Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

481607 matches found

Cvelist
Cvelist•added 2026/09/01 4:27 a.m.•41 views

CVE-2026-13203 Live Composer <= 2.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_id' Shortcode Attribute

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'customid' shortcode attribute of the dslcmodulessection and dslcmodulesarea shortcodes in versions up to, and including, 2.1.19. This is due to insufficient input...

6.4CVSS0.00241EPSS
SaveExploits0References12
Cvelist
Cvelist•added 2026/09/01 4:27 a.m.•39 views

CVE-2026-76006 Photo Gallery by Ays <= 6.8.2 - Authenticated (Administrator+) SQL Injection via 's' Parameter

The Photo Gallery by Ays – Responsive Image Gallery plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 6.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL quer...

4.9CVSS0.00351EPSS
SaveExploits0References7
CVE
CVE•added 2026/09/01 4:27 a.m.•18 views

CVE-2026-76006

Photo Gallery by Ays (WordPress plugin) versions up to and including 6.8.2 are vulnerable to SQL Injection via the 's' parameter . The root cause is insufficient escaping and lack of query preparation on user-supplied input across two execution paths: $wpdb-&gt;get_var() in record_count() and $wp...

4.9CVSS6AI score0.00351EPSS
SaveExploits0References7
EUVD
EUVD•added 2026/09/01 4:27 a.m.•10 views

EUVD-2026-68974

The Photo Gallery by Ays – Responsive Image Gallery plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 6.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL quer...

4.9CVSS6AI score0.00351EPSS
SaveExploits0References7
EUVD
EUVD•added 2026/09/01 4:27 a.m.•9 views

EUVD-2026-68971

The Persistent Login plugin for WordPress is vulnerable to generic SQL Injection via 'wppldeviceid' Cookie in all versions up to, and including, 3.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

6.5CVSS6AI score0.00249EPSS
SaveExploits0References5
CVE
CVE•added 2026/09/01 4:27 a.m.•20 views

CVE-2026-17589

The Shopping Cart & eCommerce Store (WP EasyCart) plugin for WordPress is vulnerable to a second-order SQL injection via the product_order parameter in versions up to 5.9.2 . The payload is written to the ec_pageoption table via the ec_ajax_save_page_options handler with no sanitization on raw $_...

4.9CVSS5.9AI score0.0028EPSS
SaveExploits0References5
EUVD
EUVD•added 2026/09/01 4:27 a.m.•9 views

EUVD-2026-68970

The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to generic SQL Injection via the 'productorder' parameter in all versions up to, and including, 5.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

4.9CVSS5.9AI score0.0028EPSS
SaveExploits0References5
Cvelist
Cvelist•added 2026/09/01 4:27 a.m.•41 views

CVE-2026-18752 Persistent Login <= 3.1.0 - Authenticated (Subscriber+) SQL Injection via 'wppl_device_id' Cookie

The Persistent Login plugin for WordPress is vulnerable to generic SQL Injection via 'wppldeviceid' Cookie in all versions up to, and including, 3.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

6.5CVSS0.00249EPSS
SaveExploits0References5
CVE
CVE•added 2026/09/01 4:27 a.m.•13 views

CVE-2026-18752

CVE-2026-18752 affects the Persistent Login plugin for WordPress in all versions up to and including 3.1.0 . The vulnerability is a generic SQL injection via the wppl_device_id cookie, caused by insufficient escaping of the user-supplied parameter and lack of proper query preparation. Authenticat...

6.5CVSS6AI score0.00249EPSS
SaveExploits0References5
Cvelist
Cvelist•added 2026/09/01 4:27 a.m.•41 views

CVE-2026-17589 Shopping Cart & eCommerce Store <= 5.9.2 - Authenticated (Administrator+) SQL Injection via 'product_order' Parameter

The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to generic SQL Injection via the 'productorder' parameter in all versions up to, and including, 5.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

4.9CVSS0.0028EPSS
SaveExploits0References5
Kitploit
Kitploit•added 2026/09/01 3:36 a.m.•5 views

CVE-2025-68999-POC

CVE-2025-68999 Happy Addons for Elementor prepare 安全地获取行，但随后将 $entry-metakey 直接拼入 SQL 字符串而未转义： root@kitploit: $records = " $duplicatedpostid, '$entry-metakey', '$value' "; // ... $wpdb-query $query ; 由于 metakey 来自数据库，代码将其视为可信数据。但贡献者可以通过自定义字段面板设置任意字段名——因此他们可以控制该列中的内容。 攻击分两步： 1. 写入：...

8.5CVSS5.9AI score0.00263EPSS
SaveExploits2References1
Kitploit
Kitploit•added 2026/09/01 3:36 a.m.•4 views

CVE-2019-9053

CVE-2019-9053 CMS Made Simple 仅供教育和授权安全测试使用。...

8.1CVSS7.6AI score0.68581EPSS
SaveExploits38
Kitploit
Kitploit•added 2026/09/01 3:36 a.m.•4 views

globalprotect-ca-cert-ipc

c2us.exe - 以登录用户在桌面会话中的身份启动命令。在本例中，以 SYSTEM 身份在非特权用户的桌面会话中启动 cmd.exe。 c2us.c - c2us.exe 的源代码。 epinject.exe - 入口点注入器，用于生成新进程并在其入口点注入代码。 loadgpsend.bin - 使用 epinject.exe 注入 PanGPA.exe 的载荷，用于运行主漏洞利用主体 c:\windows\temp\gpsend.dll crypt.c - 与 Globalprotect 兼容的加密实现。 gpcaupgrade.c - 主要漏洞利用代码。 gpupgrade.d...

5.8AI score
SaveExploits0
NVD
NVD•added 2026/09/01 3:16 a.m.•7 views

CVE-2026-67394

A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0.34 before 18.0.79.9 and 18.0.80.5. The vulnerability allows a customer or reseller with shell access or allowed to change their own shell access to...

9CVSS0.01287EPSS
SaveExploits0References1
NVD
NVD•added 2026/09/01 3:16 a.m.•9 views

CVE-2026-65643

Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root...

8.8CVSS0.00904EPSS
SaveExploits1References1
Kitploit
Kitploit•added 2026/09/01 2:54 a.m.•4 views

CVE-2018-11510

由 Kyle Lovett（@SquirrelBuddha）和我本人（Matthew Fulton/@haqur）为 CVE-2018-11510 编写的一对漏洞利用程序。它利用一个未认证的命令注入漏洞来反弹一个 root shell。 该 metasploit 模块在仓库中附带了一个单独的 payload。我看看近期能否通过向 MSF 提交 pull request 将它们合并进去。 看起来这个漏洞 可能 已经被修补了，不过我敢肯定还有其他漏洞等着被发现 :D...

9.8CVSS7.9AI score0.44333EPSS
SaveExploits9
Kitploit
Kitploit•added 2026/09/01 2:49 a.m.•6 views

CVE-2023-49964

CVE-2023-49964：Alfresco 中的 FreeMarker 服务端模板注入 在 Hyland Alfresco Community Edition =7.2.0 中发现了一个问题。通过在 folder.get.html.ftl 文件中插入恶意内容，攻击者可以执行 SSTI（服务端模板注入）攻击，利用 FreeMarker 暴露的对象来绕过限制并实现 RCE（远程代码执行）。 注意： 此问题源于 CVE-2020-12873 的修复不完整。 NVD 披露： 该漏洞的披露信息可在此处找到。 要求： 此漏洞需要： 有效的用户凭据 概念验证： 更多详情和利用过程可在此 PDF...

8.8CVSS7.8AI score0.34684EPSS
SaveExploits1References3
Kitploit
Kitploit•added 2026/09/01 2:49 a.m.•9 views

CVE-2022-25813

CVE-2022-25813: Apache OfBiz中的FreeMarker服务端模板注入 通过在消息的“主题”字段中插入恶意内容，攻击者可以进行SSTI（服务端模板注入）攻击，利用FreeMarker暴露的对象绕过限制并获得RCE（远程代码执行）。 注意： 虽然此漏洞需要合法用户的交互才能触发SSTI，但任何创建了电子商务账户的未认证攻击者都可以发送恶意载荷。 厂商披露： 厂商关于此漏洞的披露和修复可在此处找到here。 需求： 此漏洞需要： 注册新用户或拥有有效用户凭证 管理员用户的交互 概念验证： 更多细节和利用过程可在本PDF中找到。 其他资源： 由Alvaro...

7.5CVSS7.4AI score0.67261EPSS
SaveExploits1References3
Kitploit
Kitploit•added 2026/09/01 2:47 a.m.•8 views

CVE-2021-42559

CVE-2021-42559: Inyección de comandos mediante configuraciones en MITRE Caldera Caldera versiones =2.8.1 contiene múltiples "requisitos" de inicio que ejecutan comandos al iniciar el servidor. Debido a que estos comandos se pueden cambiar mediante la API Rest, un usuario autenticado puede inserta...

8.8CVSS7.8AI score0.01957EPSS
SaveExploits3References1
Kitploit
Kitploit•added 2026/09/01 2:46 a.m.•6 views

CVE-2020-8250

CVE-2020-8250：通过命令注入在 Pulse Secure VPN Linux 客户端中实现权限提升 root SUID 可执行文件 pulsesvc 中有一个名为“doupload”的函数，该函数会不安全地将“HOME”环境变量传递给“system”。通过将“HOME”变量修改为包含特殊 shell 字符（例如：“”或“$”），攻击者可以在调用“doupload”时注入任意命令，并将其权限提升至 root。 NVD 披露： 该漏洞的 NVD 披露可在此处查看。 要求： 该漏洞利用针对的是客户端认证后才会访问到的代码，这意味着要利用此漏洞，攻击者需要满足以下 3 种场景之一：...

7.8CVSS6.9AI score0.00483EPSS
SaveExploits0References1
Rows per page
Query Builder