Lucene search
+L

1512 matches found

Nuclei
Nuclei
•added 2026/10/20 2:05 a.m.•118 views

Art Gallery Management System Project v1.0 - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under ART TYPE option in the navigation bar. id: CVE-2023-23161 info: name: Art...

6.1CVSS6.5AI score0.0591EPSS
SaveExploits5References5
Kitploit
Kitploit
•added 2026/10/19 11:00 p.m.•29 views

BlackDex

BlackDex BlackDex is an Android unpack tool, it supports Android 5.012 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds. Declaration This project is not directed against any encryption, it does not deal with...

6.4AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/10/19 1:34 p.m.•15 views

CVE-2024-4956

A repository of scripts that were produced as part of my "Art of Defence" blog. Art-of-Defence - Sonatype Nexus CVE-2024-4956:...

7.5CVSS7.6AI score0.18245EPSS
SaveExploits17
Kitploit
Kitploit
•added 2026/10/18 10:58 p.m.•23 views

the-art-of-pivoting

The Art of Pivoting Techniques for Intelligence Analysts to Discover New Relationships in a Complex World PDF HTML EPUB Markdown Abstract This book explores how intelligence and cyber-security analysts can uncover hidden links between threat actor infrastructure and ongoing investigations by...

6.1AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/10/18 2:23 p.m.•15 views

platform_art_AOSP10_r33_CVE-2021-0511

This repository does not have a README...

7.8CVSS7.4AI score0.00217EPSS
SaveExploits0
CVE
CVE
•added 2026/10/13 4:00 p.m.•11 views

CVE-2026-109606

The SourceCodester Art Gallery Management System 1.0 is vulnerable to a SQL injection flaw within the Account Creation component. Specifically, the Action::save_user function in the admin/admin_class.php file fails to properly neutralize the Name argument. This vulnerability allows for remote exp...

7.5CVSS7.1AI score0.00412EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-109606: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::saveuser of the file admin/adminclass.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from remote...

7.5CVSS7.1AI score0.00412EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/10 5:50 a.m.•19 views

pics

Benvenuti! Poster binari 25 poster 2017-10-30 59 tracciati 2022-28-11 !https://assets.kitploit.com/production/public/readmes/48012/84626...

5.8AI score
SaveExploits0References4
NVD
NVD
•added 2026/09/18 4:17 p.m.•17 views

CVE-2025-15399

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

10CVSS0.00183EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/18 3:51 p.m.•22 views

CVE-2026-1029 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

5.4CVSS5.7AI score0.00162EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/18 3:51 p.m.•21 views

EUVD-2026-83136

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

5.4CVSS5.7AI score0.00162EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 3:38 p.m.•50 views

CVE-2025-15399

CVE-2025-15399 is a cross-site request forgery (CSRF) vulnerability (CWE-352) affecting IBM Common Licensing (also known as IBM License Key Server Administration and Reporting Tool / LKS Administration Agent) versions 9.0, 9.0.0.1, and 9.0.0.2 . An attacker could execute malicious and unauthorize...

10CVSS6.1AI score0.00183EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•10 views

PT-2026-95449

Name of the Vulnerable Software and Affected Versions IBM Common Licensing Agent versions 9.0 through 9.0.0.2 ART versions 9.0 through 9.0.0.2 Description An unauthenticated attacker can embed arbitrary JavaScript code in the Web UI. This cross-site scripting issue allows the attacker to alter...

6.1CVSS5.7AI score0.00197EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•10 views

PT-2026-95450

Name of the Vulnerable Software and Affected Versions IBM Common Licensing Agent versions 9.0 through 9.0.0.2 ART versions 9.0 through 9.0.0.2 Description An issue exists where an unauthenticated attacker can embed arbitrary JavaScript code into the Web UI. This cross-site scripting XSS flaw allo...

6.1CVSS5.7AI score0.00197EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•10 views

CVE-2026-1025: Improper Neutralization of Input During Web Page Generation

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

6.1CVSS5.7AI score0.00181EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•8 views

PT-2026-95437

Name of the Vulnerable Software and Affected Versions IBM Common Licensing Agent versions 9.0 through 9.0.0.2 IBM ART versions 9.0 through 9.0.0.2 Description Cross-site request forgery allows an attacker to execute malicious and unauthorized actions by transmitting requests from a user that the...

10CVSS6.1AI score0.00183EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•10 views

PT-2026-95447

Name of the Vulnerable Software and Affected Versions IBM Common Licensing Agent versions 9.0 through 9.0.0.2 ART versions 9.0 through 9.0.0.2 Description Cross-site scripting allows users to embed arbitrary JavaScript code in the Web UI. This can alter the intended functionality of the applicati...

6.1CVSS5.8AI score0.00181EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/14 6:26 p.m.•18 views

CVE-2026-19543 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side and fails to enforce the same restrictions on the server side. An attacker can modify requests to bypass validation controls and submit...

6.2CVSS5.8AI score0.0012EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/14 6:26 p.m.•22 views

CVE-2026-19543

IBM Common Licensing Agent and IBM LKS Administration and Reporting Tool (ART) , versions 9.0, 9.0.0.1, and 9.0.0.2 , perform input validation exclusively on the client side without enforcing equivalent restrictions on the server side. An attacker with local access can modify requests to bypass v...

6.2CVSS5.8AI score0.0012EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•25 views

PT-2026-91395

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 performs input validation exclusively on the client side and fails to enforce the same restrictions on the server side. An attacker can modify requests to bypass validation controls and submit...

6.2CVSS5.7AI score0.0012EPSS
SaveExploits0References2
Rows per page
Query Builder