Lucene search
+L

20511 matches found

Kitploit
Kitploit
added 2026/09/08 7:14 p.m.7 views

CVE-2023-29084

CVE-2023-29084 Command injection in ManageEngine ADManager Plus Poc root@kitploit: POST /api/json/admin/saveServerSettings HTTP/1.1 Host: 10.10.10.99:8080 Content-Length: 183 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 Windows NT...

7.2CVSS7.5AI score0.98167EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/08 7:12 p.m.6 views

CVE-2025-45960

CVE-2025-45960 - tawk.to Live chat - 1.6.1 - Cross-Site Scripting XSS Vulnerability Confirmed on 1.6.1 older versions likely affected Description: Found that the web application stores and displays user-supplied input without proper input validation or encoding. This leading to a malicious code...

6.1CVSS5.9AI score0.00398EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 6:52 p.m.6 views

Netbox-CVE-2023-37625

Netbox-CVE-2023-37625 Description A stored cross-site scripting XSS vulnerability in Netbox alert1' 3. Add a new model, in this example add a 'manufacturer' model. 4. Open the newly created model as any authenticated user, and observer that the alert box has executed...

5.4CVSS6.5AI score0.00697EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 6:46 p.m.5 views

CVE-2026-39259

SmallerC scanf s Stack.md SmallerC - scanf %s Stack Buffer Overflow Project: https://github.com/alexfru/SmallerC SmallerC's scanf implementation does not enforce an upper bound on string reads when %s or % is used without an explicit field width in the format string The runtime will continue...

6.2AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/08 6:40 p.m.6 views

CVE-2007-2447-in-Python

CVE-2007-2447 - Python implementation Description Python implementation of 'Username' map script' RCE Exploit for Samba 3.0.20 IP - Ip of the remote machine. PORT - Optional Port that smb is running on. PAYLOAD - Payload to be executed on the remote machine e.g. reverse shell. Examples: python3...

6CVSS8AI score0.49759EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/08 6:38 p.m.6 views

CVE-2021-20717

CVE-2021-20717-EC-CUBE-XSS NVD Description Cross-site scripting vulnerability in EC-CUBE 4.0.0 to 4.0.5 allows a remote attacker to inject a specially crafted script in the specific input field of the EC web site which is created using EC-CUBE. As a result, it may lead to an arbitrary script...

6.1CVSS6.9AI score0.02308EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 6:36 p.m.5 views

CVE-2024-41301-Bookea-tu-Mesa-is-vulnerable-to-Stored-Cross-Site-Scripting

CVE-2024-41301 - Bookea-tu-Mesa-is-vulnerable-to-Stored-Cross-Site-Scripting Bookea-tu-Mesa is susceptible to a Stored Cross-Site Scripting XSS vulnerability. This flaw allows attackers to inject malicious scripts that execute within the context of a user's session. Steps to Reproduce: 1. Go to...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 6:36 p.m.4 views

CVE-2026-36228

CVE-2026-36228: Easy Chat Server 3.1 Chat Message mtowho Denial of Service PoC This repository contains a benign-by-default proof of concept for CVE-2026-36228, a denial-of-service issue in Easy Chat Server 3.1 chat message handling. This repository is for authorized security research and local...

7.3CVSS5.9AI score0.00425EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 6:16 p.m.6 views

CVE-2023-43353-CMSmadesimple-Stored-XSS---News---Extra

CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Extra in the Content - News Menu. Attack Vectors: Scripting A vulnerability in the sanitization o...

5.4CVSS6.1AI score0.00473EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/09/08 6:08 p.m.20 views

CVE-2026-76201 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Commerce is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,...

9.3CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 5:54 p.m.4 views

CVE-2007-2447

CVE-2007-2447 Samba 3.0.0 - 3.0.25rc3 are subject for Remote Command Injection Vulnerability CVE-2007-2447, allows remote attackers to execute arbitrary commands by specifying a username containing shell meta characters...

6CVSS8.1AI score0.49759EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/08 5:49 p.m.5 views

CVE-2025-46173

CVE-2025-46173 - Stored Cross-Site Scripting XSS in Online Exam Mastering System 1.0 📌 Summary CVE-2025-46173 is a stored Cross-Site Scripting XSS vulnerability discovered in the Online Exam Mastering System 1.0 by code-projects. The vulnerability exists in the feedback.php component where user...

6.1CVSS5.9AI score0.00303EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 5:45 p.m.4 views

CVE-2024-41502

CVE-2024-41502 CVE: CVE-2024-41502 Software: Jetimob Plataforma Imobiliaria CRM/ERP/CMS Versión: 20240627-0 Vulnerabilidad: Cross-Site Scripting Almacenado XSS Descripción: XSS almacenado a través del campo de formulario "Observações" en la sección "Pessoas" al crear o editar una persona jurídica...

6.1CVSS5.9AI score0.0024EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/08 5:43 p.m.7 views

CVE-2023-43873-e107-CMS-Stored-XSS---Manage

e107 CMS Stored XSS v2.3.2 Author: Sergio Description: Cross Site Scripting XSS vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the Name filed in the Manage Menu. Attack Vectors: Scripting A vulnerability in the sanitization of the entry...

5.4CVSS6.7AI score0.00461EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 5:22 p.m.6 views

CVE-2020-12629

Title: osTicket 1.14.1 - Persistent Authenticated Cross-Site Scripting Author: Mehmet Kelepce / Gais Cyber Security Date : 2020-03-24 Source Link: https://github.com/osticket/osticket/commit/fc4c8608fa122f38673b9dddcb8fef4a15a9c884 CVE: https://vulners.com/cve/CVE-2020-12629 Exploit-Db :...

5.4CVSS5.9AI score0.01504EPSS
SaveExploits1References1
NVD
NVD
added 2026/09/08 5:18 p.m.3 views

CVE-2026-78230

AshAi exposes Ash read actions to language-model tool calls. The read tool accepts an aggregate result type min, max, sum, avg that builds an ad-hoc Ash.Query.Aggregate over a named field and returns its raw value. Ash field policies redact forbidden fields on returned records replacing them with...

6CVSS
SaveExploits0References5
NVD
NVD
added 2026/09/08 5:18 p.m.4 views

CVE-2026-78216

AshLua exposes Ash read actions to Lua scripts run through an eval action. A read call accepts an operation list, min, max, first, sum, avg that builds an ad-hoc Ash.Query.Aggregate over a named field and returns its raw value. Ash field policies redact forbidden fields on returned records...

6CVSS
SaveExploits0References5
NVD
NVD
added 2026/09/08 5:18 p.m.4 views

CVE-2026-52307

An authenticated stored cross-site scripting XSS vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field...

SaveExploits0References3
Kitploit
Kitploit
added 2026/09/08 5:15 p.m.5 views

POC_CVE-2024-40492

CVE-2024-40492: Stored XSS to ATO Description Stored Cross-Site Scripting XSS is a type of security vulnerability typically found in web applications. It occurs when an attacker is able to inject malicious scripts into a web application, and those scripts are stored on the server. When other user...

7.1CVSS5.9AI score0.00804EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/08 4:53 p.m.5 views

CVE-2019-14234

POC-Django JSONField/HStoreField SQL Injection Vulnerability Exploit CVE-2019-14234 Django released a security update on August 1, 2019, which fixes a SQL injection vulnerability in the two model fields of JSONField and HStoreField. Reference link:...

9.8CVSS7.3AI score0.47694EPSS
SaveExploits0
Rows per page
Query Builder