Lucene search
+L

2236 matches found

Kitploit
Kitploit
added 2026/08/26 11:13 p.m.2 views

CVE-2021-25791-Multiple-Stored-XSS

CVE-2021-25791-Multiple-Stored-XSS : Множественные хранимые XSS в системе онлайн-записи к врачу В системе онлайн-записи к врачу версии 1.0 существует множество хранимых аутентифицированных межсайтовых сценариев XSS. Ссылка на ПО:...

5.4CVSS5.6AI score0.02535EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/26 10:57 p.m.2 views

CVE-2025-46181-XSS

CVE-2025-46181 - ثغرة XSS المنعكسة في نظام حجز المواعيد عبر الإنترنت معرّف CVE : CVE-2025-46181 اكتشفها : Shemkumar P shemkumar.github.io نوع الثغرة : البرمجة النصية عبر المواقع المنعكسة Reflected XSS الخطورة : متوسطة الحالة : مُفصح عنها، تم تخصيص CVE من قبل MITRE ✨ الوصف توجد ثغرة البرمجة النصية...

5.2AI score
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.3 views

instant-appointment-arbitrary-file-upload

instant-appointment-arbitrary-file-upload instant-appointment - Caricamento arbitrario di file Descrizione Il plugin Instant Appointment per WordPress è vulnerabile al caricamento arbitrario di file nelle versioni fino alla 1.2 inclusa. Ciò consente ad attaccanti non autenticati di caricare una...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

exploits

exploits Veröffentlichte PoCs finden Sie unter exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.1 views

CVE-2025-7753

🚨 CVE-2025-7753 — Exploit PoC di SQL Injection Autore: Byte Reaper Telegram: @ByteReaper0 CVE: CVE‑2025‑7753 Vulnerabilità: SQL Injection non autenticata, basata sul tempo 🔍 Panoramica Una vulnerabilità critica di SQL Injection esiste in Online Appointment Booking System 1.0 Code‑Projects nel fil...

9.8CVSS7.8AI score0.00396EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.3 views

CVE-2023-23397

CVE-2023-23397 CVE-2023-23397 C PoC 1- Laden Sie das msgkit herunter 2- Bearbeiten Sie die Appointment-Klasse und fügen Sie Folgendes hinzu: 3- Erstellen Sie eine neue Klasse im Projekt, um die Eigenschaften der msg-Datei festzulegen: root@kitploit: using MsgKit.Enums; using System; using...

9.8CVSS8.7AI score0.97408EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

CVE-2023-23397-POC

CVE-2023-23397-POC Exploit-POC für CVE-2023-23397 Appointment.cs: die modifizierte Datei von https://github.com/Sicos1977/MsgKit/blob/master/MsgKit/Appointment.cs Exploit.cs: der Code, den ich verwendet habe, um das Erstellen des bösartigen Termins zu replizieren. Ich habe das Code-Bild im...

9.8CVSS8.7AI score0.97408EPSS
SaveExploits19References2
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.58 views

Doctor Appointment System 1.0 - SQL Injection

SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0. id: CVE-2021-27124 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: medium description: | SQL injection in the expertise parameter in searchresult.php in Doctor...

6.5CVSS6.7AI score0.05721EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.67 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter. id: CVE-2021-27316 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQ...

7.5CVSS8.3AI score0.07826EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.56 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter. id: CVE-2021-27315 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind...

7.5CVSS8.3AI score0.07826EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.59 views

TrueBooker <= 1.0.2 - SQL Injection

The TrueBooker Appointment Booking and Scheduler Plugin. plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

9.8CVSS5.8AI score0.03292EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.92 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter. id: CVE-2021-27320 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind S...

7.5CVSS7.8AI score0.09299EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.101 views

Doctor Appointment System 1.0 - SQL Injection

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page. id: CVE-2021-27314 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: critical description: |...

9.8CVSS9.1AI score0.12394EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.50 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter. id: CVE-2021-27319 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQL...

7.5CVSS7.8AI score0.07826EPSS
SaveExploits3References3
Kitploit
Kitploit
added 2026/08/25 8:32 p.m.1 views

CVE-2025-45805

CVE-2025-45805 PoC لـ CVE-2025-45805 المنتج المتأثر: نظام إدارة مواعيد الأطباء المطور: phpgurukul الإصدار: 1.0 نوع الثغرة: تخزين Cross-Site Scripting XSS الوصف: يمكن لمستخدم طبيب مُوثَّق حقن أكواد JavaScript عشوائية في حقل ملف الطبيب الاسم/رقم الموظف. يتم عرض الحمولة الضارة دون تنقية عندما يختار...

7.6CVSS5.2AI score0.00388EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/08/24 2:07 p.m.2 views

CVE-2025-29448

CVE-2025-29448 Descrição falha na lógica de agendamento no Easy!Appointments v1.5.1 permite que atacantes não autenticados criem compromissos com durações excessivamente longas, causando uma negação de serviço ao bloquear toda a disponibilidade futura de agendamentos. Passos para Reproduzir 1...

7.5CVSS5.2AI score0.00556EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/24 6:11 a.m.1 views

CVE-2026-16540-SimplyScheduleAppointments

CVE-2026-16540 — Simply Schedule Appointments 1.6.12.6 Divulgazione non autenticata dei dati degli appuntamenti e cancellazione di massa tramite endpoint purge...

7.5CVSS5.2AI score0.00419EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/24 5:01 a.m.3 views

CVE-2026-9830

Indagine su CVE-2026-9830 Panoramica Questa directory contiene report di intelligence sulle minacce per CVE-2026-9830, una vulnerabilità di bypass dell'autenticazione nel plugin WordPress BookingPress Appointment Booking Pro. File...

8.2CVSS5.2AI score0.00367EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/24 2:13 a.m.3 views

CVE-2026-15282

CVE-2026-15282 — Instant Appointment Massen-RCE-Exploit Pre-Auth filegetcontents + fileputcontents → PHP Webshell Übersicht CVE-2026-15282 ist eine kritische CVSS 9.8 nicht authentifizierte Schwachstelle für willkürlichen Dateiupload im Instant Appointment WordPress-Plugin ≤ 1.2. Die AJAX-Aktion...

9.8CVSS5.3AI score0.01079EPSS
SaveExploits1
NVD
NVD
added 2026/08/20 12:16 p.m.8 views

CVE-2026-68566

Unauthenticated SQL Injection in BookingPress Appointment Booking Pro = 6.0.2 versions...

9.3CVSS0.00291EPSS
SaveExploits0References1
Rows per page
Query Builder