Lucene search
+L

356701 matches found

Vulnrichment
Vulnrichment
•added 2026/10/01 1:25 p.m.•11 views

CVE-2026-66247

iControl is affected by an insecure Cross-Origin Resource Sharing CORS policy vulnerability, which could allow a malicious website to execute cross-origin requests with included credentials, enabling an attacker to access and exfiltrate sensitive data within the context of the victim's active...

4.3CVSS6.2AI score0.00218EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/01 1:25 p.m.•14 views

CVE-2026-66247

The iControl software is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability. This flaw could allow a malicious website to execute cross-origin requests that include the victim's credentials. If exploited, an attacker could access and exfiltrate sensitive data within...

4.3CVSS6.2AI score0.00218EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/01 1:23 p.m.•14 views

CVE-2026-66246

HCL iControl is affected by a Broken Access Control vulnerability. The issue stems from missing authentication checks or insecure direct object references (IDOR) , which could enable an attacker to perform privilege escalation and perform unauthorized modification or deletion of sensitive applica...

8.8CVSS5.9AI score0.00304EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/01 1:23 p.m.•43 views

CVE-2026-66246 HCL iControl is affected by multiple security vulnerabilities

iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references IDOR, enabling privilege escalation and the unauthorized modification or deletion of sensitive application data...

8.8CVSS0.00304EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/01 1:21 p.m.•14 views

CVE-2019-6447

CVE-2019-6447 Este documento trata sobre la explotación manual de la vulnerabilidad de puerto abierto de Android encontrada en ES File Manager. Este puerto TCP abierto permite al atacante instalar una puerta trasera y recopilar todos los datos del usuario. Más adelante en este documento se...

8.1CVSS7.7AI score0.6378EPSS
SaveExploits9
NVD
NVD
•added 2026/10/01 1:17 p.m.•13 views

CVE-2026-62058

Insertion of Sensitive Information Into Sent Data vulnerability in WPExperts CF7 Apps contact-form-7-honeypot allows Retrieve Embedded Sensitive Data.This issue affects CF7 Apps: from n/a through 3.7.2...

5.3CVSS0.00197EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/01 1:17 p.m.•16 views

CVE-2026-103345

Insertion of Sensitive Information Into Sent Data vulnerability in Shamim Rajani Pie Register pie-register allows Retrieve Embedded Sensitive Data.This issue affects Pie Register: from n/a through 3.8.4.13...

5.3CVSS0.00197EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/01 1:15 p.m.•12 views

cve-2023-0669-simulation

Estructura del proyecto cve-2023-0669-simulation/ ├── docker-compose.yml ├── attacker/ │ ├── Dockerfile │ └── CVE20230669helper.java ├── vulnerable/ │ ├── Dockerfile │ └── VulnerableServer.java ├── listener/ │ ├── Dockerfile │ └── server.py └── received/ ← creado automáticamente exfiltración 2...

7.2CVSS7.7AI score0.99999EPSS
SaveExploits12
Kitploit
Kitploit
•added 2026/10/01 1:12 p.m.•18 views

CVE-2022-31793

CVE-2022-31793 -u 指定IP -l 指定ip文件 -v 验证模式 -f 指定读取文件 python poc.py -u ip -v python poc.py -l url.txt -v python poc.py -u ip -f /etc/hosts python poc.py -l url.txt -f /etc/hosts...

7.5CVSS8AI score0.16856EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/01 12:58 p.m.•18 views

CVE-2023-6360

CVE-2023-6360 Informe de análisis Resumen CVE-2023-6360 es una vulnerabilidad de inyección SQL encontrada en un complemento específico de WordPress, que permite a un atacante insertar código SQL malicioso en la base de datos aprovechando las vulnerabilidades de seguridad de la aplicación web. Est...

9.8CVSS8.3AI score0.63141EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/01 12:57 p.m.•13 views

CVE-2023-22527

CVE-2023-22527 - Ejecución Remota de Código en Atlassian Confluence Resumen CVE-2023-22527 es una vulnerabilidad crítica de ejecución remota de código en Atlassian Confluence Data Center y Server. Esta vulnerabilidad permite a atacantes no autenticados ejecutar código arbitrario en instancias de...

10CVSS8.9AI score0.99984EPSS
SaveExploits34
Kitploit
Kitploit
•added 2026/10/01 12:57 p.m.•16 views

cve-2023-1874

CVE-2023-1874 Descargo de responsabilidad ESTE SCRIPT ESTÁ DISEÑADO SOLO PARA FINES EDUCATIVOS Y DE SOMBRERO BLANCO. CUALQUIER USO DE ESTO CONTRA UN DISPOSITIVO QUE NO ESTÉS AUTORIZADO A PROBAR O QUE NO POSEEAS ES TU PROPIA RESPONSABILIDAD. EL AUTOR DE ESTE SCRIPT NO SE HACE RESPONSABLE DE NADA D...

8.8CVSS8.3AI score0.02726EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/10/01 12:54 p.m.•13 views

CVE-2021-41277

CVE-2021-41277 PoC Metabase es una plataforma de análisis de datos de código abierto. Se ha descubierto un problema de inclusión de archivos locales en algunas versiones de Metabase. Aquí está el código PoC para determinar si el objetivo tiene esta vulnerabilidad o no. Un adversario podría leer...

10CVSS7.4AI score0.97178EPSS
SaveExploits8
Vulnrichment
Vulnrichment
•added 2026/10/01 12:40 p.m.•9 views

CVE-2026-62058 WordPress CF7 Apps plugin <= 3.7.2 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in WPExperts CF7 Apps contact-form-7-honeypot allows Retrieve Embedded Sensitive Data.This issue affects CF7 Apps: from n/a through 3.7.2...

5.3CVSS5.9AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/01 12:40 p.m.•17 views

CVE-2026-62058

The WordPress CF7 Apps plugin (versions

5.3CVSS5.9AI score0.00197EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/01 12:40 p.m.•10 views

EUVD-2026-90810

Insertion of Sensitive Information Into Sent Data vulnerability in WPExperts CF7 Apps contact-form-7-honeypot allows Retrieve Embedded Sensitive Data.This issue affects CF7 Apps: from n/a through 3.7.2...

5.3CVSS5.9AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/01 12:40 p.m.•39 views

CVE-2026-62058 WordPress CF7 Apps plugin <= 3.7.2 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in WPExperts CF7 Apps contact-form-7-honeypot allows Retrieve Embedded Sensitive Data.This issue affects CF7 Apps: from n/a through 3.7.2...

5.3CVSS0.00197EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/01 12:40 p.m.•11 views

WordPress CF7 Apps plugin <= 3.7.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Romain Deperne in WordPress Plugin CF7 Apps versions = 3.7.2...

5.3CVSS5.9AI score0.00197EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2026/10/01 12:33 p.m.•8 views

EUVD-2026-90801

Insertion of Sensitive Information Into Sent Data vulnerability in Shamim Rajani Pie Register pie-register allows Retrieve Embedded Sensitive Data.This issue affects Pie Register: from n/a through 3.8.4.13...

5.3CVSS5.9AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/01 12:33 p.m.•9 views

CVE-2026-103345

The Pie Register WordPress plugin (versions

5.3CVSS5.9AI score0.00197EPSS
SaveExploits0References1
Rows per page
Query Builder