Lucene search
+L

6 matches found

Kitploit
Kitploit
•added 2026/09/26 2:41 a.m.•9 views

Aether-C2-Framework

🌌 Aether-C2-Framework - Powerful Tools for Cybersecurity Training Download Aether-C2-Framework 🚀 Getting Started Welcome to the Aether-C2-Framework! This guide will help you download and run the framework easily, even if you're not a tech expert. 🛠️ System Requirements Before downloading the...

6.1AI score
SaveExploits0References1
NVD
NVD
•added 2026/09/20 12:17 p.m.•21 views

CVE-2026-94104

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi endpoint that fails to validate file extensions for new filenames or when chunks parameter is 2 or higher. Attackers with view-only back-office access can upload PHP files to the web-accessible...

8.8CVSS0.00671EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/20 11:09 a.m.•10 views

CVE-2026-94104 NivoCart through 2.4.0 Arbitrary File Upload RCE via filemanager

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi endpoint that fails to validate file extensions for new filenames or when chunks parameter is 2 or higher. Attackers with view-only back-office access can upload PHP files to the web-accessible...

8.7CVSS6.5AI score
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/20 12:00 a.m.•2 views

CVE-2026-94104: Unrestricted Upload of File with Dangerous Type

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi endpoint that fails to validate file extensions for new filenames or when chunks parameter is 2 or higher. Attackers with view-only back-office access can upload PHP files to the web-accessible...

8.8CVSS6.6AI score0.00671EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/16 11:53 a.m.•7 views

CVE-2025-69238 Cross-Site Request Forgery in Raytha CMS

Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. Attacker can craft special website, which when visited by the authenticated victim, will automatically send POST request to the endpoint e. x. deletion of the data without enforcing token verification. This issue wa...

6.9CVSS5.8AI score0.00121EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2026/02/04 12:00 a.m.•17 views

Cockpit CMS 0.13.0 Multi-Endpoint Injection Scanner

Cockpit CMS version 0.13.0 multi-endpoint injection scanner. This tool is a defensive security scanner designed to safely assess web application endpoints for potential input-validation and injection weaknesses without executing any commands. It sends non-executable canary payloads through...

5.5AI score
SaveExploits0
Rows per page
Query Builder