Lucene search
+L

960 matches found

Kitploit
Kitploit
•added 2026/10/08 11:57 a.m.•133 views

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/08 9:46 a.m.•23 views

pecli

PEcli Tool to analyze PE files in python 3. Current features : Show information about the file import, exports, resources Search for interesting information in the file abnormal resources, peid... Dump sections or resources Check size Search for a string in the file Installation You can install i...

6.3AI score
SaveExploits0References3
Nuclei
Nuclei
•added 2026/10/08 2:15 a.m.•28 views

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

8.8CVSS7.7AI score0.02917EPSS
SaveExploits3References2
Kitploit
Kitploit
•added 2026/10/08 12:06 a.m.•14 views

CVE-2025-9215

StoreEngine Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More = 1.4.0 - Authenticated Subscriber+ Arbitrary File Download The StoreEngine plugin contains a vulnerability in its CSV Import/Export feature that allows any authenticated user subscriber, author,...

6.5CVSS6.6AI score0.00612EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2026/10/07 7:55 p.m.•14 views

Exploit for CVE-2026-105844

CVE-2026-105844 — Payload CMS import-export prototype pollutio...

9.3CVSS6AI score0.00519EPSS
SaveExploits1
NVD
NVD
•added 2026/10/06 4:17 p.m.•5 views

CVE-2026-105844

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

9.3CVSS0.00519EPSS
SaveExploits1References3
OSV
OSV
•added 2026/10/06 4:09 p.m.•3 views

GHSA-QF28-8HC6-VWRP Payload: Prototype pollution in Payload Import Export plugin

Impact An unauthenticated user could cause unintended application behavior when the Import Export plugin is enabled, allowing an attacker to submit and execute remote code RCE. Applications that do not use @payloadcms/plugin-import-export are not affected. Patches Users should upgrade Payload...

9.3CVSS6.2AI score0.00519EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2026/10/06 4:09 p.m.•8 views

Payload: Prototype pollution in Payload Import Export plugin

Impact An unauthenticated user could cause unintended application behavior when the Import Export plugin is enabled, allowing an attacker to submit and execute remote code RCE. Applications that do not use @payloadcms/plugin-import-export are not affected. Patches Users should upgrade Payload...

9.3CVSS6.2AI score0.00519EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2026/10/06 3:57 p.m.•30 views

CVE-2026-105844 Payload: Prototype pollution in Payload Import Export plugin

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

9.3CVSS0.00519EPSS
SaveExploits1References3
CVE
CVE
•added 2026/10/06 3:57 p.m.•11 views

CVE-2026-105844

Payload , a headless content management system, contains a prototype pollution vulnerability in the @payloadcms/plugin-import-export plugin. An unauthenticated user can submit prototype-sensitive field paths, leading to unintended application behavior and potential remote code execution (RCE) . T...

9.3CVSS6.2AI score0.00519EPSS
SaveExploits1References3
OSV
OSV
•added 2026/10/06 3:57 p.m.•3 views

CVE-2026-105844 Payload: Prototype pollution in Payload Import Export plugin

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

9.3CVSS6.2AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/10/06 3:57 p.m.•6 views

EUVD-2026-93470

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

9.3CVSS6.2AI score0.00519EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•9 views

PT-2026-106776

Name of the Vulnerable Software and Affected Versions Payload versions 3.0.0 through 3.87.9 Payload versions 4.0.0-canary.0 through 4.0.0-canary.26 Description An unauthenticated user can cause unintended application behavior when the @payloadcms/plugin-import-export plugin is enabled. By...

9.3CVSS6.8AI score0.00519EPSS
SaveExploits1References9
Kitploit
Kitploit
•added 2026/10/05 12:25 a.m.•18 views

activemq-cve-lab

ActiveMQ Message Broker Обзор Приложение брокера сообщений ActiveMQ с функциональностью импорта/экспорта сообщений. Версия: 5.11.1 Возможности Управление очередями сообщений Статистика и мониторинг очередей Импорт/экспорт файлов сообщений Статус брокера в реальном времени Быстрый старт Docker...

6.2AI score
SaveExploits0
NVD
NVD
•added 2026/10/02 3:17 p.m.•16 views

CVE-2026-32584

Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export smart-one-click-setup allows Retrieve Embedded Sensitive Data.This issue affects Smart One Click Setup – Complete Demo Import & Export: from n/a through 1.4....

5.3CVSS0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/02 2:41 p.m.•41 views

CVE-2026-32584 WordPress Smart One Click Setup – Complete Demo Import &amp; Export plugin <= 1.4.3 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export smart-one-click-setup allows Retrieve Embedded Sensitive Data.This issue affects Smart One Click Setup – Complete Demo Import & Export: from n/a through 1.4....

5.3CVSS0.00197EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/02 2:41 p.m.•13 views

CVE-2026-32584 WordPress Smart One Click Setup – Complete Demo Import &amp; Export plugin <= 1.4.3 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export smart-one-click-setup allows Retrieve Embedded Sensitive Data.This issue affects Smart One Click Setup – Complete Demo Import & Export: from n/a through 1.4....

5.3CVSS5.8AI score0.00197EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/02 2:41 p.m.•9 views

EUVD-2026-91658

Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export smart-one-click-setup allows Retrieve Embedded Sensitive Data.This issue affects Smart One Click Setup – Complete Demo Import & Export: from n/a through 1.4....

5.3CVSS5.8AI score0.00197EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/02 12:00 a.m.•1 views

CVE-2026-32584: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export smart-one-click-setup allows Retrieve Embedded Sensitive Data.This issue affects Smart One Click Setup – Complete Demo Import & Export: from n/a through 1.4....

5.3CVSS5.8AI score0.00197EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/01 11:34 p.m.•11 views

CVE-2022-0236

CVE-2022-0236 Плагин WordPress WP Import Export уязвим к несанкционированному раскрытию конфиденциальных данных из-за отсутствия проверки прав доступа в функции загрузки wpieprocessfiledownload, расположенной в файле /includes/classes/class-wpie-general.php. Это позволяет неаутентифицированным...

7.5CVSS7.5AI score0.04284EPSS
SaveExploits2
Rows per page
Query Builder