Lucene search
+L

1065 matches found

Kitploit
Kitploit
added 2026/09/12 3:01 p.m.7 views

CVE-2021-41511

CVE-2021-41511 Título del Exploit: Sistema de Gestión de Reservas de Alojamiento 1.0 - Inyección SQL / Bypass de Autenticación Autor del Exploit: Nitin Sharmavidvansh Página web del proveedor: https://www.sourcecodester.com/php/14883/lodging-reservation-management-system-php-free-source-code.html...

9.8CVSS8.2AI score0.03342EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 1:07 p.m.9 views

CVE-2021-42665

CVE-2021-42665 CVE-2021-42665 - Vulnerabilidad de elusión de autenticación por inyección SQL en el sistema de portal en línea de Engineers. Descripción técnica: Existe una vulnerabilidad de inyección SQL en el formulario de inicio de sesión del Portal Online de Engineers que puede permitir a un...

9.8CVSS8.2AI score0.04947EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/12 11:15 a.m.7 views

CVE-2025-7892-Proof-of-Concept-Login-Form

CVE-2025-7892-Proof-of-Concept-Login-Form Demonstration Video: https://drive.google.com/file/d/16vr563yC9ub3NQP-f63KL95v0ZLbX5O/view?usp=drivelink Credit : https://github.com/KMov-g...

5.5CVSS6AI score0.00284EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/12 11:10 a.m.7 views

CVE-2023-38890

CVE-2023-38890 Description Online Shopping Portal Project V3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in t...

8.8CVSS7.9AI score0.01417EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 5:44 a.m.8 views

CVE-2020-9495

CVE-2020-9495 PoC CVE-2020-9495 es una vulnerabilidad de inyección LDAP de gravedad media en Apache Archiva versiones anteriores a la 2.2.5. Permite a un atacante recuperar cualquier valor de atributo LDAP de usuarios que existan en el servidor LDAP. Del aviso oficial de Apache Archiva: Al...

5.3CVSS6.1AI score0.08004EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/12 5:14 a.m.6 views

CVE-2023-26469-Jorani

Herramienta de explotación de CVE-2023-26469 Resumen Esta es una herramienta de explotación PoC para la versión 1.0.0 de Jorani, que permite a un atacante lograr la ejecución remota de código mediante técnicas de path traversal e inyección de registros. ⚠️ Advertencia: Esta herramienta es solo par...

9.8CVSS8.2AI score0.82949EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/12 3:24 a.m.7 views

moodle-login-csrf

This repository contains the files used in finding and exploiting two moodle bugs, MSA-18-0020 CVE-2018-16854 and MSA-19-0004 CVE-2019-3847, which leverage the ability for users to add JavaScript to their own dashboards. MSA-18-0020 relies on CSRF on the login form, whereas MSA-19-0004 requires a...

8.8CVSS6.7AI score0.02326EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.49 views

Timesheet Next Gen <=1.5.3 - Cross-Site Scripting

Timesheet Next Gen 1.5.3 and earlier is vulnerable to cross-site scripting that allows an attacker to execute arbitrary HTML and JavaScript code via a "redirect" parameter. The component is: Web login form: login.php, lines 40 and 54. The attack vector is: reflected XSS, victim may click the...

6.1CVSS6.6AI score0.043EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/11 4:09 p.m.5 views

Reflected-XSS-in-Vvveb-CMS-v1.0.7.2

XSS Reflejado en el Formulario de Inicio de Sesión Campos de Correo Electrónico y Contraseña Vvveb CMS v1.0.7.2 Autor: Andrew Paul Fecha de descubrimiento: 12 de agosto de 2025 Proveedor: Vvveb URL del proveedor: http://vvveb.com GitHub del proveedor: https://github.com/givanz/Vvveb Versión...

6.1CVSS5.6AI score0.00379EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/11 10:02 a.m.4 views

CVE-2026-64638

CVE-2026-64638 CVE-2026-64638 fast try root@kitploit: import requests target = "http://127.0.0.1:9000/wp-login.php" payload = 'X' response = requests.posttarget, data="log": payload, "pwd": "x", timeout=5 printresponse.statuscode printresponse.text or root@kitploit: POST /wp-login.php HTTP/1.1...

8.9CVSS8AI score0.31204EPSS
SaveExploits33
OSV
OSV
added 2026/08/26 5:38 p.m.7 views

DRUPAL-CONTRIB-2026-110

This module enables you to disable access to the /user/login form unless a secret key is provided. The module does not sufficiently restrict repeated attempts to guess that key, allowing brute-force attacks against the access-control mechanism...

5.7CVSS5.4AI score0.00216EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/25 2:16 a.m.7 views

DEBIAN-CVE-2026-34964

Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values. Attackers can inject PDO DSN keys like host= and port= into the server...

6.9CVSS5.7AI score0.00307EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/25 1:29 a.m.8 views

EUVD-2026-65197

Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values. Attackers can inject PDO DSN keys like host= and port= into the server...

6.9CVSS5.7AI score0.00307EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/25 1:29 a.m.20 views

CVE-2026-34964

Adminer before 5.5.0 contains a server-side request forgery (SSRF) vulnerability in the login form's server field validator. The validator only inspects leading integers for privileged ports and fails to reject non-numeric port values, allowing attackers to inject PDO DSN keys such as host= and p...

6.9CVSS5.7AI score0.00307EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/25 1:29 a.m.22 views

CVE-2026-34964 Adminer before 5.5.0 SSRF via PDO DSN Injection

Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values. Attackers can inject PDO DSN keys like host= and port= into the server...

6.9CVSS5.8AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.15 views

PT-2026-81126

Adminer before 5.5.0 contains a server-side request forgery vulnerability in the login form's server field validator, which only inspects leading integers for privileged ports and fails to reject non-numeric port values. Attackers can inject PDO DSN keys like host= and port= into the server...

6.9CVSS5.6AI score0.00307EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/18 1:17 p.m.16 views

CVE-2026-75778

A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::selectwithmultiplecondition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack...

7.5CVSS0.00328EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/18 12:15 p.m.14 views

EUVD-2026-60732

A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::selectwithmultiplecondition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack...

7.5CVSS5.4AI score0.00328EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/18 12:15 p.m.30 views

CVE-2026-75778 code-projects Task Management System Login Form index.php select_with_multiple_condition sql injection

A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::selectwithmultiplecondition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack...

7.5CVSS0.00328EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/18 12:15 p.m.31 views

CVE-2026-75778

Task Management System 1.0 has a SQL injection in Operation::select_with_multiple_condition within /index.php of the Login Form; the email argument is unparameterized. CVSS 7.3 (HIGH), exploitable remotely with no auth; proof-of-concept exploit is publicly available. No patch or workaround is doc...

7.5CVSS7.3AI score0.00328EPSS
SaveExploits0References6
Rows per page
Query Builder