Lucene search
+L

7143 matches found

Kitploit
Kitploit
added 2026/09/15 9:18 a.m.6 views

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test root@kitploit: python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory,...

7.8CVSS7.1AI score0.98022EPSS
SaveExploits49References1
Kitploit
Kitploit
added 2026/09/15 7:38 a.m.10 views

CVE-2023-49983

CVE-2023-49983 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" field/parameter on "/management/class" Description : A cross-site scripting XSS vulnerability in the component "/management/class" of School Fees Management System v1.0 allows attackers to execute...

6.8CVSS5.9AI score0.00574EPSS
SaveExploits1
CVE
CVE
added 2026/09/15 7:05 a.m.9 views

CVE-2026-91778

CVE-2026-91778 affects Octopus Server and stems from incorrect permission validation during script execution. Users holding certain scoped permission sets can execute arbitrary scripts on a worker—including the Octopus Server built-in worker—without possessing the required authorization. This is ...

7.2CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 6:15 a.m.9 views

CVE-2023-49985

CVE-2023-49985 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "cname" parameter on "newclass" Description : A cross-site scripting XSS vulnerability in the component "newclass" of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts ...

6.5CVSS5.9AI score0.00468EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 5:42 a.m.12 views

CVE-2023-49984

CVE-2023-49984 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" field/parameter on "/management/settings" Description : A cross-site scripting XSS vulnerability in the component "/management/settings" of School Fees Management System v1.0 allows attackers to...

6.1CVSS5.9AI score0.00483EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.33 views

Liferay Portal & DXP - Cross-Site Scripting

Liferay Portal 7.4.0 through 7.4.3.133 and Liferay DXP 2024.Q1.1 through 2025.Q1.4 contain a reflected XSS caused by improper sanitization in entrycoverimagecaption.jsp, letting remote non-authenticated attackers inject JavaScript. id: CVE-2025-4576 info: name: Liferay Portal & DXP - Cross-Site...

6.9CVSS5.8AI score0.00588EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.27 views

VDO.Ninja - DOM-Based Cross-Site Scripting

VDO.Ninja 28.0 to 28.3 contains a reflected XSS caused by improper sanitization of the room parameter in examples/control.html, letting remote attackers execute scripts, exploit requires crafted URL. id: CVE-2025-62613 info: name: VDO.Ninja - DOM-Based Cross-Site Scripting author: 0xAkoko severit...

6.9CVSS6AI score0.01083EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.18 views

Heimdall Application Dashboard < 2.7.3 - Reflected XSS

LinuxServer.io Heimdall 2.7.3 contains a stored XSS caused by improper sanitization of the "q" parameter, letting remote attackers execute scripts, exploit requires crafted input. id: CVE-2025-54597 info: name: Heimdall Application Dashboard 2.7.3 - Reflected XSS author: 0xAkoko severity: medium...

7.2CVSS6AI score0.0056EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.87 views

Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site Scripting

Mitel ShoreTel 19.46.1802.0 devices and their conference component are vulnerable to an unauthenticated attacker conducting reflected cross-site scripting attacks via the PATHINFO variable to index.php due to insufficient validation for the timezone object in the HOMEMEETING& page. id:...

6.1CVSS6.2AI score0.15987EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.42 views

Odoo <= 15.0 - Cross-Site Scripting

A cross-site scripting XSS vulnerability in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote attackers to inject arbitrary web scripts into the browser of a victim via a crafted link. This issue could lead to the execution of malicious scripts in the context of t...

6.5CVSS6.9AI score0.0141EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.23 views

WP DeskLite - Reflected XSS

WP DeskLite WordPress plugin through 1.0.0 contains a reflected XSS caused by unsanitized and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires crafted request. id: CVE-2024-12724 info: name: WP DeskLite - Reflected XSS...

6.1CVSS5.9AI score0.00573EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/15 3:36 a.m.10 views

shlol

SHLOL This is a menu you can trigger with a keybind to do basic stuff for you Really easy to use Create listeners on the fly No copy pasting needed Choose the type, IP and PORT and you are done! Run remote scripts easily Reverse Shell Generator...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 2:54 a.m.8 views

CVE-2002-0346

CVE-2002-0346 Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to 1 service.cgi or 2 alert.cgi. Packetstorm publication at https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html...

7.5CVSS6.7AI score0.06479EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 2:40 a.m.9 views

CVE-2023-43339-CMSmadesimple-Reflected-XSS---Installation

Cmsmadesimple CMS XSS Reflejado v2.2.18 Autor: Sergio Descripción: Múltiples vulnerabilidades de Cross-Site Scripting XSS en la instalación de cmsmadesimple v.2.2.18 permiten a un atacante local ejecutar scripts web arbitrarios mediante un payload manipulado inyectado en el Nombre de la Base de...

6.1CVSS6.9AI score0.00645EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 2:19 a.m.5 views

CVE-2021-36747

CVE-2021-36747 Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form. Discovered: May 11th, 2018 The Blackboard Security Team has been notified of this issue. They acknowledged the vulnerability on May 14, 2018. Description: The Blackboard tool commonly...

5.4CVSS6AI score0.0062EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 2:11 a.m.5 views

CVE-2025-41088

CVE-2025-41088: XSS Almacenado en Xibo CMS He descubierto una vulnerabilidad de Cross-Site Scripting XSS almacenado en Xibo CMS v4.1.2. Esta vulnerabilidad permite a un atacante autenticado inyectar scripts maliciosos en la aplicación debido a una validación incorrecta de la entrada proporcionada...

5.1CVSS6.2AI score0.00364EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 1:12 a.m.8 views

CVE-2023-49987

CVE-2023-49987 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "tname" parameter on "newterm" Description : A cross-site scripting XSS vulnerability in the component “newterm” of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or...

5.4CVSS5.9AI score0.00431EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 1:10 a.m.9 views

CVE-2023-49986

CVE-2023-49986 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" parameter on "addnewparent" Description : A cross-site scripting XSS vulnerability in the component “addnewparent” of School Fees Management System 1.0 allow attackers to execute arbitrary web...

4.7CVSS5.9AI score0.00471EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 12:43 a.m.7 views

CVE-2023-43876-October-CMS-Reflected-XSS---Installation

October CMS XSS Reflejado v3.4.16 Autor: Sergio Descripción: La vulnerabilidad de Cross-Site Scripting XSS en la instalación de October v.3.4.16 permite a un atacante local ejecutar scripts web arbitrarios mediante un payload manipulado inyectado en el campo dbhost. Vectores de ataque: Una...

5.4CVSS6.1AI score0.00403EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 12:34 a.m.7 views

CVE-2019-1218

CVE-2019-1218 Outlook iOS Spoofing Vulnerability I discovered XSS in IOS Outlook Mobile Application. A severe vulnerability in Microsoft Outlook for IOS that could allow an attacker to takeover a victim’s device. The security issue could enable a malicious actor to execute a cross-site scripting...

5.4CVSS6.5AI score0.03879EPSS
SaveExploits0
Rows per page
Query Builder