Lucene search
+L

25189 matches found

Kitploit
Kitploit
added 2026/09/13 12:26 p.m.6 views

CVE-2023-33538

Exploit en Python para la Vulnerabilidad de Inyección de Comandos en TP-Link TL-WR940N/TL-WR841N Instrucciones de Uso 1. Verificación Básica de Vulnerabilidad : root@kitploit: python tplinkexploit.py -t 192.168.1.1 -u admin -p admin 2. Ejecutar Comando Personalizado : root@kitploit: python...

8.8CVSS8.2AI score0.41874EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 9:50 a.m.8 views

CVE-2021-38602

CVE-2021-38602 Una vulnerabilidad de cross site scripting almacenado está presente en la página de edición de artículos de la versión 5.8.7 de PluXML. La entrada del usuario no se sanitiza correctamente en varios campos. Campos vulnerables: Título opcional: Contenido: Una vez insertado, el XSS...

4.8CVSS5.9AI score0.00755EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 9:47 a.m.7 views

CVE-2022-27251

CVE-2022-27251 Remote Code Execution in LocalStack 0.12.6 Due to the lack of sanitization on user input on the Lambda API handler field whilst spawning Lambda functions and the way Docker containers are insecurely spawned, an injection can be provided through AWS CLI in the --handler option to be...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 9:45 a.m.8 views

CVE-2021-36563

CVE-2021-36563 – Múltiples XSS almacenados y reflejados Aplicación: CheckMK Management Web Console Revisión de software: De 1.5.0 a 2.0.0p9 Tipo de ataque: XSS almacenado y reflejado Solución: Actualizar a la revisión de software 2.0.0p10 o posterior Resumen: La consola web de gestión de CheckMK...

5.4CVSS6.2AI score0.0172EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 8:43 a.m.6 views

CVE-2024-9264-RCE-Exploit

CVE-2024-9264-RCE-Exploit in Grafana via SQL Expressions Description Proof Of Concept for Remote Code Execution in Grafana CVE-2024-9264 This repository contains a Python script that exploits a Remote Code Execution RCE vulnerability in Grafana's SQL Expressions feature. By leveraging insufficien...

9.9CVSS7.9AI score0.94864EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/13 7:32 a.m.5 views

CVE-2025-44148

CVE-2025-44148 - Reflected Cross-Site Scripting Reflected XSS Reflected Cross-Site Scripting XSS in MailEnable Vendor: MailEnable Pty. Ltd. Affected Versions: 10 Description A reflected cross-site scripting XSS vulnerability exists in MailEnable Webmail due to improper user input sanitization in...

9.8CVSS5.9AI score0.54711EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 3:42 a.m.5 views

CVE-2025-56771

Description During analysis of the ecodotempo.com.br website, a Stored Cross-Site Scripting XSS vulnerability was discovered. This vulnerability allows an attacker to inject malicious scripts into fields that are subsequently rendered to other users without proper sanitization, specifically on th...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 2:51 a.m.8 views

CVE-2025-22964

CVE-2025-22964: Inyección SQL ciega basada en tiempo en DDSN Interactive cm3 Acora CMS versión 10.1.1 DDSN Interactive cm3 Acora CMS versión 10.1.1 tiene una vulnerabilidad de inyección SQL ciega basada en tiempo causada por una sanitización y validación insuficientes de la entrada en el parámetr...

8.1CVSS5.9AI score0.00941EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.99 views

WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting

WordPress MF Gig Calendar plugin 1.1 and prior contains a reflected cross-site scripting vulnerability. It does not sanitize or escape the id GET parameter before outputting back in the admin dashboard when editing an event. id: CVE-2021-24510 info: name: WordPress MF Gig Calendar =1.2 which...

6.1CVSS6.3AI score0.02721EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.92 views

osTicket < 1.12.1 - Cross-Site Scripting

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sanitization was provided in the firstname and lastname fields of the application. The insertion of malicious queries in those fields leads to the...

6.1CVSS6.8AI score0.10902EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.65 views

LoLLMS WebUI - Subfolder Prediction via Path Traversal

A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'addreferencetolocalmode' function due to the lack of input sanitization. This vulnerability affects versions v9.6 to the latest. id: CVE-2024-4841 info: name: LoLLMS WebUI - Subfolder Prediction via Path...

4CVSS5.5AI score0.00668EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.55 views

WordPress Copyright Proof <=4.16 - Cross-Site-Scripting

WordPress Copyright Proof plugin 4.16 and prior contains a cross-site scripting vulnerability. It does not sanitize and escape a parameter before outputting it back via an AJAX action available to both unauthenticated and authenticated users when a specific setting is enabled. id: CVE-2022-1906...

6.1CVSS6.2AI score0.01117EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.58 views

Membership Database <= 1.0 - Cross-Site Scripting

Membership Database before 1.0 is susceptible to cross-site scripting via the tab parameter due to insufficient input sanitization and output escaping. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker t...

6.1CVSS7AI score0.0085EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.9 views

Gutenverse Plugin <= 3.4.6 - Cross-Site Scripting

The Gutenverse plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in versions up to and including 3.4.6. The issue arises due to insufficient input sanitization and output escaping in the rendercontent method of class-search-result-title.php, which outputs...

6.1CVSS6.1AI score0.00473EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.44 views

WP Triggers Lite - Cross-Site Scripting

WP Triggers Lite WordPress plugin v2.5.3 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

7.1CVSS8AI score0.00571EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.56 views

WordPress WPQA <5.4 - Cross-Site Scripting

WordPress WPQA plugin prior to 5.4 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter on its reset password form. id: CVE-2022-1597 info: name: WordPress WPQA 5.4 - Cross-Site Scripting author: veshraj severity: medium description: | WordPress WPQ...

6.1CVSS6.3AI score0.03017EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.90 views

wpForo Forum <= 2.1.8 - Cross-Site Scripting

The wpForo Forum plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘wpforodebug’ function in versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS7.1AI score0.00845EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.26 views

Bulk Me Now! Plugin <= 2.0 - Cross-Site Scripting

Bulk Me Now! WordPress plugin = 2.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

7.1CVSS8AI score0.00548EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.4 views

Shield Security <= 21.0.8 - Unauthenticated Reflected XSS

Shield Security WordPress plugin = 21.0.8 contains a reflected cross-site scripting caused by insufficient input sanitization and output escaping in the 'message' parameter, letting unauthenticated attackers inject scripts, exploit requires user interaction. id: CVE-2026-0561 info: name: Shield...

6.1CVSS0.00503EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.29 views

WordPress Email Newsletter - Reflected XSS

WordPress Email Newsletter plugin through 1.1 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to cra...

5.4CVSS8AI score0.00708EPSS
SaveExploits1References1
Rows per page
Query Builder