Lucene search
+L

58508 matches found

BDU FSTEC
BDU FSTEC
added 2026/09/14 11:42 a.m.36 views

The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.7CVSS6.2AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/09/14 11:42 a.m.28 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

10CVSS6.3AI score
SaveExploits0References2Affected Software2
CVE
CVE
added 2026/09/14 10:58 a.m.3 views

CVE-2026-78375

Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder Free and Pro 5.2.1 - 6.9.0 - plgContentSppagebuilder::onContentAfterSave read jformattribssppagebuilderarticleid from the request and concatenated it directly into the WHERE viewid ...

8.6CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 10:33 a.m.6 views

CMSeeK

What is a CMS? A content management system CMS manages the creation and modification of digital content. It typically supports multiple users in a collaborative environment. Some noteable examples are: WordPress, Joomla, Drupal etc. Release History root@kitploit:...

5.8AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/09/14 10:29 a.m.1 views

CVE-2026-90678

A flaw was found in HAProxy. A remote, unauthenticated attacker can exploit a vulnerability in the HTTP/3 multiplexer when processing requests without a Content-Length header, leading to HTTP request smuggling. This occurs when HAProxy is configured with QUIC support and an HTTP/3 frontend, and...

8.9CVSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/14 9:51 a.m.7 views

JSONBee

JSONBee A ready to use JSONP endpoints to help bypass content security policy of different websites. The tool was presented during HackIT 2018 in Kiev. The presentation can be found here not sure why format of the slides is screwed :D:...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 8:57 a.m.8 views

ai-ublock-blacklist

AI uBlock Origin Blacklist A personal list for uBlock Origin blocking AI content farms. Pull requests welcome. Install You can click here to subscribe to this list automatically. This link works only if you have uBlock Origin installed. Alternatively, import the following URL as a 3rd party list ...

6.1AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/14 8:51 a.m.8 views

pywhatcms

PyWhatCMS Python package for whatcms.com API The package provides a simple way to use the whatcms.org API for detecting 467 different Content Management Systems CMS Installation root@kitploit: pip install pywhatcms Usage First of all, import pywhatcms: root@kitploit: from pywhatcms import whatcms...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 8:38 a.m.90 views

SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 7:25 a.m.38 views

cspparse

cspparse Description cspparse is a tool to evaluate Content Security Policies. It uses Google's API to retrieve the CSP Headers and returns them in ReconJSON format. Not only does it check for headers with Google's API, it also parses the target site's HTML to look for any CSP rules that are...

5.8AI score
SaveExploits0References1
NVD
NVD
added 2026/09/14 7:17 a.m.8 views

CVE-2026-85192

Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla 8.0.0 - Conditional Content Pro accepts inline PHP Condition Rules in article syntax. In affected versions, the PHP is passed to the Conditions evaluator without checki...

9.4CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 7:14 a.m.10 views

Stevos-AI-Blocklist

Stevo's AI Blocklist A filter list for uBlock Origin and AdGuard that hides specific website features that use Generative AI and content labeled as AI generated. Available for PC/Linux Firefox, Edge, Chrome, Brave, macOS Firefox, Edge, Chrome, Safari, Android Firefox, and iOS/iPadOS Safari, Brave...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 6:57 a.m.22 views

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

5.8AI score
SaveExploits0References52
Kitploit
Kitploit
added 2026/09/14 6:54 a.m.67 views

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

6AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/14 6:24 a.m.424 views

kiterunner

Kiterunner Introduction For the longest of times, content discovery has been focused on finding files and folders. While this approach is effective for legacy web servers that host static files or respond with 3xx’s upon a partial path, it is no longer effective for modern web applications,...

5.6AI score
SaveExploits0References4
EUVD
EUVD
added 2026/09/14 6:18 a.m.4 views

EUVD-2026-77313

Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla 8.0.0 - Conditional Content Pro accepts inline PHP Condition Rules in article syntax. In affected versions, the PHP is passed to the Conditions evaluator without checki...

9.4CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/14 6:18 a.m.8 views

CVE-2026-85192

The Conditional Content Pro extension for Joomla (by regularlabs.com) suffers from an authenticated, privileged remote code execution flaw in versions prior to 8.0.0 . The extension accepts inline PHP Condition Rules in article syntax and passes them to its Conditions evaluator without verifying ...

9.4CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/14 6:18 a.m.7 views

CVE-2026-85192 Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0

Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla 8.0.0 - Conditional Content Pro accepts inline PHP Condition Rules in article syntax. In affected versions, the PHP is passed to the Conditions evaluator without checki...

9.4CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/14 6:13 a.m.3 views

EUVD-2026-77310

Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla 20.0.0 - Articles Anywhere accepts link options such as onclick and onmouseover. In affected versions, those options become real HTML event attributes without checking the article...

7.5CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 5:47 a.m.8 views

Learn-Web-Hacking

Web Hacking Study Notes 中文版 README Link to notes English Translation Status This English version is a work in progress. The translated table of contents is intended to help readers find topics, but many pages in the English site may still show the original Chinese text. The Chinese files under...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder