Lucene search
+L

6912 matches found

Kitploit
Kitploit
•added 2026/10/24 9:17 a.m.•57 views

tiktok-scraper

TikTok Scraper & Downloader Scrape and download useful information from TikTok. No login or password are required This is not an official API support and etc. This is just a scraper that is using TikTok Web API to scrape media and related meta information. Content Features To Do Contribution...

6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/24 9:10 a.m.•22 views

HiddenNetworks-Python

HiddenNetworks-Python v0.9 May 2020 Hidden Networks is a new concept test based on the paper of the same name, that is programmed using Python 3.4. It facilitates the task of analysing local and remote machines within a domain, using WMI in searching for traces of connections by USB devices. With...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/24 7:48 a.m.•279 views

electronegativity

Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/24 7:07 a.m.•27 views

CVE-2020-10131

CVE-2020-10131 - CVE-2020-10131 - SearchBlox Product before V-9.2.1 is Vulnerable to CSV macro injection. Product Description: SearchBlox simplifies enterprise search for complex organizations. SearchBlox intuitive and intelligent tools offer out-of-the-box setup, secure encryption, and low total...

9.8CVSS8.8AI score0.01552EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/24 6:58 a.m.•23 views

cve-2020-27358-27359

CVE-2020-27358 / CVE-2020-27359 Exploitation steps for CVE-2020-27358 and CVE-2020-27359 CVE-2020-27358 An issue was discovered in REDCap 8.11.6 through 9.x before 10. The messenger's CSV feature that allows users to export their conversation threads as CSV allows non-privileged users to export o...

5.4CVSS5.6AI score0.02031EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/24 6:54 a.m.•24 views

CVE-2021-46363

CVE-2021-46363: Formula Injection in Magnolia CMS An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported...

9.3CVSS7.8AI score0.01874EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/10/24 6:52 a.m.•19 views

CVE-2023-36250

CVE-2023-36250 CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record. Vulnerability Type CSV Injection Discoverer Bruno Teixeira Reference http://gnome.com Affected Product Code Base GNOME...

7.8CVSS8.1AI score0.00587EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/24 4:55 a.m.•21 views

CVE-2025-4190

CVE-2025-4190 — WordPress CSV Mass Importer ≤ 1.2 Arbitrary File Upload -purple 📌 Description The CSV Mass Importer plugin ≤ 1.2 for WordPress contains an Admin+ Arbitrary File Upload vulnerability. Due to improper validation of uploaded files, high-privilege users such as admin can upload...

7.2CVSS8.9AI score0.00581EPSS
SaveExploits3References1
Kitploit
Kitploit
•added 2026/10/24 3:16 a.m.•33 views

pmotadeee

🧠 FLATLINE - Consciousness Injection Protocol WARNING: This is not a game. It's a cognitive interface for reality hacking. 🎮 HOW TO PLAY Basic Gameplay 1. Download consciousness modules CSV files from this repository 2. Inject directly into AI interfaces as file uploads 3. Experience accelerated...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/24 3:10 a.m.•19 views

remote-bitlocker-encryption-report

remote-bitlocker-encryption-report This PowerShell script takes a list of PC as input, gets their BitLocker encryption type remotely, and outputs the list as a CSV file to help mitigate against CVE-2018-12038. Prevent CVE-2018-12038 vulnerability Description of CVE-2018-12038 from NIST : An issue...

4.2CVSS6.3AI score0.0063EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/24 3:10 a.m.•41 views

Ivanti-Connect-Secure-Logs-Parser

Ivanti Secure Connect Logs Parser This repository provides a Python script designed to convert Ivanti Secure Connect .vc0 log files into CSV format for digital forensics and incident response. In particular, the parser: Extracts timestamps from Ivanti log files notably from .vc0 files. Converts...

9CVSS8.2AI score0.99981EPSS
SaveExploits15References1
Nuclei
Nuclei
•added 2026/10/24 2:05 a.m.•66 views

Active Directory Integration WP Plugin < 4.1.10 - Log Disclosure

The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an administrator wants to export said logs. Unfortunately, this log file is never removed, and remains accessible to any users knowing the URL to do so. id:...

7.5CVSS7.4AI score0.26633EPSS
SaveExploits3References2
Nuclei
Nuclei
•added 2026/10/24 2:05 a.m.•41 views

Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export

The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handleexport' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or...

5.3CVSS5.8AI score0.00896EPSS
SaveExploits0References2
Nuclei
Nuclei
•added 2026/10/24 2:05 a.m.•138 views

Directorist < 7.5.4 - Local File Inclusion

Directorist before 7.5.4 is susceptible to Local File Inclusion as it does not validate the file parameter when importing CSV files. id: CVE-2023-2252 info: name: Directorist 7.5.4 - Local File Inclusion author: r3Y3r53 severity: low description: | Directorist before 7.5.4 is susceptible to Local...

2.7CVSS6.5AI score0.01342EPSS
SaveExploits2References3
Kitploit
Kitploit
•added 2026/10/23 9:57 p.m.•88 views

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

5.8AI score
SaveExploits0References7
Kitploit
Kitploit
•added 2026/10/23 9:55 p.m.•21 views

CVE-2025-9215

StoreEngine Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More = 1.4.0 - Authenticated Subscriber+ Arbitrary File Download The StoreEngine plugin contains a vulnerability in its CSV Import/Export feature that allows any authenticated user subscriber, author,...

6.5CVSS6.6AI score0.00612EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/10/23 2:54 p.m.•20 views

CVE-2024-29375

CSV-Injection-PoC CSV Injection in Addactis IBNRS 3.10.3.107 AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L CVSS: 7.1, Impact Score: 5.3, Exploitation Score: 1.3 Affected Components: Project Description, Identifiers, Custom Triangle Name inside Input Triangles and Yield Curve Name parameters Screenshot 1:...

9.8CVSS5.9AI score0.01463EPSS
SaveExploits0
Nuclei
Nuclei
•added 2026/10/23 2:07 a.m.•74 views

Brother MFC-L9570CDW - Information Disclosure

An unauthenticated attacker who can access either the HTTP service TCP port 80, the HTTPS service TCP port 443, or the IPP service TCP port 631, can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mntinfo.csv can be accessed via a GET request and no...

5.3CVSS8AI score0.4663EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/10/22 4:56 p.m.•26 views

CVE-2025-64027

Product Info Snipe-IT is a free and open-source IT asset management system FOSS built on Laravel. It provides hardware asset tracking, software license management, accessories, and consumables inventory features for IT operations teams. It is actively maintained and updated frequently. Summary A...

7.1CVSS8.4AI score0.00315EPSS
SaveExploits2References1
osv_drupal
osv_drupal
•added 2026/10/21 5:45 p.m.•8 views

DRUPAL-CONTRIB-2026-231

This theme provides a front-end design for transparency and open-government sites, including a table preview of CSV files attached to content. The theme doesn't sufficiently check file access when it renders that preview. It reads the file directly, so a visitor who may view the content, but whos...

5.7AI score
SaveExploits0References1
Rows per page
Query Builder