Lucene search
+L

111763 matches found

NVD
NVD
added 2026/08/25 9:17 a.m.8 views

CVE-2026-77137

The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parameter within the "Forms Export" backend module. Exploitation requires a low-privileged backend user and read access to the...

7.7CVSS0.00234EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/25 9:00 a.m.37 views

CVE-2026-77137 SQL Injection in extension "Forms Export" (frp_form_answers)

The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parameter within the "Forms Export" backend module. Exploitation requires a low-privileged backend user and read access to the...

7.7CVSS0.00234EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/25 9:00 a.m.6 views

EUVD-2026-65339

The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parameter within the "Forms Export" backend module. Exploitation requires a low-privileged backend user and read access to the...

7.7CVSS6AI score0.00234EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/25 9:00 a.m.18 views

CVE-2026-77137

CVE-2026-77137 is a SQL injection vulnerability in the TYPO3 extension "Forms Export" (extension key: frp_form_answers ). The extension fails to properly sanitize user input before using it in a database query, allowing a low-privileged backend user to inject arbitrary SQL through a URL parameter...

7.7CVSS6AI score0.00234EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/25 8:48 a.m.7 views

CVE-2026-10582

A flaw was found in Hugo. The security.http.urls allowlist, which controls outbound fetches, does not adequately validate the destination address of URLs. This vulnerability allows a remote attacker to supply a specially crafted URL that resolves to internal network resources. As a result, the Hu...

8.3CVSS5.3AI score0.00315EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/25 7:47 a.m.3 views

CVE-2026-20841

🛡️ CVE-2026-20841 - Strumento di Test di Sicurezza per Windows Notepad ⚠️ Cos'è CVE-2026-20841? CVE-2026-20841 è una debolezza di sicurezza nota nell'applicazione Windows Notepad. Riguarda la funzionalità markdown, che permette a Notepad di visualizzare testo formattato con link cliccabili. Questa...

7.8CVSS8.3AI score0.1165EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/08/25 7:38 a.m.2 views

CVE-2023-41425

CVE-2023-41425 Ne scrivo uno perché quello che ho trovato non funziona Utilizzo root@kitploit: python3 exploit.py http://example.com/loginURL 10.10.xx.xx 9001...

6.1CVSS6.7AI score0.54026EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/08/25 7:37 a.m.38 views

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 7:27 a.m.3 views

CVE-2024-4956

CVE-2024-4956 - Path Traversal non autenticato in Nexus Repository Manager 3 Nexus Repository Manager è un gestore di repository che organizza, memorizza e distribuisce gli artefatti necessari per lo sviluppo. È stata scoperta una vulnerabilità di path traversal in Nexus Repository 3, nelle...

7.5CVSS7.8AI score0.18245EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/08/25 7:07 a.m.3 views

CVE-2020-12696

CVE-2020-12696 root@kitploit: ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ Iframe iframe src="javascript:confirmdocument.cookie" width="100%" height="500" Version plugin: 4.4 Tested on: WordPress...

6.1CVSS5.9AI score0.02006EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 6:47 a.m.4 views

CVE-2024-50961

Esposizione di Dati Sensibili CVE-2024-50961 Descrizione In DonWeb Ferozo Hosting v1.1, un attaccante remoto può sfruttare i parametri URL per accedere a dati sensibili, incluse le credenziali del database. I vettori d'attacco includono l'intercettazione di rete, i log del server e la cronologia...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 6:30 a.m.3 views

CVE-2024-4956

CVE-2024-4956 - Path Traversal non autenticato in Nexus Repository Manager 3 Nexus Repository Manager è un repository manager che organizza, archivia e distribuisce gli artefatti necessari allo sviluppo. È stata scoperta una vulnerabilità di path traversal in Nexus Repository 3, nelle versioni...

7.5CVSS7.8AI score0.18245EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/08/25 6:13 a.m.2 views

CVE-2024-0235

Badge Licenza MIT Installazione 1. Installa Python3 e pip Istruzioni qui Se non riesci a capirlo, non dovresti usare questo strumento Installa tramite pip root@kitploit: pip install CVE-2024-0235 Esegui il comando seguente per verificare CVE-2024-0235 -h Configurazioni 2. Abbiamo integrato l'API ...

9.8CVSS7.6AI score0.97405EPSS
SaveExploits21References2
Kitploit
Kitploit
added 2026/08/25 6:13 a.m.2 views

CVE-2019-9670

Badge Licenza MIT Installazione 1. Installa Python3 e pip Istruzioni Qui Se non riesci a capirlo, non dovresti davvero usare questo strumento Installa tramite pip root@kitploit: pip install CVE-2019-9670 Esegui il comando qui sotto per verificare CVE-2019-9670 -h Configurazioni 2. Abbiamo integra...

9.8CVSS7.9AI score0.99986EPSS
SaveExploits11References2
Kitploit
Kitploit
added 2026/08/25 6:12 a.m.2 views

CVE-2024-31819

Instalação e Execução do script 💻 Pré-requisitos Antes de começar, certifique-se de que você tem as seguintes ferramentas instaladas na sua máquina: Python 3.x Git pip para gerenciar as dependências Python Etapas de Instalação 1. Clonar o repositório Use git para clonar o repositório:...

9.8CVSS6.3AI score0.15635EPSS
SaveExploits6
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.122 views

Versa Concerto API Path Based - Authentication Bypass

Authentication bypass in the Versa Concerto API, caused by URL decoding inconsistencies. It allowed unauthorized access to certain API endpoints by manipulating the URL path.This issue enabled attackers to bypass authentication controls and access restricted resources. id: CVE-2025-34027 info:...

10CVSS9.1AI score0.4522EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.220 views

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

9.8CVSS9.3AI score0.99471EPSS
SaveExploits21References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.14 views

React Native Community CLI - Unauthenticated OS Command Injection

The Metro development server started by the React Native Community CLI binds to external network interfaces by default and exposes an unauthenticated /open-url endpoint. Affected versions pass the attacker supplied url value straight to the open helper without validating the scheme, allowing an...

9.8CVSS8.5AI score0.9398EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.363 views

Ivanti Connect Secure - XXE

Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. id: CVE-2024-22024 info: name: Ivanti Connect Secure - XXE author: watchTowr severity: high description: | Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. impact: | Successful exploitation of this...

8.3CVSS8.2AI score0.94721EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.194 views

Docassemble - Local File Inclusion

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the mast...

7.5CVSS7.7AI score0.69486EPSS
SaveExploits2References3
Rows per page
Query Builder