Lucene search
+L

558 matches found

Kitploit
Kitploit
โ€ขadded 2026/09/02 8:58 p.m.โ€ข6 views

halo-2.25.4-backup-write-CVE-2026-67920

Halo CMS ใƒใƒƒใ‚ฏใ‚ขใƒƒใƒ—ๅพฉๅ…ƒใซใŠใ‘ใ‚‹ไปปๆ„ใƒ•ใ‚กใ‚คใƒซๆ›ธใ่พผใฟ่„†ๅผฑๆ€ง ๆฆ‚่ฆ Halo CMS ใƒใƒผใ‚ธใƒงใƒณ 2.25.4 ไปฅๅ‰ใฎใƒใƒƒใ‚ฏใ‚ขใƒƒใƒ—ๅพฉๅ…ƒๆฉŸ่ƒฝใซใฏใ€้‡ๅคงใชไปปๆ„ใƒ•ใ‚กใ‚คใƒซๆ›ธใ่พผใฟใฎ่„†ๅผฑๆ€งใŒๅญ˜ๅœจใ—ใพใ™ใ€‚MigrationServiceImpl.java ใฎ restoreWorkdir ใƒกใ‚ฝใƒƒใƒ‰ใฏใ€ใƒฆใƒผใ‚ถใƒผใŒๆไพ›ใ—ใŸใƒใƒƒใ‚ฏใ‚ขใƒƒใƒ—ใ‚ขใƒผใ‚ซใ‚คใƒ–ใ‹ใ‚‰ workdir/ ใƒ‡ใ‚ฃใƒฌใ‚ฏใƒˆใƒชใ‚’ใ€ใƒ•ใ‚กใ‚คใƒซใ‚ฟใ‚คใƒ—ใฎๆคœ่จผใ€ใƒ‘ใ‚นใƒˆใƒฉใƒใƒผใ‚ตใƒซๅฏพ็ญ–ใ€ใ‚ทใƒณใƒœใƒชใƒƒใ‚ฏใƒชใƒณใ‚ฏใฎใƒใ‚งใƒƒใ‚ฏใ‚’ไธ€ๅˆ‡่กŒใ‚ใšใซใ€Halo...

8.8CVSS5.9AI score0.0065EPSS
SaveExploits1
Kitploit
Kitploit
โ€ขadded 2026/09/02 5:13 p.m.โ€ข3 views

CVE-2023-33781

CVE-2023-33781 ์„ค๋ช… D-Link DIR-842V2 v1.0.3์—์„œ ํ…”๋„ท ์—ฐ๊ฒฐ ์‹œ ์‚ฌ์šฉ์ž๊ฐ€ ์ž„์˜์˜ ๋ฐ”์ด๋„ˆ๋ฆฌ๋ฅผ ์‹คํ–‰ํ•  ์ˆ˜ ์žˆ๋Š” ์ทจ์•ฝ์ ์ด ๋ฐœ๊ฒฌ๋˜์—ˆ์Šต๋‹ˆ๋‹ค. ์ด ์ทจ์•ฝ์ ์€ ๋ฐฑ์—…/๋ณต์› ๊ธฐ๋Šฅ์„ ์‚ฌ์šฉํ•˜์—ฌ ํŠธ๋ฆฌ๊ฑฐ๋  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ๊ฐœ๋… ์ฆ๋ช…...

8.8CVSS7.2AI score0.32032EPSS
SaveExploits2
Kitploit
Kitploit
โ€ขadded 2026/09/02 3:58 p.m.โ€ข2 views

CVE-2022-30075

CVE-2022-30075 Tp-Linkใƒซใƒผใ‚ฟใƒผใซใŠใ‘ใ‚‹่ช่จผๆธˆใฟใƒชใƒขใƒผใƒˆใ‚ณใƒผใƒ‰ๅฎŸ่กŒ ๅฝฑ้Ÿฟใ‚’ๅ—ใ‘ใ‚‹ใƒ‡ใƒใ‚คใ‚น ใŠไฝฟใ„ใฎTp-Linkใƒซใƒผใ‚ฟใƒผใซใƒใƒƒใ‚ฏใ‚ขใƒƒใƒ—ใจๅพฉๅ…ƒๆฉŸ่ƒฝใŒใ‚ใ‚Šใ€ใƒ•ใ‚กใƒผใƒ ใ‚ฆใ‚งใ‚ขใŒ2022ๅนด6ๆœˆใ‚ˆใ‚Šๅคใ„ๅ ดๅˆใ€่„†ๅผฑๆ€งใฎๅฝฑ้Ÿฟใ‚’ๅ—ใ‘ใ‚‹ๅฏ่ƒฝๆ€งใŒใ‚ใ‚Šใพใ™ใ€‚ ใƒ†ใ‚นใƒˆๆธˆใฟใƒ‡ใƒใ‚คใ‚น Tp-Link Archer AX50ใ€‚ไป–ใฎtplinkใƒซใƒผใ‚ฟใƒผใงใฏใƒใƒƒใ‚ฏใ‚ขใƒƒใƒ—ใฎๅฝขๅผใŒ็•ฐใชใ‚‹ๅ ดๅˆใŒใ‚ใ‚Šใ€ใ‚จใ‚ฏใ‚นใƒ—ใƒญใ‚คใƒˆใฎไฟฎๆญฃใŒๅฟ…่ฆใซใชใ‚‹ใ“ใจใŒใ‚ใ‚Šใพใ™ใ€‚ PoC ใƒซใƒผใ‚ฟใƒผไธŠใงtelnetใƒ‡ใƒผใƒขใƒณใ‚’่ตทๅ‹•ใ™ใ‚‹ใŸใ‚ใฎใ‚จใ‚ฏใ‚นใƒ—ใƒญใ‚คใƒˆใ‚’ไฝฟ็”จ ๆ‰‹ๅ‹•ใซใ‚ˆใ‚‹ๆ‚ช็”จ 1. ใƒซใƒผใ‚ฟใƒผใฎWebใ‚คใƒณใ‚ฟใƒผใƒ•ใ‚งใƒผใ‚นใซใƒญใ‚ฐใ‚คใƒณ 2. advanc...

8.8CVSS7.5AI score0.33832EPSS
SaveExploits8References2
Nuclei
Nuclei
โ€ขadded 2026/09/02 7:49 a.m.โ€ข25 views

Emlog 2.1.9 - SQL Injection

emlog v2.1.9 contains a SQL injection caused by unsanitized input in the data backup/restore functionality, allowing attackers to execute arbitrary SQL commands through crafted backup files. id: CVE-2023-39121 info: name: Emlog 2.1.9 - SQL Injection author: wjch611 severity: high description: |...

7.2CVSS7.3AI score0.02513EPSS
SaveExploits1References2
Kitploit
Kitploit
โ€ขadded 2026/09/02 6:35 a.m.โ€ข4 views

SparstanBoogie

SparstanBoogie ใฎ่ตทๆบใฏใ€ๅ ฑๅ‘Šใซใ‚ˆใ‚‹ใจ iOS/iPadOS 15.2 - 16.7 RC 20H18 ใŠใ‚ˆใณ 17.0 ใงใƒ†ใ‚นใƒˆใ•ใ‚Œใพใ—ใŸใŒใ€ๅฎŸ้š›ใซๅ‹•ไฝœใ—ใชใใชใฃใŸ 26.1 26.1 ใฎใƒ‡ใƒใ‚คใ‚นใงใฎใƒ†ใ‚นใƒˆใซ้–ขใ—ใฆใฏใ€ใ‚ˆใ‚ŠไฝŽใƒฌใƒ™ใƒซใชใƒ†ใ‚นใƒˆใŒๅฟ…่ฆใงใ‚ใ‚Šใ€ๆญ“่ฟŽใ•ใ‚Œใพใ™ใ€‚ใพใŸใ€ๅ ฑๅ‘Šใ•ใ‚ŒใŸใƒใƒผใ‚ธใƒงใƒณใ‚ˆใ‚ŠไธŠใพใŸใฏไธ‹ใฎใƒ‡ใƒใ‚คใ‚นใงใฎใƒ†ใ‚นใƒˆใ‚‚ๆญ“่ฟŽใ•ใ‚Œใพใ™ใ€‚ๆ–ฐใ—ใ„ใƒ‡ใƒใ‚คใ‚นใงๅ†็™บใ™ใ‚‹ๅฏ่ƒฝๆ€งใŒใ‚ใ‚‹ใŸใ‚ใ€่‡ชๅˆ†ใซใจใฃใฆๅ‹•ไฝœใ™ใ‚‹ใ‹ใฉใ†ใ‹ใ‚’ๅ ฑๅ‘Šใ—ใŸใ„ใจ่€ƒใˆใ‚‹ๅ–„ๆ„ใฎใƒฆใƒผใ‚ถใƒผใ‚’็„ก่ฆ–ใ™ใ‚‹็†็”ฑใฏใ‚ใ‚Šใพใ›ใ‚“ใ€‚ใ“ใฎใƒ„ใƒผใƒซใฎๅ…ƒใจใชใฃใŸ่ฆชใƒ—ใƒญใ‚ฐใƒฉใƒ ใงใ‚ตใƒใƒผใƒˆใ•ใ‚Œใฆใ„ใชใ„ใจใ•ใ‚Œใฆใ„ใŸๅคใ„ใƒ‡ใƒใ‚คใ‚นใ‚‚ใ€iOS 15.8.7...

5.9AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/02 4:08 a.m.โ€ข6 views

CVE-2024-44258

CVE-2024-44258: ManagedConfiguration ํ”„๋ ˆ์ž„์›Œํฌ์˜ ์‹ฌ๋ณผ๋ฆญ ๋งํฌ ์ทจ์•ฝ์  ์š”์•ฝ CVE-2024-44258 ๋Š” Apple ๊ธฐ๊ธฐ์˜ ManagedConfiguration ํ”„๋ ˆ์ž„์›Œํฌ ๋ฐ profiled ๋ฐ๋ชฌ ๋‚ด์˜ ์‹ฌ๋ณผ๋ฆญ ๋งํฌ ์ทจ์•ฝ์ ์„ ๊ฐ•์กฐํ•ฉ๋‹ˆ๋‹ค. ์กฐ์ž‘๋œ ๋ฐฑ์—…์„ ๋ณต์›ํ•  ๋•Œ ๋งˆ์ด๊ทธ๋ ˆ์ด์…˜ ํ”„๋กœ์„ธ์Šค๊ฐ€ ๋Œ€์ƒ ํด๋”๊ฐ€ ์‹ฌ๋ณผ๋ฆญ ๋งํฌ์ธ์ง€ ํ™•์ธํ•˜์ง€ ๋ชปํ•˜์—ฌ ๊ถŒํ•œ์ด ์—†๋Š” ํŒŒ์ผ์ด ์ œํ•œ๋œ ์˜์—ญ์œผ๋กœ ๋งˆ์ด๊ทธ๋ ˆ์ด์…˜๋  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. CVE ID CVE-2024-44258 ์ด ์ด ๋ฌธ์ œ์— ํ• ๋‹น๋˜์—ˆ์Šต๋‹ˆ๋‹ค. CVE๋Š” ๊ณต๊ฐœ์ ์œผ๋กœ ์•Œ๋ ค์ง„ ๋ณด์•ˆ ์ทจ์•ฝ์ ์—...

7.1CVSS5.8AI score0.00751EPSS
SaveExploits2
Kitploit
Kitploit
โ€ขadded 2026/09/02 2:26 a.m.โ€ข4 views

Apache-Solr-RCE_CVE-2023-50386_POC

Apache-Solr-RCECVE-2023-50386POC Apache Solr Backup/Restore APIs RCE Poc CVE-2023-50386 ์ฐธ๊ณ  dalao ๋ถ„๋“ค๊ป˜ ๊ฒฝ์˜๋ฅผ ํ‘œํ•˜๋ฉฐ: CVE-2023-50386 ์ทจ์•ฝ์  ์ž‘์„ฑ์ž ๋ธ”๋กœ๊ทธ Java Security Manager ์šฐํšŒ ๋ฐฉ๋ฒ• JDK 17์—์„œ์˜ ๋ฆฌํ”Œ๋ ‰์…˜ ๋ณดํ˜ธ ์šฐํšŒ JNI๋ฅผ ์ด์šฉํ•œ Rasp ์šฐํšŒ ์ทจ์•ฝ์  ์ด์šฉ ์›๋ฆฌ ๋ฐ ๊ณ ์ฐฐ: https://mp.weixin.qq.com/s/mO4e8aiuL56yBdOD4jy2qQ poc๋Š” Pocsuite3๋กœ ์ž‘์„ฑ๋˜์—ˆ์œผ๋ฉฐ, ํ”„๋ ˆ์ž„์›Œ...

8.8CVSS7.1AI score0.83719EPSS
SaveExploits4References2
Kitploit
Kitploit
โ€ขadded 2026/09/01 9:43 p.m.โ€ข4 views

reload.sh

reload.sh ํ•˜์ง€ ๋งˆ์„ธ์š”... ์ ˆ๋Œ€๋กœ ์‹ค์ œ ์‹œ์Šคํ…œ์˜ˆ: ํ”„๋กœ๋•์…˜์ด๋‚˜ ์ค‘์š”ํ•œ ๋ฐ์ดํ„ฐ๊ฐ€ ์ €์žฅ๋œ ๊ฐœ์ธ ์ปดํ“จํ„ฐ ์—์„œ ์‹คํ–‰ํ•˜์ง€ ๋งˆ์„ธ์š”. ์ด ๋ ˆ์‹œํ”ผ๋Š” ๋‹ค๋ฅธ ์‹œ์Šคํ…œ์ด ์ด๋ฏธ ์„ค์น˜๋˜์–ด ์‹คํ–‰ ์ค‘์ธ ์ƒํƒœ์—์„œ ์ƒˆ ์‹œ์Šคํ…œ์„ ์„ค์น˜ํ•˜๋Š” ๋ฐฉ๋ฒ•์„ ๋ณด์—ฌ์ค๋‹ˆ๋‹ค. ์ •๋ง ๋ฉ‹์ง€๊ณ  ๋†€๋ž์ง€๋งŒ ๋งค์šฐ ์œ„ํ—˜ํ•ฉ๋‹ˆ๋‹ค! ๋งŒ์•ฝ ํ˜ผ๋ž€์˜ ๋Šช์— ๋น ์ ธ๋ณด๊ณ  ์‹ถ๋‹ค๋ฉด ๊ณ„์† ์ฝ์–ด๋ณด์„ธ์š”. ์™œ ๋งŒ๋“ค์—ˆ๋‚˜์š”? ์ €๋Š” ์‹คํ—˜์„ ์ข‹์•„ํ•ฉ๋‹ˆ๋‹ค. ์‚ฌ๋ฌผ์ด ์–ด๋–ป๊ฒŒ ์ž‘๋™ํ•˜๋Š”์ง€ ์•Œ๊ณ  ์‹ถ์–ดํ•˜๊ธฐ ๋•Œ๋ฌธ์ž…๋‹ˆ๋‹ค. ์‹คํ—˜์„ ํ†ตํ•ด ๋” ๊นŒ๋‹ค๋กœ์šด ๊ฐœ๋…๋“ค์„ ์ดํ•ดํ•˜๊ณ  ๋ณผ ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์˜ค๋ž˜์ „, ์ด ๋ฐฉ๋ฒ•์ด ์ œ ๋ชฉ์ˆจ์„ ๊ตฌํ•ด์ค€ ์ ์ด ์žˆ์ง€๋งŒ ์ •๋ง...

5.9AI score
SaveExploits0References3
EUVD
EUVD
โ€ขadded 2026/09/01 1:27 p.m.โ€ข6 views

EUVD-2026-69132

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause execution of Linux Operating system commands when a system back up is restored that has been maliciously modified...

7.3CVSS5.9AI score0.00617EPSS
SaveExploits0References1
Kitploit
Kitploit
โ€ขadded 2026/08/31 6:32 a.m.โ€ข4 views

CVE-2026-55168

CVE-2026-55168 ใ“ใฎใƒชใƒใ‚ธใƒˆใƒชใฏใ€Runtipi ใซใŠใ‘ใ‚‹ CVE-2026-55168 ใฎใ‚ทใƒณใƒ—ใƒซใชPoCใ‚’ๅซใ‚“ใงใ„ใพใ™ใ€‚ ใ“ใฎๅ•้กŒใฏใ€ใƒใƒƒใ‚ฏใ‚ขใƒƒใƒ—ๅพฉๅ…ƒใƒ•ใƒญใƒผใ‚’ไป‹ใ—ใฆๅˆฐ้”ๅฏ่ƒฝใช่ช่จผๆธˆใฟไปปๆ„ใƒ•ใ‚กใ‚คใƒซๆ›ธใ่พผใฟใงใ™ใ€‚็ดฐๅทฅใ•ใ‚ŒใŸใƒใƒƒใ‚ฏใ‚ขใƒƒใƒ—ใ‚ขใƒผใ‚ซใ‚คใƒ–ใฏใ€ๅพฉๅ…ƒใ•ใ‚ŒใŸใ‚ขใƒ—ใƒชใ‚ฑใƒผใ‚ทใƒงใƒณใƒ‡ใƒผใ‚ฟใซใ‚ทใƒณใƒœใƒชใƒƒใ‚ฏใƒชใƒณใ‚ฏใ‚’ไป•ๆŽ›ใ‘ใ€ใใฎๅพŒใฎ้€šๅธธใฎ่จญๅฎšๆ›ดๆ–ฐใŒใใฎใ‚ทใƒณใƒœใƒชใƒƒใ‚ฏใƒชใƒณใ‚ฏใ‚’ใŸใฉใฃใฆใ€ๆ„ๅ›ณใ•ใ‚ŒใŸใƒ‡ใ‚ฃใƒฌใ‚ฏใƒˆใƒชใฎๅค–ใซๆ”ปๆ’ƒ่€…ใŒๅˆถๅพกใ™ใ‚‹ใ‚ณใƒณใƒ†ใƒณใƒ„ใ‚’ๆ›ธใ่พผใฟใพใ™ใ€‚ ๅ‚่€ƒใ‚ขใƒ‰ใƒใ‚คใ‚ถใƒช:...

6.5CVSS5.9AI score0.00528EPSS
SaveExploits1References1
Kitploit
Kitploit
โ€ขadded 2026/08/31 5:50 a.m.โ€ข2 views

CVE-2025-43537

CVE-2025-43537 Apple ใ‚ปใ‚ญใƒฅใƒชใƒ†ใ‚ฃใ‚ฏใƒฌใ‚ธใƒƒใƒˆ ็ ”็ฉถ่€…: Al Sadman Awal Apple Product Security ใซใ‚ˆใ‚Šใ€CVE-2025-43537 ใฎ่ฒฌไปปใ‚ใ‚‹้–‹็คบใจใ—ใฆๆญฃๅผใซใ‚ฏใƒฌใ‚ธใƒƒใƒˆใ•ใ‚Œใพใ—ใŸใ€‚ ๆฆ‚่ฆ CVE-2025-43537 ใฏใ€็‹ฌ็ซ‹ใ—ใŸใ‚ปใ‚ญใƒฅใƒชใƒ†ใ‚ฃ็ ”็ฉถใฎไธญใง็‰นๅฎšใ•ใ‚Œใ€Apple ใซ่ฒฌไปปใ‚’ๆŒใฃใฆ้–‹็คบใ•ใ‚ŒใŸใ‚ปใ‚ญใƒฅใƒชใƒ†ใ‚ฃ่„†ๅผฑๆ€งใงใ™ใ€‚ Apple ใฏใ“ใฎๅ ฑๅ‘Šใ‚’่ชฟๆŸปใ—ใ€ใ‚ปใ‚ญใƒฅใƒชใƒ†ใ‚ฃไฟฎๆญฃใ‚’ๅฎŸ่ฃ…ใ—ใฆ CVE-2025-43537 ใ‚’ๅ‰ฒใ‚Šๅฝ“ใฆใ€ๅ…ฌๅผใฎใ‚ปใ‚ญใƒฅใƒชใƒ†ใ‚ฃใ‚ขใƒ‰ใƒใ‚คใ‚ถใƒชใฎไธญใงใ“ใฎ่ฒข็Œฎใ‚’ๅ…ฌใซ่ชใ‚ใพใ—ใŸใ€‚...

5.5CVSS5.8AI score0.00475EPSS
SaveExploits0References1
Kitploit
Kitploit
โ€ขadded 2026/08/31 4:12 a.m.โ€ข4 views

CVE-2026-64824-PoC

CVE-2026-64824 โ€” Home Assistant Core ใƒใƒƒใ‚ฏใ‚ขใƒƒใƒ—ใƒปใƒชใ‚นใƒˆใ‚ขใฎใ‚ทใƒณใƒœใƒชใƒƒใ‚ฏใƒชใƒณใ‚ฏใƒ‘ใ‚นใƒˆใƒฉใƒใƒผใ‚ตใƒซ โ†’ RCE CVSS 8.4๏ผˆ้‡ๅคง๏ผ‰ ยท GHSA-cwh8-w64c-4j5h ยท CWE-22 / CWE-59 TL;DR ่ช่จผๆธˆใฟ๏ผˆ็ฎก็†่€…๏ผ‰ๆ”ปๆ’ƒ่€…ใŒใ€็ดฐๅทฅใ•ใ‚ŒใŸใƒใƒƒใ‚ฏใ‚ขใƒƒใƒ—tarใ‚’ใ‚ขใƒƒใƒ—ใƒญใƒผใƒ‰ใ—ใพใ™ใ€‚ใƒชใ‚นใƒˆใ‚ขๅ‡ฆ็†ใฏๅ†…้ƒจใฎ homeassistant.tar.gz ใ‚’ filter="fullytrusted" ใงๅฑ•้–‹ใ—ใ€ใƒกใƒณใƒใƒผใฎ ๅๅ‰ ใฎใฟใ‚’ๆคœ่จผใ—ใพใ™ โ€” SYMTYPEใฎ ใƒชใƒณใ‚ฏๅ ใฏไธ€ๅˆ‡ๆคœ่จผใ—ใพใ›ใ‚“ใ€‚็ตถๅฏพใƒ‘ใ‚น๏ผˆไพ‹: Python ใฎ...

9.3CVSS5.9AI score0.00797EPSS
SaveExploits1
Kitploit
Kitploit
โ€ขadded 2026/08/30 1:07 p.m.โ€ข5 views

CVE-2023-5808

CVE-2023-5808 CVE-2023-5808์€ Hitachi NAS HNAS์˜ System Management Unit SMU Backup & Restore ๊ธฐ๋Šฅ์—์„œ ๋ฐœ๊ฒฌ๋œ ์•ˆ์ „ํ•˜์ง€ ์•Š์€ ์ง์ ‘ ๊ฐ์ฒด ์ฐธ์กฐ IDOR ์ทจ์•ฝ์ ์ž…๋‹ˆ๋‹ค. ์ด ์ทจ์•ฝ์ ์€ 14.8.7825.01 ์ด์ „์˜ SMU ๋ฒ„์ „์— ์˜ํ–ฅ์„ ๋ฏธ์นฉ๋‹ˆ๋‹ค. ์•…์šฉ ์ด ์•…์šฉ์—๋Š” ๊ณต๊ฒฉ์ž๊ฐ€ Read-Only ๋˜๋Š” Global Administrator๊ฐ€ ์•„๋‹Œ ์‚ฌ์šฉ์ž ๊ณ„์ •์˜ ์ž๊ฒฉ ์ฆ๋ช…์„ ํ†ต์ œํ•  ์ˆ˜ ์žˆ์–ด์•ผ ํ•ฉ๋‹ˆ๋‹ค. ์ฆ‰: Storage Administrator Server Administra...

7.6CVSS6.7AI score0.00544EPSS
SaveExploits5
NVD
NVD
โ€ขadded 2026/08/30 7:17 a.m.โ€ข14 views

CVE-2026-19722

The WPvivid โ€” Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files extracted from a backup package during restoration, allowing high privilege users such as administrators to write arbitrary files outside the intended restore directory, which can...

0.00172EPSS
SaveExploits0References1
CVE
CVE
โ€ขadded 2026/08/30 6:00 a.m.โ€ข23 views

CVE-2026-19722

WPvivid โ€” Backup, Migration & Staging is a WordPress plugin affected by a Zip Slip vulnerability prior to version 0.9.133 . During backup restoration, the plugin does not validate the destination path of files extracted from a backup package, allowing an authenticated user with high privileges (e...

6AI score0.00172EPSS
SaveExploits0References1
Kitploit
Kitploit
โ€ขadded 2026/08/29 1:07 p.m.โ€ข5 views

CVE-2023-22518

CVE-2023-22518 Exploit per Confluence CVE-2023-22518 RCE tramite backup-restore Endpoint POST /setup/setup-restore.action Richiede un login valido e diritti di amministratore o un bypass dell'autenticazione File xmlexport-20231127-071916-1.zip โ€“ backup Confluence vuoto. Ripristinarlo cancellerร ...

10CVSS9AI score0.99999EPSS
SaveExploits49References1
NVD
NVD
โ€ขadded 2026/08/27 6:17 a.m.โ€ข11 views

CVE-2026-76549

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

5.9CVSS0.00097EPSS
SaveExploits0References1
EUVD
EUVD
โ€ขadded 2026/08/27 6:00 a.m.โ€ข5 views

EUVD-2026-66877

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

5.9CVSS5.4AI score0.00097EPSS
SaveExploits0References1
Kitploit
Kitploit
โ€ขadded 2026/08/27 1:34 a.m.โ€ข5 views

CVE-2026-1357

CVE-2026-1357 Laborumgebung fรผr CVE-2026-1357 1. Umgebung aufbauen sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo wget https://downloads.wordpress.org/plugin/wpvivid-backuprestore.0.9.123.zip unzip...

9.8CVSS8.9AI score0.32714EPSS
SaveExploits14
OSV
OSV
โ€ขadded 2026/08/25 9:15 p.m.โ€ข4 views

CVE-2026-32637 Velero vulnerable to file path traversal when extracting from backup's tarball

Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes. Prior to 1.18.1, an attacker who compromises the backup object-storage backend can upload a malicious backup tarball containing parent-directory paths that escape the...

5.9CVSS5.5AI score
SaveExploits0References6
Rows per page
Query Builder