CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

OSV•added 2026/01/27 4:16 p.m.•0 views

CVE-2021-47901

9.8CVSS5.8AI score0.00087EPSS

CVE•added 2026/01/27 3:23 p.m.•5 views

CVE-2021-47901

Dirsearch 0.4.1 is affected by a CSV injection vulnerability exploitable via the --csv-report flag. An attacker can craft malicious server redirects with comma-separated paths containing Excel formulas, enabling manipulation of the generated CSV report. The issue is described across multiple sour...

EUVD•added 2026/01/27 3:23 p.m.•1 views

EUVD-2021-34747

Cvelist•added 2026/01/27 3:23 p.m.•17 views

CVE-2021-47901 dirsearch 0.4.1 - CSV Injection

9.8CVSS0.00087EPSS

ATTACKERKB•added 2026/01/27 3:23 p.m.•1 views

CVE-2021-47901

Exploits0References3Affected Software1

Vulnrichment•added 2026/01/27 3:23 p.m.•3 views

CVE-2021-47901 dirsearch 0.4.1 - CSV Injection

Positive Technologies•added 2026/01/27 12:0 a.m.•3 views

PT-2026-4932

CNNVD•added 2026/01/27 12:0 a.m.•3 views

Exploits0References4

dirsearch security vulnerabilities

dirsearch is a network scanner developed by Mauro Soria. Version 0.4.1 of dirsearch contains a security vulnerability. This vulnerability arises from improper handling of redirect endpoints when using the --csv-report flag, which may allow attackers to inject malicious formulas...

9.8CVSS5.8AI score0.00087EPSS

The Hacker News•added 2023/12/14 6:30 a.m.•62 views

New Hacker Group 'GambleForce' Tageting APAC Firms Using SQL Injection Attacks

A previously unknown hacker outfit called GambleForce has been attributed to a series of SQL injection attacks against companies primarily in the Asia-Pacific APAC region since at least September 2023. "GambleForce uses a set of basic yet very effective techniques, including SQL injections and th...

5.3CVSS6AI score0.9452EPSS

Exploits42

Kitploit•added 2022/08/27 12:30 p.m.•165 views

Rekono - Execute Full Pentesting Processes Combining Multiple Hacking Tools Automatically

Rekono combines other hacking tools and its results to execute complete pentesting processes against a target in an automated way. The findings obtained during the executions will be sent to the user via email or Telegram notifications and also can be imported in Defect-Dojo if an advanced...

7.3AI score

Exploits0References23

Kitploit•added 2021/09/22 11:30 a.m.•12 views

DirSearch - A Go Implementation Of Dirsearch

This software is a Go implementation of the original dirsearch tool written by Mauro Soria. DirSearch is the very first tool I write in Go, mostly to play and experiment with Go's concurrency model, channels, and so forth : Purpose DirSearch takes an input URL -url parameter and a wordlist...

7.3AI score

Exploits0References2

0day.today•added 2021/01/06 12:0 a.m.•18 views

dirsearch 0.4.1 - CSV Injection Vulnerability

Exploit Title: dirsearch 0.4.1 - CSV Injection Author: Dolev Farhi Vendor Homepage: https://github.com/maurosoria/dirsearch Version : 0.4.1 Tested on: Debian 9.13 dirsearch, when used with the --csv-report flag, writes the results of crawled endpoints which redirect, to a csv file without...

Packet Storm•added 2021/01/06 12:0 a.m.•254 views

dirsearch 0.4.1 CSV Injection

Exploit Title: dirsearch 0.4.1 - CSV Injection Author: Dolev Farhi Date: 2021-01-05 Vendor Homepage: https://github.com/maurosoria/dirsearch Version : 0.4.1 Tested on: Debian 9.13 dirsearch, when used with the --csv-report flag, writes the results of crawled endpoints which redirect, to a csv fil...

Exploit DB•added 2021/01/06 12:0 a.m.•205 views

dirsearch 0.4.1 - CSV Injection

Hacker One•added 2020/07/24 2:3 p.m.•15 views

Mail.ru: Information Disclosure

Domain, site, application www7.promo.plazius.ru Steps to reproduce 1. By nmap port scanning we know port 9049 is open 2. After that dirsearch Metrics are shown result open in browser. 3.Now open http://www7.promo.plazius.ru:9049/Metrics Here you will get internal metrics of system Impact This is...

0.7AI score

Kitploit•added 2020/05/20 9:30 p.m.•120 views

Web Hacker's Weapons - A Collection Of Cool Tools Used By Web Hackers

A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting. Weapons Type | Name | Description ---|---|--- Army-Knife/ALL | BurpSuite | the BurpSuite project Army-Knife/SCAN | jaeles | The Swiss Army knife for automated Web Application Testing Army-Knife/ALL | zaproxy | The...

7.5AI score

Exploits0References91

Kitploit•added 2020/02/01 11:30 a.m.•216 views

Project-Black - Pentest/BugBounty Progress Control With Scanning Modules

Scope control, scope scanner and progress tracker for easier working on a bug bounty or pentest project. What is this tool for? The tools encourages more methodical work on pentest/bugbounty, tracking the progress and general scans information. It can launch masscan nmap dirsearch amass patator...

7.3AI score

Exploits0References7

Kitploit•added 2019/07/05 9:56 p.m.•266 views

Rock-ON - An All In One Recon Tool That Will Just Get A Single Entry Of The Domain Name And Do All Of The Work Alone

Rock-On is a all in one recon tool that will help your Recon process give a boost. It is mainley aimed to automate the whole process of recon and save the time that is being wasted in doing all this stuffs manually. A thorough blog will be up in sometime. Stay tuned for the Stable version with a...

Kitploit•added 2017/12/14 1:13 p.m.•22 views

Exploits0References1

dirsearch v0.3.8 - Brute Force Directories and Files in Websites

dirsearch is a simple command line tool designed to brute force directories and files in websites. Operating Systems supported Windows XP/7/8/10 GNU/Linux MacOSX Features Multithreaded Keep alive connections Support for multiple extensions -e|--extensions asp,php Reporting plain text, JSON...