Lucene search
+L

45595 matches found

Nuclei
Nuclei
added 2026/09/07 6:34 a.m.190 views

Camaleon CMS < 2.8.1 Arbitrary File Write to RCE

An arbitrary file write vulnerability accessible via the upload method of the MediaController allows authenticated users to write arbitrary files to any location on the web server Camaleon CMS is running on depending on the permissions of the underlying filesystem. E.g. This can lead to a remote...

9.9CVSS6.3AI score0.40956EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.32 views

Sitecore CMS - Cross-Site Scripting

Sitecore CMS contains a cross-site scripting vulnerability via the "special way" of displaying XML Controls directly, which allows for a Cross Site Scripting Attack. id: CVE-2014-100004 info: name: Sitecore CMS - Cross-Site Scripting author: DhiyaneshDK severity: medium description: | Sitecore CM...

4.3CVSS5.7AI score0.02016EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.75 views

Edito CMS - Sensitive Data Leak

Web services managed by Edito CMS Content Management System in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthorized user. id: CVE-2024-4836 info: name: Edito CMS - Sensitive Data Leak author: s4e-io severity: high description: | Web...

7.5CVSS5.7AI score0.02651EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.158 views

FleetCart 4.1.1 - Information Disclosure

Issues with information disclosure in redirect responses. Accessing the majority of the website's pages exposes sensitive data, including the "Razorpay" "razorpayKeyId". id: CVE-2024-5230 info: name: FleetCart 4.1.1 - Information Disclosure author: s4e-io severity: medium description: | Issues wi...

6.9CVSS5.8AI score0.18768EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.78 views

STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion

STAGIL Navigation for Jira Menu & Themes plugin before 2.0.52 is susceptible to local file inclusion via modifying the fileName parameter to the snjCustomDesignConfig endpoint. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This...

7.5CVSS7.3AI score0.47199EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.92 views

Shirne CMS 1.2.0 - Local File Inclusion

Shirne CMS 1.2.0 is vulnerable to local file inclusion which could cause arbitrary file read via /static/ueditor/php/controller.php. id: CVE-2022-37299 info: name: Shirne CMS 1.2.0 - Local File Inclusion author: pikpikcu severity: medium description: Shirne CMS 1.2.0 is vulnerable to local file...

6.5CVSS6.7AI score0.03542EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/07 6:09 a.m.5 views

CVE-2023-46501

CVE-2023-46501 - BoltWire v6.03 - Control de Acceso Inadecuado Descripción En la versión 6.03 de BoltWire CMS , es posible explotar una vulnerabilidad de “Control de Acceso Inadecuado”, a través del parámetro index.php?p=member.admin&action=data, permitiendo a un atacante ver la contraseña de...

9.1CVSS8.1AI score0.01267EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 6:08 a.m.37582 views

vulmap

🌟 Vulmap - Web vulnerability scanning and verification tools Click here for the English Version Vulmap is a web vulnerability scanning and verification tool. It can scan and exploit vulnerabilities in webapps. Currently supported webapps include activemq, flink, shiro, solr, struts2, tomcat, unom...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/07 6:06 a.m.4 views

CVE-2022-42092

CVE-2022-42092 Exploit en Python 🔥 Descripción Este script de exploit en Python ataca una subida de archivos sin restricciones en Backdrop CMS para lograr una Ejecución Remota de Código RCE. ⚠️ Versiones Afectadas Versión 1.22.0 y versiones anteriores Nota: Backdrop CMS disputa esto y argumenta qu...

8.8CVSS7.3AI score0.01588EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/07 6:06 a.m.5 views

CVE-2023-40028

CVE-2023-40028: Ghost CMS Arbitrary File Read Description This Proof-of-Concept POC can be used to exploit CVE-2023-40028 to achieve file-read access in Ghost CMS. Ghost is an open source content management system CMS. Versions prior to 5.59.1 are subject to a vulnerability which allows...

6.5CVSS6.7AI score0.68737EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/07 6:00 a.m.4 views

CVE-2023-41425

CVE-2023-41425 Description Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. Working The attached exploit "exploit.py" performs the following actions: 1. It takes 3...

6.1CVSS7AI score0.54305EPSS
SaveExploits16References2
Kitploit
Kitploit
added 2026/09/07 5:43 a.m.7 views

cms-exploitation-campaign

Plantillas de Nuclei para la campaña de explotación de CMS Paquete de plantillas defensivas de Nuclei para la campaña de explotación de CMS a gran escala reportada por el Centro Australiano de Ciberseguridad ACSC de la ASD el 9 de julio de 2026. Aviso:...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 5:32 a.m.8 views

CVE-2026-5203

CVE-2026-5203 — CMS Made Simple ≤ 2.2.22 RCE Path Traversal + Arbitrary File Upload Summary The UserGuide module's XML import functionality in CMS Made Simple ≤ 2.2.22 fails to sanitize user-supplied filenames, allowing an authenticated administrator to upload arbitrary files e.g. PHP web shells...

5.8CVSS5.6AI score0.00317EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 5:27 a.m.3 views

Magnolia-CMS-6.2.19-Stored-Cross-Site-Scripting-CVE-2022-33098

Magnolia CMS = 6.2.19 Cross-Site Scripting Almacenado CVE-2022-33098 Tabla de Contenidos 1. Visión General 2. Descripción Detallada 3. Prueba de Concepto 4. Solución 5. Cronología de Divulgación 6. Referencias 7. Créditos 8. Avisos Legales Visión General Revisión: 1.0 Impacto: Cross-Site Scriptin...

6.1CVSS6.4AI score0.52695EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/07 5:07 a.m.10 views

CVE-2026-8237

CVE-2026-8237 CVE-2026-8237 es una vulnerabilidad de Referencia Directa Insegura a Objetos IDOR causada por la falta de comprobaciones de autorización en Concrete CMS 9.5.0 y anteriores. La falla existe en el endpoint /ccm/frontend/conversations/messagedetail, que devuelve el contenido completo d...

6.3CVSS5.9AI score0.0064EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 4:57 a.m.3 views

CVE-2021-21425-RCE

this is my version i found a lot in internet but those are too bad USAGE root@kitploit: python3 exploit.py -u http://IP/grav-admin/ --lhost YOUR TUN0 IP --lport 4444 wait.. for 60sec you will get shell at your listener...

9.8CVSS8.1AI score0.806EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/07 4:53 a.m.5 views

cve-2023-41564-research

Resumen de la vulnerabilidad CVE-2023-41564 CVE-2023-415641 es una vulnerabilidad de XSS almacenado presente en el CMS Cockpit = v2.6.3. Al cargar un archivo HTML con extensión .shtml durante la subida de archivos, el JavaScript se ejecuta en el momento en que se abre el archivo subido. 1:...

6.1CVSS6.5AI score0.0096EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/07 4:52 a.m.10 views

CVE-2025-65271

CVE-2025-65271 PoC for CVE-2025-65271 How to run? node server.js Description Client-side template injection CSTI in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard...

8.8CVSS5.9AI score0.00418EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/07 4:34 a.m.7 views

CVE-2025-2304-POC

CVE-2025-2304 PoC - Camaleon CMS Privilege Escalation A Proof of Concept PoC exploit for CVE-2025-2304 , a critical mass assignment vulnerability in Camaleon CMS that allows privilege escalation from low-privileged users to administrators. root@kitploit: ██████╗ ██████╗ ██╗ ██╗███╗ ██╗ ██████╗ ██...

9.4CVSS6AI score0.00605EPSS
SaveExploits17References6
Kitploit
Kitploit
added 2026/09/07 4:21 a.m.4 views

wig

wig - Recopilador de Información de Aplicaciones Web wig es una herramienta de recopilación de información de aplicaciones web, que puede identificar numerosos Sistemas de Gestión de Contenidos y otras aplicaciones administrativas. La identificación de aplicaciones se basa en sumas de verificació...

6AI score
SaveExploits0
Rows per page
Query Builder