Lucene search
+L

2236 matches found

Kitploit
Kitploit
added 2026/08/27 4:42 a.m.2 views

CVE-2023-23397-POC

CVE-2023-23397-POC Exploit POC for CVE-2023-23397 Appointment.cs : the modified file from https://github.com/Sicos1977/MsgKit/blob/master/MsgKit/Appointment.cs Exploit.cs : the code i used to replicate creating the malicious appointment . i modified the code picture in MDSEC article here :...

9.8CVSS8.7AI score0.97408EPSS
SaveExploits19References2
Kitploit
Kitploit
added 2026/08/27 1:38 a.m.3 views

CVE-2023-23397

CVE-2023-23397 CVE-2023-23397 C PoC 1- msgkit डाउनलोड करें 2- appointment वर्ग को संपादित करें और नीचे जोड़ें: 3- प्रोजेक्ट के अंदर एक नया वर्ग बनाएं ताकि msg फ़ाइल के गुण सेट किए जा सकें: root@kitploit: using MsgKit.Enums; using System; using System.Collections.Generic; using System.Linq; using...

9.8CVSS8.7AI score0.97408EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/08/27 1:09 a.m.2 views

CVE-2025-46181-XSS

CVE-2025-46181 - 온라인 예약 시스템에서 발견된 반사형 XSSReflected XSS CVE-ID : CVE-2025-46181 발견자 : Shemkumar P shemkumar.github.io 취약점 유형 : 반사형 교차 사이트 스크립팅Reflected XSS 심각도 : 중간Medium 상태 : 공개됨, MITRE에서 CVE 지정 ✨ 설명 공개 온라인 예약 시스템v1.0의 예약 확인confirmation을 처리하는 페이지에서 반사형 교차 사이트 스크립팅Reflected XSS 취약점이 발견되었습니다. GET...

5.4AI score
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/27 1:09 a.m.1 views

CVE-2025-45805

CVE-2025-45805 PoC do CVE-2025-45805 Produto Afetado: Doctor Appointment Management System Fornecedor: phpgurukul Versão: 1.0 Tipo de Vulnerabilidade: Stored Cross-Site Scripting XSS Descrição: Um usuário médico autenticado pode injetar código JavaScript arbitrário no campo de perfil do médico...

7.6CVSS5.2AI score0.00388EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/08/27 12:18 a.m.2 views

exploits

exploits يمكن العثور على إثباتات المفهوم المنشورة PoCs على exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/26 11:56 p.m.3 views

instant-appointment-arbitrary-file-upload

instant-appointment-arbitrary-file-upload instant-appointment - Caricamento arbitrario di file Descrizione Il plugin Instant Appointment per WordPress è vulnerabile al caricamento arbitrario di file nelle versioni fino alla 1.2 inclusa. Ciò consente ad attaccanti non autenticati di caricare una...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 11:13 p.m.2 views

CVE-2021-25791-Multiple-Stored-XSS

CVE-2021-25791-Multiple-Stored-XSS : Множественные хранимые XSS в системе онлайн-записи к врачу В системе онлайн-записи к врачу версии 1.0 существует множество хранимых аутентифицированных межсайтовых сценариев XSS. Ссылка на ПО:...

5.4CVSS5.5AI score0.02535EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.3 views

CVE-2025-7753

🚨 CVE-2025-7753 — Exploit PoC di SQL Injection Autore: Byte Reaper Telegram: @ByteReaper0 CVE: CVE‑2025‑7753 Vulnerabilità: SQL Injection non autenticata, basata sul tempo 🔍 Panoramica Una vulnerabilità critica di SQL Injection esiste in Online Appointment Booking System 1.0 Code‑Projects nel fil...

9.8CVSS7.8AI score0.00396EPSS
SaveExploits2
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.58 views

Doctor Appointment System 1.0 - SQL Injection

SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0. id: CVE-2021-27124 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: medium description: | SQL injection in the expertise parameter in searchresult.php in Doctor...

6.5CVSS6.7AI score0.05721EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.67 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter. id: CVE-2021-27316 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQ...

7.5CVSS8.3AI score0.07826EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.56 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter. id: CVE-2021-27315 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind...

7.5CVSS8.3AI score0.07826EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.51 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter. id: CVE-2021-27319 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQL...

7.5CVSS7.8AI score0.07826EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.92 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter. id: CVE-2021-27320 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind S...

7.5CVSS7.8AI score0.09299EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.101 views

Doctor Appointment System 1.0 - SQL Injection

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page. id: CVE-2021-27314 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: critical description: |...

9.8CVSS9.1AI score0.12394EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.60 views

TrueBooker <= 1.0.2 - SQL Injection

The TrueBooker Appointment Booking and Scheduler Plugin. plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

9.8CVSS5.8AI score0.03292EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/08/24 2:07 p.m.2 views

CVE-2025-29448

CVE-2025-29448 Descrição falha na lógica de agendamento no Easy!Appointments v1.5.1 permite que atacantes não autenticados criem compromissos com durações excessivamente longas, causando uma negação de serviço ao bloquear toda a disponibilidade futura de agendamentos. Passos para Reproduzir 1...

7.5CVSS5.2AI score0.00556EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/24 6:11 a.m.1 views

CVE-2026-16540-SimplyScheduleAppointments

CVE-2026-16540 — Simply Schedule Appointments 1.6.12.6 Divulgazione non autenticata dei dati degli appuntamenti e cancellazione di massa tramite endpoint purge...

7.5CVSS5.2AI score0.00419EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/24 5:01 a.m.3 views

CVE-2026-9830

Indagine su CVE-2026-9830 Panoramica Questa directory contiene report di intelligence sulle minacce per CVE-2026-9830, una vulnerabilità di bypass dell'autenticazione nel plugin WordPress BookingPress Appointment Booking Pro. File...

8.2CVSS5.2AI score0.00367EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/24 2:13 a.m.3 views

CVE-2026-15282

CVE-2026-15282 — Instant Appointment Massen-RCE-Exploit Pre-Auth filegetcontents + fileputcontents → PHP Webshell Übersicht CVE-2026-15282 ist eine kritische CVSS 9.8 nicht authentifizierte Schwachstelle für willkürlichen Dateiupload im Instant Appointment WordPress-Plugin ≤ 1.2. Die AJAX-Aktion...

9.8CVSS5.3AI score0.01079EPSS
SaveExploits1
NVD
NVD
added 2026/08/20 12:16 p.m.8 views

CVE-2026-68566

Unauthenticated SQL Injection in BookingPress Appointment Booking Pro = 6.0.2 versions...

9.3CVSS0.00291EPSS
SaveExploits0References1
Rows per page
Query Builder