Lucene search
+L

245 matches found

Kitploit
Kitploit
added 2026/09/13 1:50 p.m.51 views

weakpass

Weakpass Here, you can find the list of tools and example of API server from weakpass.com for password and hash cracking in one place. 📂 Folder Structure tools A collection of password and hash cracking tools. Check them out: Kraker-js Lookup Passcheck Passgen libs Links to the libraries used in...

5.6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/09 11:52 a.m.6 views

CVE-2025-4094-POC

WordPress插件Digits OTP绕过 CVE-2025-4094 概述 该脚本是针对WordPress插件Digits(版本 -p -i OPTIONS 参数 -u, --url: 必需 目标URL(例如:https://example.com/wp-admin/admin-ajax.php) -p, --phone: 必需 目标手机号码(仅数字) -i, --instance-id: 必需 从拦截请求中获取的实例ID -d, --digits: 可选 OTP位数(4位或6位,默认为4) -w, --workers: 可选 并行工作线程数(默认为10) --start: 可选...

9.8CVSS8.2AI score0.1578EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/08 11:51 p.m.8 views

CVE-2025-4094

CVE-2025-4094 – Complemento Digits de WordPress 8.4.6.1 - Omisión de Autenticación OTP Autor: Saleh Tarawneh ID CVE: CVE-2025-4094 Gravedad: Crítica CVSS 9.8 Estado: Corregido en la versión 8.4.6.1 Descripción de la Vulnerabilidad El complemento Digits de WordPress anterior a la versión 8.4.6.1 e...

9.8CVSS8.2AI score0.1578EPSS
SaveExploits4References2
NVD
NVD
added 2026/08/24 12:16 p.m.13 views

CVE-2026-28165

Unauthenticated Privilege Escalation in Digits = 9.2 versions...

9.8CVSS0.00268EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/24 11:54 a.m.39 views

CVE-2026-28165

Unauthenticated Privilege Escalation in the WordPress Digits plugin (versions <= 9.2), discovered by VanTastic via Patchstack. The flaw requires no authentication or user interaction, is network-exploitable with low complexity, and carries a CVSS 9.8 (CRITICAL) score with high impact on confid...

9.8CVSS5.1AI score0.00268EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/24 11:54 a.m.15 views

EUVD-2026-64794

Unauthenticated Privilege Escalation in Digits = 9.2 versions...

9.8CVSS5.1AI score0.00268EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 11:54 a.m.39 views

CVE-2026-28165 WordPress Digits plugin <= 9.2 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Digits = 9.2 versions...

9.8CVSS0.00268EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/24 12:00 a.m.23 views

PT-2026-80827

Name of the Vulnerable Software and Affected Versions Digits versions prior to 9.3 Description An issue allows unauthenticated users to perform privilege escalation. Recommendations Update to a version newer than 9.2...

9.8CVSS5.2AI score0.00268EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/08/20 1:16 p.m.11 views

WordPress Digits plugin <= 9.2 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by VanTastic in WordPress Plugin Digits versions = 9.2...

9.8CVSS5.3AI score0.00268EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/08/10 8:26 a.m.11 views

CVE-2026-60074

A flaw was found in Date::Manip. This vulnerability allows an attacker to provide specially crafted input containing non-ASCII decimal digits to the Date::Manip library for Perl. The library's parsing logic incorrectly processes these digits, truncating the input and resulting in an inaccurate da...

7.5CVSS5.4AI score0.00373EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/04 2:39 p.m.268 views

CVE-2026-68494

This CVE notes an incomplete fix for CVE-2026-18401 in jackson-core’s non-blocking parser, leaving a remaining bypass for number-length constraints when data is streamed in many small chunks. The issue arises in the async parser path (MINOR_NUMBER_INTEGER_DIGITS) where validateIntegerLength() is ...

8.7CVSS5.6AI score0.00372EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/31 12:33 p.m.8 views

OPENSUSE-SU-2026:21510-1 Security update for perl-Date-Manip

This update for perl-Date-Manip fixes the following issues: Changes in perl-Date-Manip: - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063 - CVE-2026-60075: CPU exhaustion due to quadratic backtracking in the...

7.5CVSS5.5AI score0.00373EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/07/31 12:15 a.m.12 views

SUSE CVE-2026-60074

Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...

5.3CVSS5.5AI score0.00373EPSS
SaveExploits0References7
NVD
NVD
added 2026/07/30 2:17 p.m.14 views

CVE-2026-60074

Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...

7.5CVSS0.00373EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/30 2:17 p.m.11 views

AZL-94389 CVE-2026-60074 affecting package perl-Date-Manip 6.95-3

Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...

7.5CVSS5.9AI score0.00373EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/30 1:42 p.m.13 views

CVE-2026-60074

Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...

5.9AI score0.00373EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/07/30 1:42 p.m.46 views

CVE-2026-60074 Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check

Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...

5.5AI score0.00373EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/30 1:42 p.m.22 views

EUVD-2026-51124

Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...

5.9AI score0.00373EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/30 1:42 p.m.10 views

CVE-2026-60074 Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check

Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...

7.5CVSS5.9AI score
SaveExploits0References9
CVE
CVE
added 2026/07/30 1:42 p.m.67 views

CVE-2026-60074

Date::Manip for Perl up to v6.99 is affected by CVE-2026-60074. The bug arises because parse regexes use \d (matching Unicode decimal digits) for year/month/day, while downstream numeric checks only validate ranges, and Perl truncates non-ASCII digits when numifying. This can cause a parsed date ...

7.5CVSS5.9AI score0.00373EPSS
SaveExploits0References5
Rows per page
Query Builder