Lucene search
+L

161118 matches found

Kitploit
Kitploit
•added 2026/10/22 4:15 p.m.•12 views

CVE-2014-0224

This repository does not have a README...

7.4CVSS7AI score0.95326EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/10/22 3:28 p.m.•24 views

CVE-2025-65354

CVE-2025-65354 — SQL Injection Vulnerability Summary An SQL Injection vulnerability exists in the PuneethReddyHC event-management application version 1.0 due to improper input handling. Vulnerability Type SQL Injection Affected Component Endpoint: /Grocery/searchproductsitname.php Parameter:...

9.8CVSS5.9AI score0.00518EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/10/22 3:17 p.m.•16 views

OpenSSH-CVE-2024-6387-Fix

CVE-2024-6387 OpenSSH Vulnerability Mitigation Script Overview This Bash script is designed to help mitigate the CVE-2024-6387 vulnerability in OpenSSH. The vulnerability affects certain versions of OpenSSH and can potentially allow remote unauthenticated attackers to execute arbitrary code on yo...

8.1CVSS8AI score0.99506EPSS
SaveExploits72References1
Kitploit
Kitploit
•added 2026/10/22 3:02 p.m.•17 views

CVE-2020-23586

CVE-2020-23586 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" vulnerability found in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028"which allows an unauthenticated, remote attacker to conduct a...

4.3CVSS5.5AI score0.00368EPSS
SaveExploits0
NVD
NVD
•added 2026/10/22 2:17 p.m.•1 views

CVE-2026-115247

A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This vulnerability affects unknown code of the file patientregistration.php. The manipulation of the argument patpswd/docpswd leads to missing encryption of...

5.3CVSS
SaveExploits0References6
NVD
NVD
•added 2026/10/22 2:17 p.m.•2 views

CVE-2026-115249

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Impacted is an unknown function of the file patappointtime.php of the component Appointment Booking. This manipulation of the argument day/time/appdate causes improper input...

5.5CVSS
SaveExploits0References6
NVD
NVD
•added 2026/10/22 2:17 p.m.•0 views

CVE-2026-115248

A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This issue affects some unknown processing of the file patappointtime.php of the component Booking Handler. The manipulation results in enforcement of behavioral workflow. ...

5.5CVSS
SaveExploits0References6
Kitploit
Kitploit
•added 2026/10/22 2:03 p.m.•19 views

cve-2024-10914

POC - CVE-2024–10914- Command Injection Vulnerability in name parameter for D-Link NAS Overview A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file...

9.8CVSS7.7AI score0.96284EPSS
SaveExploits15References1
CVE
CVE
•added 2026/10/22 1:45 p.m.•2 views

CVE-2026-115249

The subhajitkhan online-clinic-management-system (up to commit e9ee77a8827a1446220fa07ee693dc4d9a29a578) is vulnerable to improper input validation within the Appointment Booking component. The flaw exists in an unknown function of the patappointtime.php file, where manipulation of the day/time/a...

5.5CVSS4.8AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/10/22 1:45 p.m.•3 views

EUVD-2026-108183

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Impacted is an unknown function of the file patappointtime.php of the component Appointment Booking. This manipulation of the argument day/time/appdate causes improper input...

5.5CVSS4.8AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/10/22 1:30 p.m.•2 views

EUVD-2026-108167

A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This issue affects some unknown processing of the file patappointtime.php of the component Booking Handler. The manipulation results in enforcement of behavioral workflow. ...

5.5CVSS5.1AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/10/22 1:00 p.m.•33 views

2023-2245

A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code of the file /ueditor/net/controller.ashx?action=catchimage. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed t...

5.4AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/22 12:58 p.m.•21 views

CVE-2022-3546

CVE-2022-3546 https://vulners.com/cve/CVE-2022-3546 A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /csms/admin/?page=user/list of the component Create User Handle...

4.8CVSS3.8AI score0.00736EPSS
SaveExploits0
osv_debian
osv_debian
•added 2026/10/22 12:47 p.m.•2 views

DEBIAN-CVE-2026-92205

BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

6.1CVSS6.4AI score0.00314EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/22 10:57 a.m.•2 views

CVE-2019-25778

SeaCMS versions up to and including 8.7 are vulnerable to an unauthenticated SQL injection vulnerability. The flaw exists in the rlist[] array parameter, where remote attackers can manipulate database queries by sending crafted GET requests to /comment/api/index.php. By using backtick-quoted vari...

8.8CVSS6AI score
SaveIn wildExploits0References4
Kitploit
Kitploit
•added 2026/10/22 10:39 a.m.•14 views

CVE-2025-50565

CVE-2025-50565 Description Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, which can be remotely initiated by an attacker. Vulnerability Type SQL Injection Attack Type Remote Impact Information Disclosure true Has vendor confirmed true Discoverer...

6.5CVSS5.8AI score0.00249EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/10/22 10:20 a.m.•1 views

CVE-2026-101774

A flaw was found in the Pluggable Authentication component of MySQL. An unauthenticated remote attacker could exploit this vulnerability across multiple network protocols to cause the server to hang or crash repeatedly, resulting in a Denial of Service DoS. In addition, successful exploitation ma...

6.5CVSS7.2AI score0.00306EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/22 9:55 a.m.•19 views

CVE-2026-37149

CVE-2026-37149 SQL Injection in GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 Overview CVE ID: CVE-2026-37149 Vulnerability Type: SQL Injection CWE-89 Severity: High Discoverer: Dhyey Patel Description GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0...

7.7CVSS6.1AI score0.00217EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/22 7:22 a.m.•21 views

CVE-2019-11510-PulseVPN

CVE-2019-11510-PulseVPN In Pulse Secure Pulse Connect Secure PCS 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability. exploit.sh = Exploring Vulnerability...

10CVSS9AI score0.99999EPSS
SaveExploits24
Cvelist
Cvelist
•added 2026/10/22 6:37 a.m.•5 views

CVE-2026-114458 Mod_qos: undersized connection-monitor scratch array permits heap buffer overflow

A flaw was found in modqos. An unauthenticated remote attacker can cause a Denial of Service DoS by maintaining numerous concurrent low-rate connections to a target server. When connection rate monitoring is active, the module fails to verify array boundaries when recording client IP addresses,...

5.9CVSS0.0031EPSS
SaveExploits0References2
Rows per page
Query Builder