Lucene search
+L

111745 matches found

Nuclei
Nuclei
added 2026/08/26 2:49 a.m.66 views

Navidrome < 0.53.0 - Authenticated SQL Injection

Navidrome is an open source web-based music collection server and streamer. Navidrome automatically adds parameters in the URL to SQL queries. This can be exploited to access information by adding parameters like password=... in the URL ORM Leak. Furthermore, the names of the parameters are not...

9.4CVSS9.1AI score0.04457EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.22 views

Ozette Plugins - Cross-Site Request Forgery

An attacker can update, create, and remove the site's mobile redirects via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. id: CVE-2023-23897 info: name: Ozette Plugins - Cross-Site Request Forgery author: popcorn94 severity: medi...

8.8CVSS8.1AI score0.0161EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.197 views

XWiki >= 6.2-milestone-1 - Cross-Site Scripting

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the DeleteApplication page to perform a XSS, e.g. by using URL such as:...

9.6CVSS6AI score0.02377EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.115 views

MooSocial 3.1.8 - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability exisits in the dataredirecturl parameter on user login function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. id: CVE-2023-43325 info: name: MooSocial 3.1.8 - Cross-Sit...

6.1CVSS5.7AI score0.01857EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.44 views

UC Gateway Investment SiteEngine v5.0 - Open Redirect

Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter in a logout action. id: CVE-2008-7269 info: name: UC Gateway Investment SiteEngine v5.0 - Open...

5.8CVSS5.6AI score0.08391EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.19 views

MajorDoMo - Cross-Site Scripting

MajorDoMo contains a reflected XSS caused by unsanitized $qry parameter in command.php, letting attackers inject arbitrary JavaScript via crafted URLs, exploit requires victim to visit malicious URL. id: CVE-2026-27176 info: name: MajorDoMo - Cross-Site Scripting author: DhiyaneshDk severity:...

6.1CVSS5.4AI score0.00449EPSS
SaveExploits1References1
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.58 views

SlideDeck 1 Lite Content Slider - Cross-Site Scripting

SlideDeck 1 Lite Content Slider WordPress plugin = 1.4.8 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13224 inf...

6.1CVSS8.4AI score0.00594EPSS
SaveExploits1References1
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.78 views

Gradio - Open Redirect

Gradio allows an open redirect bypass via URL encoding, enabling attackers to redirect users to malicious sites. This can lead to phishing attacks and loss of trust in the application. id: CVE-2024-8021 info: name: Gradio - Open Redirect author: DhiyaneshDK severity: medium description: | Gradio...

6.1CVSS5.3AI score0.00731EPSS
SaveExploits1References1
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.113 views

Calibre <= 7.15.0 - Reflected Cross-Site Scripting (XSS)

It is possible to inject arbitrary JavaScript code into the /browse endpoint of the Calibre content server, allowing an attacker to craft a URL that when clicked by a victim, will execute the attacker’s JavaScript code in the context of the victim’s browser. If the Calibre server is running with...

6.1CVSS5.9AI score0.25607EPSS
SaveExploits1References1
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.24 views

iBuildApp <= 0.2.0 - Reflected Cross-Site Scripting

iBuildApp WordPress plugin through 0.2.0 contains a reflected cross-site scripting caused by unsanitized parameter output in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13326 info:...

6.1CVSS8.4AI score0.00572EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/08/26 2:03 a.m.2 views

HeartBleed-Vulnerability-Checker

HeartBleed-Vulnerability-Checker author = 'WaQas-JaMal' Dimostrazione rapida e approssimativa di CVE-2014-0160 di Jared Stafford [email protected] e l'autore rinuncia al copyright su questo codice sorgente. ''' Ho modificato questo script per accettare qualsiasi file di URL come input...

7.5CVSS7.2AI score0.99999EPSS
SaveExploits93
Kitploit
Kitploit
added 2026/08/26 1:26 a.m.2 views

exploit-CVE-2016-8016-25

McAfee Virus Scan per Linux: molteplici vulnerabilità remote QUESTO EXPLOIT E TUTTO IL CODICE IN QUESTO REPO SONO STATI RIMOSSI PER EVITARE QUALSIASI PROBLEMA RELATIVO ALLA VIOLAZIONE DI QUALSIASI LICENZA MCAFEE McAfee VirusScan Enterprise for Linux è una soluzione antivirus aziendale di McAfee. ...

8.1CVSS6.4AI score0.13293EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/26 1:18 a.m.1 views

CVE-2021-42013-EXPLOIT

🚨 CVE-2021-42013 - Apache 2.4.49 e 2.4.50 Esecuzione Remota di Codice 🚨 CVE-2021-42013 si basa sulla vulnerabilità precedentemente identificata, CVE-2021-41773. Nonostante gli sforzi del team di Apache per affrontare CVE-2021-41773 nella versione 2.4.50, indagini successive hanno rivelato che la...

9.8CVSS8.4AI score0.99992EPSS
SaveExploits189
Kitploit
Kitploit
added 2026/08/26 1:10 a.m.2 views

Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed

🎙️ Instagram नोट्स ऑडियो लीकेज URL निष्कर्षण के माध्यम से ठीक किया गया और पुरस्कृत 🛡️ भेद्यता सारांश 05/2025 में, मैंने इंस्टाग्राम वेब में एक भेद्यता खोजी जो किसी भी उपयोगकर्ता को एक नोट से मूल वीडियो फ़ाइल निकालने और पृष्ठभूमि ऑडियो तक पहुँचने की अनुमति देती थी, जो सार्वजनिक रूप से उपलब्ध नहीं...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 12:35 a.m.2 views

CVE-2020-35262

CVE-2020-35262: XSS persistente nel router Digisol DG-HR3400 Descrizione della vulnerabilità È stato identificato che l'endpoint vulnerabile non dispone di validazione degli input lato server né di filtraggio lato client per l'iniezione di script dannosi. Un aggressore può utilizzare questa...

6.1CVSS6AI score0.00856EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/26 12:06 a.m.2 views

CVE-2026-64849

CVE-2026-64849 Altro root@kitploit: POST /api/2.0/mlflow/webhooks HTTP/1.1 Host: Content-Type: application/json "url": "https://httpbin.org/redirect-to?url=http://169.254.169.254/latest/meta-data/", "name": "poc", "events": "action": "CREATED", "entity": "REGISTEREDMODEL" root@kitploit: POST...

9.3CVSS8.4AI score0.1641EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 11:59 p.m.2 views

zenbuster

Informazioni ZenBuster è uno strumento di enumerazione URL multi-thread e multi-piattaforma scritto in Python da Zach Griffin @0xTas. Ho scritto questo strumento per approfondire la mia familiarità con Python e per aumentare la mia comprensione degli strumenti di cybersecurity in generale...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/25 11:53 p.m.1 views

CVE-2020-17453

Badges Licença MIT Instalação Instale o CVE-2020-17453 com npm root@kitploit: npm install cve-2020-17453 -g Uso Exemplo para URL única root@kitploit: CVE-2020-17453 -u http://example.com Uso Exemplo para lista de URLs...

6.1CVSS6AI score0.26225EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 11:24 p.m.1 views

CVE-2024-30043-XXE

CVE-2024-30043-XXE Crediti L'impatto della vulnerabilità è al momento limitato, ma grazie a https://x.com/chudyPB per aver fornito un'idea intelligente di bypass. https://x.com/chudyPB...

7.5CVSS6.6AI score0.54659EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 11:19 p.m.3 views

url-status-checker

Status Checker URL Status Checker v2.1 Status Checker è uno script Python che controlla lo stato di uno o più URL/domini e li categorizza in base ai loro codici di stato HTTP. Versione 2.1.0 Funzionalità Controlla lo stato di uno o più URL/domini. Richieste HTTP asincrone per prestazioni...

5.4AI score
SaveExploits0
Rows per page
Query Builder