58241 matches found
DomainMOD 4.13.0 - Cross-Site Scripting
DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...
Altenergy Power Control Software - SQL Injection
A vulnerability classified as critical was found in Altenergy Power Control Software up to 20241108. This vulnerability affects the function getstatuszigbee of the file /index.php/display/statuszigbee. The manipulation of the argument date leads to sql injection. The attack can be initiated...
Cloudlog - SQL Injection
Cloudlog 2.6.15 contains a SQL injection caused by unsanitized input in oqrs.php requestform, letting attackers execute arbitrary SQL commands via stationid or callsign, exploit requires sending crafted request. id: CVE-2024-48259 info: name: Cloudlog - SQL Injection author: s4e-io severity: high...
AVM FRITZ!Box 7530 AX - Unauthorized Access
An access control issue in the component /juisboxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information without authentication. id: CVE-2024-54767 info: name: AVM FRITZ!Box 7530 AX - Unauthorized Access author: DhiyaneshDK severity: high description: | An access...
Schneider Electric U.motion Builder - SQL Injection
The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...
Control iD iDSecure - Authentication Bypass
An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative use...
Popup Builder Plugin - SQL Injection and Cross-Site Scripting
The Popup Builder WordPress plugin before 4.1.1 is vulnerable to SQL Injection and Reflected XSS via the sgpb-subscription-popup-id parameter. id: CVE-2022-0479 info: name: Popup Builder Plugin - SQL Injection and Cross-Site Scripting author: ritikchaddha severity: critical description: | The Pop...
Insta-Crawler
Insta Crawler Um script Python projetado para gerar IDs aleatórios de fotos do Instagram e testá-los. Captura de Tela...
Spring-Data-Mongodb-Example
Spring-Data-Mongodb-Example CVE-2022-22980 Umgebung Docker-Umgebung erstellen root@kitploit: docker build -t mongo . docker run -dit -p 6666:6666 mongo Poc root@kitploit: ➜ Spring-Data-Mongodb-Example git:main curl 0:6666/v1/user/get -d 'id=Tjava.lang.Runtime.getRuntime.exec"touch /tmp/aaaa"'...
Vulnerable-to-Debian-OpenSSL-bug-CVE-2008-0166
Ricerca di monete BTC nelle versioni precedenti di Bitcoin Core con la vulnerabilità critica OpenSSL 0.9.8 CVE-2008-0166 In questo articolo creeremo uno strumento che genererà Indirizzi Bitcoin P2PKH utilizzando la vulnerabilità CVE-2008-0166. Questo è un progetto di ricerca per trovare monete BT...
CVE-2023-24775-and-CVE-2023-24780
CVE-2023-24775 und CVE-2023-24780 Mein Python-PoC für 2023-24780 und CVE-2023-24775, diese SQLi-CVEs in Funadmin Dies ist ein Repository mit einem PoC-Exploit für Python-CVE-SQLi in Funadmin. CVE-2023-24774 - https://nvd.nist.gov/vuln/detail/CVE-2023-24780 Verwundbare Version von Funadmin v3.2.0...
EUVD-2026-68063
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the instructor role to read other users' order billing details, including name, email address, phone number and postal address, by enumerating order...
m33tfinder
M33tfinder è uno strumento per rilevare intervalli di ID di conferenza attivi in un server Cisco Meeting Server. M33tbreak è uno strumento per testare codici di accesso deboli contro una conferenza in un server Cisco Meeting Server. Pins.txt contiene, ad esempio, codici di accesso a 4 cifre. Ques...
CVE-2026-66384
cve-id Donazioni...
untitledgoosetool
Untitled Goose Tool L'oca è in libertà. Indice Informazioni Per Iniziare Prerequisiti Requisiti Installazione Utilizzo Config GUI Auth Csv Honk Messagetrace Flusso di lavoro predefinito consigliato Flusso di lavoro consigliato per chiamata UAL con limiti di tempo Considerazioni Problemi noti...
CVE-2026-55834
Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.6.0 until 2.9.0, frontend/src/routes/authorize/+page.ts reads the redirecturi query parameter and frontend/src/routes/authorize/+page.svelte uses the raw callbackURL in redirectWithError when...
mitaka
Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to , etc...
CVE-2026-73072
cve-id Spenden...
CVE-2026-73034-PoC
CVE-2026-73034 — DB-GPT v0.8.1 Path Traversal não autenticado → Escrita Arbitrária de Arquivos CVSS 9.8 Crítico · CWE-22 · GHSA/Issue 3104 Resumo POST /api/v1/python/file/upload no DB-GPT v0.8.1 recebe o cabeçalho HTTP user-id e o utiliza bruto como um componente de caminho : root@kitploit:...
