Lucene search
+L

466 matches found

Kitploit
Kitploit
added 2026/09/21 4:50 a.m.8 views

skype-log-viewer

skype-log-viewer Download and View Skype History Without Skype This program allows you to view all of your skype chat logs and then easily export them as text files. It correctly organizes them by conversation, and makes sure that group conversations do not get jumbled with one on one chats...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/20 11:48 p.m.19 views

simvyn

simvyn Universal mobile devtool — control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI Table of Contents Quick Start Installation AI Coding Agents Features Module Showcases Collections Guide CLI Reference How It Works Supported Platforms Contributing Securit...

6.1AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/20 4:03 p.m.11 views

CVE-2021-21234

CVE-2021-21234 spring-boot-actuator-logview ライブラリにおけるディレクトリトラバーサルの脆弱性 https://blogg.pwc.no/styringogkontroll/unauthenticated-directory-traversal-vulnerability-in-a-java-spring-boot-actuator-library-cve-2021-21234...

7.7CVSS7.6AI score0.21011EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/19 2:32 a.m.7 views

CVE-2026-67599_ClearOS_RCE

日志查看器过滤器参数中的OS命令注入 包: ClearFoundation 测试版本: ClearOS 7.9.1.342252 漏洞类型: 操作系统命令注入(CWE-78) 严重性: 高 CVE : CVE-2026-67599 CVSS v3.1 向量: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H(评分:7.2) 感谢 VulnCheck 代表我帮助分配和跟踪此 CVE-2026-67599。 产品描述 ClearOS 是一个基于 CentOS/RHEL...

8.6CVSS6.2AI score0.01865EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.37 views

Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Arbitrary File Read

The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wpajaxnoprivelvwplogdownload AJAX action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, whi...

7.5CVSS7.5AI score0.46858EPSS
SaveExploits1References4
Kitploit
Kitploit
added 2026/09/18 5:47 a.m.7 views

CVE-2024-12849-Poc

CVE-2024-12849-Poc 📜 描述 Error Log Viewer By WP Guru 这个 WordPress 插件在 1.0.1.3 及之前的所有版本中,通过 wpajaxnoprivelvwplogdownload AJAX 操作存在任意文件读取漏洞。这使未认证的攻击者能够读取服务器上任意文件的内容,其中可能包含敏感信息。 ⚙️ 安装所需的软件包 root@kitploit: pip install requests ⚙ 检查版本并下载默认文件 示例命令 root@kitploit: python CVE-2024-12849.py -u...

7.5CVSS7.8AI score0.46858EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 5:14 a.m.8 views

CVE-2024-12849

CVE-2024-12849 Error Log Viewer By WP Guru = 1.0.1.3 - 缺少授权导致未认证的任意文件读取 描述 WordPress 的 Error Log Viewer By WP Guru 插件在 1.0.1.3 及之前的所有版本中,通过 wpajaxnoprivelvwplogdownload AJAX 操作存在任意文件读取漏洞。这使得未认证的攻击者能够读取服务器上任意文件的内容,其中可能包含敏感信息。 详情 类型 : 插件 Slug : error-log-viewer-wp 受影响版本 : 1.0.1.3 CVSS 分数 : 7.5 CVSS...

7.5CVSS7.9AI score0.46858EPSS
SaveExploits1
OSV
OSV
added 2026/09/08 8:16 a.m.7 views

BIT-JENKINS-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.7AI score0.00436EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/02 4:17 p.m.11 views

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.7AI score
SaveExploits0References1
NVD
NVD
added 2026/09/02 4:17 p.m.9 views

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS0.00436EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/02 3:40 p.m.9 views

EUVD-2026-70114

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.8AI score0.00436EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 3:40 p.m.36 views

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

0.00436EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 3:40 p.m.24 views

CVE-2026-84648

CVE-2026-84648 is a stored cross-site scripting (XSS) vulnerability in the system log viewer of Jenkins 2.579 and earlier (LTS 2.568.2 and earlier). The root cause is the failure to escape log record metadata (source, level, and timestamp) before rendering, allowing attackers who control agent pr...

8.8CVSS5.8AI score0.00436EPSS
SaveExploits0References1Affected Software1
Jenkins Security Advisories
Jenkins Security Advisories
added 2026/09/02 12:00 a.m.10 views

Stored XSS vulnerability in system log viewer

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes. TIP: On Jenkins 2.539 and newer, LTS...

8.8CVSS5.8AI score0.00436EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/09/02 12:00 a.m.12 views

PT-2026-84771

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.8AI score0.00436EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/28 2:16 a.m.13 views

CVE-2026-78613

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

8.6CVSS0.00635EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/27 11:26 p.m.18 views

CVE-2026-78613

WatchGuard Dimension is affected by an authenticated SQL injection vulnerability in the log viewer feature . An authenticated user holding report administration permissions can send specially crafted requests to gain arbitrary command execution as the Dimension WebUI process user. The CVSS 4.0 ba...

8.6CVSS6.2AI score0.00635EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/27 11:26 p.m.32 views

CVE-2026-78613 Dimension SQL Injection in Log Viewer

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

8.6CVSS0.00635EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/20 1:58 p.m.35 views

CVE-2026-64967 Path Traversal in ATutor

A path traversal vulnerability in ATutor's error log viewer allows an attacker with administrative privileges to access arbitrary files outside the intended logs directory. This can lead to unauthorized access to sensitive files and other resources accessible to the web server process. Product is...

6.9CVSS0.00361EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/20 1:58 p.m.24 views

CVE-2026-64967

ATutor's error log viewer contains a path traversal flaw allowing an admin to read arbitrary files outside the logs directory. Version 2.2.4 is confirmed vulnerable; the product is no longer supported and no fix exists, so migration to a maintained alternative is the only remediation. Exploitatio...

6.9CVSS5.6AI score0.00361EPSS
SaveExploits0References2
Rows per page
Query Builder