Lucene search
+L

43965 matches found

Kitploit
Kitploit
added 2026/09/21 6:14 a.m.13 views

CVE-2025-39601

🚨 CVE-2025-39601 - CSRF to RCE in WordPress Custom CSS, JS & PHP plugin = 2.4.1 🧠 Description A Cross-Site Request Forgery CSRF vulnerability in the WPFactory Custom CSS, JS & PHP plugin allows for Remote Code Execution RCE by injecting malicious PHP code via unauthorized POST requests. This...

9.6CVSS8.4AI score0.0033EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/21 5:31 a.m.12 views

CVE-2021-46080

CVE-2021-46080 Exploit Title: Vehicle Service Management System - 'Multiple' Cross-Site Request Forgery CSRF Leads to Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIUM References:...

4.8CVSS5.7AI score0.0058EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/21 4:22 a.m.11 views

ConceptronicIPCam_MultipleVulnerabilities

Multiple vulnerabilities at Conceptronic IP Cameras with 0.61.X. web firmware. A CSRF and Denial of Service vulnerabilities have been found at Conceptronic IP Cameras. CVE| Description ---|--- CVE-2018-6407| Unauthenticated remote Denial of Service vulnerability CVE-2018-6408| CSRF allows to chan...

8.8CVSS7.7AI score0.32272EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 3:54 a.m.9 views

CVE-2020-23588

CVE-2020-23588 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" Found vulnerability in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" allows an unauthenticated, remote attacker to conduct a cross-sit...

4.3CVSS5.6AI score0.0038EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 1:21 a.m.14 views

SuiteCRM-RCE

CVE-2020-28328 SuiteCRM Remote Code Execution via Log File System Setting and Log File Poisioning Overview I recently discovered two vulnerabilities in SuiteCRM that provides an attack chain for a low privileged user to achieve code execution on the underlying operating system. The attack chain i...

9CVSS8.1AI score0.63267EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/21 12:12 a.m.13 views

CVE-2026-13156

CVE-2026-13156 — MailerSend Official SMTP Integration !IMPORTANT Abstract: A High-Severity Cross-Site Request Forgery CSRF vulnerability CVE-2026-13156 was discovered in the official MailerSend SMTP Integration plugin for WordPress 1.0.8. The configuration eradication handler...

5.4CVSS5.9AI score0.00138EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/20 11:06 p.m.8 views

ensimag-secu3a-cve-2024-22416

CVE-2024-22416 Reference report: GHSA-pgpj-v85q-h5fm This repository contains a docker compose configuration that setups both a pyLoad server and an attacker server that just provides a csrf.html. To test yourself, just run docker composer up you need to have docker composer installed additionall...

9.6CVSS7.6AI score0.00948EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/20 7:22 p.m.6 views

CVE-2020-23586

CVE-2020-23586 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" vulnerability found in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028"which allows an unauthenticated, remote attacker to conduct a...

4.3CVSS5.6AI score0.00354EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/20 6:55 p.m.9 views

CVE-2024-57373

CSRF Vulnerability in LifestyleStore v1.0 📌 Overview This repository documents a Cross-Site Request Forgery CSRF vulnerability identified in the LifestyleStore v1.0 project. The flaw allows attackers to perform unauthorized actions on behalf of authenticated users, posing risks to data integrity...

8.1CVSS5.9AI score0.00385EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/20 5:18 p.m.8 views

CVE-2025-44603-CSRF-Leads_to_Create_FakeUsers

CVE-2025-44603 CSRF Vulnerability: Leads to Creating Fake Clients Project Name & Repo URL : https://phpgurukul.com/client-management-system-using-php-mysql/ Vulnerability Name : Cross-Site Request ForgeryCSRF Affected Version : V1.2 Introduction A Cross-Site Request Forgery CSRF vulnerability...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/20 4:41 p.m.11 views

cve-2020-23127-PoC

cve-2020-23127-PoC CVE-2020-23127: https://www.cvedetails.com/cve/CVE-2020-23127/ Introduction This is my first CVE proof of concept and analysis. It was done as part of my cyber-security course on my 2nd year of Master in Computer Sciences at Université de Franche-Comté. I looked specifically fo...

8.8CVSS7.8AI score0.00784EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 2:51 p.m.9 views

CVE-2020-23585

CVE-2020-23585 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" A remote attacker can conduct a cross-site request forgery CSRF attack on "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028". The vulnerability...

8.8CVSS8AI score0.0052EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/20 2:49 p.m.7 views

CVE-2023-43147

CVE-2023-43147 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/limo-booking-software Version: 1.0 Tested on: Windows 10 Pro Impact: Add an attacker user with admin privileges CVE: Cross Site Request Forgery vulnerability in...

8.8CVSS8.1AI score0.00486EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 2:45 p.m.11 views

CVE-2023-40868

CVE-2023-40868 mooSocial MooSocial Software v.Demo 中存在跨站请求伪造漏洞,远程攻击者可利用该漏洞通过“删除账户”和“停用账户”功能执行任意代码。 该漏洞是 mooSocial MooSocial Software v.Demo 应用程序中的一个跨站请求伪造(CSRF)漏洞。CSRF 漏洞是指恶意攻击者可以诱骗受害者执行其本无意执行的操作。在这种情况下,攻击者可以诱骗受害者点击包含恶意代码的链接或打开包含恶意代码的文件。该代码随后可用于删除或停用受害者的账户。 POC 1 - 创建一个包含以下代码的文件,并保存为 HTML 文件...

8.8CVSS8.5AI score0.01312EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 2:41 p.m.10 views

CVE-2024-52402

🚀 Exploit for CVE-2024-52402: WordPress Exclusive Content Password Protect Plugin -un -p 🛠️ Options...

9.6CVSS8.2AI score0.00804EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 2:08 p.m.7 views

CVE-2020-29254

CVE-2020-29254 TikiWiki 21.2 allows to edit templates without the use of a CSRF protection. ========================== Cross-Side-Request-Forgery CSRF: TikiWiki 21.2 allows to edit templates without the use of a CSRF protection. This could allow an unauthenticated, remote attacker to conduct a...

8.8CVSS7.9AI score0.015EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 1:55 p.m.12 views

Prestashop-CVE-2024-34716

Exploit Script for CSRF and Reverse Shell Attack This script automates a CSRF Cross-Site Request Forgery exploit to upload a PHP reverse shell on a target's web server and execute it. The reverse shell is delivered as a ZIP file via a crafted CSRF payload, which is triggered when a privileged use...

9.6CVSS8.5AI score0.56445EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/20 12:18 p.m.12 views

CVE-2025-22963

Overview Cross-site request forgeryCSRF vulnerability in Teedy versions = v1.11 allows remote attackers to force an end user to change their user informationusername, password, etc... on the web application in which they're currently authenticated. Vulnerability User information change endpoint i...

7.5CVSS6AI score0.00278EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/20 11:11 a.m.8 views

CVE-2024-22939

target:https://github.com/sunkaifei/FlyCms version: v1.0 FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/article/categoryedit Poc root@kitploit: history.pushState'', '', '/' Success:...

8.8CVSS5.8AI score0.0069EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/20 10:54 a.m.8 views

CVE-2019-17633

CVE-2019-17633 Eclipse Che CSRF leading to RCE This bug allows a remote website to create and start an arbitrary docker container on machines running Che before versions 7.3.0 and 7.4.1 when a user visits a webpage. Vulnerability This is a CSRF bug that allows a remote website to create and start...

8.8CVSS8AI score0.00811EPSS
SaveExploits1
Rows per page
Query Builder