Lucene search
+L

12194 matches found

Kitploit
Kitploit
•added 2026/10/03 1:47 p.m.•17 views

CVE-2023-50245

CVE-2023-50245 Vulnerability Overview CVE-2023-50245 CVSS : 9.8 Dec 11, 2023 Image Viewer Vulnerability Vulnerability Description github advisories arbitrary address write vulnerability POC 1 1404.9264: Access violation - code c0000005 first chance First chance exceptions are reported before any...

9.8CVSS8.5AI score0.0105EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/10/03 11:46 a.m.•12 views

evince-cve-2017-1000083

This repository does not have a README...

7.8CVSS7AI score0.51076EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/10/03 2:48 a.m.•10 views

CVE-2026-67599_ClearOS_RCE

Inyección de comandos del sistema operativo en el parámetro Filter del Log Viewer Paquete: ClearFoundation Versiones probadas: ClearOS 7.9.1.342252 Tipo de vulnerabilidad: Inyección de comandos del sistema operativo CWE-78 Gravedad: Alta CVE : CVE-2026-67599 Vector CVSS v3.1:...

8.6CVSS6.5AI score0.02428EPSS
SaveExploits1
Nuclei
Nuclei
•added 2026/10/03 2:05 a.m.•40 views

Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Arbitrary File Read

The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wpajaxnoprivelvwplogdownload AJAX action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, whi...

7.5CVSS7.5AI score0.46858EPSS
SaveExploits1References4
Nuclei
Nuclei
•added 2026/10/03 2:05 a.m.•75 views

Eclipse BIRT Viewer - Remote Code Execution

Eclipse BIRT versions 4.8.0 and earlier contain a JSP injection caused by query parameters, letting remote attackers create and access malicious JSP files in the viewer directory, exploit requires sending crafted query parameters. id: CVE-2021-34427 info: name: Eclipse BIRT Viewer - Remote Code...

9.8CVSS8AI score0.57982EPSS
SaveExploits4References3
Fedora
Fedora
•added 2026/10/03 12:35 a.m.•6 views

[SECURITY] Fedora 45 Update: virt-viewer-11.0-20.fc45

Virtual Machine Viewer provides a graphical console client for connecting to virtual machines. It uses the GTK-VNC or SPICE-GTK widgets to provide the display, and libvirt for looking up VNC/SPICE server details...

7.5CVSS5.8AI score0.00561EPSS
SaveExploits0
Fedora
Fedora
•added 2026/10/03 12:30 a.m.•5 views

[SECURITY] Fedora 45 Update: gpx-viewer-0.4.0-35.fc45

GPX Viewer is a simple tool to visualize tracks and waypoints stored in a gpx file. It has the following features: - Show multiple GPX files - Height map - Show waypoints and multiple tracks per gpx file - Highlight selected track - Show speed vs time graph - Show distance, duration, average,...

7.4CVSS5.9AI score0.00561EPSS
SaveExploits0
Fedora
Fedora
•added 2026/10/03 12:28 a.m.•5 views

[SECURITY] Fedora 45 Update: atril-1.28.7-2.fc45

Mate-document-viewer is simple document viewer. It can display and print Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS, DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard,...

7.4CVSS5.9AI score0.00561EPSS
SaveExploits0
NVD
NVD
•added 2026/10/02 4:16 p.m.•11 views

CVE-2026-104906

MISP contains a cross-site scripting XSS vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control or influence the content of a TAXII objec...

6.2CVSS0.0036EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/02 3:49 p.m.•41 views

CVE-2026-104906 MISP TAXII Object Viewer Stored XSS via Unescaped JSON Output

MISP contains a cross-site scripting XSS vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control or influence the content of a TAXII objec...

6.2CVSS0.0036EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/02 3:49 p.m.•7 views

CVE-2026-104906 MISP TAXII Object Viewer Stored XSS via Unescaped JSON Output

MISP contains a cross-site scripting XSS vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control or influence the content of a TAXII objec...

6.2CVSS6AI score0.0036EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/02 3:49 p.m.•6 views

CVE-2026-104906

The MISP platform contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer (versions

6.2CVSS6AI score0.0036EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/02 3:49 p.m.•7 views

EUVD-2026-91742

MISP contains a cross-site scripting XSS vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control or influence the content of a TAXII objec...

6.2CVSS6AI score0.0036EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/02 2:52 p.m.•14 views

CVE-2019-13288

Xpdf version 4.02 2019-sep-25 The Xpdf software and documentation are copyright 1996-2019 Glyph & Cog, LLC. Email: [email protected] WWW: http://www.xpdfreader.com/ The PDF data structures, operators, and specification are documented in ISO 32000-2:2017. What is Xpdf? Xpdf is an open source...

5.5CVSS6.5AI score0.04556EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/02 7:43 a.m.•10 views

CVE-2022-35499

En Trimble TM4WEB =22.2.0 el endpoint del visor externo de facturas es vulnerable a cross-site scripting reflejado mediante la inyección en un parámetro arbitrario añadido a la URL. Paso 1 : El siguiente ejemplo de URL activará la vulnerabilidad y ejecutará la función javascript alert mostrando e...

7.1CVSS5.8AI score0.00287EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/02 5:48 a.m.•11 views

CVE-2024-12849-Poc

CVE-2024-12849-Poc 📜 Description The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wpajaxnoprivelvwplogdownload AJAX action. This makes it possible for unauthenticated attackers to read the contents of...

7.5CVSS7.9AI score0.46858EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/02 5:14 a.m.•10 views

CVE-2024-12849

CVE-2024-12849 Error Log Viewer By WP Guru = 1.0.1.3 - Falta de autorización para lectura arbitraria de archivos sin autenticar Descripción El plugin Error Log Viewer By WP Guru para WordPress es vulnerable a la lectura arbitraria de archivos en todas las versiones hasta la 1.0.1.3 inclusive, a...

7.5CVSS7.9AI score0.46858EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/01 9:03 p.m.•17 views

lapith

Lapith Lapith es una herramienta GUI en Python que presenta los resultados de Nessus en un formato más útil para los probadores de penetración. Los resultados se pueden ver por problema en lugar de por host. Por lo tanto, es más fácil informar de todos los hosts afectados por un problema, en luga...

6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/01 9:00 p.m.•13 views

ncccodenavi

ncccodenavi NCC Code Navi, el visor de texto y buscador para revisores de código Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com http://www.github.com/nccgroup/ncccodenavi Publicado bajo AGPL,...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/01 8:16 p.m.•13 views

burp-jq

Burp JQ Esta es una extensión de Burp para aplicar consultas jq al contenido JSON del visor de mensajes HTTP. Compilación $ gradle fatJar Créditos Burp JQ depende de jackson-jq, una implementación de jq en Java. jq jackson jackson-jq...

6.2AI score
SaveExploits0References3
Rows per page
Query Builder