Lucene search
+L

480053 matches found

Kitploit
Kitploit
added 2026/08/31 5:30 a.m.3 views

cve-2021-44228

CVE-2021-44228 This repository represents a simplified simulation of infamous CVE-2021-44228 issue. Aside from system properties and other dictionary structures lookups, Apache Log4j also implements JNDI lookup feature for various reasons. The JNDI can obtain services from a number of service...

10CVSS7.6AI score0.99999EPSS
SaveExploits365References1
Kitploit
Kitploit
added 2026/08/31 5:30 a.m.4 views

CVE-2026-57821-PoC-Exploit

🛡️ CVE-2026-57821 – Apache Fineract SQL Injection ⚠️ LEGAL & ETHICAL NOTICE This toolkit is provided strictly for educational, training, and authorized security testing purposes. Unauthorized use against any system without explicit written permission is illegal and violates computer crime laws. The...

8.1CVSS7.2AI score0.00743EPSS
SaveExploits1
EUVD
EUVD
added 2026/08/31 5:30 a.m.6 views

EUVD-2026-68360

A security flaw has been discovered in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This affects the function CourseDao.courseranking of the file code/src/dao/CourseDao.java. Performing a manipulation of the argument cno results in sql injection. It is...

6.5CVSS6.4AI score0.00204EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/31 5:30 a.m.31 views

CVE-2026-82620 Soarkey StudentManagement/学生信息管理系统 CourseDao.java CourseDao.course_ranking sql injection

A security flaw has been discovered in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This affects the function CourseDao.courseranking of the file code/src/dao/CourseDao.java. Performing a manipulation of the argument cno results in sql injection. It is...

6.5CVSS0.00204EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/31 5:30 a.m.12 views

CVE-2026-82620

Soarkey StudentManagement (学生信息管理系统), affected up to commit e08f7f1d5015af407aa4cca0ada3dea189b4937e, contains a SQL injection vulnerability in the function CourseDao.course_ranking within the file code/src/dao/CourseDao.java. Manipulation of the cno argument allows a remote attacker to inject SQ...

6.5CVSS6.4AI score0.00204EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/31 5:29 a.m.4 views

CVE-2023-32590

CVE-2023-32590 Subscribe to Category = 2.7.4 - Unauthenticated SQL Injection Description The Subscribe to Category plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 2.7.4 due to insufficient escaping on the user supplied parameter and lack of sufficient...

9.3CVSS7.1AI score0.01808EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 5:28 a.m.4 views

CVE-2017-5638

CVE-2017-5638 Apache Struts 2 Introduction: Apache Struts 2 is an open source web application framework for developing Java EE Web applications,It is the second generation of the struts framework first released on 10th Oct 2006. Struts Framework is designed in a way that it helps creating Web...

10CVSS7.2AI score0.99999EPSS
SaveExploits45
Kitploit
Kitploit
added 2026/08/31 5:27 a.m.3 views

EverShop-Lab-CVE-2026-25993

CVE-2026-25993 — Laboratorio de inyección SQL de segundo orden de EverShop Requisitos previos Docker Engine 24+ con Docker Compose v2+ 2 GB de RAM libre Despliegue root@kitploit: cd EverShop-Lab/ docker compose up Espera 2 minutos para la primera compilación clona EverShop v2.1.0, compila, ejecut...

9.8CVSS5.9AI score0.0032EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 5:27 a.m.3 views

CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability

CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview...

7.8CVSS7.2AI score0.00795EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/31 5:26 a.m.3 views

CVE-2026-28496-Lab

CVE-2026-28496 - FOSSBilling Server-Side Template Injection in Twig Rendering Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-28496, a Server-Side Template Injection vulnerability affecting FOSSBilling's Twig template rendering behavior...

9.4CVSS5.9AI score0.01905EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 5:24 a.m.2 views

CVE-2024-7120-Exploit-by-Dark-07x

Raisecom Devices Command Injection CVE-2024-7120 Proof of concept! Overview A command injection vulnerability has been identified in the RAISECOM Gateway devices, affecting models MSG1200, MSG2100E, MSG2200, and MSG2300. This vulnerability allows remote attackers to execute arbitrary commands on...

9.8CVSS6.9AI score0.934EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/31 5:23 a.m.2 views

CVE-2025-57819-exploit

CVE-2025-57819 — SQLi de pre-autenticación a RCE en FreePBX Un exploit todo-en-uno para CVE-2025-57819 , una inyección SQL no autenticada en el módulo endpoint de FreePBX que conduce a la ejecución remota de código mediante la inyección de trabajos cron. CVSS : 9.8 Crítico —...

10CVSS7.4AI score0.88269EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/08/31 5:22 a.m.4 views

CVE-2026-12960

CVE-2026-12960 Exportación incorrecta de componentes de aplicación de Android en la aplicación ASUS Router Un componente incluido en la aplicación ASUS Router para Android com.asus.aihome se declaró android:exported="true" sin android:permission. Cualquier otra aplicación en el mismo dispositivo,...

6CVSS5.9AI score0.00159EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/08/31 5:20 a.m.3 views

cve-2019-9053-py3

CVE-2019-9053 — CMS Made Simple SQLi Exploit Python 3 Disclaimer: This tool is intended for authorized penetration testing and educational purposes only. Running this against systems without explicit written permission is illegal. The author assumes no liability for misuse. Overview This is a...

8.1CVSS7.2AI score0.68581EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/08/31 5:20 a.m.3 views

CVE-2022-46169_poc

CVE-2022-46169 unauthenticated remote code execution Description Authentication Bypass: a hostname-based authorization check is not implemented safely for most installations of Cacti Command Injection: unsanitized user input is propagated to a string used to execute an external command Demo...

9.8CVSS7.7AI score0.99826EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/08/31 5:19 a.m.2 views

cve-2026-9082

CVE-2026-9082 Type : SQL Injection CWE-89 Affected Product : Drupal Core Database Abstraction API Drupal Advisory : SA-CORE-2026-004 Published : May 20, 2026 Severity : Highly Critical Drupal 20/25 | NVD CVSS 6.5 What Is It? CVE-2026-9082 is a SQL Injection vulnerability in Drupal's core database...

9.8CVSS7.1AI score0.87892EPSS
SaveExploits17
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.406 views

vBulletin <= 4.2.3 - SQL Injection

vBulletin versions 3.6.0 through 4.2.3 are vulnerable to an SQL injection vulnerability in the vBulletin core forumrunner addon. The vulnerability allows an attacker to execute arbitrary SQL queries and potentially access sensitive information from the database. id: CVE-2016-6195 info: name:...

9.8CVSS7.5AI score0.68493EPSS
SaveExploits7References5
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.137 views

Apache Airflow <=1.10.10 - Remote Code Execution

Apache Airflow versions 1.10.10 and below are vulnerable to remote code/command injection vulnerabilities in one of the example DAGs shipped with Airflow. This could allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler depending on the executor in us...

8.8CVSS7.4AI score0.99189EPSS
SaveExploits9References5
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.102 views

Apache Solr <= 7.1 - XML Entity Injection

Apache Solr with Apache Lucene before 7.1 is susceptible to remote code execution by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external...

9.8CVSS7.5AI score0.91896EPSS
SaveExploits12References5
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.118 views

UniFi OS Server - Command Injection

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. id: CVE-2026-34910 info: name: UniFi OS Server - Command Injection author: Kazgangap severity: critical description: | A malicious actor...

10CVSS7.3AI score0.87468EPSS
SaveExploits4References4
Rows per page
Query Builder