Lucene search
+L

215 matches found

Kitploit
Kitploit
•added 2026/09/24 4:48 a.m.•12 views

CVE-2020-15778-SCP-Command-Injection-Check

CVE-2020-15778 – OpenSSH SCP Command Injection Vulnerability Detection Script About CVE-2020-15778 is a command injection vulnerability discovered in the scp utility provided by OpenSSH versions ≤ 8.3p1. The issue allows an attacker to execute arbitrary commands on the client system if a crafted...

7.4CVSS7AI score0.12996EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/23 8:44 p.m.•12 views

CVE-2021-22123

CVE-2021-22123 Fortinet FortiWeb Authenticated OS Command Injection Hit Counter The command injection vulnerability in the FortiWeb management interface may allow an authenticated remote attacker to execute arbitrary commands in the system via the SAML server configuration page. Executing command...

9CVSS8.2AI score0.7727EPSS
SaveExploits2
Github Security Blog
Github Security Blog
•added 2026/09/23 6:51 p.m.•5 views

OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting

Summary An authenticated user can execute arbitrary operating system commands on the openc3-cosmos-cmd-tlm-api service. The pypiurl setting is interpolated, unescaped, into a command line that is run through a shell backtick when a plugin is installed. Shell metacharacters in the setting value ar...

8.8CVSS6.6AI score0.00581EPSS
SaveExploits0References5Affected Software1
Kitploit
Kitploit
•added 2026/09/22 2:13 p.m.•10 views

CVE-2026-39492

CVE-2026-39492 — WP Maps Blind SQL Injection Scanner Pre-Auth Time-Based Blind SQLi via Backtick Bypass → DB Extraction Overview CVE-2026-39492 is a critical-severity CVSS 9.3 unauthenticated blind SQL injection vulnerability in the WP Maps plugin wp-google-map-plugin versions ≤ 4.9.1. The...

9.3CVSS6.1AI score0.004EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/18 10:02 p.m.•9 views

CVE-2026-65643-PoC-Toolkit

CVE‑2026‑65643 – cPanel Domain Parking RCE Toolkit ⚠️ ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse Act...

8.8CVSS6.8AI score0.00875EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/18 6:02 p.m.•7 views

CVE-2024-36057

CVE-2024-36057 — Koha Library Software ID CVE: CVE-2024-36057 Producto: Koha Library Software Tipo de Vulnerabilidad: Inyección de Comandos del Sistema Operativo CWE-78 Puntuación CVSS: 8.7 Alta Autenticado Versiones Afectadas: Inferiores a 22.05.22 Créditos: Karolis Narvilas Descripción Koha es ...

5.9AI score0.01803EPSS
SaveExploits1
OSV
OSV
•added 2026/09/17 10:01 p.m.•9 views

CVE-2026-54646 CubeCart: SQL Identifier Injection via Backtick Bypass in maintenance.index.inc.php

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/maintenance.index.inc.php places administrator-controlled tablename values into ALTER TABLE, CHECK TABLE, and ANALYZE TABLE statements without validating the identifiers or escaping embedded backticks. An authenticated...

7.2CVSS6AI score
SaveExploits0References6
CVE
CVE
•added 2026/09/17 10:01 p.m.•20 views

CVE-2026-54646

CubeCart (an ecommerce platform) is affected by a SQL identifier injection in admin/sources/maintenance.index.inc.php (line 551) prior to 6.7.5 . Administrator-supplied table names from POST parameters are wrapped in backticks and placed into structural SQL statements (ALTER TABLE, CHECK TABLE, A...

7.2CVSS6AI score0.01947EPSS
SaveExploits2References4
EUVD
EUVD
•added 2026/09/17 10:01 p.m.•14 views

EUVD-2026-82527

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/maintenance.index.inc.php places administrator-controlled tablename values into ALTER TABLE, CHECK TABLE, and ANALYZE TABLE statements without validating the identifiers or escaping embedded backticks. An authenticated...

7.2CVSS6AI score0.01947EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
•added 2026/09/17 10:01 p.m.•8 views

CVE-2026-54646 CubeCart: SQL Identifier Injection via Backtick Bypass in maintenance.index.inc.php

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/maintenance.index.inc.php places administrator-controlled tablename values into ALTER TABLE, CHECK TABLE, and ANALYZE TABLE statements without validating the identifiers or escaping embedded backticks. An authenticated...

7.2CVSS6AI score0.01947EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2026/09/17 10:01 p.m.•33 views

CVE-2026-54646 CubeCart: SQL Identifier Injection via Backtick Bypass in maintenance.index.inc.php

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/maintenance.index.inc.php places administrator-controlled tablename values into ALTER TABLE, CHECK TABLE, and ANALYZE TABLE statements without validating the identifiers or escaping embedded backticks. An authenticated...

7.2CVSS0.01947EPSS
SaveExploits2References4
Kitploit
Kitploit
•added 2026/09/17 12:49 a.m.•10 views

CVE-2026-44656

CVE-2026-44656 - Vim Modeline path Option Command Injection Vulnerability English|中文 This repository provides a reproduction environment for CVE-2026-44656. The vulnerability stems from a flaw in Vim's handling of backtick expansion expressions in the path option within modelines. Attackers can...

5.3CVSS6.9AI score0.00808EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/09/15 1:02 p.m.•16 views

Exploit for CVE-2026-59550

CVE-2026-59550 - AWP Classifieds ≤ 4.4.7 unauthenticated SQL i...

9.3CVSS6.1AI score0.004EPSS
SaveExploits1
OSV
OSV
•added 2026/09/14 4:35 p.m.•20 views

OESA-2026-3871 perl-Net-DNS security update

Net :: DNS is a collection of Perl's Domain Name System resolvers. It allows programmers to perform DNS queries for gethostbyname and gethostbyaddr functions. Security Fixes: Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR...

9.8CVSS6AI score0.01439EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/11 3:39 a.m.•41 views

CVE-2026-15462 Sticky Chat Widget <= 1.4.2 - Unauthenticated SQL Injection

The Sticky Chat Widget plugin for WordPress is vulnerable to SQL Injection via the 'scwformfields' parameter array keys of the 'scwsaveformdata' AJAX action in versions up to, and including, 1.4.2. This is due to the saveformdata function passing attacker-controlled POST array keys unsanitized to...

7.5CVSS0.00304EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/11 3:39 a.m.•8 views

CVE-2026-15462 Sticky Chat Widget <= 1.4.2 - Unauthenticated SQL Injection

The Sticky Chat Widget plugin for WordPress is vulnerable to SQL Injection via the 'scwformfields' parameter array keys of the 'scwsaveformdata' AJAX action in versions up to, and including, 1.4.2. This is due to the saveformdata function passing attacker-controlled POST array keys unsanitized to...

7.5CVSS5.7AI score0.00304EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/11 3:39 a.m.•10 views

EUVD-2026-75954

The Sticky Chat Widget plugin for WordPress is vulnerable to SQL Injection via the 'scwformfields' parameter array keys of the 'scwsaveformdata' AJAX action in versions up to, and including, 1.4.2. This is due to the saveformdata function passing attacker-controlled POST array keys unsanitized to...

7.5CVSS5.7AI score0.00304EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/11 12:00 a.m.•12 views

PT-2026-89748

The Sticky Chat Widget plugin for WordPress is vulnerable to SQL Injection via the 'scw form fields' parameter array keys of the 'scw save form data' AJAX action in versions up to, and including, 1.4.2. This is due to the save form data function passing attacker-controlled POST array keys...

7.5CVSS5.7AI score0.00304EPSS
SaveExploits0References6
OSV
OSV
•added 2026/09/05 3:03 p.m.•7 views

OESA-2026-3627 perl-Net-DNS security update

Net :: DNS is a collection of Perl's Domain Name System resolvers. It allows programmers to perform DNS queries for gethostbyname and gethostbyaddr functions. Security Fixes: Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR...

9.8CVSS5.8AI score0.01439EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/03 7:17 p.m.•10 views

GHSA-FG9P-MRXR-HVQ7 Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)

Summary Orval emits the OpenAPI path into the generated request URL as a TEMPLATE LITERAL /users/... without escaping the backtick character. A path containing a backtick closes the template literal and injects a concatenation expression that is evaluated when the generated URL/request/key functi...

9.3CVSS6AI score0.00653EPSS
SaveExploits0References6
Rows per page
Query Builder