Lucene search
+L

20519 matches found

Kitploit
Kitploit
added 2026/09/08 9:33 p.m.8 views

CVE-2017-8367

CVE-2017-8367 PoC exploit for vulnerability CVE-2017-8367 Easy Mov Converter Register functionality Stack-Based Buffer Overflow. Usage Execute script and the file POCPayload.txt will be created containing the payload. root@kitploit: python3 payloadgeneratorCVE-2017-15950.py Open the output file o...

7.8CVSS7.5AI score0.05507EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/08 9:33 p.m.5 views

CVE-2024-46256

CVE-2024-46256 Nginx Proxy Manager RCE Vulnerability Analysis Environment Setup 1. Running Nginx Proxy Manager 2.11.3 Environment root@kitploit: docker-compose up -d Or you can use the automated script: root@kitploit: python setupenvironment.py 2. Accessing Nginx Proxy Manager URL:...

9.8CVSS7.4AI score0.03084EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/08 9:31 p.m.5 views

CVE-2021-39287-Stored-XSS

CVE-2021-39287-Stored-XSS CVE-2021-39287 Stored XSS en TastyIgniter v3.0.7 Restaurante CMS Existe una vulnerabilidad de Cross Site Scripting XSS almacenado en TastyIgniter v3.0.7 Restaurant CMS. El campo de entrada de descripción, ubicado en /admin/locations/settings, no está debidamente sanitiza...

6.2AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2026/09/08 9:30 p.m.5 views

multer vulnerable to Denial of Service via crafted multipart field names

Impact A vulnerability in multer allows a remote, unauthenticated attacker to crash the Node.js process with a single multipart/form-data request. Two specially crafted text field names cause an uncaught RangeError: Invalid array length inside multer's field parsing, which is not routed to the...

7.5CVSS0.00291EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2026/09/08 9:28 p.m.3 views

multer vulnerable to Denial of Service via oversized array index in field names

Impact multer is vulnerable to a Denial of Service DoS via a crafted array index in multipart field names. The append-field dependency parses bracket notation in field names, and a large numeric index such as items4294967294 forces allocation of a maximum-length sparse array. A following field wi...

7.5CVSS0.00278EPSS
SaveExploits0References7Affected Software1
Kitploit
Kitploit
added 2026/09/08 9:17 p.m.5 views

fat-finger

Fat-Finger Extends the original finger.nse and attempts to enumerate current logged on users through a full match of the username and a partial match of the GECOS field in /etc/passwd Example output: root@kitploit: @output PORT STATE SERVICE 79/tcp open finger | fat-finger: finger: admin: no such...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 9:09 p.m.6 views

CVE-2021-3656-Demo

CVE-2021-3656: This issue is caused by missing validation of the the virtext VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS Virtual VMLOAD/VMSAVE for the L2 guest. Under these circumstances, the L2 guest is able to run VMLOAD/VMSAVE unintercepted, and...

8.8CVSS6.6AI score0.00658EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 8:33 p.m.5 views

CVE-2025-45805

CVE-2025-45805 Poc Of CVE-2025-45805 Affected Product: Doctor Appointment Management System Vendor: phpgurukul Version: 1.0 Vulnerability Type: Stored Cross-Site Scripting XSS Description: An authenticated doctor user can inject arbitrary JavaScript code into the doctor profile field name/employe...

7.6CVSS5.9AI score0.00388EPSS
SaveExploits2References1
NVD
NVD
added 2026/09/08 8:18 p.m.4 views

CVE-2026-85630

HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the processattrs method. Any application with fields or field labels where some attributes are built from data rather than literals allows attacker-influenced text in an attribute value th...

SaveExploits0References3
NVD
NVD
added 2026/09/08 8:18 p.m.2 views

CVE-2026-75737

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...

5.4CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 8:18 p.m.4 views

CVE-2026-75731

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...

5.4CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 8:17 p.m.4 views

CVE-2026-71440

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...

5.4CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 8:17 p.m.5 views

CVE-2026-27227

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...

5.4CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 8:17 p.m.5 views

CVE-2025-64838

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...

5.4CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 8:17 p.m.5 views

CVE-2025-64830

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...

5.4CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 8:08 p.m.7 views

CVE-2026-78552

CVE-2026-78552 is a validation bypass in Okta Access Gateway where the application-level custom configuration field is not subject to the same Lua directive restriction as other fields. Because this field is interpolated directly into the nginx server block without inspection, an authenticated us...

6CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 8:07 p.m.6 views

CVE-2022-25063

CVE-2022-25063 This script exploits a vulnerability XSS in the TPLink WR840N router, using a field for injecting javascript code...

5.9AI score
SaveExploits0
CVE
CVE
added 2026/09/08 7:56 p.m.9 views

CVE-2025-64838

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser when they view the page containing the injected content. The CVSS v3.1 score ...

5.4CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 7:56 p.m.5 views

EUVD-2026-74141

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...

5.4CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/08 7:56 p.m.21 views

CVE-2026-75741 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...

5.4CVSS
SaveExploits0References1
Rows per page
Query Builder