Lucene search
+L

32060 matches found

Nuclei
Nuclei
added 2026/09/02 7:49 a.m.112 views

WordPress Contact Form 7 <1.3.6.3 - Stored Cross-Site Scripting

WordPress Contact Form 7 before 1.3.6.3 contains an unauthenticated stored cross-site scripting vulnerability in the Drag and Drop Multiple File Upload plugin. SVG files can be uploaded by default via the dndcodedropzupload AJAX action. id: CVE-2022-0595 info: name: WordPress Contact Form 7 1.3.6...

5.4CVSS6AI score0.13575EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.42 views

Redirection for Contact Form 7 < 2.5.0 - Cross-Site Scripting

The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting. id: CVE-2022-0250 info: name: Redirection for Contact Form 7 2.5.0 - Cross-Site Scripting author: ritikchaddha...

6.1CVSS6.4AI score0.01615EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.39 views

WordPress Contact Form 7 Captcha <0.1.2 - Cross-Site Scripting

WordPress Contact Form 7 Captcha plugin before 0.1.2 contains a reflected cross-site scripting vulnerability. It does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute. id: CVE-2022-2187 info: name: WordPress Contact Form 7 Captcha 0.1.2 - Cross-Site Scripting...

6.1CVSS6.3AI score0.01428EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.68 views

Drag and Drop Multiple File Upload - CF7 <= 1.3.9.6 - Remote Code Execution

Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin = 1.3.9.6 contains an unrestricted file upload caused by insufficient file type validation and bypass of filename sanitization with non-ASCII characters, letting unauthenticated attackers upload arbitrary files and achieve...

8.1CVSS6.2AI score0.04175EPSS
SaveExploits3References2
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.65 views

Contact Form Generator <= 2.5.5 - Cross-Site Scripting

The Contact Form Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in wp-admin/admin.php in versions up to, and including, 2.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

7.1CVSS6.8AI score0.01317EPSS
SaveExploits3References2
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.42 views

Contact Form Plugin by Fluent Forms < 5.1.17 - Unauthenticated Limited Privilege Escalation

The plugin is vulnerable to privilege escalation due to a missing capability check on the /wp-json/fluentform/v1/managers REST API endpoint. This makes it possible for unauthenticated attackers to grant users with Fluent Form management permissions which gives them access to all of the plugin's...

9.8CVSS5.9AI score0.02333EPSS
SaveExploits1References3
NVD
NVD
added 2026/09/02 7:16 a.m.3 views

CVE-2026-3850

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the redirecturl parameter of the etpbcontactform shortcode in all versions up to, and including, 4.27.6. This is due to the redirecturl attribute being sanitized with escattr instead of escurl before being rendered into...

6.4CVSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/02 6:37 a.m.5 views

EUVD-2026-69886

The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the redirecturl parameter of the etpbcontactform shortcode in all versions up to, and including, 4.27.6. This is due to the redirecturl attribute being sanitized with escattr instead of escurl before being rendered into...

6.4CVSS6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/02 4:40 a.m.6 views

COVIDSafe-CVE-2020-12856

COVIDSafe-CVE-2020-12856: Bluetoothベースの接触追跡アプリにおけるサイレントペアリングの問題 著者: Jim Mussared George Robotics, Alwen Tiu オーストラリア国立大学 オーストラリアのCOVIDSafe v1.0.17以前 のAndroid版接触追跡アプリの実装において、シンガポールのTraceTogetherやアルバータ州のABTraceTogetherなど、類似のアーキテクチャを共有する他のいくつかの接触追跡アプリにも影響を与える可能性のある脆弱性が特定されました。この問題はCVE ID CVE-2020-128...

9.8CVSS7.2AI score0.05142EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/02 3:42 a.m.4 views

Check-WP-CVE-2020-35489

Check-WP-CVE-2020-35489 CVE-2020-35489 CVE-2020-35489 は、WordPress プラグイン Contact Form 7 5.3.1 およびそれ以前のバージョンで発見されました。この脆弱性を悪用することで、攻撃者は Web サイト上のアップロード可能なファイルタイプに関するすべての制限を回避し、任意の種類のファイルを簡単にアップロードできてしまいます。 推定 500万 の Web サイトが影響を受けました。 PoC は 2020 年 12 月 31 日に公開され、ユーザーにアップデートの時間を確保します。 参考...

10CVSS7.2AI score0.8928EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/02 2:27 a.m.44 views

iac-scan-runner

IaC Scan Runner Service that scans your Infrastructure as Code for common vulnerabilities...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 10:12 p.m.5 views

CVE-2023-1430

更新 2023-06-12: スニペットはもう必要ありません。WPManageNinja は公開開示から2時間後(報告から93日後)に脆弱性を修正しました。 更新 2024-01-27: 永続的なハッシュ値に関する関連問題は現在完全に解決されました。 WPManageNinja の FluentCRM における未修正脆弱性 CVE-2023-1430 の責任ある開示 tl;dr 攻撃者は FluentCRM 内の連絡先詳細を表示および編集できます。WPManageNinja...

6.5CVSS5.8AI score0.00802EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 7:57 p.m.33 views

maat

About Maat is an open-source Dynamic Symbolic Execution and Binary Analysis framework. It provides various functionalities such as symbolic execution, taint analysis, constraint solving, binary loading, environment simulation, and leverages Ghidra's sleigh library for assembly lifting:...

5.6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/01 7:12 p.m.111 views

termshark

Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...

5.9AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/01 6:03 p.m.37 views

redherd-framework

...

5.3AI score
SaveExploits0
Patchstack
Patchstack
added 2026/09/01 5:41 p.m.6 views

WordPress Divi plugin <= 4.27.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Contact Form 'redirect_url' Shortcode Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Contact Form 'redirecturl' Shortcode Parameter vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os - krei.dev | ogbuilders.io in WordPress Theme Divi versions = 4.27.5...

6.4CVSS5.9AI score
SaveExploits0References1Affected Software1
Circl
Circl
added 2026/09/01 5:00 p.m.4 views

CVE-2022-43671

creationtimestamp| type| source ---|---|--- 2026-09-01 17:00:24+00:00| seen| https://t.me/cissp/6361 2026-09-02 01:04:07+00:00| seen| https://t.me/cissp/6361...

9.8CVSS7.2AI score0.7483EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 4:56 p.m.2 views

firmware-workshop

ハンズオン:ファームウェアの抽出・探索・エミュレーション このハンズオンデモでは、柔軟なファームウェア抽出ツールであるUnblobを体験していただきます。 このワークショップセッションでは、EV充電器からファームウェアを抽出し、ファームウェアを詳しく調べ、最終的にエミュレーションして、サービスとリアルタイムにやり取りできるようにします。Unblobはハードウェア版とダウンロード版の両方のファームウェアに対応しているため、ターゲットとなる環境は豊富です。事前経験は不要で、あらゆるスキルレベルに適したセッションです。皆様のご参加をお待ちしています。 対象ターゲット...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 6:12 a.m.3 views

React-site-CVE-2025-55182

React Site - CVE-2025-55182 README: Proyecto Next.js vulnerable landing React RSC Este repositorio contiene un ejemplo de un landing corporativo multi-página en Next.js 15.0.0 + React 19.0.0. El sitio simula una estructura como t1.ru: inicio, productos, casos, medios, sobre la empresa, contacto...

10CVSS7AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/01 3:18 a.m.49 views

mapsdumper

root@kitploit: ▒█▀▄▀█ ░█▀▀█ ▒█▀▀█ ▒█▀▀▀█ ▒█▀▀▄ ▒█░▒█ ▒█▀▄▀█ ▒█▀▀█ ▒█▀▀▀ ▒█▀▀█ ▒█▒█▒█ ▒█▄▄█ ▒█▄▄█ ░▀▀▀▄▄ ▒█░▒█ ▒█░▒█ ▒█▒█▒█ ▒█▄▄█ ▒█▀▀▀ ▒█▄▄▀ ▒█░░▒█ ▒█░▒█ ▒█░░░ ▒█▄▄▄█ ▒█▄▄▀ ░▀▄▄▀ ▒█░░▒█ ▒█░░░ ▒█▄▄▄ ▒█░▒█ by: @Tegal1337 MAPSDUMPER Demo • Installation • Feature • Credits A tool for dumping place...

5.5AI score
SaveExploits0
Rows per page
Query Builder