Lucene search
+L

21 matches found

Kitploit
Kitploit
•added 2026/10/07 12:07 p.m.•65 views

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

6.2AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/01/26 4:32 a.m.•8 views

CVE-2026-1419 D-Link DCS700l Web Form setDayNightMode command injection

A weakness has been identified in D-Link DCS700l 1.03.09. Affected is an unknown function of the file /setDayNightMode of the component Web Form Handler. Executing a manipulation of the argument LightSensorControl can lead to command injection. The attack may be launched remotely. The exploit has...

5.8CVSS5.8AI score0.17153EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/01/26 4:32 a.m.•7 views

CVE-2026-1419

A weakness has been identified in D-Link DCS700l 1.03.09. Affected is an unknown function of the file /setDayNightMode of the component Web Form Handler. Executing a manipulation of the argument LightSensorControl can lead to command injection. The attack may be launched remotely. The exploit has...

5.8CVSS5.6AI score0.17153EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2026/01/26 12:00 a.m.•18 views

D-Link DCS700l command injection vulnerability

The D-Link DCS700l is a wireless cloud network camera from D-Link Corporation. The D-Link DCS700l version 1.03.09 has a command injection vulnerability. This vulnerability stems from incorrect operations on the parameter “LightSensorControl” in the file /setDayNightMode, which may lead to command...

7.2CVSS5.8AI score0.17153EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/01/26 12:00 a.m.•20 views

PT-2026-4722

A weakness has been identified in D-Link DCS700l 1.03.09. Affected is an unknown function of the file /setDayNightMode of the component Web Form Handler. Executing a manipulation of the argument LightSensorControl can lead to command injection. The attack may be launched remotely. The exploit has...

5.8CVSS5.6AI score0.17153EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-33756

Malicious code in bioql PyPI...

4.8CVSS5.2AI score0.0054EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
•added 2024/06/05 12:00 a.m.•16 views

WP Dark Mode – WordPress Dark Mode Plugin for Improved Accessibility, Dark Theme, Night Mode, and Social Sharing < 5.0.5 - Missing Authorization

Description The WP Dark Mode – WordPress Dark Mode Plugin for Improved Accessibility, Dark Theme, Night Mode, and Social Sharing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpdmsocialsharesaveoptions function in all versions up...

4.3CVSS6.4AI score0.00343EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2022/04/26 12:00 a.m.•51 views

WordPress plugin Mark Daniels Night Mode cross-site scripting vulnerability

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.The WordPress plugin Mark Daniels Night Mode 1.0.0 and previous versions have a cross-site scripting vulnerability, which originates from a...

3.5CVSS1.3AI score0.0054EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2022/04/25 5:15 p.m.•20 views

CVE-2022-29418

Authenticated admin user role Persistent Cross-Site Scripting XSS in Mark Daniels Night Mode plugin = 1.0.0 on WordPress via vulnerable parameters: &ntmodepagesettingenable-me, &ntmodepagesettingbg-color, &ntmodepagesettingtxt-color, &ntmodepagesettinganccolor...

4.8CVSS5.8AI score0.0054EPSS
SaveExploits0References2
NVD
NVD
•added 2022/04/25 5:15 p.m.•30 views

CVE-2022-29418

Authenticated admin user role Persistent Cross-Site Scripting XSS in Mark Daniels Night Mode plugin = 1.0.0 on WordPress via vulnerable parameters: &ntmodepagesettingenable-me, &ntmodepagesettingbg-color, &ntmodepagesettingtxt-color, &ntmodepagesettinganccolor...

4.8CVSS0.0054EPSS
SaveExploits0References2
Prion
Prion
•added 2022/04/25 5:15 p.m.•23 views

Cross site scripting

Authenticated admin user role Persistent Cross-Site Scripting XSS in Mark Daniels Night Mode plugin = 1.0.0 on WordPress via vulnerable parameters: &ntmodepagesettingenable-me, &ntmodepagesettingbg-color, &ntmodepagesettingtxt-color, &ntmodepagesettinganccolor...

3.5CVSS4.9AI score0.0054EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/04/25 4:53 p.m.•34 views

CVE-2022-29418 WordPress Night Mode plugin <= 1.0.0 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated admin user role Persistent Cross-Site Scripting XSS in Mark Daniels Night Mode plugin = 1.0.0 on WordPress via vulnerable parameters: &ntmodepagesettingenable-me, &ntmodepagesettingbg-color, &ntmodepagesettingtxt-color, &ntmodepagesettinganccolor...

4.8CVSS5.2AI score0.0054EPSS
SaveExploits0References2
CVE
CVE
•added 2022/04/25 4:53 p.m.•108 views

CVE-2022-29418

CVE-2022-29418 affects the WordPress plugin Night Mode (Mark Daniels Night Mode) at versions

4.8CVSS4.9AI score0.0054EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2022/04/25 4:53 p.m.•1 views

CVE-2022-29418

Authenticated admin user role Persistent Cross-Site Scripting XSS in Mark Daniels Night Mode plugin = 1.0.0 on WordPress via vulnerable parameters: &ntmodepagesettingenable-me, &ntmodepagesettingbg-color, &ntmodepagesettingtxt-color, &ntmodepagesettinganccolor...

4.8CVSS0.0054EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/04/25 9:42 a.m.•10 views

CVE-2022-29418

Authenticated admin user role Persistent Cross-Site Scripting XSS in Mark Daniels Night Mode plugin = 1.0.0 on WordPress via vulnerable parameters: pagesettingenable-me, pagesettingbg-color, pagesettingtxt-color, pagesettinganccolor...

4.8CVSS5AI score0.0054EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
•added 2022/04/25 12:00 a.m.•27 views

WordPress Night Mode plugin <= 1.0.0 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered by Ex.Mi Patchstack in WordPress Night Mode plugin versions = 1.0.0. Solution Update the WordPress Night Mode plugin to the latest available version at least 1.4.0...

4.8CVSS1.9AI score0.0054EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/04/25 12:00 a.m.•14 views

WordPress plugin Mark Daniels Night Mode 跨站脚本漏洞

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.The WordPress plugin Mark Daniels Night Mode 1.0.0 and previous versions have a cross-site scripting vulnerability, which originates from a...

4.8CVSS4.9AI score0.0054EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/04/25 12:00 a.m.•3 views

PT-2022-19591

Name of the Vulnerable Software and Affected Versions Mark Daniels Night Mode plugin version 1.0.0 and earlier Description The issue is related to an Authenticated Persistent Cross-Site Scripting XSS in the Mark Daniels Night Mode plugin on WordPress. This occurs via vulnerable parameters: ntmode...

4.8CVSS0.0054EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/25 12:00 a.m.•7 views

CVE-2022-29418: Improper Neutralization of Input During Web Page Generation

Authenticated admin user role Persistent Cross-Site Scripting XSS in Mark Daniels Night Mode plugin = 1.0.0 on WordPress via vulnerable parameters: &ntmodepagesettingenable-me, &ntmodepagesettingbg-color, &ntmodepagesettingtxt-color, &ntmodepagesettinganccolor...

4.8CVSS5.5AI score0.0054EPSS
SaveExploits0References2
OSV
OSV
•added 2021/03/10 5:15 p.m.•14 views

CVE-2021-0389

In setNightModeActivated of UiModeManagerService.java, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168039904...

7.8CVSS7.2AI score0.00127EPSS
SaveExploits0References1
Rows per page
Query Builder