Lucene search
+L

11987 matches found

Kitploit
Kitploit
added 2026/09/13 6:16 a.m.3 views

CVE-2024-50968

CVE-2024-50968 Description A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker...

7.5CVSS5.9AI score0.00862EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:59 a.m.8 views

Addon

ClearURLs ClearURLs is an add-on based on the new WebExtensions technology and is optimized for Firefox and some Chrome based browsers. This extension will automatically remove tracking elements from URLs to help protect your privacy when browsing the Internet, which is regularly updated by us an...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 5:47 a.m.6 views

PersistBOF

PersistBOF A tool to help automate common persistence mechanisms. Currently supports Print Monitor SYSTEM, Time Provider Network Service, Start folder shortcut hijacking User, Junction Folder User, Xll Add-In User. Usage Clone, run make, add .cna to Cobalt Strike client. run: help persist-ice in ...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 1:11 a.m.8 views

CVE-2022-41445

CVE-2022-41445 Cross Site Scripting in Teacher's Record Management System using CodeIgnitor Suggested description A cross-site scripting XSS vulnerability in Record Management System using CodeIgniter 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected int...

4.8CVSS5.7AI score0.01044EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 12:00 a.m.6 views

CVE-2022-40470

CVE-2022-40470 Cross Site Scripting in Blood Donor Management System Using CodeIgniter - 1.0 Suggested description Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature. Additional Information PoC:...

4.8CVSS5.7AI score0.00639EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 6:54 p.m.8 views

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS Exploit Author: emirhanerdogu Vendor Homepage https://www.sourcecodester.com/php/16928/sticky-notes-app-using-php-source-code.html Software Link...

6.5CVSS6.7AI score0.00342EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 1:36 p.m.36 views

acltoolkit

acltoolkit acltoolkit is an ACL abuse swiss-army knife. It implements multiple ACL abuses. Table of Contents acltoolkit Table of Contents Installation Usage Commands get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Installation root@kitploit: pip install...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 11:22 a.m.5 views

CVE-2022-43144-Stored-XSS

CVE-2022-43144 : Stored-XSS Description A cross-site scripting XSS vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Impact Allowing an attacker to hijack the user's session and take over the account. To exploit this...

5.4CVSS6AI score0.00996EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 11:04 a.m.4 views

CVE-2023-2732

CVE-2023-2732 MStore API = 3.9.2 - Authentication Bypass https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/mstore-api/mstore-api-392-authentication-bypass Description root@kitploit: The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to...

9.8CVSS7.6AI score0.67511EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/12 10:21 a.m.10 views

cve-2025-0364

CVE-2025-0364: BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE The BigAntSoft BigAnt Server, which provides a Windows hosted on-premises chat server that focuses on business use cases, is vulnerable to unauthenticated remote code execution via account registration and PHP...

9.8CVSS8.3AI score0.0193EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/12 9:46 a.m.11 views

community-scripts

커뮤니티 스크립트 커뮤니티, 즉 여러분이 제공한 ZAP 스크립트 모음입니다 : ZAP에서 이 저장소를 사용하는 가장 쉬운 방법은 ZAP 마켓플레이스에서 'Community Scripts' 애드온을 설치하는 것입니다. !CAUTION 모든 스크립트가 명백히 악의적인 행위를 하지 않는지 검토하지만, 여전히 직접 검토하고 주의해서 사용해야 합니다. 저장소에 기여하고 싶다면 저장소를 로컬 디렉터리에 클론한 다음 Options / Scripts 화면을 사용하여 ZAP에 추가할 수도 있습니다. 풀 리퀘스트를 통해 스크립트를 업로드해 주세...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 7:32 a.m.4 views

fix-CVE-2020-15228

Fix CVE-2020-15228 set-env, add-path in Github-Actions This script changes lines in your github action file. You give it a directory name, and it searches for all files with the ".sh" or ".yml" extension. It recognizes these lines: root@kitploit: echo ::set-env name=FOOBAR::$FOOBAR echo ::set-env...

5CVSS6AI score0.01488EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 6:49 a.m.6 views

CVE-2023-26982

CVE-2023-26982 Vulnerability Explanation: Trudesk v1.2.6 was discovered to contain a stored cross-site scripting XSS vulnerability via the Add Tags parameter under the Create Ticket function. Attack Vectors: The attacker must create some ticket and then edit tags in the ticket and insert the XSS...

5.4CVSS6AI score0.01018EPSS
SaveExploits1References1
NVD
NVD
added 2026/09/12 6:16 a.m.10 views

CVE-2026-87759

The Add User Autocomplete WordPress plugin before 1.2 does not perform any capability or nonce check before creating a pending site-membership invitation carrying a caller-supplied role, allowing any authenticated user, such as a subscriber, to grant themselves the administrator role on a multisi...

8.8CVSS0.00132EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 6:01 a.m.9 views

CVE-2026-60004-POC

CVE-2026-60004 — Gitea 인증 전 원격 코드 실행 CVSS 9.8 root@kitploit: ┌──────────────────────────────────────────────────────────────┐ │ CVE-2026-60004 │ Gitea Pre-Auth RCE │ CVSS 9.8 CRIT │ │ diffpatch → git hook injection │ v1.17–1.27.0 affected │...

9.8CVSS8.3AI score0.86777EPSS
SaveExploits13References3
CVE
CVE
added 2026/09/12 6:00 a.m.15 views

CVE-2026-87759

The Add User Autocomplete WordPress plugin before 1.2 fails to perform a capability or nonce check before creating a pending site-membership invitation that carries a caller-supplied role. This allows any authenticated user (e.g., a subscriber) to grant themselves the administrator role on a mult...

8.8CVSS0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/12 6:00 a.m.14 views

CVE-2026-87759 Add User Autocomplete < 1.2 - Subscriber+ Privilege Escalation

The Add User Autocomplete WordPress plugin before 1.2 does not perform any capability or nonce check before creating a pending site-membership invitation carrying a caller-supplied role, allowing any authenticated user, such as a subscriber, to grant themselves the administrator role on a multisi...

0.00132EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/12 6:00 a.m.6 views

EUVD-2026-76798

The Add User Autocomplete WordPress plugin before 1.2 does not perform any capability or nonce check before creating a pending site-membership invitation carrying a caller-supplied role, allowing any authenticated user, such as a subscriber, to grant themselves the administrator role on a multisi...

8.8CVSS0.00132EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/12 6:00 a.m.5 views

EUVD-2026-76794

The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that deserializes user-supplied input without restricting the permitted classes, allowing unauthenticated attackers to inject arbitrary PHP objects, which may be escalated further wh...

8.1CVSS0.00157EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 5:50 a.m.10 views

log-add-http-post-bodies

HTTP 로그에 POST 본문 발췌 추가 이 스크립트는 분석가가 HTTP POST 본문으로 전송되는 내용을 들여다볼 수 있는 기능을 제공합니다. 단순히 HTTP 로그를 확장하는 방식으로 이를 구현합니다. 설치 :: zkg refresh zkg install corelight/log-add-http-post-bodies 사용법 HTTP 로그에는 postbody 라는 새 필드가 추가되며, 이 필드는 관찰되는 모든 POST 본문의 시작 부분부터 구성 가능한 양의 데이터로 채워집니다...

5.8AI score
SaveExploits0
Rows per page
Query Builder