Lucene search
+L

129632 matches found

RedhatCVE
RedhatCVE
added 2026/08/26 1:44 p.m.6 views

CVE-2026-19385

A flaw was found in PostgreSQL pgdump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating...

8.8CVSS8.7AI score0.00427EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/26 1:37 p.m.17 views

CVE-2025-10903

GitLab EE is affected by an unbounded loop (infinite loop) in the SCIM user provisioning feature , allowing an authenticated user to trigger a denial of service via specially crafted input. The vulnerability affects all versions from 11.10 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1...

6.5CVSS5.3AI score0.00422EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/26 1:37 p.m.32 views

CVE-2025-10903 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user could have caused denial of service, due to an unbounded loop triggered by specially crafted input in the...

6.5CVSS0.00422EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/26 1:37 p.m.6 views

EUVD-2025-210778

GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user could have caused denial of service, due to an unbounded loop triggered by specially crafted input in the...

6.5CVSS5.3AI score0.00422EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/26 1:35 p.m.33 views

CVE-2026-77801 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, could have allowed an authenticated user to cause a denial of service affecting background job processing, due to missing objec...

6.5CVSS0.00344EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/26 1:35 p.m.6 views

EUVD-2026-66427

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, could have allowed an authenticated user to cause a denial of service affecting background job processing, due to missing objec...

6.5CVSS5.3AI score0.00344EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/26 11:58 a.m.3 views

CVE-2024-7514

CVE-2024-7514 WordPress Comments Import & Export = 2.3.7 - Lettura arbitraria di file da parte di utenti autenticati Autore+ tramite Directory Traversal Descrizione Il plugin WordPress Comments Import & Export per WordPress è vulnerabile alla lettura arbitraria di file a causa di una validazione...

6.5CVSS5.3AI score0.01085EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 11:58 a.m.3 views

CVE-2024-4875

CVE-2024-4875 HT Mega – Absolute Addons For Elementor = 2.5.2 - Autorizzazione mancante per l'aggiornamento delle opzioni Descrizione: Il plugin HT Mega – Absolute Addons For Elementor per WordPress è vulnerabile alla modifica non autorizzata dei dati|perdita di dati a causa di una mancata verifi...

4.3CVSS5.3AI score0.00755EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 11:55 a.m.3 views

PoC-CVE-2019-12840

Exploit per CVE-2019-12840 in Webmin Questo repository contiene uno script Python che sfrutta la vulnerabilità CVE-2019-12840 in Webmin. Descrizione Lo script tenta di effettuare il login su un server Webmin e quindi sfrutta la vulnerabilità CVE-2019-12840. Lo script accetta vari argomenti da rig...

9CVSS8.1AI score0.77835EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/26 11:42 a.m.3 views

CVE-2025-5961

🚨 Migration, Backup, Staging – WPvivid Backup & Migration 📈 تؤثر هذه الثغرة على إضافة لديها أكثر من700,000+ عملية تثبيت 📝 تفاصيل CVE CVE: CVE-2025-5961 CVSS: 7.2 عالية نُشرت: 3 يوليو 2025 🔍 الوصف الإضافة Migration, Backup, Staging – WPvivid Backup & Migration الخاصة بووردبريس معرّضة لـ رفع ملفات...

7.2CVSS5.3AI score0.5253EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/08/26 11:42 a.m.3 views

CVE-2025-39538

🛡️ CVE-2025-39538 - WordPress WP-Advanced-Search = 3.3.9.3 Caricamento Arbitrario di File CVE-2025-39538 Pubblicato: 2025-04-16 Tipo di vulnerabilità: Caricamento Arbitrario di File Caricamento senza restrizioni di file con tipo pericoloso Plugin interessato: WP-Advanced-Search di Mathieu Chartier...

6.6CVSS8.9AI score0.0047EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 11:42 a.m.4 views

CVE-2025-28915

CVE-2025-28915 - Exploit per Arbitrary File Upload in WordPress ThemeEgg ToolKit 📌 Descrizione Una vulnerabilità di Unrestricted File Upload nel plugin ThemeEgg ToolKit per WordPress versioni ≤ 1.2.9 consente a attaccanti autenticati di caricare web shell sul server. Ciò può portare a esecuzione...

9.1CVSS8.8AI score0.0125EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/26 11:42 a.m.2 views

CVE-2025-2249

🔐 Plugin WordPress SoJ SoundSlides ⚠️ DISCLAIMER: Questo exploit è solo per scopi educativi e di test autorizzati. 📌 Riepilogo della Vulnerabilità Plugin: SoJ SoundSlides Versioni interessate: = 1.2.2 Tipo: Caricamento Arbitrario di File Autenticato Contributor+ Stato della patch: ❌ Nessuna...

8.8CVSS8.8AI score0.00756EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 11:42 a.m.2 views

CVE-2024-7985-PoC

CVE-2024-7985-PoC FileOrganizer = 1.0.9 - Authenticated Subscriber+ Arbitrary File Upload Exploit FileOrganizer - CVE-2024-7985 📌 Panoramica CVE-2024-7985 - Il plugin WordPress FileOrganizer = 1.0.9 è vulnerabile a upload arbitrari di file autenticati , consentendo ad attaccanti con privilegi...

8.8CVSS7.4AI score0.02336EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 11:41 a.m.2 views

CVE-2024-9756

🚀 Exploit di Caricamento Arbitrario di File WooCommerce CVE-2024-9756 📌 Panoramica Questo exploit sfrutta una vulnerabilità di caricamento arbitrario limitato e non autorizzato nel plugin Order Attachments for WooCommerce versioni 2.0 - 2.4.1 per WordPress. La vulnerabilità consente a utenti...

4.3CVSS5.2AI score0.0086EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 11:32 a.m.3 views

CVE-2023-43482

CVE-2023-43482 TP-Link ER7206 Omada Gigabit VPN Router uhttpd freeStrategy Vulnerabilità di iniezione di comandi SOMMARIO Esiste una vulnerabilità di esecuzione di comandi nella funzionalità delle risorse ospiti guest resources di Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322...

7.2CVSS7AI score0.03252EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 10:56 a.m.2 views

CVE-2022-2992

CVE-2022-2992 Esecuzione remota di comandi autenticata in GitLab tramite importazione da GitHub. Una vulnerabilità in GitLab CE/EE che interessa tutte le versioni dalla 11.10 precedenti alla 15.1.6, tutte le versioni a partire dalla 15.2 precedenti alla 15.2.4, tutte le versioni a partire dalla...

9.9CVSS8.6AI score0.86194EPSS
SaveExploits5References2
Kitploit
Kitploit
added 2026/08/26 10:53 a.m.2 views

wordpress-cve-2021-29447

Exploit WordPress CVE-2021-29447 Exploit dell'iniezione di entità esterne XXE autenticata XML nella libreria multimediale di WordPress per esfiltrare file. Corretto in WordPress 5.7.1. Richiede credenziali WordPress valide per interagire con la libreria multimediale. Utilizzo root@kitploit: pytho...

7.1CVSS6.5AI score0.85719EPSS
SaveExploits20
NVD
NVD
added 2026/08/26 10:16 a.m.4 views

CVE-2026-16444

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can levera...

7.5CVSS0.00258EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/26 10:09 a.m.32 views

CVE-2026-80350 OneUptime before 12.0.7 Server-Side Request Forgery via IPv4-Mapped IPv6 Webhook URL

OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhook delivery path calls SSRFProtection.validateWebhookTargetIsSafe, and the host-literal screening inside...

7.1CVSS0.00285EPSS
SaveExploits0References5
Rows per page
Query Builder