Lucene search
+L

2175 matches found

Kitploit
Kitploit
•added 2026/10/03 11:46 a.m.•20 views

WinRAR-Exploit-Tool---Rust-Edition

WinRAR Exploit Tool - Rust Edition 고급 WinRAR 경로 탐색 공격 도구 - Rust 버전 WinRAR CVE-2025-8088 취약점을 Rust로 다시 구현한 고성능, 메모리 안전 공격 도구입니다. 기능 ADS 악용 - NTFS 대체 데이터 스트림을 통한 페이로드 은닉 RAR5 헤더 조작 - 경로 삽입을 위한 직접 헤더 패치 현대적인 GUI - CSS 스타일링이 적용된 GTK 기반 인터페이스 시작 프로그램 타겟팅 - Windows 시작 폴더에 자동 페이로드 배치 사용자 정의 유인 파일 지원...

8.8CVSS8.1AI score0.94051EPSS
SaveExploits38
Kitploit
Kitploit
•added 2026/10/03 9:34 a.m.•11 views

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR 익스플로잇 도구 | || | \ / / | / | | | | 고급 WinRAR 경로 탐색 익스플로잇 도구 ADS 및 RAR5 헤더 조작을 통해 WinRAR 경로 탐색 취약점CVE-2025-8088을 악용하는 악성 RAR 아카이브를 생성하기 위한 정교한 GUI 도구입니다. 기능 ADS 악용 - 페이로드 은닉을 위한 NTFS 대체 데이터 스트림 RAR5 헤더 조작 - 경로 주입을 위한 직접 헤더 패칭 GUI 인터페이스 - 깔끔하고 현대적인 사용자 인터페이스 시작 프로그램 대상 -...

8.8CVSS8.1AI score0.94051EPSS
SaveExploits38References1
Kitploit
Kitploit
•added 2026/10/03 8:46 a.m.•62 views

web

Network-wide ad blocking via your own Linux hardware Pi-hole website | Documentation | Discourse Forum | Donate Pi-hole Web Interface Pi-hole®'s Web interface based off of AdminLTE provides a central location to manage your Pi-hole and review the statistics generated by FTLDNS™. Easy-to-interpret...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/03 2:44 a.m.•18 views

intercept

이 오픈 소스 프로젝트의 개발자를 지원해 주세요 신호 정보 플랫폼 소프트웨어 정의 라디오 도구를 위한 웹 기반 인터페이스입니다. 기능 페이지 디코딩 - POCSAG/FLEX rtlfm + multimon-ng 사용 433MHz 센서 - 기상 관측소, TPMS, IoT 기기 rtl433 사용 Sub-GHz 분석기 - 300-928 MHz ISM 대역 RF 캡처 및 프로토콜 디코딩 HackRF 사용 항공기 추적 - 실시간 지도 및 레이더가 포함된 dump1090 기반 ADS‑B 선박 추적 - VHF DSC 조난 모니터링이...

6.2AI score
SaveExploits0References8
Nuclei
Nuclei
•added 2026/10/03 2:05 a.m.•30 views

Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated settings import/export

includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress allows unauthenticated options changes. id: CVE-2019-17228 info: name: Motors Car Dealer & Classified Ads = 1.4.0 - Unauthenticated settings...

6.5CVSS6.7AI score0.01153EPSS
SaveExploits1References4
Nuclei
Nuclei
•added 2026/10/03 2:05 a.m.•31 views

Tube Video Ads Lite - Reflected XSS

Tube Video Ads Lite WordPress plugin = 1.5.7 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute arbitrary scripts in the context of high privilege users, exploit requires attacker to craf...

7.1CVSS8.1AI score0.00573EPSS
SaveExploits1References2
Nuclei
Nuclei
•added 2026/10/03 2:05 a.m.•80 views

Ads Pro Plugin <= 4.88 - Unauthenticated SQL Injection

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the 'aid' parameter in all versions up to, and including, 4.88 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

7.5CVSS7.9AI score0.01754EPSS
SaveExploits0References3
Nuclei
Nuclei
•added 2026/10/03 2:05 a.m.•112 views

Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File

The Google for WooCommerce plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 2.8.6. This is due to publicly accessible printphpinformation.php file. This makes it possible for unauthenticated attackers to retrieve information about Webserver and PH...

5.3CVSS7.9AI score0.00944EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/02 7:01 p.m.•15 views

CVE-2022-31301

CVE-2022-31301 Haraj Script 3.7 - 게시물 광고 인증 저장 XSS 익스플로잇 제목: Haraj Script 3.7 - 인증 저장 XSS 날짜: 2022-06-13 CVE: CVE-2022-31301 익스플로잇 저자: Abdulaziz Saad @b4zb0z 공급업체 홈페이지: https://angtech.org/ 소프트웨어 링크: https://angtech.org/product/view/3 버전: 3.7 테스트 환경: LAMP, Ubuntu 익스플로잇 : 새 광고 페이지를 생성할 때 거의 모든 입력...

5.4CVSS6.3AI score0.00853EPSS
SaveExploits1
NVD
NVD
•added 2026/10/02 10:17 a.m.•6 views

CVE-2026-94180

Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sensitive Data. This issue affects Advanced Ads: from n/a through 2.0.26...

4.3CVSS0.00281EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/02 9:39 a.m.•3 views

CVE-2026-94180 WordPress Advanced Ads plugin <= 2.0.26 - Sensitive Data Exposure vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sensitive Data. This issue affects Advanced Ads: from n/a through 2.0.26...

4.3CVSS5.9AI score0.00281EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/02 9:39 a.m.•6 views

EUVD-2026-91340

Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sensitive Data. This issue affects Advanced Ads: from n/a through 2.0.26...

4.3CVSS5.9AI score0.00281EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/02 9:39 a.m.•38 views

CVE-2026-94180 WordPress Advanced Ads plugin <= 2.0.26 - Sensitive Data Exposure vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sensitive Data. This issue affects Advanced Ads: from n/a through 2.0.26...

4.3CVSS0.00281EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/02 9:39 a.m.•10 views

CVE-2026-94180

The Monetizemore Advanced Ads WordPress plugin (versions up to and including 2.0.26 ) is vulnerable to an Authorization Bypass Through User-Controlled Key (CWE-639). This flaw allows an attacker to retrieve embedded sensitive data from the application. While the vulnerability details confirm the ...

4.3CVSS5.9AI score0.00281EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/02 9:37 a.m.•5 views

WordPress Advanced Ads plugin <= 2.0.26 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Advanced Ads versions = 2.0.26...

4.3CVSS5.9AI score0.00281EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/10/02 8:17 a.m.•5 views

CVE-2026-96647

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsdremark' Parameter in all versions up to, and including, 6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00201EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/10/02 7:39 a.m.•9 views

EUVD-2026-91255

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsdremark' Parameter in all versions up to, and including, 6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS6.1AI score0.00201EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/10/02 7:39 a.m.•39 views

CVE-2026-96647 Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 6.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lsd[remark]' Parameter

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsdremark' Parameter in all versions up to, and including, 6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00201EPSS
SaveExploits0References7
CVE
CVE
•added 2026/10/02 7:39 a.m.•10 views

CVE-2026-96647

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 6.1.1 . The root cause is insufficient input sanitization and output escaping of the 'lsd[remark]' parameter. This a...

6.4CVSS6.1AI score0.00201EPSS
SaveExploits0References7
Nuclei
Nuclei
•added 2026/10/02 2:11 a.m.•39 views

Ads Pro Plugin <= 4.89 - Local File Inclusion

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsatemplate' parameter of the bsapreviewcallback function. This makes it possible for unauthenticated attackers to includ...

9.8CVSS6.5AI score0.42517EPSS
SaveExploits1References2
Rows per page
Query Builder