Lucene search
+L

2747 matches found

Kitploit
Kitploit
added 2026/08/25 4:46 p.m.1 views

CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below

CVE-2023-37755 - i-doit Pro 25 及以下版本中的硬编码管理员凭据 i-doit Pro 25 及以下版本存在硬编码管理员凭据漏洞。该漏洞使任何人都可以使用用户名“admin”和密码“admin”登录为管理员。 产品描述:i-doit 是一款基于 Web 的开源 IT 文档和 CMDB(配置管理数据库)软件,由 synetics GmbH 开发。i-doit Pro 是该软件的商业版本,需要付费许可。它附带了额外功能、专业支持以及定期更新和增强功能。用户需要购买许可证才能使用 i-doit Pro,其费用根据用户数量和所需功能而有所不同。 漏洞描述:我们发现该...

9.8CVSS5.7AI score0.01094EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 4:45 p.m.1 views

Breacher

Breacher 管理画面のログインページとEAR脆弱性を見つけるスクリプト 特徴 オンデマンドのマルチスレッド 大規模なパスリスト(482パス) php、asp、htmlの拡張子に対応 潜在的なEAR脆弱性をチェック robots.txtをチェック カスタムパスのサポート 使用方法 php拡張子で全パスをチェック root@kitploit: python breacher -u example.com --type php php拡張子の全パスをスレッドでチェック root@kitploit: python breacher -u example.com --type php...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 1:15 p.m.1 views

CVE-2024-10924

Exploit para CVE-2024-10924 Plugin Really Simple Security de WordPress - Bypass de Autenticación 📌 Descripción General CVE-2024-10924 es una vulnerabilidad crítica de omisión de autenticación en el plugin Really Simple Security para WordPress versiones 9.0.0 a 9.1.1.1. Esta vulnerabilidad permite...

9.8CVSS7.6AI score0.82025EPSS
SaveExploits21
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.22 views

Alumni Management System 1.0 - SQL Injection

SourceCodester Alumni Management System 1.0 contains a sqlinjection caused by unsanitized input in admin/login.php, letting attackers bypass authentication, exploit requires injection of malicious SQL payload. id: CVE-2020-29214 info: name: Alumni Management System 1.0 - SQL Injection author:...

9.8CVSS9.1AI score0.04499EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.455 views

JFrog Artifactory 6.7.3 - Admin Login Bypass

JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...

9.8CVSS8.8AI score0.52948EPSS
SaveExploits3References5
Kitploit
Kitploit
added 2026/08/25 4:26 a.m.1 views

ABO.CMS-Login-SQLi-CVE-2024-25227

ABO.CMS-Login-SQLi-CVE-2024-25227 未认证SQL注入与登录绕过 CVE-2024-25227 日期:2024年2月23日 测试版本:ABO.CMS 5.8 厂商:ABO.CMS 厂商网址:https://abocms.ru ABO.CMS 5.8 在管理员登录页面的 tblogin 参数处存在 SQL 注入漏洞。 受影响的组件为管理员登录页面的 "tblogin" 参数。 其他版本也可能存在此漏洞。 攻击类型为远程攻击,攻击向量为在管理员登录页面中通过 POST 请求传递 "tblogin" 参数。 描述: ABO.CMS 5.8 SQL 注入漏洞,...

9.8CVSS0.00794EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/08/25 3:10 a.m.1 views

CVE-2022-40470

CVE-2022-40470 Cross Site Scripting en el Sistema de Gestión de Donantes de Sangre usando CodeIgniter - 1.0 Descripción sugerida Phpgurukul Sistema de Gestión de Donantes de Sangre 1.0 permite Cross Site Scripting a través de la función Agregar Nombre de Grupo Sanguíneo. Información Adicional PoC...

4.8CVSS0.00632EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2026/08/24 1:05 p.m.10 views

CVE-2026-77995 Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...

10CVSS5.5AI score0.00295EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/24 12:16 p.m.6 views

CVE-2026-78246

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

7.5CVSS0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/24 11:30 a.m.14 views

EUVD-2026-64828

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/24 11:30 a.m.15 views

CVE-2026-78246

A SQL injection vulnerability exists in itsourcecode Online Clinic Management System 1.0 , specifically in the Admin Login component (file success/login.php). The root cause is the unsanitized handling of the Username argument, allowing an unauthenticated remote attacker to inject arbitrary SQL. ...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/24 11:30 a.m.30 views

CVE-2026-78246 itsourcecode Online Clinic Management System Admin Login login.php sql injection

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

7.5CVSS0.00263EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/24 12:00 a.m.9 views

PT-2026-80808

Name of the Vulnerable Software and Affected Versions itsourcecode Online Clinic Management System version 1.0 Description An issue in the Admin Login component allows remote exploitation via SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. T...

7.5CVSS7.6AI score0.00263EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/08/22 2:55 p.m.1 views

Bludit-3-9-2-bb

Bludit-3-9-2-bb Bludit 3.9.2 - 暴力破解绕过 - CVE-2019-17240 基于 CVE-2019-17240 的极简脚本。 原始 PoC 与说明:https://github.com/bludit/bludit/pull/1090. root@kitploit: usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u ./usernamesfilelist.txt -p ./passwordsfilelist.txt -l :...

9.8CVSS0.39598EPSS
SaveExploits9References1
NVD
NVD
added 2026/08/20 12:16 a.m.6 views

CVE-2026-76764

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

7.5CVSS0.00328EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/20 12:00 a.m.31 views

CVE-2026-76764 code-projects Employee Management System Admin Login Endpoint aprocess.php sql injection

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

7.5CVSS0.00328EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/20 12:00 a.m.9 views

EUVD-2026-63186

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

7.5CVSS7.2AI score0.00328EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/20 12:00 a.m.21 views

CVE-2026-76764

code-projects Employee Management System 1.0 is vulnerable to SQL injection via the mailuid argument in /process/aprocess.php (Admin Login Endpoint). CVSS 7.3 HIGH. Exploit proof-of-concept published; no patch version provided. Exploitation details not available in provided documents.

7.5CVSS7.2AI score0.00328EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.11 views

PT-2026-78873

Name of the Vulnerable Software and Affected Versions code-projects Employee Management System version 1.0 Description A SQL injection flaw exists in the Admin Login Endpoint within the /process/aprocess.php file. The issue occurs when the mailuid argument is manipulated, allowing for remote...

7.5CVSS7.5AI score0.00328EPSS
SaveExploits0References10
OSV
OSV
added 2026/08/19 4:00 p.m.5 views

CVE-2026-64852 Grav API Plugin: Missing authorization on API-key generate/revoke lets any admin.login user forge keys for any account

Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.8, the Grav API plugin intercepts the apiKeyGenerate and apiKeyRevoke admin tasks in user/plugins/api/api.php and authorizes the caller with only admin.login. A basic panel user c...

8.7CVSS5.4AI score0.00367EPSS
SaveExploits0References5
Rows per page
Query Builder