Lucene search
+L

1569 matches found

Kitploit
Kitploit
added 2026/09/13 6:12 a.m.6 views

CVE-2026-42758

CVE-2026-42758 CVE-2026-42758 Exploit de WebinarIgnition Ejemplos de uso Uso básico python3 exploit.py https://target.example.com -e [email protected] Especificar la página del webinar python3 exploit.py https://target.example.com -e [email protected] -w...

9.8CVSS5.9AI score0.0032EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 4:11 a.m.5 views

CVE-2022-40348_Intern-Record-System-Cross-site-Scripting-V1.0-Vulnerability-Unauthenticated

CVE-2022-40348: Intern Record System - Cross-site Scripting XSS no autenticado en 'name' y 'email' Título del Exploit: Intern Record System - Cross-site Scripting XSS no autenticado en 'name' y 'email' Fecha: 2022-06-09 Autor del Exploit: Hamdi Sevben Página del Vendedor:...

5.4CVSS6AI score0.00799EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.50 views

JS Help Desk <= 2.8.1 - SQL Injection

The JS Help Desk – Best Help Desk & Support Plugin plugin for WordPress is vulnerable to SQL Injection via the 'email' and 'trackingid' parameters in all versions up to 2.8.2 exclusive due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...

9.8CVSS7.7AI score0.02041EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.117 views

OpenCATS 0.9.6 - Cross-Site Scripting

OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the email parameter in the Check Email function. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

6.1CVSS6.3AI score0.01425EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/12 5:16 p.m.7 views

CVE-2024-30998

PHPGurukul Men Salon Management System 2.0 Bienvenido al repositorio de PHPGurukul Men Salon Management System 2.0. Este proyecto tiene como objetivo proporcionar un sistema robusto para la gestión de salones de belleza masculinos. Vulnerabilidades de Seguridad CVE-2024-30998 Descripción:...

9.8CVSS5.9AI score0.01217EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 1:54 p.m.6 views

CVE-2024-34327

CVE-2024-34327 SQL Injection Vulnerability Checker This script V-24-02-001SQLiCheck.py is a proof-of-concept PoC tool to verify the presence of a time-based blind SQL injection vulnerability affecting the password-reset-token.php endpoint, identified as CVE-2024-34327. ⚠️ Disclaimer This tool is...

6.5CVSS5.9AI score0.00301EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 12:18 p.m.10 views

CVE-2023-49546

CVE-2023-49546 Customer Support System 1.0 - Vulnerabilidad de inyección SQL en el parámetro "email" durante la operación "savestaff" Descripción : Existe una vulnerabilidad de inyección SQL en la versión 1 del Customer Support System. Un atacante malintencionado puede ejecutar comandos SQL en la...

8.8CVSS5.9AI score0.00755EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 10:15 a.m.6 views

CVE-2025-50866

CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting XSS vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading t...

6.1CVSS5.8AI score0.00273EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/09 11:57 a.m.6 views

CVE-2023-41652

CVE-2023-41652 RSVPMarker = 10.6.6 - Inyección SQL sin autenticación Descripción: El plugin RSVPMarker para WordPress es vulnerable a la inyección SQL a través del parámetro 'email' en versiones hasta, e incluyendo, la 10.6.6 debido a un escape insuficiente en el parámetro proporcionado por el...

9.8CVSS8.2AI score0.01026EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 9:40 a.m.8 views

cve-2023-22515-exp

cve-2023-22515-exp Script de explotación en Python para cve-2023-22515 Parámetros: root@kitploit: -h, --help show this help message and exit -H HOST, --host HOST 指定url -U USERNAME, --username USERNAME 指定用户名 -PW PASSWORD, --password PASSWORD 指定密码 -E EMAIL, --email EMAIL 指定邮箱 -P PROXIES, --proxies...

10CVSS8.5AI score0.99156EPSS
SaveExploits40
NVD
NVD
added 2026/09/07 4:17 a.m.3 views

CVE-2026-86268

A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown function of the file UserLogin.php. The manipulation of the argument email results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

7.5CVSS0.00269EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/06 10:00 p.m.16 views

CVE-2026-86226

Projectwolds Online Attendance System 1.0 contains a cross-site scripting (XSS) vulnerability in the file profile.php , triggered by manipulation of the email argument. The flaw allows a remote attacker with low privileges to inject scripts if a user interacts with the crafted request. The CVSS 3...

5.1CVSS3.8AI score0.00191EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/06 10:00 p.m.35 views

CVE-2026-86226 Projectwolds Online Attendance System profile.php cross site scripting

A security flaw has been discovered in Projectwolds Online Attendance System 1.0. Affected by this issue is some unknown functionality of the file profile.php. The manipulation of the argument email results in cross site scripting. The attack may be performed from remote. The exploit has been...

5.1CVSS0.00191EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/06 5:01 p.m.7 views

CVE-2025-51411

🛡️ Divulgación de CVE: CVE-2025-51411 — XSS Reflejado en Institute-of-Current-Students Fecha de divulgación: 25 de julio de 2025 ID de CVE: CVE-2025-51411 Severidad: MEDIA CVSS 6.1 🧩 Resumen Existe una vulnerabilidad de Cross-Site Scripting XSS reflejado en el proyecto Institute-of-Current-Student...

6.1CVSS5.8AI score0.00322EPSS
SaveExploits2References1
EUVD
EUVD
added 2026/09/06 1:00 p.m.9 views

EUVD-2026-72128

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

7.5CVSS5.4AI score0.00391EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/06 8:00 a.m.38 views

CVE-2026-86180 code-projects Task Management System In PHP Login index.php sql injection

A vulnerability has been found in code-projects Task Management System In PHP 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The...

7.5CVSS0.00336EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/06 8:00 a.m.15 views

CVE-2026-86180

A SQL injection vulnerability affects the Login component of code-projects Task Management System In PHP 1.0 , specifically through manipulation of the email parameter in /index.php. The attack is remote and requires no authentication or user interaction , with a CVSS 3.1 score of 7.3 (HIGH) . Th...

7.5CVSS7AI score0.00336EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/09/06 12:00 a.m.14 views

PT-2026-86573

Name of the Vulnerable Software and Affected Versions Projectwolds Online Attendance System version 1.0 Description A remote cross-site scripting issue exists in the profile.php file. The flaw allows for the manipulation of the email variable to execute malicious scripts in the context of the...

5.1CVSS0.00191EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/09/04 12:31 a.m.9 views

EUVD-2026-70820

A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patientlogin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References7
NVD
NVD
added 2026/09/03 11:17 p.m.13 views

CVE-2026-85225

A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patientlogin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be...

7.5CVSS0.00263EPSS
SaveExploits0References6
Rows per page
Query Builder