Lucene search
+L

17642 matches found

GithubExploit
GithubExploit
•added 2026/01/27 12:00 p.m.•361 views

Exploit for Path Traversal in Vmware Cloud_Foundation

CTT-enhanced-VMware-vCenter Looking at current high-impact vul...

10CVSS7.9AI score0.99999EPSS
SaveExploits582
GithubExploit
GithubExploit
•added 2026/01/27 7:38 a.m.•61 views

qSnapper

qSnapper A modern Qt6/QML GUI application for managing Btrfs/...

6.1AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/01/27 6:53 a.m.•207 views

Master-Engine-POC---Proprietary-Agentic-AI-Solution

Master Engine POC - Proprietary Agentic AI Solution !Pyth...

5.9AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/01/26 9:58 a.m.•328 views

Exploit for CVE-2026-24061

CVE-2026-24061 Vulnerability Detection and Exploitation Tool...

9.8CVSS8.9AI score0.98984EPSS
SaveExploits69
GithubExploit
GithubExploit
•added 2026/01/26 9:58 a.m.•259 views

Exploit for CVE-2026-24061

CVE-2026-24061 Vulnerability Detection and Exploitation Tool...

9.8CVSS8.9AI score0.98984EPSS
SaveExploits69
GithubExploit
GithubExploit
•added 2026/01/25 2:51 p.m.•214 views

POC-Generator-Burp_Suite_Extension

🎯 POC Generator - Burp Suite Extension From vulnerability...

6.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/01/25 9:16 a.m.•32 views

CVE-2026-1266

The Postalicious plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...

4.4CVSS6AI score0.00285EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2026/01/25 12:00 a.m.•32 views

Multi-Agent End-To-End Vulnerability Management for Mitigating Recurring Vulnerabilities

Software vulnerability management has become increasingly critical as modern systems scale in size and complexity. However, existing automated approaches remain insufficient. Traditional static analysis methods struggle to precisely capture contextual dependencies, especially when vulnerabilities...

6AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/01/25 12:00 a.m.•20 views

Multi-Agent Collaborative Intrusion Detection for Low-Altitude Economy IoT: An LLM-Enhanced Agentic AI Framework

The rapid expansion of low-altitude economy Internet of Things LAE-IoT networks has created unprecedented security challenges due to dynamic three-dimensional mobility patterns, distributed autonomous operations, and severe resource constraints. Traditional intrusion detection systems designed fo...

5.8AI score
SaveExploits0
NVD
NVD
•added 2026/01/24 9:15 a.m.•24 views

CVE-2026-1266

The Postalicious plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...

4.4CVSS0.00285EPSS
SaveExploits0References9
NVD
NVD
•added 2026/01/24 9:15 a.m.•22 views

CVE-2026-1300

The Responsive Header plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple plugin settings parameters in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.4CVSS0.00232EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/01/24 8:26 a.m.•12 views

CVE-2026-1302 Meta-box GalleryMeta <= 3.0.1 - Authenticated (Editor+) Stored Cross-Site Scripting via Image Caption

The Meta-box GalleryMeta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions a...

4.4CVSS6AI score0.00243EPSS
SaveExploits1References5
NVD
NVD
•added 2026/01/24 8:16 a.m.•23 views

CVE-2026-1097

The ThemeRuby Multi Authors – Assign Multiple Writers to Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before' and 'after' shortcode attributes in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS0.00261EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/01/24 7:26 a.m.•11 views

CVE-2026-1097

The ThemeRuby Multi Authors – Assign Multiple Writers to Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before' and 'after' shortcode attributes in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS6.1AI score0.00261EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/01/24 7:26 a.m.•53 views

CVE-2026-1097 ThemeRuby Multi Authors <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes

The ThemeRuby Multi Authors – Assign Multiple Writers to Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before' and 'after' shortcode attributes in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS0.00261EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/01/24 7:26 a.m.•7 views

CVE-2026-1097 ThemeRuby Multi Authors <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes

The ThemeRuby Multi Authors – Assign Multiple Writers to Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before' and 'after' shortcode attributes in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS6.1AI score0.00261EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2026/01/24 5:30 a.m.•24 views

WordPress ThemeRuby Multi Authors plugin <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes vulnerability discovered by zaim in WordPress Plugin ThemeRuby Multi Authors versions = 1.0.0...

6.4CVSS5.4AI score0.00261EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/24 12:00 a.m.•6 views

CVE-2026-1300: Improper Neutralization of Input During Web Page Generation

The Responsive Header plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple plugin settings parameters in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.4CVSS6AI score0.00232EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/24 12:00 a.m.•46 views

PT-2026-4606

The Responsive Header plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple plugin settings parameters in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.4CVSS5.7AI score0.00232EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/01/24 12:00 a.m.•25 views

PT-2026-4585

The ThemeRuby Multi Authors – Assign Multiple Writers to Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before' and 'after' shortcode attributes in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS5.8AI score0.00261EPSS
SaveExploits0References4
Rows per page
Query Builder