Lucene search
+L

560 matches found

Kitploit
Kitploit
•added 2026/10/25 6:40 a.m.•33 views

simvyn

simvyn Universal mobile devtool — control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI Table of Contents Quick Start Installation AI Coding Agents Features Module Showcases Collections Guide CLI Reference How It Works Supported Platforms Contributing Securit...

6.2AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/10/24 9:27 p.m.•21 views

skype-log-viewer

skype-log-viewer Download and View Skype History Without Skype This program allows you to view all of your skype chat logs and then easily export them as text files. It correctly organizes them by conversation, and makes sure that group conversations do not get jumbled with one on one chats...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/24 9:02 p.m.•26 views

CVE-2021-21234

CVE-2021-21234 Directory traversal vulnerability in the spring-boot-actuator-logview library https://blogg.pwc.no/styringogkontroll/unauthenticated-directory-traversal-vulnerability-in-a-java-spring-boot-actuator-library-cve-2021-21234...

7.7CVSS7.7AI score0.21011EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/10/24 4:14 p.m.•23 views

CVE-2024-12849-Poc

CVE-2024-12849-Poc 📜 Description The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wpajaxnoprivelvwplogdownload AJAX action. This makes it possible for unauthenticated attackers to read the contents of...

7.5CVSS7.8AI score0.48046EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/24 2:35 p.m.•23 views

CVE-2024-12849

CVE-2024-12849 Error Log Viewer By WP Guru = 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read Description The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the...

7.5CVSS7.8AI score0.48046EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/24 8:35 a.m.•17 views

CVE-2026-67599_ClearOS_RCE

OS Command Injection in Log Viewer Filter Parameter Package: ClearFoundation Tested Versions: ClearOS 7.9.1.342252 Vulnerability Type: OS Command Injection CWE-78 Severity: High CVE : CVE-2026-67599 CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Score: 7.2 Thank you to VulnCheck f...

8.6CVSS6.8AI score0.02428EPSS
SaveExploits1
Nuclei
Nuclei
•added 2026/10/23 2:07 a.m.•44 views

Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Arbitrary File Read

The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wpajaxnoprivelvwplogdownload AJAX action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, whi...

7.5CVSS7.7AI score0.48046EPSS
SaveExploits1References4
NVD
NVD
•added 2026/10/16 6:17 a.m.•14 views

CVE-2026-104000

The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and including, 1.6.12.35 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS0.00236EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/16 5:30 a.m.•39 views

CVE-2026-104000 Simply Schedule Appointments <= 1.6.12.35 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter via /wp-json/ssa/v1/appointments/{id}

The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and including, 1.6.12.35 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS0.00236EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/16 5:30 a.m.•10 views

EUVD-2026-102663

The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and including, 1.6.12.35 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS6AI score0.00236EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/16 5:30 a.m.•33 views

CVE-2026-104000

The Simply Schedule Appointments plugin for WordPress (versions up to and including 1.6.12.35 ) is vulnerable to Unauthenticated Stored Cross-Site Scripting (XSS) . The flaw exists in the 'status' parameter via the /wp-json/ssa/v1/appointments/{id} endpoint due to insufficient input sanitization ...

7.2CVSS6AI score0.00236EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/16 12:00 a.m.•6 views

CVE-2026-104000: Improper Neutralization of Input During Web Page Generation

The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and including, 1.6.12.35 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS6AI score0.00236EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/28 5:59 a.m.•25 views

CVE-2026-84648

A flaw was found in Jenkins. The system log viewer does not properly escape log record metadata, such as the source, level, and timestamp. This vulnerability allows attackers who control agent processes to inject malicious scripts. Successful exploitation can lead to a stored cross-site scripting...

8.8CVSS6.9AI score0.00583EPSS
SaveExploits0References4
osv_bit
osv_bit
•added 2026/09/08 8:16 a.m.•32 views

BIT-JENKINS-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS7AI score0.00583EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•20 views

PT-2026-88165

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS7AI score0.00583EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/09/02 4:17 p.m.•27 views

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.8AI score
SaveExploits0References1
NVD
NVD
•added 2026/09/02 4:17 p.m.•25 views

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS0.00583EPSS
SaveExploits0References1
Mend
Mend
•added 2026/09/02 3:40 p.m.•11 views

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS7AI score0.00583EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/02 3:40 p.m.•20 views

EUVD-2026-70114

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS7AI score0.00583EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/02 3:40 p.m.•44 views

CVE-2026-84648

Jenkins versions 2.579 and earlier , and LTS 2.568.2 and earlier , are vulnerable to a stored cross-site scripting (XSS) vulnerability. The root cause is that the system log viewer fails to escape log record metadata, specifically the source, level, and timestamp . This flaw is exploitable by att...

8.8CVSS7AI score0.00583EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder