Lucene search
+L

13 matches found

Kitploit
Kitploit
•added 2026/10/03 4:33 a.m.•10 views

x-CVE-2020-27190

이 저장소에는 README가 없습니다...

5.8AI score
SaveExploits0
attackerkb
attackerkb
•added 2026/02/20 8:52 p.m.•14 views

CVE-2026-27190

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.6.8, a command injection vulnerability exists in Deno's node:childprocess implementation. This vulnerability is fixed in 2.6.8...

8.1CVSS5.6AI score0.03169EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2026/02/20 8:52 p.m.•21 views

CVE-2026-27190 Deno has a Command Injection via Incomplete shell metacharacter blocklist in node:child_process

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.6.8, a command injection vulnerability exists in Deno's node:childprocess implementation. This vulnerability is fixed in 2.6.8...

8.1CVSS5.6AI score
SaveExploits0References5
Circl
Circl
•added 2026/02/19 8:16 a.m.•24 views

CVE-2026-27190

creationtimestamp| type| source ---|---|--- 2026-02-19 08:16:18+00:00| published-proof-of-concept| https://github.com/denoland/deno/security/advisories/GHSA-hmh4-3xvx-q5hr 2026-02-21 00:25:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdeebfrpv2s 2026-03-02...

9.8CVSS5.8AI score0.03169EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/04/08 8:17 p.m.•29 views

CVE-2025-27190 Adobe Commerce | Improper Access Control (CWE-284)

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access...

5.3CVSS0.00535EPSS
SaveExploits0References1
Circl
Circl
•added 2025/02/14 5:39 p.m.•15 views

CVE-2024-27190

creationtimestamp| type| source ---|---|--- 2025-02-14 17:39:47+00:00| seen| Telegram/rlbnNF-jij67DefhaWE2LbN5fl2EUUZ-rkEH-Fpnh2-vyvll 2025-02-14 21:08:31+00:00| seen| Telegram/RRdQOw8f9kwnvVZifnHUvge8q6xOr6BUsm6NSfs8xwPa4a5...

8.8CVSS4.8AI score0.00439EPSS
SaveExploits0
OSV
OSV
•added 2024/03/21 5:15 p.m.•11 views

CVE-2024-27190

Missing Authorization vulnerability in Jean-David Daviet Download Media.This issue affects Download Media: from n/a through 1.4.2...

8.8CVSS5.8AI score0.00439EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/21 5:04 p.m.•59 views

CVE-2024-27190 WordPress Download Media plugin <= 1.4.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jean-David Daviet Download Media.This issue affects Download Media: from n/a through 1.4.2...

4.3CVSS5AI score0.00439EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/21 5:04 p.m.•108 views

CVE-2024-27190

CVE-2024-27190 affects WordPress Plugin Download Media (Jean-David Daviet) with Missing Authorization in versions n/a through 1.4.2. Root cause: broken access control allowing unauthorized access. Exploitation status is not provided in the documents. Patch status for this entry is Unpatched; reme...

8.8CVSS8.6AI score0.00439EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/02/26 12:00 a.m.•21 views

WordPress Download Media Plugin <= 1.4.2 is vulnerable to Broken Access Control

Software Download Media Type Plugin Vulnerable versions = 1.4.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-27190 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 96de5b41d24d Credits Steven Julian Required privilege...

8.8CVSS6.6AI score0.00439EPSS
SaveExploits0References1Affected Software1
Circl
Circl
•added 2021/02/12 7:43 a.m.•16 views

CVE-2021-27190

creationtimestamp| type| source ---|---|--- 2021-02-12 07:43:04+00:00| seen| https://t.me/cibsecurity/23514...

5.4CVSS5.5AI score0.01615EPSS
SaveExploits2References1
CVE
CVE
•added 2021/02/12 2:24 a.m.•106 views

CVE-2021-27190

CVE-2021-27190 targets PEEL SHOPPING 9.3.0 and 9.4.0, describing a Stored XSS where user input containing a polyglot payload is echoed back in HTML/JavaScript, enabling malicious script execution (e.g., cookie theft or redirects) in the affected web app. The public disclosures in Red Hat and NVD ...

5.4CVSS5.3AI score0.01615EPSS
SaveExploits2References5Affected Software1
GithubExploit
GithubExploit
•added 2021/02/11 7:10 a.m.•162 views

Exploit for Cross-site Scripting in Peel Peel_Shopping

PoC exploit for CVE-YYYY-NNNN, a Stored XSS vulnerability in PEE...

5.4CVSS5.3AI score0.01615EPSS
SaveExploits2
Rows per page
Query Builder