CVE-2020-35545

CVE-2020-35545 Spotweb 1.4.9 - 'search' SQL Injection...

cve-2022-42889-text4shell-docker

Instalar Maven - maven-linux 1. Instalación de Maven para crear el fat jar root@kitploit: mvn clean install 2. Construcción de Docker root@kitploit: docker build --tag=text4shell . 3. Ejecución de Docker root@kitploit: docker run -p 80:8080 text4shell 4. Probar la aplicación root@kitploit:...

text4shell-cve-2022-42889

Text4Shell CVE-2022-42889 Docker Lab for CVE-2022-42889 You can either build the Docker image locally or pull the image from Docker Hub and run the container. Clone the repo root@kitploit: git clone https://github.com/devenes/text4shell-cve-2022-42889.git Build the Docker image locally...

WordPress-XStore-theme-SQL-Injection

WordPress-XStore-theme-SQL-Injection CVE-2024-33559 XStore theme-SQL Injection CVE-2024-33551 is a SQL injection vulnerability found in 8theme XStore, an ecommerce platform built on WordPress. This vulnerability allows attackers to execute malicious SQL commands on the database, which can lead to...

Lyrion Music Server <= 9.2.0 - Cross-Site Scripting

Lyrion Music Server 9.2.0 contains a reflected XSS caused by improper sanitization of the search parameter in the server.log endpoint, letting unauthenticated attackers execute arbitrary script in users' browsers. id: CVE-2026-50230 info: name: Lyrion Music Server = 9.2.0 - Cross-Site Scripting...

CVE-2024-50969

CVE-2024-50969 Descripción Una vulnerabilidad de Cross-Site Scripting XSS reflejado en browse.php de Code-projects Jonnys Liquor 1.0 permite a atacantes remotos inyectar scripts web o HTML arbitrarios a través del parámetro search. Tipo de Vulnerabilidad Cross Site Scripting XSS Proveedor del...

CVE-2022-38553

CVE-2022-38553 CROSS SITE SCRIPTING XSS EN "ACADEMY LEARNING MANAGEMENT SYSTEM" VIDEO POC:...

CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overvi...

CVE-2023-34632

CVE-2023-34632 Reflected XSS in 1000projects Book Management System 1.0 CVE-2023-34632 Reflected Cross-Site Scripting XSS in 1000projects Book Management System 1.0 Description A Reflected Cross-Site Scripting XSS vulnerability was discovered in 1000projects Book Management System version 1.0. Th...

THM-Steel_Mountain-CVE-2014-6287

THM-SteelMountain-CVE-2014-6287 Un análisis de la máquina Steel Mountain de TryHackMe.com y el exploit para CVE-2014-6287 Créditos No me atribuyo el mérito del descubrimiento y la explotación originales de esta vulnerabilidad. ¡Gracias a las siguientes personas! Descubrimiento: Daniele Linguaglos...

CVE-2025-61454

🛡️ CVE Disclosure: CVE-2025-61454 — Reflected XSS in E-commerce Project Disclosure Date: 14 October 2025 CVE ID: CVE-2025-61454 Severity: MEDIUM CVSS 6.1 🧩 Summary A reflected Cross-Site Scripting XSS vulnerability exists in the E-commerce Project v1.0, specifically within the search.php endpoint...

CVE-2023-51810

CVE-2023-51810 Description Blind SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 allows a remote attacker to obtain sensitive information via search parameter in the Users module. Product StackIdeas EasyDiscuss v5.0.5 - EasyDiscuss - Joomla Forum Discussion Tool - StackIdeas...

CVE-2026-9848

CVE-2026-9848 CVE-2026-9848 is an Unauthenticated SQL Injection SQLi vulnerability affecting the WP Ticket Customer Support Ticket System & Helpdesk plugin for WordPress up to and including version 6.0.4.The flaw occurs because the plugin takes the WordPress search parameter s and concatenates it...

CVE-2026-86667 aircheng-org iWebShop-5 member.php member_list sql injection

A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function memberlist of the file controllers/member.php. This manipulation of the argument Search causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2026-86667

A SQL injection vulnerability exists in aircheng-org iWebShop-5 (up to version 5.15), specifically in the member_list function within controllers/member.php. The flaw is triggered by manipulation of the Search argument , allowing a remote, authenticated attacker to execute arbitrary SQL queries. ...

CVE-2026-76569

Reflected XSS via search GET Parameter in Phoca Download Phoca Download ≤ 6.1.4 — Authenticated Attacker Executes Arbitrary JavaScript via Crafted Search URL in User Control Panel SUMMARY Phoca Download comphocadownload for Joomla contains a reflected Cross-Site Scripting XSS vulnerability in the...

CVE-2016-10993

CVE-2016-10993 Vulnerabilidad de WordPress - XSS Cross-Site Scripting Ubicación de la Vulnerabilidad https://themesinfo.com/scoreme-wordpress-theme-design-496 Prueba de Concepto PoC https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E Referencias...

CVE-2026-85397

A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.php. This manipulation of the argument Search causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

CVE-2026-85397

A SQL injection vulnerability exists in code-projects Hospital Information System 1.0 , specifically in the findBySearch function within addReq.php . An unauthenticated remote attacker can manipulate the Search argument to inject arbitrary SQL, leading to low-impact compromise of confidentiality,...

EUVD-2026-70859

A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.php. This manipulation of the argument Search causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...