Lucene search
+L

58241 matches found

Nuclei
Nuclei
added 2026/08/29 10:07 a.m.93 views

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

5.4CVSS6AI score0.01331EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/29 10:07 a.m.66 views

Altenergy Power Control Software - SQL Injection

A vulnerability classified as critical was found in Altenergy Power Control Software up to 20241108. This vulnerability affects the function getstatuszigbee of the file /index.php/display/statuszigbee. The manipulation of the argument date leads to sql injection. The attack can be initiated...

6.5CVSS6.5AI score0.0367EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/08/29 10:07 a.m.19 views

Cloudlog - SQL Injection

Cloudlog 2.6.15 contains a SQL injection caused by unsanitized input in oqrs.php requestform, letting attackers execute arbitrary SQL commands via stationid or callsign, exploit requires sending crafted request. id: CVE-2024-48259 info: name: Cloudlog - SQL Injection author: s4e-io severity: high...

7.3CVSS6.1AI score0.00907EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/29 10:07 a.m.116 views

AVM FRITZ!Box 7530 AX - Unauthorized Access

An access control issue in the component /juisboxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information without authentication. id: CVE-2024-54767 info: name: AVM FRITZ!Box 7530 AX - Unauthorized Access author: DhiyaneshDK severity: high description: | An access...

7.5CVSS5.8AI score0.01823EPSS
SaveExploits0References1
Nuclei
Nuclei
added 2026/08/29 10:07 a.m.19 views

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

8.8CVSS7.3AI score0.01998EPSS
SaveExploits3References2
Nuclei
Nuclei
added 2026/08/29 10:07 a.m.79 views

Control iD iDSecure - Authentication Bypass

An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative use...

9.8CVSS7.3AI score0.64996EPSS
SaveExploits6
Nuclei
Nuclei
added 2026/08/29 10:07 a.m.68 views

Popup Builder Plugin - SQL Injection and Cross-Site Scripting

The Popup Builder WordPress plugin before 4.1.1 is vulnerable to SQL Injection and Reflected XSS via the sgpb-subscription-popup-id parameter. id: CVE-2022-0479 info: name: Popup Builder Plugin - SQL Injection and Cross-Site Scripting author: ritikchaddha severity: critical description: | The Pop...

9.8CVSS7.4AI score0.43807EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/29 8:22 a.m.2 views

Insta-Crawler

Insta Crawler Um script Python projetado para gerar IDs aleatórios de fotos do Instagram e testá-los. Captura de Tela...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/29 8:09 a.m.3 views

Spring-Data-Mongodb-Example

Spring-Data-Mongodb-Example CVE-2022-22980 Umgebung Docker-Umgebung erstellen root@kitploit: docker build -t mongo . docker run -dit -p 6666:6666 mongo Poc root@kitploit: ➜ Spring-Data-Mongodb-Example git:main curl 0:6666/v1/user/get -d 'id=Tjava.lang.Runtime.getRuntime.exec"touch /tmp/aaaa"'...

9.8CVSS7.1AI score0.17969EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/29 7:17 a.m.4 views

Vulnerable-to-Debian-OpenSSL-bug-CVE-2008-0166

Ricerca di monete BTC nelle versioni precedenti di Bitcoin Core con la vulnerabilità critica OpenSSL 0.9.8 CVE-2008-0166 In questo articolo creeremo uno strumento che genererà Indirizzi Bitcoin P2PKH utilizzando la vulnerabilità CVE-2008-0166. Questo è un progetto di ricerca per trovare monete BT...

7.8CVSS6.8AI score0.70721EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/29 6:58 a.m.4 views

CVE-2023-24775-and-CVE-2023-24780

CVE-2023-24775 und CVE-2023-24780 Mein Python-PoC für 2023-24780 und CVE-2023-24775, diese SQLi-CVEs in Funadmin Dies ist ein Repository mit einem PoC-Exploit für Python-CVE-SQLi in Funadmin. CVE-2023-24774 - https://nvd.nist.gov/vuln/detail/CVE-2023-24780 Verwundbare Version von Funadmin v3.2.0...

9.8CVSS7.2AI score0.19763EPSS
SaveExploits3
EUVD
EUVD
added 2026/08/29 6:00 a.m.4 views

EUVD-2026-68063

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the instructor role to read other users' order billing details, including name, email address, phone number and postal address, by enumerating order...

2.7CVSS5.9AI score0.00132EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/29 3:00 a.m.2 views

m33tfinder

M33tfinder è uno strumento per rilevare intervalli di ID di conferenza attivi in un server Cisco Meeting Server. M33tbreak è uno strumento per testare codici di accesso deboli contro una conferenza in un server Cisco Meeting Server. Pins.txt contiene, ad esempio, codici di accesso a 4 cifre. Ques...

7.5CVSS6.7AI score0.01964EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 10:41 p.m.4 views

CVE-2026-66384

cve-id Donazioni...

5.3CVSS5.9AI score0.00579EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 9:56 p.m.2 views

untitledgoosetool

Untitled Goose Tool L'oca è in libertà. Indice Informazioni Per Iniziare Prerequisiti Requisiti Installazione Utilizzo Config GUI Auth Csv Honk Messagetrace Flusso di lavoro predefinito consigliato Flusso di lavoro consigliato per chiamata UAL con limiti di tempo Considerazioni Problemi noti...

5.9AI score
SaveExploits0
NVD
NVD
added 2026/08/28 8:18 p.m.6 views

CVE-2026-55834

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.6.0 until 2.9.0, frontend/src/routes/authorize/+page.ts reads the redirecturi query parameter and frontend/src/routes/authorize/+page.svelte uses the raw callbackURL in redirectWithError when...

4.3CVSS0.00269EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/28 7:23 p.m.741 views

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to , etc...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/28 7:10 p.m.4 views

CVE-2026-73072

cve-id Spenden...

8.5CVSS5.9AI score0.00125EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 6:37 p.m.4 views

CVE-2026-73034-PoC

CVE-2026-73034 — DB-GPT v0.8.1 Path Traversal não autenticado → Escrita Arbitrária de Arquivos CVSS 9.8 Crítico · CWE-22 · GHSA/Issue 3104 Resumo POST /api/v1/python/file/upload no DB-GPT v0.8.1 recebe o cabeçalho HTTP user-id e o utiliza bruto como um componente de caminho : root@kitploit:...

9.8CVSS5.3AI score0.01509EPSS
SaveExploits1References1
Circl
Circl
added 2026/08/28 6:35 p.m.8 views

CVE-2026-55834

creationtimestamp| type| source ---|---|--- 2026-08-28 18:35:34+00:00| published-proof-of-concept| https://github.com/pocket-id/pocket-id/security/advisories/GHSA-2wvm-8mvp-22qv...

4.3CVSS5.8AI score0.00269EPSS
SaveExploits0References1
Rows per page
Query Builder