Lucene search
+L

1345 matches found

Kitploit
Kitploit
added 2026/09/15 6:10 a.m.9 views

CVE-2024-0710

CVE-2024-0710 Vulnerabilidad: CVE-2024-0710 Modificación no autenticada del ID único de envío CVSS: 5.3 Medio Software: GP Unique ID gp-unique-id Versiones afectadas: = 1.5.5 Versión parcheada: 1.5.6 Desarrollador: Gravity Wiz Investigador: Karl Emil Nikka, Nikka Systems Publicado públicamente:...

5.3CVSS5.8AI score0.0103EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.70 views

Gravity SMTP WordPress Plugin - Sensitive Information Exposure

Gravity SMTP WordPress plugin = 2.1.4 contains a sensitive information exposure caused by an unrestricted REST API endpoint at /wp-json/gravitysmtp/v1/tests/mock-data, letting unauthenticated attackers retrieve detailed system configuration data, exploit requires no authentication. id:...

7.5CVSS5.9AI score0.39975EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.89 views

Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting

Multiple cross-site scripting vulnerabilities in tests/notAutotestContactServicepauseCampaign.php in the Infusionsoft Gravity Forms plugin before 1.5.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 go, 2 contactId, or 3 campaignId parameter. id: CVE-2014-45...

6.1CVSS6.4AI score0.03902EPSS
SaveExploits2References5
NVD
NVD
added 2026/09/14 1:19 p.m.5 views

CVE-2026-90716

A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parsenumberexpression of the file src/compiler/gravityparser.c of the component Number Parser. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

6.5CVSS0.00265EPSS
SaveExploits0References9
NVD
NVD
added 2026/09/14 1:19 p.m.5 views

CVE-2026-90715

A security vulnerability has been detected in marcobambini Gravity up to 0.9.7. This affects an unknown function of the file src/utils/gravityjson.c of the component udp json-parser. Such manipulation leads to integer overflow. The attack may be performed from remote. The exploit has been disclos...

7.5CVSS0.00371EPSS
SaveExploits0References9
NVD
NVD
added 2026/09/14 1:19 p.m.5 views

CVE-2026-90714

A weakness has been identified in marcobambini Gravity up to 0.9.7. The impacted element is an unknown function of the file src/utils/gravityjson.c of the component JSON parser. This manipulation causes memory corruption. The attack is possible to be carried out remotely. The exploit has been mad...

6.5CVSS0.00267EPSS
SaveExploits0References9
CVE
CVE
added 2026/09/14 12:45 p.m.10 views

CVE-2026-90716

An out-of-bounds read in the Number Parser component of marcobambini Gravity (up to 0.9.7) affects the function parse_number_expression in src/compiler/gravity_parser.c. The vulnerability can be triggered remotely with low privileges and passive user interaction, resulting in low impact to confid...

6.5CVSS5.3AI score0.00265EPSS
SaveExploits0References9
EUVD
EUVD
added 2026/09/14 12:45 p.m.6 views

EUVD-2026-77443

A vulnerability was detected in marcobambini Gravity up to 0.9.7. This impacts the function parsenumberexpression of the file src/compiler/gravityparser.c of the component Number Parser. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

6.5CVSS5.3AI score0.00265EPSS
SaveExploits0References9
EUVD
EUVD
added 2026/09/14 12:30 p.m.6 views

EUVD-2026-77440

A security vulnerability has been detected in marcobambini Gravity up to 0.9.7. This affects an unknown function of the file src/utils/gravityjson.c of the component udp json-parser. Such manipulation leads to integer overflow. The attack may be performed from remote. The exploit has been disclos...

7.5CVSS6.6AI score0.00371EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2026/09/14 12:30 p.m.31 views

CVE-2026-90715 marcobambini Gravity udp json-parser gravity_json.c integer overflow

A security vulnerability has been detected in marcobambini Gravity up to 0.9.7. This affects an unknown function of the file src/utils/gravityjson.c of the component udp json-parser. Such manipulation leads to integer overflow. The attack may be performed from remote. The exploit has been disclos...

7.5CVSS0.00371EPSS
SaveExploits0References9
CVE
CVE
added 2026/09/14 12:30 p.m.10 views

CVE-2026-90715

marcobambini Gravity up to version 0.9.7 is affected by an integer overflow in the udp json-parser component (file src/utils/gravity_json.c). The vulnerability can be triggered remotely without authentication or user interaction. A proof-of-concept exploit has been publicly disclosed. The issue i...

7.5CVSS6.6AI score0.00371EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2026/09/14 12:15 p.m.33 views

CVE-2026-90714 marcobambini Gravity JSON parser gravity_json.c memory corruption

A weakness has been identified in marcobambini Gravity up to 0.9.7. The impacted element is an unknown function of the file src/utils/gravityjson.c of the component JSON parser. This manipulation causes memory corruption. The attack is possible to be carried out remotely. The exploit has been mad...

6.5CVSS0.00267EPSS
SaveExploits0References9
EUVD
EUVD
added 2026/09/14 12:15 p.m.6 views

EUVD-2026-77436

A weakness has been identified in marcobambini Gravity up to 0.9.7. The impacted element is an unknown function of the file src/utils/gravityjson.c of the component JSON parser. This manipulation causes memory corruption. The attack is possible to be carried out remotely. The exploit has been mad...

6.5CVSS6.1AI score0.00267EPSS
SaveExploits0References9
CVE
CVE
added 2026/09/14 12:15 p.m.7 views

CVE-2026-90714

marcobambini Gravity (a Go-based HTTP server framework) versions up to 0.9.7 are affected by a memory corruption vulnerability in the JSON parser, specifically in the file src/utils/gravity_json.c. The exact function responsible is not identified in the provided documents. The vulnerability is ex...

6.5CVSS6.1AI score0.00267EPSS
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/14 11:16 a.m.10 views

CVE-2026-48866

--- ┌───────────────────────────────────────────────────────────┐ │ │ │ C V E - 2 0 2 6 - 4 8 8 6 6 │ │ │ │ Gravity Forms Path Traversal → Arbitrary File Deletion │ │ │ └───────────────────────────────────────────────────────────┘ root@kitploit: gformuploadedfiles はURL内で ../...

9.6CVSS5.8AI score0.00468EPSS
SaveExploits2References10
Positive Technologies
Positive Technologies
added 2026/09/14 12:00 a.m.8 views

PT-2026-91182

A security vulnerability has been detected in marcobambini Gravity up to 0.9.7. This affects an unknown function of the file src/utils/gravity json.c of the component udp json-parser. Such manipulation leads to integer overflow. The attack may be performed from remote. The exploit has been...

7.5CVSS6.6AI score0.00371EPSS
SaveExploits0References10
CVE
CVE
added 2026/09/13 6:00 a.m.13 views

CVE-2026-77773

CVE-2026-77773 affects the Social Contact Form (FormyChat) WordPress plugin (also marketed as "Contact Form to Chat Apps | Click to Chat to Order") in versions before 2.15.8 . The root cause is a missing capability, nonce, or session check on the public AJAX action formychat_get_gf_entry , which ...

5.3CVSS5.7AI score0.00206EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/13 6:00 a.m.43 views

CVE-2026-77773 Social Contact Form (FormyChat) < 2.15.8 - Unauthenticated Gravity Forms Entry Disclosure via formychat_get_gf_entry

The Contact Form to Chat Apps | Click to Chat to Order WordPress plugin before 2.15.8 does not perform any capability, nonce or session check on one of its public AJAX actions, allowing unauthenticated users to read the submitted entries of any form created with a supported third-party form Conta...

0.00206EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 12:50 a.m.7 views

CVE-2026-4406

Gravity Forms = 2.9.28 — 通过 gformgetconfig 的 formids 参数实现未认证反射型跨站脚本攻击 漏洞摘要 字段| 值 ---|--- 受影响软件| Gravity Forms(WordPress 插件) 供应商| Rocketgenius, Inc. 漏洞类型| CWE-79:网页生成期间输入未正确中和(反射型跨站脚本攻击) CWE 链| CWE-20 → CWE-116 → CWE-838 → CWE-79(参见下方 CWE 分析) 受影响版本| 已在 2.9.28(发现时最新版本)上确认;早期版本可能受影响 修复版本|...

4.7CVSS6AI score0.00356EPSS
SaveExploits0
Patchstack
Patchstack
added 2026/09/09 7:45 a.m.11 views

WordPress Repeater Fields for Gravity Forms plugin <= 3.0.4 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by andrea bocchetti in WordPress Plugin Repeater Fields for Gravity Forms versions = 3.0.4...

7.2CVSS5.7AI score0.00292EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder