28438 matches found
CVE-2026-90583 kagisearch smallweb Query String Rendering sw.py index cross site scripting
A security flaw has been discovered in kagisearch smallweb up to 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf. The affected element is the function index of the file app/sw.py of the component Query String Rendering. Performing a manipulation of the argument qs results in cross site scripting. The...
CVE-2026-90583
A cross-site scripting (XSS) flaw exists in kagisearch smallweb (up to commit 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf) in the index function of app/sw.py within the Query String Rendering component. Manipulating the qs argument injects untrusted content into the rendered page. Exploitation requi...
CVE-2025-49132
Impact Using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code, without being authenticated. With the ability to execute arbitrary code, this vulnerability can be exploited in an infinite number of ways. It could be used t...
CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC
ZoneMinder Time-Based SQL Injection CVE-2024-51482 ๐ Vulnerability Overview CVE ID: CVE-2024-51482 Advisory: GHSA-qm8h-3xvf-m7j3 Affected versions: ZoneMinder 1.37. up to and including 1.37.64 Patched version: 1.37.65 ๐ Description This repository contains a high-performance, parallelized...
dig
dig macOS ไธ็ๆฌๅฐ dig ๅ ่ฃ ๅจใ็ๆญฃๅๆฅ่ฏข็่ฟๆฏ็ณป็ป่ชๅธฆ็ /usr/bin/digใ่ฟไธช้กน็ฎๅชๅจไฝ ่ชๅทฑ็็ป็ซฏ่พๅบๅ้ข่ฟฝๅ ไธๆกๆฌๅฐ TXT๏ผๆนไพฟๆฌๅฐๆต่ฏใ ๅฎไธๆน DNS๏ผไธๅ zone file๏ผๅบๅๆไปถ๏ผ๏ผไนไธ็ขฐไปปไฝไบๅๅใ ่กไธบ ็ปๆไธชๅๅ้ๆญปไธๆก TXT๏ผไนๅๆฏๆฌกๆฅ้ฝ่ฟๅ root@kitploit: dig +txt= TXT dig +txt= +ttl=600 TXT name๏ผๅๅ๏ผๆฏๅฆ app.local value๏ผ่ฟๆก TXT ็ๅ ๅฎน๏ผๅๅจ +txt= ๅ้ขใๆ็ฉบๆ ผๅฐฑๅ ๅผๅท +ttl=๏ผๅฑ็คบ็จ็ TTL๏ผ้ป่ฎค 600 root@kitploit: di...
CVE-2025-49132
Impact Using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code, without being authenticated. With the ability to execute arbitrary code, this vulnerability can be exploited in an infinite number of ways. It could be used t...
cve-2023-5044
CVE-2023-5044 Ingress Nginx Exploit Proof-Of-Concept This is a quick Go program to exploit the recent CVE in the Ingress Nginx controller. Details on how to do this are already out there via Rory McCune's blog at https://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044/, this just...
CVE-2024-51665
CVE-2024-51665 Magical Addons For Elementor = 1.2.1 - Authenticated Subscriber+ Server-Side Request Forgery Description: The Magical Addons For Elementor Header Footer Builder, Free Elementor Widgets, Elementor Templates Library plugin for WordPress is vulnerable to Server-Side Request Forgery in...
CVE-2024-1380
CVE-2024-1380 Relevanssi โ A Better Search = 4.22.0 - Missing Authorization to Unauthenticated Query Log Export Description The Relevanssi โ A Better Search plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relevanssiexportlogcheck function...
CVE-2012-1823
PHP CGI Argument Injection CVE-2012-1823 Description sapi/cgi/cgimain.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to execute arbitrary code by...
CVE-2026-44262
dedoc/scramble RCE CVE-2026-44262 PoC ๐ Description CVE-2026-44262 is an unauthenticated Remote Code Execution vulnerability in dedoc/scramble, a Laravel API documentation generator. NodeRulesEvaluator::doEvaluateExpression calls extract$variables before . When a controller assigns to a variable...
CVE-2024-27304-PoC
CVE-2024-27304-PoC references DEF CON 32 - SQL Injection Isn't Dead Smuggling Queries at the Protocol Level - Paul Gerste pgx SQL Injection via Protocol Message Size Overflow webapp A simple web application with login functionality. Only administrators can log in. This application uses PostgreSQL...
CVE-2026-54433
CVE-2026-54433: Roundcube plain-text email stored XSS This repository contains a configurable Python proof of concept for CVE-2026-54433 , a stored cross-site scripting vulnerability in Roundcube's plain-text email renderer. An unauthenticated sender can deliver a crafted text/plain message. When...
CVE-2026-55993
camel-atmosphere-websocket Header Injection Reproducer CVE-2026-55993 This project demonstrates a message-header injection in Apache Camel's camel-atmosphere-websocket component, tracked as CVE-2026-55993. The WebSocket consumer copies the connection's query parameters onto the Camel Exchange...
CVE-2025-30208
CVE-2025-30208 โ Vite Arbitrary File Read ยท v5 CVE: CVE-2025-30208 GHSA: GHSA-x574-m823-4x7w Severity: CVSS 5.3 Medium network-accessible dev server โ For authorized security engagements only. Unauthorized use against systems you do not own or have explicit written permission to test is illegal...
couchdb-exploit
๐ CouchDB Exploit - CVE-2017-12635 & CVE-2017-12636 Apache CouchDB - Privilege Escalation & Remote Code Execution ๐ Overview This tool exploits two critical vulnerabilities in Apache CouchDB: CVE| Description| Severity ---|---|--- CVE-2017-12635| Privilege Escalation via JSON Parsing Bypass| ๐ด...
CVE-2026-29811
CyberPanel versions prior to 2.4.4 are affected by a vulnerability in how the application detects an "alias" domain (a secondary domain serving the same content as a primary domain). The root cause is that this detection is performed via an ORM query filter rather than a Python if statement, whic...
EUVD-2026-77075
CyberPanel before 2.4.4 attempts to detect an "alais" domain i.e., a second domain that serves the same content as a primary domain; normally spelled "alias" via an ORM query filter rather than a Python "if" statement...
CVE-2026-29811
CyberPanel before 2.4.4 attempts to detect an "alais" domain i.e., a second domain that serves the same content as a primary domain; normally spelled "alias" via an ORM query filter rather than a Python "if" statement...
CVE-2026-29811
CyberPanel before 2.4.4 attempts to detect an "alais" domain i.e., a second domain that serves the same content as a primary domain; normally spelled "alias" via an ORM query filter rather than a Python "if" statement...