Lucene search
+L

44703 matches found

Packet Storm News
Packet Storm News
added 2026/09/10 12:00 a.m.258 views

IServ Schoolserver User Enumeration

IServ Schoolserver suffers from a user enumeration vulnerability. The vendor does not feel this is an issue...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 12:01 a.m.3 views

CVE-2018-12598

CVE-2018-12598 CVE-2018-12598 タイムライン ================ 2018-06-08: 発見 2018-06-11: ステージング環境を再テスト 2018-06-12: 本番環境を再テスト 2018-06-19: 社内連絡 2018-06-21: ベンダーへの通知 2018-06-XX: ベンダーからのフィードバック 2018-06-XX: ベンダーからのフィードバック:製品にパッチが適用される予定 2018-06-XX: パッチ公開 2018-06-XX: CVE/アドバイザリ公開に関するベンダーとの合意。 2018-06-XX: 公開レポー...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 7:57 p.m.24 views

umap

umap - the USB host security assessment tool Based on Facedancer by Travis Goodspeed: http://goodfet.sourceforge.net/hardware/facedancer21/ Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com...

5.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 3:47 p.m.2 views

cisco-security-research

Cisco Security Research Researcher: 0xReadingSteiner Contact: [email protected] Vendor: Cisco Systems, Inc. Vendor Notified: 2026-08-04 Cisco PSIRT, ZDI, SSD Vendor Response: None Why This Exists Independent security research on commercially available Cisco products has identified critical...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 1:13 p.m.5 views

CVE-2018-12597

CVE-2018-12597 CVE-2018-12597 タイムライン ================ 2018-06-08: 発見 2018-06-11: ステージング環境で再テスト 2018-06-12: 本番環境で再テスト 2018-06-19: 社内連絡 2018-06-21: ベンダーへ通知 2018-06-XX: ベンダーからのフィードバック 2018-06-XX: ベンダーからのフィードバック(製品はパッチ適用予定) 2018-06-XX: パッチ公開 2018-06-XX: CVE/アドバイザリ公開についてベンダーと合意。 2018-06-XX: 公開レポート 著者...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 12:52 p.m.47 views

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 10:06 a.m.4 views

vamp-forticheck

vamp-forticheck 多厂商边缘设备 CVE 扫描器 — VampSecure Labs 概述 vamp-forticheck 是一个异步、非破坏性安全扫描器,可检测七大主流网络安全厂商的 CVE 漏洞。它执行结构化的三阶段分析: 1. 被动检测 — 从 HTTP 响应头、横幅和登录页工件中识别厂商和固件版本指纹,而无需触发认证。 2. 半主动 CVE 探测 — 通过目标性 HTTP 请求确认特定漏洞条件,包括版本披露、路径遍历和预认证 RCE 指标。 3. 次级暴露分析 — 检查同一主机上暴露的管理界面、管理 API 和凭据泄露端点。 覆盖范围涵盖 7 家厂商的 16 个 C...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 5:42 a.m.4 views

Php-unit-CVE-2017-9841

phpunit リモートコード実行脆弱性(CVE-2017-9841) composerはPHPのパッケージ管理ツールであり、composerを使って拡張パッケージをインストールすると、カレントディレクトリにvendorフォルダが作成され、すべてのファイルがその中に配置されます。通常、このディレクトリはWebディレクトリの外に配置し、ユーザーが直接アクセスできないようにする必要があります。...

9.8CVSS7.4AI score0.99999EPSS
SaveExploits20
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.67 views

Emlog Pro v2.1.14 - Cross-Site Scripting

Cross Site Scripting XSS vulnerability in Emlog Pro v2.1.14 via /admin/store.php. id: CVE-2023-41621 info: name: Emlog Pro v2.1.14 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross Site Scripting XSS vulnerability in Emlog Pro v2.1.14 via /admin/store.php. impact: ...

6.1CVSS6.4AI score0.01146EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.39 views

WordPress Integrator 1.32 - Cross-Site Scripting

A cross-site scripting vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php. id: CVE-2012-5913 info: name: WordPress Integrator 1.32 - Cross-Site Scripti...

4.3CVSS5.9AI score0.08693EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.79 views

Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection

SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request. id: CVE-2018-6605 info: name: Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection author: DhiyaneshDk severity...

9.8CVSS7.3AI score0.57702EPSS
SaveExploits5References3
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.47 views

74cms - ajax_officebuilding.php SQL Injection

A SQL injection vulnerability exists in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php. id: CVE-2020-22210 info: name: 74cms - ajaxofficebuilding.php SQL Injection author: ritikchaddha severity: critical description: | A SQL injection vulnerability exists in 74cms 3.2.0 via the x...

9.8CVSS6.8AI score0.08579EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.77 views

74cms - ajax_street.php 'x' SQL Injection

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php. id: CVE-2020-22208 info: name: 74cms - ajaxstreet.php 'x' SQL Injection author: ritikchaddha severity: critical description: | SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php. impact: | Successful...

9.8CVSS6.9AI score0.10017EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.93 views

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

5.4CVSS6AI score0.01331EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.72 views

DedeCMS 5.7.109 - Server-Side Request Forgery

Manipulation of the rssurl parameter in codo.php leads to server-side request forgery in DedeCMS version 5.7.109. id: CVE-2023-3578 info: name: DedeCMS 5.7.109 - Server-Side Request Forgery author: ritikchaddha severity: critical description: | Manipulation of the rssurl parameter in codo.php lea...

9.8CVSS6.3AI score0.0357EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.37 views

GL.iNet <= 4.3.7 - Arbitrary File Write

GL.iNet = 4.3.7 is vulnerable to an arbitrary file write exploit, allowing an attacker to overwrite arbitrary system files. id: CVE-2023-46455 info: name: GL.iNet = 4.3.7 - Arbitrary File Write author: Zierax severity: high description: | GL.iNet = 4.3.7 is vulnerable to an arbitrary file write...

7.5CVSS7.2AI score0.46966EPSS
SaveExploits4References2
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.81 views

Jenkins build-metrics 1.3 - Cross-Site Scripting

Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. id: CVE-2019-10475 info: name: Jenkins build-metrics 1.3 - Cross-Site Scripting author: madrobot severity...

6.1CVSS6.4AI score0.57735EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.79 views

Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion

A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitrary files via the File parameter. id: CVE-2023-29887 info: name: Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion author: ctflearner severity: high description: | A Local...

7.5CVSS7.2AI score0.04736EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.99 views

Academy LMS 6.0 - Cross-Site Scripting

Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting XSS vulnerability through query parameter. id: CVE-2023-38964 info: name: Academy LMS 6.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Creative Item Academy LMS 6.0 was discovered to...

6.1CVSS6.3AI score0.01101EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.218 views

Mongo-Express - Remote Code Execution

Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...

9.8CVSS7.7AI score0.74519EPSS
SaveExploits0References5
Rows per page
Query Builder