Lucene search
+L

12975 matches found

Kitploit
Kitploit
•added 2026/09/25 9:15 a.m.•21 views

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 nuclei template Joomla CVE-2023-23752 - a request parameter breaks through the Rest API Affected version ​ Joomla roughly has three routing entries, which are 1. index.php in the root directory users access articles 2. administrator/index.php in the root directory...

5.3CVSS7.1AI score0.99827EPSS
SaveExploits43
Kitploit
Kitploit
•added 2026/09/25 9:08 a.m.•9 views

joomla_CVE-2023-23752

joomlaCVE-2023-23752 Joomla - a request parameter breaks through the Rest API Affected version ​ Joomla roughly has three routing entries, which are index.php in the root directory users access articles administrator/index.php in the root directory administrator management api/index.php in the ro...

5.3CVSS7.1AI score0.99827EPSS
SaveExploits43
Kitploit
Kitploit
•added 2026/09/25 8:45 a.m.•12 views

CVE-2026-53625-GLPI-PoC

CVE-2026-53625 - GLPI Privilege Escalation via authtype Manipulation PoC 📌 Overview This repository provides an ethical Proof-of-Concept PoC for CVE-2026-53625 , a High severity privilege escalation vulnerability in GLPI affecting all versions from 0.70 through 11.0.7. A low-privilege user...

6.1AI score
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/25 8:35 a.m.•11 views

bmcweb

OpenBMC webserver This component attempts to be a "do everything" embedded webserver for OpenBMC. Features The webserver implements a few distinct interfaces: DBus event websocket. Allows registering for changes to specific dbus paths, properties, and will send an event from the websocket if thos...

6.2AI score
SaveExploits0References2
CVE
CVE
•added 2026/09/25 8:33 a.m.•6 views

CVE-2026-6088

A Stored Cross-Site Scripting (XSS) vulnerability exists in the StockAgile software by Novadigits technologies. The flaw is located in the REST endpoint /inventory/configuration/categories within the API and management panel. It allows an authenticated attacker to inject and persist malicious Jav...

5.1CVSS6.8AI score0.0023EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 8:33 a.m.•4 views

EUVD-2026-86625

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/categories' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

5.1CVSS6.8AI score0.0023EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/25 8:33 a.m.•7 views

CVE-2026-6088 Stored Cross-Site Scripting in StockAgile by Novadigits technologies

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/categories' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

5.1CVSS0.0023EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/25 8:32 a.m.•7 views

CVE-2026-6087 Stored Cross-Site Scripting in StockAgile by Novadigits technologies

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/categories' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

5.1CVSS0.0023EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 8:32 a.m.•5 views

CVE-2026-6087

The StockAgile platform by Novadigits technologies contains a Stored Cross-Site Scripting (XSS) vulnerability within its API and management panel . Specifically, the server-side REST endpoint /inventory/configuration/categories fails to properly filter or validate inputs in parameters such as 'co...

5.1CVSS6.8AI score0.0023EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 8:32 a.m.•5 views

EUVD-2026-86624

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/categories' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

5.1CVSS6.8AI score0.0023EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/25 8:31 a.m.•6 views

CVE-2026-6086 Stored Cross-Site Scripting in StockAgile by Novadigits technologies

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/serial-number-types' that allow the injection and persistence of malicious JavaScript code through parameters such as...

5.1CVSS0.0023EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 8:31 a.m.•4 views

EUVD-2026-86623

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/serial-number-types' that allow the injection and persistence of malicious JavaScript code through parameters such as...

5.1CVSS6.8AI score0.0023EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 8:31 a.m.•5 views

CVE-2026-6086

The StockAgile application by Novadigits technologies contains a Stored Cross-Site Scripting (XSS) vulnerability in its API and management panel. Specifically, the REST endpoint /inventory/configuration/serial-number-types fails to properly filter or validate inputs from parameters like code, nam...

5.1CVSS6.8AI score0.0023EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 8:31 a.m.•3 views

EUVD-2026-86622

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/serial-number-types' that allow the injection and persistence of malicious JavaScript code through parameters such as...

5.1CVSS6.8AI score0.0023EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 8:31 a.m.•5 views

CVE-2026-6085

A Stored Cross-Site Scripting (XSS) vulnerability exists in the StockAgile API and management panel developed by Novadigits technologies. The flaw is located on the server side within the REST endpoint /inventory/configuration/serial-number-types. It allows a remote, previously authenticated atta...

5.1CVSS6.8AI score0.0023EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 8:30 a.m.•4 views

EUVD-2026-86620

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/variants' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’, ‘name...

5.1CVSS6.8AI score0.0023EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/25 8:30 a.m.•6 views

CVE-2026-6084 Stored Cross-Site Scripting in StockAgile by Novadigits technologies

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/variants' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’, ‘name...

5.1CVSS0.0023EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 8:30 a.m.•5 views

CVE-2026-6084

A Stored Cross-Site Scripting (XSS) vulnerability exists in the StockAgile application by Novadigits technologies, specifically within the API and management panel . The flaw is located in the server-side REST endpoint /inventory/configuration/variants, where the system fails to properly filter o...

5.1CVSS6.8AI score0.0023EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 8:29 a.m.•5 views

CVE-2026-6083

The StockAgile application by Novadigits technologies contains a Stored Cross-Site Scripting (XSS) vulnerability within the API and management panel. The flaw exists in the REST endpoint /inventory/configuration/pricing-tiers, where the application fails to properly filter or validate input in pa...

5.1CVSS6.8AI score0.0023EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/25 8:29 a.m.•7 views

CVE-2026-6083 Stored Cross-Site Scripting in StockAgile by Novadigits technologies

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint ' /inventory/configuration/pricing-tiers' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

5.1CVSS0.0023EPSS
SaveExploits0References1
Rows per page
Query Builder