Lucene search
+L

527 matches found

Kitploit
Kitploit
•added 2026/10/03 9:09 a.m.•23 views

simvyn

simvyn Outil de développement mobile universel — contrôlez les simulateurs iOS, les émulateurs Android et les appareils réels depuis un tableau de bord unique et une CLI Table des matières Démarrage rapide Installation Agents de codage IA Fonctionnalités Présentations des modules Guide des...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/03 2:48 a.m.•10 views

CVE-2026-67599_ClearOS_RCE

Инъекция команд ОС в параметр фильтра Log Viewer Пакет: ClearFoundation Протестированные версии: ClearOS 7.9.1.342252 Тип уязвимости: OS Command Injection CWE-78 Серьёзность: Высокая CVE : CVE-2026-67599 Вектор CVSS v3.1: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Оценка: 7.2 Спасибо VulnCheck ...

8.6CVSS6.6AI score0.02428EPSS
SaveExploits1
Nuclei
Nuclei
•added 2026/10/03 2:05 a.m.•39 views

Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Arbitrary File Read

The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wpajaxnoprivelvwplogdownload AJAX action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, whi...

7.5CVSS7.5AI score0.46858EPSS
SaveExploits1References4
Kitploit
Kitploit
•added 2026/10/02 8:00 p.m.•16 views

CVE-2021-21234

CVE-2021-21234 Vulnérabilité de traversée de répertoire dans la bibliothèque spring-boot-actuator-logview https://blogg.pwc.no/styringogkontroll/unauthenticated-directory-traversal-vulnerability-in-a-java-spring-boot-actuator-library-cve-2021-21234...

7.7CVSS7.6AI score0.21011EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/02 1:49 p.m.•12 views

skype-log-viewer

skype-log-viewer Téléchargez et consultez l'historique Skype sans Skype Ce programme vous permet de consulter tous vos journaux de chat Skype et de les exporter facilement sous forme de fichiers texte. Il les organise correctement par conversation et s'assure que les conversations de groupe ne se...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/02 5:48 a.m.•11 views

CVE-2024-12849-Poc

CVE-2024-12849-Poc 📜 Описание Плагин Error Log Viewer By WP Guru для WordPress уязвим к произвольному чтению файлов Arbitrary File Read во всех версиях до 1.0.1.3 включительно через AJAX-действие wpajaxnoprivelvwplogdownload. Это позволяет неаутентифицированным атакующим читать содержимое...

7.5CVSS7.9AI score0.46858EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/02 5:14 a.m.•10 views

CVE-2024-12849

CVE-2024-12849 Error Log Viewer By WP Guru = 1.0.1.3 - Отсутствие авторизации, приводящее к неаутентифицированному произвольному чтению файлов Описание Плагин Error Log Viewer By WP Guru для WordPress уязвим к произвольному чтению файлов во всех версиях до 1.0.1.3 включительно через AJAX-действие...

7.5CVSS7.9AI score0.46858EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2026/09/28 5:59 a.m.•13 views

CVE-2026-84648

A flaw was found in Jenkins. The system log viewer does not properly escape log record metadata, such as the source, level, and timestamp. This vulnerability allows attackers who control agent processes to inject malicious scripts. Successful exploitation can lead to a stored cross-site scripting...

8.8CVSS5.7AI score0.00583EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/08 8:16 a.m.•16 views

BIT-JENKINS-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.8AI score0.00583EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•18 views

PT-2026-88165

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.7AI score0.00583EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/02 4:17 p.m.•13 views

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.7AI score
SaveExploits0References1
NVD
NVD
•added 2026/09/02 4:17 p.m.•16 views

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS0.00583EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/09/02 3:40 p.m.•13 views

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.8AI score0.00583EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/02 3:40 p.m.•39 views

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

0.00583EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/02 3:40 p.m.•16 views

EUVD-2026-70114

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.8AI score0.00583EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/02 3:40 p.m.•32 views

CVE-2026-84648

Jenkins versions 2.579 and earlier , and LTS 2.568.2 and earlier , are vulnerable to a stored cross-site scripting (XSS) vulnerability. The root cause is that the system log viewer fails to escape log record metadata, specifically the source, level, and timestamp . This flaw is exploitable by att...

8.8CVSS5.8AI score0.00583EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/02 3:40 p.m.•17 views

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

5.8AI score0.00583EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/02 12:00 a.m.•1 views

CVE-2026-84648: Improper Neutralization of Input During Web Page Generation

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.7AI score0.00583EPSS
SaveExploits0References3
Jenkins Security Advisories
Jenkins Security Advisories
•added 2026/09/02 12:00 a.m.•14 views

Stored XSS vulnerability in system log viewer

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes. TIP: On Jenkins 2.539 and newer, LTS...

8.8CVSS5.8AI score0.00583EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/09/02 12:00 a.m.•15 views

PT-2026-84771

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.8AI score0.00583EPSS
SaveExploits0References3
Rows per page
Query Builder