Lucene search
+L

2749 matches found

Kitploit
Kitploit
added 2026/08/26 12:55 a.m.5 views

CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below

CVE-2023-37755 - Жестко закодированные учетные данные администратора в i-doit Pro 25 и ниже i-doit Pro 25 и ниже уязвимы к уязвимости жестко закодированных учетных данных администратора. Эти уязвимости позволяют любому войти как администратор, используя имя пользователя «admin» и пароль «admin»...

9.8CVSS5.7AI score0.01094EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 12:39 a.m.1 views

ABO.CMS-Login-SQLi-CVE-2024-25227

ABO.CMS-Login-SQLi-CVE-2024-25227 Неаутентифицированная SQL-инъекция и обход входа CVE-2024-25227 Дата: 23/02/2024 Протестировано на ABO.CMS 5.8 Поставщик: ABO.CMS URL поставщика:https://abocms.ru ABO.CMS 5.8 уязвим для SQL-инъекции через параметр tblogin на странице входа администратора...

9.8CVSS5.2AI score0.00794EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/25 4:45 p.m.2 views

Breacher

Breacher 관리자 로그인 페이지 및 EAR 취약점을 찾는 스크립트입니다. 기능 요청 시 멀티스레딩 큰 경로 목록 482개 경로 php, asp 및 html 확장자 지원 잠재적 EAR 취약점 확인 robots.txt 확인 사용자 정의 경로 지원 사용법 php 확장자를 가진 모든 경로 확인 root@kitploit: python breacher -u example.com --type php 스레드를 사용하여 php 확장자를 가진 모든 경로 확인 root@kitploit: python breacher -u example.com...

5.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 1:15 p.m.1 views

CVE-2024-10924

Эксплойт для CVE-2024-10924 WordPress Really Simple Security Plugin - Обход аутентификации 📌 Обзор CVE-2024-10924 — критическая уязвимость обхода аутентификации в плагине Really Simple Security для WordPress версии 9.0.0 – 9.1.1.1. Эта уязвимость позволяет неаутентифицированным злоумышленникам...

9.8CVSS7.4AI score0.82025EPSS
SaveExploits21
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.22 views

Alumni Management System 1.0 - SQL Injection

SourceCodester Alumni Management System 1.0 contains a sqlinjection caused by unsanitized input in admin/login.php, letting attackers bypass authentication, exploit requires injection of malicious SQL payload. id: CVE-2020-29214 info: name: Alumni Management System 1.0 - SQL Injection author:...

9.8CVSS9.1AI score0.04499EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.455 views

JFrog Artifactory 6.7.3 - Admin Login Bypass

JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...

9.8CVSS8.8AI score0.52948EPSS
SaveExploits3References5
Kitploit
Kitploit
added 2026/08/25 4:31 a.m.1 views

CVE-2025-60375

CVE-2025-60375 CVE-2025-60375 — PerfexCRM 3.3.1 미만에서의 인증 우회 / 잘못된 접근 제어 관리자 로그인 요약 취약점 유형: 잘못된 접근 제어 — 인증 우회 영향을 받는 제품: PerfexCRM 참고: 위 단계는 Ajansha Shankar와 Ahamed Yaseen이 보고한 최초 발견 단계입니다. 참고 자료 OWASP 인증 치트 시트 — 서버 측 검증 및 인증 제어에 대한 지침...

7.3CVSS5.2AI score0.00263EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 4:27 a.m.1 views

CVE-2025-41646---Critical-Authentication-Bypass-

CVE-2025-41646---Critical-Authentication-Bypass- CVE-2025-41646 - Критический обход аутентификации 🔓 CVE-2025-41646 - RevPi WebStatus Обход аутентификации PoC Критическая уязвимость обхода аутентификации CVE-2025-41646 в RevPi WebStatus ≤ v2.4.5 позволяет злоумышленнику войти в систему как admin...

9.8CVSS0.47054EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 3:10 a.m.1 views

CVE-2022-40470

CVE-2022-40470 Межсайтовый скриптинг в системе управления донорами крови на CodeIgniter - 1.0 Предлагаемое описание Phpgurukul Blood Donor Management System 1.0 позволяет выполнять межсайтовый скриптинг через функцию добавления названия группы крови. Дополнительная информация PoC:...

4.8CVSS0.00632EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2026/08/24 1:05 p.m.10 views

CVE-2026-77995 Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...

10CVSS5.5AI score0.00295EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/24 12:16 p.m.6 views

CVE-2026-78246

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

7.5CVSS0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/24 11:30 a.m.14 views

EUVD-2026-64828

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/24 11:30 a.m.15 views

CVE-2026-78246

A SQL injection vulnerability exists in itsourcecode Online Clinic Management System 1.0 , specifically in the Admin Login component (file success/login.php). The root cause is the unsanitized handling of the Username argument, allowing an unauthenticated remote attacker to inject arbitrary SQL. ...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/24 11:30 a.m.30 views

CVE-2026-78246 itsourcecode Online Clinic Management System Admin Login login.php sql injection

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

7.5CVSS0.00263EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/24 12:00 a.m.9 views

PT-2026-80808

Name of the Vulnerable Software and Affected Versions itsourcecode Online Clinic Management System version 1.0 Description An issue in the Admin Login component allows remote exploitation via SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. T...

7.5CVSS7.6AI score0.00263EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/08/22 2:55 p.m.1 views

Bludit-3-9-2-bb

Bludit-3-9-2-bb Bludit 3.9.2 - 暴力破解绕过 - CVE-2019-17240 基于 CVE-2019-17240 的极简脚本。 原始 PoC 与说明:https://github.com/bludit/bludit/pull/1090. root@kitploit: usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u ./usernamesfilelist.txt -p ./passwordsfilelist.txt -l :...

9.8CVSS0.39598EPSS
SaveExploits9References1
NVD
NVD
added 2026/08/20 12:16 a.m.6 views

CVE-2026-76764

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

7.5CVSS0.00328EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/20 12:00 a.m.31 views

CVE-2026-76764 code-projects Employee Management System Admin Login Endpoint aprocess.php sql injection

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

7.5CVSS0.00328EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/20 12:00 a.m.9 views

EUVD-2026-63186

A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...

7.5CVSS7.2AI score0.00328EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/20 12:00 a.m.21 views

CVE-2026-76764

code-projects Employee Management System 1.0 is vulnerable to SQL injection via the mailuid argument in /process/aprocess.php (Admin Login Endpoint). CVSS 7.3 HIGH. Exploit proof-of-concept published; no patch version provided. Exploitation details not available in provided documents.

7.5CVSS7.2AI score0.00328EPSS
SaveExploits0References6
Rows per page
Query Builder