CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

453949 matches found

Kitploit•added 2026/10/16 9:01 p.m.•14 views

JndiLookup

JndiLookup Some tool to help analyzing Apache Log4j 2 CVE-2021-44228 This tool uses the "lookup" feature from log4j-2 to test against the JNDI vulnerability. The objective is to easily run the lookup feature to normalize logs for example or to do a real testing on some payload - please be cautiou...

10CVSS7.9AI score0.99999EPSS

SaveExploits385References1

Chainguard•added 2026/10/16 8:55 p.m.•6 views

GHSA-VRCC-3CH7-HPPW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cognitoidp, crossplane-provider-aws-dlm-fips, crossplane-provider-azure-alertsmanagement, crossplane-provider-aws-autoscaling, crossplane-provider-aws-elasticbeanstalk, crossplane-aws-monolith, crossplane-provider-aws-mediapackage-fips,...

5.8AI score

SaveExploits0

Chainguard•added 2026/10/16 8:55 p.m.•4 views

GHSA-23VG-4CJM-66Q5 vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/10/16 8:55 p.m.•6 views

CVE-2026-100348 vulnerabilities

5.3CVSS5.8AI score0.00372EPSS

SaveExploits0

Chainguard•added 2026/10/16 8:55 p.m.•4 views

GHSA-FH4F-47MF-F2GJ vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/10/16 8:55 p.m.•5 views

CVE-2026-100352 vulnerabilities

7.5CVSS5.8AI score0.00426EPSS

SaveExploits0

Chainguard•added 2026/10/16 8:55 p.m.•6 views

CVE-2026-100353 vulnerabilities

7.5CVSS5.8AI score0.00335EPSS

SaveExploits0

Chainguard•added 2026/10/16 8:55 p.m.•4 views

GHSA-RJ39-CV6W-8WV7 vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/10/16 8:55 p.m.•7 views

CVE-2026-100351 vulnerabilities

7.4CVSS5.8AI score0.00488EPSS

SaveExploits0

Chainguard•added 2026/10/16 8:55 p.m.•5 views

GHSA-MH7X-F8WQ-4JHX vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/10/16 8:55 p.m.•4 views

GHSA-G8CF-RCJF-C8CF vulnerabilities

5.8AI score

SaveExploits0

Chainguard•added 2026/10/16 8:55 p.m.•6 views

CVE-2026-100354 vulnerabilities

7.5CVSS5.8AI score0.00435EPSS

SaveExploits0

Chainguard•added 2026/10/16 8:55 p.m.•7 views

CVE-2026-100347 vulnerabilities

5.3CVSS5.8AI score0.00515EPSS

SaveExploits0

GithubExploit•added 2026/10/16 8:49 p.m.•13 views

cve-hunter

...

6.2AI score

SaveExploits0

Kitploit•added 2026/10/16 8:41 p.m.•15 views

CVE-2026-41089-Netlogon

🛡️ AI Security Tool Module CVE-2026-41089: Netlogon Stack Buffer Overflow Official security verification module for the AI Security Tool Ecosystem 🌐 Demo • 📚 Project Website • 💬 Community Chat Site Navigation: Home • Updates • Downloads • Modules 🧠 Conceptual Overview I am publishing a detailed...

9.8CVSS9.2AI score0.00974EPSS

SaveExploits40References6

Kitploit•added 2026/10/16 8:37 p.m.•18 views

freepbx-endpoint-sqli-rce

CVE-2025-57819 — FreePBX Endpoint Module SQL Injection → Remote Code Execution Summary FreePBX is the open-source web GUI for Asterisk PBX, widely deployed in enterprise telephony environments. The Endpoint Manager module exposes an AJAX handler at /admin/ajax.php that accepts a brand parameter a...

10CVSS9.8AI score0.86347EPSS

SaveExploits36References1

Kitploit•added 2026/10/16 8:36 p.m.•18 views

CVE-2026-37072

CVE-2026-37072 Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php An unauthenticated attacker can exploit a Local File Inclusion vulnerability in the 'lang' GET parameter. By sending a specially crafted POST request with t...

9.8CVSS6.1AI score0.00512EPSS

SaveExploits1References1

Kitploit•added 2026/10/16 8:35 p.m.•22 views

CVE-2026-8054

1. Vulnerability Overview CVE-2026-8054 is a high-severity pre-authentication SQL injection vulnerability Pre-auth SQL Injection in the dotCMS Core Publish Audit API. The vulnerability is officially tracked as Security Incident SI-75 and was formally disclosed at the end of May 2026. Since...

10CVSS6.6AI score0.01623EPSS

SaveExploits1

Kitploit•added 2026/10/16 8:34 p.m.•21 views

CVE-2026-5076

☠️ CVE-2026-5076 ARMember Premium = 7.3.1 Insecure Password Reset Mechanism → Full Admin Account Takeover Plaintext Password Reset Keys Stored in Database + SQL Injection = Complete Admin Takeover 📋 Vulnerability Information Item| Detail ---|--- CVE ID| CVE-2026-5076 Plugin| ARMember – Membership...

9.8CVSS6.4AI score0.01577EPSS

SaveExploits3

Kitploit•added 2026/10/16 8:34 p.m.•21 views

CVE-2026-5513

CVE-2026-5513 — Bookly ≤ 27.2 Stored XSS via Cookie Overview Field| Value ---|--- CVE ID| CVE-2026-5513 Vulnerability| Stored Cross-Site Scripting XSS Plugin| Bookly — Online Scheduling and Appointment Booking System Affected| ≤ 27.2 Patched| 27.3+ CVSS 3.1| 7.2 High —...

7.2CVSS6.4AI score0.00318EPSS

SaveExploits1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by