Lucene search
+L

4314 matches found

Kitploit
Kitploit
added 2026/09/15 7:45 a.m.5 views

BitLeak

BitLeak BitLeak은 주어진 IP 주소와 연결된 토렌트 다운로드를 확인하고 표시하는 Python 도구입니다. root@kitploit: git clone https://github.com/AnkhCorp/BitLeak.git root@kitploit: pip3 install -r requirements.txt root@kitploit: python bitleak.py...

6AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.108 views

WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL Injection

WordPress Easy Digital Downloads plugin 3.1.0.2 and 3.1.0.3 contains a SQL injection vulnerability in the s parameter of its edddownloadsearch action. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...

9.8CVSS8.1AI score0.11172EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.58 views

Easy Digital Downloads - Privilege Escalation

Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads: from 3.1 through 3.1.1.4.1. id: CVE-2023-30869 info: name: Easy Digital Downloads - Privilege Escalation author: daffainfo severity: critical...

9.8CVSS8AI score0.031EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.85 views

WordPress Candidate Application Form <= 1.3 - Local File Inclusion

WordPress Candidate Application Form = 1.3 is susceptible to arbitrary file downloads because the code in downloadpdffile.php does not do any sanity checks. id: CVE-2015-1000005 info: name: WordPress Candidate Application Form = 1.3 - Local File Inclusion author: dhiyaneshDK severity: high...

7.5CVSS7.4AI score0.08598EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.90 views

Z-Downloads < 1.11.7 - Cross-Site Scripting

The plugin does not properly validate uploaded files allowing for the uploading of SVGs containing malicious JavaScript. id: CVE-2024-8673 info: name: Z-Downloads 1.11.7 - Cross-Site Scripting author: Splint3r7 severity: low description: | The plugin does not properly validate uploaded files...

9.1CVSS5.8AI score0.01792EPSS
SaveExploits1References1
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.35 views

Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download

Longjing Technology BEMS API 1.21 is vulnerable to local file inclusion. Input passed through the fileName parameter through the downloads API endpoint is not properly verified before being used to download files. This can be exploited to disclose the contents of arbitrary and sensitive files...

8.7CVSS8AI score0.01452EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.99 views

Wipro Holmes Orchestrator 20.4.1 - Information Disclosure

Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadExcelFile/DomainCredentialReportExcel,...

7.5CVSS7.4AI score0.53008EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.88 views

WordPress Easy Digital Downloads <= 3.2.12 - SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12. id: CVE-2024-5057 info: name: WordPress Easy Digital Downloads = 3.2.12 - SQL Injecti...

9.8CVSS5.9AI score0.02588EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 3:54 a.m.12 views

filessh

FileSSH SSHサーバー用のTUIベースのファイルエクスプローラーです。リモートサーバー上のファイルの閲覧・管理、その場での編集、並列ディレクトリ走査によるディレクトリの再帰的ダウンロードが可能です。また、リモートサーバー上のパスへのSSHセッションをすばやく起動する機能もあります。 MIT または UNLICENSE のデュアルライセンスです。 インストール homebrew macOS root@kitploit: brew install jayanaxhf/taps/filessh Cargo root@kitploit: cargo install --locked...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 3:40 p.m.9 views

hget

hget このプロジェクトは、Golangを学んで何か役に立つものを作るための個人プロジェクトです。 ビルドステータス : インストール root@kitploit: $ go get -d github.com/huydx/hget $ cd $GOPATH/src/github.com/huydx/hget $ make clean install バイナリファイルは ./bin/hget にビルドされます。/usr/bin や /usr/local/bin にコピーして、さらに alias wget hget とエイリアスを設定すれば、wget を完全に置き換えることもできます :...

6AI score
SaveExploits0
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.9 views

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page...

6.5CVSS6.8AI score0.03036EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 2:17 a.m.10 views

CVE-2025-14783-POC

🧨 CVE-2025-14783: Easy Digital Downloads アカウント乗っ取り PoC 「信頼は、最も悪用されやすいセキュリティ上の欠陥である。」 💀 説明 このリポジトリには、WordPress 用プラグイン Easy Digital Downloads(EDD) (バージョン 'passwordresetrequested', 'key' = $key, 'login' = rawurlencode $userlogin , , escu...

4.3CVSS6AI score0.00351EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/12 7:09 a.m.5 views

axios-ssrf

はじめに ルート、バックエンド、フロントエンドの各ディレクトリで pnpm install を実行してください ルートディレクトリで pnpm start:dev を実行してください 脆弱性 このウェブサイトは https://axios-ssrf.onrender.com/ で公開されています サーバーサイドリクエストフォージェリ SSRF: 特に、SSRF攻撃に対して脆弱なバージョンのaxiosを使用しています。 検索バーに移動し、http://example.com のような絶対URLを入力してください パストラバーサル:...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/09/11 9:41 a.m.6 views

CVE-2026-87441

A flaw was found in Google Chrome. Missing authorization in the Downloads component allowed a remote attacker to bypass system access restrictions. This could be achieved by convincing a user to install a specially crafted Chrome extension...

6.5CVSS0.00263EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2026/09/10 12:00 a.m.7 views

CVE-2026-87503

Inappropriate implementation in Downloads in Google Chrome on on Andro...

6.5CVSS0.00254EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2026/09/10 12:00 a.m.5 views

CVE-2026-87451

Information leak in Downloads in Google Chrome prior to 153.0.8010.36...

3.1CVSS0.00217EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/09/10 12:00 a.m.5 views

CVE-2026-87649

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010...

5.4CVSS0.00167EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/09/10 12:00 a.m.5 views

CVE-2026-87507

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010...

5.4CVSS0.00231EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/09/10 12:00 a.m.5 views

CVE-2026-87549

Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.3...

6.5CVSS0.00323EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/09/10 12:00 a.m.4 views

CVE-2026-87465

Incorrect authorization in Downloads in Google Chrome prior to 153.0.8...

4.2CVSS0.00168EPSS
SaveExploits0References1
Rows per page
Query Builder