Lucene search
+L

193069 matches found

Kitploit
Kitploit
•added 2026/09/23 9:04 p.m.•11 views

CVE-2025-25347

CVE-2025-25347 Resumen Esta herramienta se utiliza para probar la vulnerabilidad CVE-2025-25347 en QingLong Panel, una plataforma de código abierto para la gestión de automatización de tareas. Esta vulnerabilidad permite Remote Code Execution RCE porque el panel no aplica una validación de entrad...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/23 8:57 p.m.•14 views

Webapp_Pentast

CVE-2022-31147 Proof of Concept & Manual Testing Guide This guide provides comprehensive methodologies for testing CVE-2022-31147, a critical path traversal vulnerability affecting the widely used matthiasmullie/minify library. The vulnerability allows attackers to exploit insufficient input...

7.5CVSS7.4AI score0.02176EPSS
SaveExploits1
NVD
NVD
•added 2026/09/23 8:17 p.m.•8 views

CVE-2026-84714

A flaw was found in the automation-controller input-validation guard sanitizejinja. The function uses two regular expressions to reject user-supplied Jinja, but the patterns stop at the first interior '' or '%' character, so a Jinja expression containing an inner brace for example an empty dict i...

7.1CVSS0.00293EPSS
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/23 6:26 p.m.•7 views

CVE-2025-50565

CVE-2025-50565 Descripción Doubo ERP 1.0 tiene una vulnerabilidad de inyección SQL debido a la falta de filtrado de la entrada del usuario, que puede ser iniciada de forma remota por un atacante. Tipo de Vulnerabilidad Inyección SQL Tipo de Ataque Remoto Impacto: Divulgación de Información true ¿...

5.9AI score0.00249EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/09/23 5:52 p.m.•4 views

CVE-2026-71300

A flaw was found in Apache Camel Atmosphere Websocket. This improper input validation vulnerability allows a remote attacker to inject specific Exchange headers, such as websocket.connectionKey.list, which are not properly filtered. By manipulating these headers, an attacker can take control of t...

7.3CVSS5.9AI score0.00738EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2026/09/23 5:12 p.m.•3 views

postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump

A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...

8.8CVSS6.3AI score0.00355EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/23 5:07 p.m.•11 views

CVE-2023-32692-CodeIgniter4

CVE-2023-32692 — Inyección de reglas de validación en CodeIgniter 4 CVE-2023-32692 es una vulnerabilidad de inyección de código en el framework PHP CodeIgniter 4, que afecta a las versiones 4.0.0 a 4.3.4. Se corrigió en 4.3.5 publicada en junio de 2023. Este es un entorno de demostración para...

9.8CVSS8.4AI score0.01126EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/23 4:47 p.m.•7 views

Security Bulletin: This Power System update is being released to address CVE-2026-17503

Summary Power Systems Firmware is affected by a vulnerability in the partition firmware runtime boot configuration. An attacker with root access to a partition can maliciously alter partition nvram, causing the partition to fail to boot. This condition persists until operator intervention —...

5.1CVSS6AI score0.00105EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2026/09/23 2:08 p.m.•4 views

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

6.1CVSS5.8AI score0.0031EPSS
SaveExploits0References8
NCSC
NCSC
•added 2026/09/23 1:28 p.m.•5 views

vulnerabilities in Adobe Experience Manager Forms JEE

Adobe has identified 6 vulnerabilities in Adobe Experience Manager AEM Forms for Java Enterprise Edition JEE, including AEM 6.5 Forms and AEM 6.5 LTS Forms. These vulnerabilities concern various security issues, such as improper authorization, inadequate input validation, Server-Side Request...

10CVSS6.7AI score0.01494EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/23 12:17 p.m.•10 views

CVE-2026-80444

URL redirection to untrusted site 'open redirect' vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation. This issue affects AVESİS: from 202608201331 before 202608240351...

5.4CVSS0.00141EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/23 11:42 a.m.•6 views

EUVD-2026-85259

URL redirection to untrusted site 'open redirect' vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation. This issue affects AVESİS: from 202608201331 before 202608240351...

5.4CVSS5.6AI score0.00141EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/23 11:42 a.m.•35 views

CVE-2026-80444 Unauthenticated Open Redirect Vulnerability in Abis Technology's AVESİS

URL redirection to untrusted site 'open redirect' vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation. This issue affects AVESİS: from 202608201331 before 202608240351...

5.4CVSS0.00141EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/23 11:42 a.m.•2 views

CVE-2026-80444

Abis Technology Ltd. Co. AVESİS is vulnerable to an open redirect vulnerability caused by Input Data Manipulation . This flaw allows an attacker to redirect users to an untrusted site. The issue specifically affects versions from 202608201331 before 202608240351 . Exploitation details are not pro...

5.4CVSS5.6AI score0.00141EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/23 9:37 a.m.•43 views

CVE-2026-91928 Apache Sling XSS: Sanitizer bypass, uncontrolled resource consumption and failure pf protection mechanisms

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Users are recommended to upgrade to version 2.4.12, which fixes the issue...

0.0017EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/23 8:27 a.m.•13 views

reproducing-CVE-2025-1489

Reproducción de CVE-2025-1489 Este repositorio simula la reproducción de un CVE relacionado con la web CVE-2025-1489 en un entorno seguro para demostrar y practicar mis habilidades de análisis forense/de vulnerabilidades. La vulnerabilidad identificada y reproducida es una vulnerabilidad de...

6.4CVSS8.3AI score0.00301EPSS
SaveExploits0
Rockylinux
Rockylinux
•added 2026/09/23 6:00 a.m.•7 views

libxml2 security, bug fix, and enhancement update

An update is available for libxml2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libxml2 library is a development toolbox providing the implementation of...

9.8CVSS6.2AI score0.00355EPSS
SaveExploits1
OSV
OSV
•added 2026/09/23 6:00 a.m.•5 views

RLSA-2026:69655 Moderate: libxml2 security, bug fix, and enhancement update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free CVE-2026-6653 Bug Fixes and Enhancements: libxml2: CVE-2025-9714 fix Rocky Linux-11927...

5.9CVSS6.2AI score0.00355EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
•added 2026/09/23 3:17 a.m.•7 views

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

6.1CVSS5.8AI score0.0031EPSS
SaveExploits0References8
Kitploit
Kitploit
•added 2026/09/23 3:10 a.m.•11 views

CVE-2024-46635

CVE-2024-46635 Background The GongZhiDao System is a platform developed by GongZhiDao. It provides enterprise solutions including user management, data analysis, and operational functionalities. However, a security vulnerability was discovered in one of the API endpoints that could potentially le...

5.9CVSS6AI score0.00256EPSS
SaveExploits0
Rows per page
Query Builder