views

CVE-2026-59663

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomDelegacion” parameter is affected – endpoint “/es/delegations/store”...

4.8CVSS0.00234EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/02 10:17 a.m.•8 views

CVE-2026-59662

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomCompetidor” parameter is affected – endpoint “/es/competitors/store”...

4.8CVSS0.00234EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/02 10:12 a.m.•7 views

EUVD-2026-91365

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomOrigen” parameter is affected – endpoint “/es/origins/store”...

4.8CVSS6.2AI score0.00288EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/02 10:12 a.m.•8 views

CVE-2026-59666

The Repasat application is affected by a Cross-Site Scripting (XSS) vulnerability. The flaw exists in the "nomOrigen" parameter located at the "/es/origins/store" endpoint. Successful exploitation could allow an attacker to trick a user into executing arbitrary code within their web browser. No s...

4.8CVSS6.2AI score0.00288EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/02 10:12 a.m.•37 views

CVE-2026-59666 Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomOrigen” parameter is affected – endpoint “/es/origins/store”...

4.8CVSS0.00288EPSS
SaveExploits0References1
Rows per page
Query Builder