Lucene search
+L

13732 matches found

Kitploit
Kitploit
•added 2026/09/25 2:18 p.m.•15 views

CVE-2026-80099

CVE-2026-80099 PoC Unauthenticated authentication bypass and RCE exploit targeting Newfold WordPress plugins that bundle wp-module-data. Overview This tool exploits a Bearer token validation flaw in the Newfold wp-module-data module. When a WordPress site using an affected Newfold plugin is not...

8.8CVSS6.1AI score0.0291EPSS
SaveExploits1
NVD
NVD
•added 2026/09/25 2:17 p.m.•10 views

CVE-2026-84884

IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token...

7.5CVSS0.00235EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 2:15 p.m.•5 views

reburp

reburp Burp's API/MCP is LIMITED - reburp is a Burp Suite extension that exposes the full Montoya API as a locally served openapi REST API, optimized for your AI agents. |...

6AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/25 2:00 p.m.•39 views

CVE-2026-84884 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token...

7.5CVSS0.00235EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 2:00 p.m.•7 views

EUVD-2026-87104

IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token...

7.5CVSS5.8AI score0.00235EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 2:00 p.m.•18 views

CVE-2026-84884

IBM Guardium Data Protection 12.2 is affected by a vulnerability where internal REST service-account passwords are stored in a reversible plaintext-equivalent format . An authenticated attacker who successfully gains access to these stored credentials can recover the original password to obtain a...

7.5CVSS5.8AI score0.00235EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 1:25 p.m.•6 views

wp2shell-PoC

wp2shell-PoC ⚠ This tool is created solely for educational or bug bounty purpose only. Unauthorized use outside of controlled environments is strictly prohibited. Overview Proof-of-concept for the wp2shell vulnerability chain affecting WordPress Core, combining CVE-2026-63030 and CVE-2026-60137...

9.8CVSS9AI score0.10119EPSS
SaveExploits81
Kitploit
Kitploit
•added 2026/09/25 1:23 p.m.•7 views

CVE-2026-14281

CVE-2026-14281 — WAWP Automation Web Platform Unauthenticated Privilege Escalation Python 3 PoC for CVE-2026-14281 in the WordPress plugin Automation Web Platform automation-web-platform — WAWP / Notifications & OTP for WooCommerce. PoCbit Listed on PoCbit — community catalog:...

9.8CVSS6.1AI score0.00531EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/25 12:14 p.m.•16 views

the-token-was-a-row-number-cve-2026-67602-phpipam-rest-api-authentication-bypass

CVE-2026-67602 — phpIPAM 1.8.2 REST API Authentication Bypass Unauthenticated authentication bypass in the phpIPAM REST API, caused by an object-cache key collision: the database row cached while resolving an API app's appid satisfies the subsequent appcode token check whenever the supplied token...

9.3CVSS6AI score0.0064EPSS
SaveExploits1
NVD
NVD
•added 2026/09/25 9:17 a.m.•7 views

CVE-2026-6085

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/serial-number-types' that allow the injection and persistence of malicious JavaScript code through parameters such as...

5.1CVSS0.0023EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 9:17 a.m.•8 views

CVE-2026-6088

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/categories' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

5.1CVSS0.0023EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 9:17 a.m.•10 views

CVE-2026-6083

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint ' /inventory/configuration/pricing-tiers' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

5.1CVSS0.0023EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 9:17 a.m.•8 views

CVE-2026-6082

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/payment-methods' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’...

5.1CVSS0.0023EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 9:17 a.m.•10 views

CVE-2026-6084

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/variants' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’, ‘name...

5.1CVSS0.0023EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 9:17 a.m.•7 views

CVE-2026-6086

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/serial-number-types' that allow the injection and persistence of malicious JavaScript code through parameters such as...

5.1CVSS0.0023EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 9:17 a.m.•7 views

CVE-2026-6087

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/categories' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

5.1CVSS0.0023EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 8:45 a.m.•13 views

CVE-2026-53625-GLPI-PoC

CVE-2026-53625 - GLPI Privilege Escalation via authtype Manipulation PoC 📌 Overview This repository provides an ethical Proof-of-Concept PoC for CVE-2026-53625 , a High severity privilege escalation vulnerability in GLPI affecting all versions from 0.70 through 11.0.7. A low-privilege user...

7.5CVSS6.1AI score0.00571EPSS
SaveExploits1References1
CVE
CVE
•added 2026/09/25 8:33 a.m.•13 views

CVE-2026-6088

A Stored Cross-Site Scripting (XSS) vulnerability exists in the StockAgile software by Novadigits technologies. The flaw is located in the REST endpoint /inventory/configuration/categories within the API and management panel. It allows an authenticated attacker to inject and persist malicious Jav...

5.1CVSS6.8AI score0.0023EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 8:33 a.m.•10 views

EUVD-2026-86625

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/categories' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

5.1CVSS6.8AI score0.0023EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/25 8:33 a.m.•27 views

CVE-2026-6088 Stored Cross-Site Scripting in StockAgile by Novadigits technologies

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/categories' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

5.1CVSS0.0023EPSS
SaveExploits0References1
Rows per page
Query Builder