Lucene search
+L

81 matches found

Kitploit
Kitploit
•added 2026/10/07 5:18 a.m.•21 views

PersistAssist

PersistAssist PersistAssist 是一个完全模块化的持久化框架,使用 C 编写。所有持久化技术都包含一个清理方法,用于在持久化代码之外移除持久化。这是一个正在进行中的项目,因此有许多空类。此项目最初的主要目标是构建一个完全模块化的框架,使得添加新功能只需继承一个类并添加代码即可。 作者 - Victor Suarez(@Gr1mmie) 编译 PersistAssist 不会提供预编译的二进制文件,因此您需要手动编译代码。要完成此操作,请打开解决方案文件,在构建菜单中选择“Release”以及所需架构,然后点击开始。 使用 要查看帮助菜单,请使用...

6.4AI score
SaveExploits0
EUVD
EUVD
•added 2026/04/08 9:32 p.m.•16 views

EUVD-2024-33803

The WIP Incoming Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the saveoption function. This makes it possible for unauthenticated attackers to update settings and inject...

6.1CVSS7.8AI score0.00269EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/07 12:00 a.m.•2 views

CVE-2020-37146: Missing Authentication for Critical Function

ACE Security WiP-90113 HD Camera contains a configuration disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration files. Attackers can access the camera's configuration backup by sending a GET request to the /configbackup.bin endpoint, exposing credentia...

8.7CVSS5.8AI score0.00466EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/04 11:02 p.m.•10 views

CVE-2026-1895 WeKan Attachment Storage lists.js applyWipLimit ListWIPBleed access control

A flaw has been found in WeKan up to 8.20. Affected is the function applyWipLimit of the file models/lists.js of the component Attachment Storage Handler. Executing a manipulation can lead to improper access controls. The attack can be executed remotely. Upgrading to version 8.21 is able to addre...

6.5CVSS5.8AI score0.00311EPSS
SaveExploits0References7
OSV
OSV
•added 2026/02/04 11:02 p.m.•12 views

CVE-2026-1895 WeKan Attachment Storage lists.js applyWipLimit ListWIPBleed access control

A flaw has been found in WeKan up to 8.20. Affected is the function applyWipLimit of the file models/lists.js of the component Attachment Storage Handler. Executing a manipulation can lead to improper access controls. The attack can be executed remotely. Upgrading to version 8.21 is able to addre...

5.3CVSS6.2AI score
SaveExploits0References9
Cvelist
Cvelist
•added 2026/02/04 11:02 p.m.•38 views

CVE-2026-1895 WeKan Attachment Storage lists.js applyWipLimit ListWIPBleed access control

A flaw has been found in WeKan up to 8.20. Affected is the function applyWipLimit of the file models/lists.js of the component Attachment Storage Handler. Executing a manipulation can lead to improper access controls. The attack can be executed remotely. Upgrading to version 8.21 is able to addre...

6.5CVSS0.00311EPSS
SaveExploits0References7
CVE
CVE
•added 2026/02/04 11:02 p.m.•36 views

CVE-2026-1895

CVE-2026-1895 affects WeKan up to version 8.20, specifically the Attachment Storage Handler’s file models/lists.js , function applyWipLimit . The vulnerability arises from a manipulation that can lead to improper access controls and can be exploited remotely. The advisory states that upgrading to...

6.5CVSS5.8AI score0.00311EPSS
SaveExploits0References7Affected Software1
attackerkb
attackerkb
•added 2026/02/04 11:02 p.m.•11 views

CVE-2026-1895

A flaw has been found in WeKan up to 8.20. Affected is the function applyWipLimit of the file models/lists.js of the component Attachment Storage Handler. Executing a manipulation can lead to improper access controls. The attack can be executed remotely. Upgrading to version 8.21 is able to addre...

6.5CVSS6AI score0.00311EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/26 12:00 a.m.•3 views

CVE-2020-36874: Missing Authentication for Critical Function

ACE SECURITY WIP-90113 HD cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/hi3510/backup.cgi endpoint. The endpoint permits remote download of a compressed configuration backup without requiring authentication or authorization. The exposed backup may...

8.7CVSS6AI score0.00656EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/26 12:00 a.m.•14 views

ACE SECURITY WIP-90113 访问控制错误漏洞

ACE SECURITY WIP-90113 is a high-definition camera from ACE SECURITY, Japan. The ACE SECURITY WIP-90113 suffers from an Access Control Error vulnerability that originates in the /web/cgi-bin/hi3510/backup.cgi endpoint that can remotely download a compressed configuration backup without...

8.7CVSS6.6AI score0.00656EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2020-20860

Malware in sbrugna...

6.5CVSS6.5AI score0.01306EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2006-6394

Malware in sbrugna...

7.8CVSS6.4AI score0.02057EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•8 views

EUVD-2025-8396

Malicious code in bioql PyPI...

7.1CVSS9AI score0.00189EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•9 views

EUVD-2024-34197

Malicious code in bioql PyPI...

6.4CVSS8.7AI score0.00327EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2022-45946

Malicious code in bioql PyPI...

8.8CVSS8.5AI score0.00439EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2025-11343

Malicious code in bioql PyPI...

6.5CVSS7.3AI score0.00354EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 7:52 a.m.•14 views

CVE-2024-11779

The WIP WooCarousel Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wipwoocarouselproductscarousel' shortcode in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5.8AI score0.00327EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:39 a.m.•17 views

CVE-2024-11416

The WIP Incoming Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the saveoption function. This makes it possible for unauthenticated attackers to update settings and inject...

6.1CVSS6.4AI score0.00269EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:02 a.m.•14 views

CVE-2023-33313

Cross-Site Request Forgery CSRF vulnerability in ThemeinProgress WIP Custom Login plugin = 1.2.9 versions...

8.8CVSS7.1AI score0.00256EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:50 a.m.•15 views

CVE-2022-42884

Missing Authorization vulnerability in ThemeinProgress WIP Custom Login.This issue affects WIP Custom Login: from n/a through 1.2.7...

8.8CVSS8AI score0.00439EPSS
SaveExploits0References1
Rows per page
Query Builder