Lucene search
+L

961 matches found

Kitploit
Kitploit
•added 2026/10/10 1:00 p.m.•23 views

pecli

PEcli Tool to analyze PE files in python 3. Current features : Show information about the file import, exports, resources Search for interesting information in the file abnormal resources, peid... Dump sections or resources Check size Search for a string in the file Installation You can install i...

6.3AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/10 11:42 a.m.•134 views

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

6.1AI score
SaveExploits0References1
Nuclei
Nuclei
•added 2026/10/10 2:13 a.m.•28 views

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

8.8CVSS7.7AI score0.02917EPSS
SaveExploits3References2
Kitploit
Kitploit
•added 2026/10/09 11:37 a.m.•16 views

CVE-2025-9215

إضافة StoreEngine القوية لتجارة إلكترونية ووردبريس للمدفوعات والعضويات والعمولات والمبيعات والمزيد = 1.4.0 - تنزيل ملفات تعسفي للمستخدمين الموثقين مشترك+ تحتوي إضافة StoreEngine على ثغرة في ميزة استيراد/تصدير CSV تسمح لأي مستخدم موثق مشترك، كاتب، محرر، إلخ بتنزيل ملفات تعسفية من الخادم، بما في ذل...

6.5CVSS6.3AI score0.00612EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/10/08 11:34 p.m.•13 views

CVE-2022-0236

CVE-2022-0236 Плагин WordPress WP Import Export уязвим к несанкционированному раскрытию конфиденциальных данных из-за отсутствия проверки прав доступа в функции загрузки wpieprocessfiledownload, расположенной в файле /includes/classes/class-wpie-general.php. Это позволяет неаутентифицированным...

7.5CVSS7.5AI score0.04284EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/08 4:21 p.m.•17 views

CVE-2026-17566

CVE-2026-17566 — pgAdmin 4 Import/Export Data RCE PoC PoC d'exécution de code à distance pour l'outil Import/Export Data de pgAdmin 4. En exploitant la divergence de sémantique d'échappement par antislash entre le vérificateur de parenthèses isqueryparensbalanced et psql, injectez \copy ... TO...

9.9CVSS8.5AI score0.00673EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/10/08 3:15 p.m.•17 views

CVE-2024-7514

CVE-2024-7514 إضافة Comments Import & Export لووردبريس = 2.3.7 - قراءة ملفات عشوائية للمستخدمين المصادَق عليهم بصلاحية Author فأعلى عبر اجتياز الدليل Directory Traversal الوصف إضافة Comments Import & Export لووردبريس معرّضة لقراءة ملفات عشوائية بسبب عدم كفاية التحقق من صحة مسار الملف أثناء عملية...

6.5CVSS6.2AI score0.01085EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/08 3:10 p.m.•19 views

CVE-2024-54262

CVE-2024-54262 استغلال CVE-2024-54262: رفع ملفات عشوائي في Import Export for WooCommerce نظرة عامة يستغل هذا السكربت ثغرة في إضافة "Import Export for WooCommerce" الخاصة بووردبريس. تسمح الثغرة للمستخدمين غير المصرح لهم برفع ملفات عشوائية، مما قد يؤدي إلى تنفيذ تعليمات برمجية عن بُعد RCE. الميزات:...

9.9CVSS8.5AI score0.01471EPSS
SaveExploits2
GithubExploit
GithubExploit
•added 2026/10/07 7:55 p.m.•19 views

Exploit for CVE-2026-105844

CVE-2026-105844 — Payload CMS import-export prototype pollutio...

9.3CVSS6AI score0.00519EPSS
SaveExploits1
NVD
NVD
•added 2026/10/06 4:17 p.m.•6 views

CVE-2026-105844

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

9.3CVSS0.00519EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2026/10/06 4:09 p.m.•11 views

Payload: Prototype pollution in Payload Import Export plugin

Impact An unauthenticated user could cause unintended application behavior when the Import Export plugin is enabled, allowing an attacker to submit and execute remote code RCE. Applications that do not use @payloadcms/plugin-import-export are not affected. Patches Users should upgrade Payload...

9.3CVSS6.2AI score0.00519EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2026/10/06 4:09 p.m.•6 views

GHSA-QF28-8HC6-VWRP Payload: Prototype pollution in Payload Import Export plugin

Impact An unauthenticated user could cause unintended application behavior when the Import Export plugin is enabled, allowing an attacker to submit and execute remote code RCE. Applications that do not use @payloadcms/plugin-import-export are not affected. Patches Users should upgrade Payload...

9.3CVSS6.2AI score0.00519EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/10/06 3:57 p.m.•9 views

EUVD-2026-93470

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

9.3CVSS6.2AI score0.00519EPSS
SaveExploits1References3
OSV
OSV
•added 2026/10/06 3:57 p.m.•5 views

CVE-2026-105844 Payload: Prototype pollution in Payload Import Export plugin

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

9.3CVSS6.2AI score
SaveExploits0References5
CVE
CVE
•added 2026/10/06 3:57 p.m.•14 views

CVE-2026-105844

Payload , a headless content management system, contains a prototype pollution vulnerability in the @payloadcms/plugin-import-export plugin. An unauthenticated user can submit prototype-sensitive field paths, leading to unintended application behavior and potential remote code execution (RCE) . T...

9.3CVSS6.2AI score0.00519EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/10/06 3:57 p.m.•37 views

CVE-2026-105844 Payload: Prototype pollution in Payload Import Export plugin

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

9.3CVSS0.00519EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•13 views

PT-2026-106776

Name of the Vulnerable Software and Affected Versions Payload versions 3.0.0 through 3.87.9 Payload versions 4.0.0-canary.0 through 4.0.0-canary.26 Description An unauthenticated user can cause unintended application behavior when the @payloadcms/plugin-import-export plugin is enabled. By...

9.3CVSS6.8AI score0.00519EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•2 views

CVE-2026-105844: Improperly Controlled Modification of Object Prototype Attributes

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

9.3CVSS6.2AI score0.00519EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/10/05 12:25 a.m.•18 views

activemq-cve-lab

ActiveMQ Message Broker Vue d'ensemble Application de courtier de messages ActiveMQ avec fonctionnalités d'import/export de messages. Version : 5.11.1 Fonctionnalités Gestion des files de messages Statistiques et surveillance des files Import/export de fichiers de messages Statut du courtier en...

6.2AI score
SaveExploits0
NVD
NVD
•added 2026/10/02 3:17 p.m.•19 views

CVE-2026-32584

Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export smart-one-click-setup allows Retrieve Embedded Sensitive Data.This issue affects Smart One Click Setup – Complete Demo Import & Export: from n/a through 1.4....

5.3CVSS0.00197EPSS
SaveExploits0References1
Rows per page
Query Builder