Lucene search
+L

214 matches found

Kitploit
Kitploit
added 2026/09/23 8:44 p.m.11 views

CVE-2021-22123

CVE-2021-22123 Fortinet FortiWeb Authenticated OS Command Injection Hit Counter The command injection vulnerability in the FortiWeb management interface may allow an authenticated remote attacker to execute arbitrary commands in the system via the SAML server configuration page. Executing command...

9CVSS8.1AI score0.7727EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/23 2:20 a.m.12 views

CVE-2020-15778-SCP-Command-Injection-Check

CVE-2020-15778 – OpenSSH SCP Command Injection Vulnerability Detection Script About CVE-2020-15778 is a command injection vulnerability discovered in the scp utility provided by OpenSSH versions ≤ 8.3p1. The issue allows an attacker to execute arbitrary commands on the client system if a crafted...

7.4CVSS7AI score0.12996EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/22 2:13 p.m.10 views

CVE-2026-39492

CVE-2026-39492 — WP Maps Blind SQL Injection Scanner Pre-Auth Time-Based Blind SQLi via Backtick Bypass → DB Extraction Overview CVE-2026-39492 is a critical-severity CVSS 9.3 unauthenticated blind SQL injection vulnerability in the WP Maps plugin wp-google-map-plugin versions ≤ 4.9.1. The...

9.3CVSS5.7AI score0.00363EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 10:02 p.m.9 views

CVE-2026-65643-PoC-Toolkit

CVE‑2026‑65643 – cPanel Domain Parking RCE Toolkit ⚠️ ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse Act...

8.8CVSS6.8AI score0.00904EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/18 6:02 p.m.7 views

CVE-2024-36057

CVE-2024-36057 — Koha Library Software CVE ID: CVE-2024-36057 Product: Koha Library Software Vulnerability Type: OS Command Injection CWE-78 CVSS Score: 8.7 High Authenticated Affected Versions: Below 22.05.22 Credits: Karolis Narvilas Description Koha is an open-source integrated library system....

6.5AI score0.01803EPSS
SaveExploits1
OSV
OSV
added 2026/09/17 10:01 p.m.9 views

CVE-2026-54646 CubeCart: SQL Identifier Injection via Backtick Bypass in maintenance.index.inc.php

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/maintenance.index.inc.php places administrator-controlled tablename values into ALTER TABLE, CHECK TABLE, and ANALYZE TABLE statements without validating the identifiers or escaping embedded backticks. An authenticated...

7.2CVSS6AI score
SaveExploits0References6
CVE
CVE
added 2026/09/17 10:01 p.m.17 views

CVE-2026-54646

CubeCart (an ecommerce platform) is affected by a SQL identifier injection in admin/sources/maintenance.index.inc.php (line 551) prior to 6.7.5 . Administrator-supplied table names from POST parameters are wrapped in backticks and placed into structural SQL statements (ALTER TABLE, CHECK TABLE, A...

7.2CVSS6AI score0.01447EPSS
SaveExploits2References4
EUVD
EUVD
added 2026/09/17 10:01 p.m.12 views

EUVD-2026-82527

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/maintenance.index.inc.php places administrator-controlled tablename values into ALTER TABLE, CHECK TABLE, and ANALYZE TABLE statements without validating the identifiers or escaping embedded backticks. An authenticated...

7.2CVSS6AI score0.01447EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
added 2026/09/17 10:01 p.m.8 views

CVE-2026-54646 CubeCart: SQL Identifier Injection via Backtick Bypass in maintenance.index.inc.php

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/maintenance.index.inc.php places administrator-controlled tablename values into ALTER TABLE, CHECK TABLE, and ANALYZE TABLE statements without validating the identifiers or escaping embedded backticks. An authenticated...

7.2CVSS6AI score0.01447EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2026/09/17 10:01 p.m.30 views

CVE-2026-54646 CubeCart: SQL Identifier Injection via Backtick Bypass in maintenance.index.inc.php

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/maintenance.index.inc.php places administrator-controlled tablename values into ALTER TABLE, CHECK TABLE, and ANALYZE TABLE statements without validating the identifiers or escaping embedded backticks. An authenticated...

7.2CVSS0.01447EPSS
SaveExploits2References4
Kitploit
Kitploit
added 2026/09/17 12:49 a.m.9 views

CVE-2026-44656

CVE-2026-44656 - Vim Modeline path Option Command Injection Vulnerability English|中文 This repository provides a reproduction environment for CVE-2026-44656. The vulnerability stems from a flaw in Vim's handling of backtick expansion expressions in the path option within modelines. Attackers can...

5.3CVSS6.9AI score0.00917EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/09/15 1:02 p.m.16 views

Exploit for CVE-2026-59550

CVE-2026-59550 - AWP Classifieds ≤ 4.4.7 unauthenticated SQL i...

9.3CVSS6.1AI score0.00229EPSS
SaveExploits1
OSV
OSV
added 2026/09/14 4:35 p.m.20 views

OESA-2026-3871 perl-Net-DNS security update

Net :: DNS is a collection of Perl's Domain Name System resolvers. It allows programmers to perform DNS queries for gethostbyname and gethostbyaddr functions. Security Fixes: Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR...

9.8CVSS6AI score0.00787EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/11 3:39 a.m.41 views

CVE-2026-15462 Sticky Chat Widget <= 1.4.2 - Unauthenticated SQL Injection

The Sticky Chat Widget plugin for WordPress is vulnerable to SQL Injection via the 'scwformfields' parameter array keys of the 'scwsaveformdata' AJAX action in versions up to, and including, 1.4.2. This is due to the saveformdata function passing attacker-controlled POST array keys unsanitized to...

7.5CVSS0.00304EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/09/11 3:39 a.m.8 views

CVE-2026-15462 Sticky Chat Widget <= 1.4.2 - Unauthenticated SQL Injection

The Sticky Chat Widget plugin for WordPress is vulnerable to SQL Injection via the 'scwformfields' parameter array keys of the 'scwsaveformdata' AJAX action in versions up to, and including, 1.4.2. This is due to the saveformdata function passing attacker-controlled POST array keys unsanitized to...

7.5CVSS5.7AI score0.00304EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/11 3:39 a.m.9 views

EUVD-2026-75954

The Sticky Chat Widget plugin for WordPress is vulnerable to SQL Injection via the 'scwformfields' parameter array keys of the 'scwsaveformdata' AJAX action in versions up to, and including, 1.4.2. This is due to the saveformdata function passing attacker-controlled POST array keys unsanitized to...

7.5CVSS5.7AI score0.00304EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.11 views

PT-2026-89748

The Sticky Chat Widget plugin for WordPress is vulnerable to SQL Injection via the 'scw form fields' parameter array keys of the 'scw save form data' AJAX action in versions up to, and including, 1.4.2. This is due to the save form data function passing attacker-controlled POST array keys...

7.5CVSS5.7AI score0.00304EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/05 3:03 p.m.7 views

OESA-2026-3627 perl-Net-DNS security update

Net :: DNS is a collection of Perl's Domain Name System resolvers. It allows programmers to perform DNS queries for gethostbyname and gethostbyaddr functions. Security Fixes: Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR...

9.8CVSS5.8AI score0.00787EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/09/03 7:17 p.m.17 views

NPM: Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)

NPM: Orval: RCE via OpenAPI path - unescaped request-URL template literal backtick breakout vulnerability discovered by ? in WordPress Npm orval versions 8.21.0...

9.3CVSS5.9AI score0.00664EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/09/03 7:17 p.m.10 views

GHSA-FG9P-MRXR-HVQ7 Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)

Summary Orval emits the OpenAPI path into the generated request URL as a TEMPLATE LITERAL /users/... without escaping the backtick character. A path containing a backtick closes the template literal and injects a concatenation expression that is evaluated when the generated URL/request/key functi...

9.3CVSS6AI score0.00664EPSS
SaveExploits0References6
Rows per page
Query Builder