Lucene search
+L

13103 matches found

Kitploit
Kitploit
added 2026/09/12 3:29 a.m.7 views

CVE-2019-20059

CVE-2019-20059 Yetishare SQL Injection в параметре sSortDir0 - v3.5.2 - v4.5.4. Кроме того, что администратор может использовать эту уязвимость, она также может быть задействована в CSRF-атаке, чтобы обмануть администратора и заставить его выполнить вредоносные запросы. Затронутые файлы...

8.8CVSS7.9AI score0.00937EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.19 views

Dyn Business Panel Plugin <= 1.0.0 - Cross-Site Scripting

Dyn Business Panel WordPress plugin = 1.0.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter in output, letting attackers execute scripts in the context of high privilege users, exploit requires victim to click a malicious link. id: CVE-2024-130...

7.1CVSS8AI score0.00537EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.60 views

Etherpad Lite <1.6.4 - Admin Authentication Bypass

Etherpad Lite before 1.6.4 is exploitable for admin access. id: CVE-2018-9845 info: name: Etherpad Lite 1.6.4 - Admin Authentication Bypass author: philippedelteil severity: critical description: Etherpad Lite before 1.6.4 is exploitable for admin access. impact: | An attacker can bypass the admi...

9.8CVSS8AI score0.12937EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.499 views

Moodle - Cross-Site Scripting/Remote Code Execution

The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system. Moodle versions 4.1.x before 4.1.3 and 4.2.x before...

6.5CVSS6.8AI score0.06583EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.20 views

Karel IP Phone IP1211 Web Management Panel - Local File Inclusion

Karel IP Phone IP1211 Web Management Panel is vulnerable to local file inclusion and can allow remote attackers to access arbitrary files stored on the remote device via the 'cgiServer.exx' endpoint and the 'page' parameter. id: CVE-2025-34023 info: name: Karel IP Phone IP1211 Web Management Pane...

8.5CVSS5.9AI score0.01541EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.65 views

Sidekiq < 7.0.8 - Cross-Site Scripting

An XSS vulnerability on a Sidekiq admin panel can pose serious risks to the security and functionality of the system. id: CVE-2023-1892 info: name: Sidekiq 7.0.8 - Cross-Site Scripting author: ritikchaddha,princechaddha severity: critical description: | An XSS vulnerability on a Sidekiq admin pan...

9.6CVSS7.5AI score0.02742EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.84 views

1Panel SQL Injection - Authenticated

1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to...

9.8CVSS8AI score0.29183EPSS
SaveExploits1References1
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.29 views

KevinLAB BEMS (Building Energy Management System) - Backdoor Account

KevinLAB BEMS has an undocumented backdoor account, and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution through the RMI. An attacker could exploit this vulnerability by logging in using the backdoor account with highes...

9CVSS7AI score0.0655EPSS
SaveExploits2References2
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.107 views

i-Panel Administration System 2.0 - Cross-Site Scripting

i-Panel Administration System 2.0 contains a cross-site scripting vulnerability that enables an attacker to execute arbitrary JavaScript code in the browser-based web console. id: CVE-2021-41878 info: name: i-Panel Administration System 2.0 - Cross-Site Scripting author: madrobot severity: medium...

6.1CVSS6.6AI score0.09912EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.71 views

Tieline IP Audio Gateway <=2.6.4.8 - Unauthorized Remote Admin Panel Access

Tieline IP Audio Gateway 2.6.4.8 and below is affected by a vulnerability in the web administrative interface that could allow an unauthenticated user to access a sensitive part of the system with a high privileged account. id: CVE-2021-35336 info: name: Tieline IP Audio Gateway =2.6.4.8 -...

9.8CVSS7.8AI score0.10107EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.40 views

Control Web Panel (CWP) - File Inclusion

In CWP Control Web Panel, previously CentOS Web Panel before version 0.9.8.1107, an unauthenticated attacker can abuse null byte %00 injection with the "scripts" parameter in the /user/loader.php or /user/login.php endpoints to register arbitrary API keys or access sensitive files. This can be...

9.8CVSS8.3AI score0.70745EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.101 views

CentOS Web Panel - SQL Injection

The unprivileged user portal part of CentOS Web Panel is affected by a SQL Injection via the 'idsession' HTTP POST parameter. id: CVE-2021-31316 info: name: CentOS Web Panel - SQL Injection author: ritikchaddha severity: critical description: | The unprivileged user portal part of CentOS Web Pane...

10CVSS8AI score0.13378EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/12 1:36 a.m.8 views

CVE-2024-10924-Bypass-MFA-Wordpress-LAB

CVE-2024-10924 Обход MFA WordPress - Лаборатория эксплойта Этот репозиторий предоставляет лабораторию для эксплуатации уязвимости CVE-2024-10924 в WordPress, а именно для обхода двухфакторной аутентификации MFA и получения доступа к панели администрирования WordPress. Предварительные требования...

9.8CVSS7.4AI score0.82025EPSS
SaveExploits21
Tenable Nessus
Tenable Nessus
added 2026/09/12 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-89599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicmprobe registers the display before initializing ddata-lock. Once...

0.00168EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 11:36 p.m.7 views

cangibrina

/ | | | | / | ' \ / | | ' | '| | ' \ / | | || | | | | | | | | | | | | | | | | | | , || | |, | |./|| | || | |, | |/ Beta - v0.8.7 Поиск панелей управления root@kitploit: Английский Португальский Английский - - - Поиск панелей управления Cangibrina — это кроссплатформенный инструмент, предназначенн...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/09/11 10:20 p.m.5 views

CVE-2026-89599

A flaw was found in the Linux kernel's fbdev: omapfb: panel-dsi-cm component. The dsicmprobe function registers a display before its associated lock mutex is properly initialized. This timing issue allows another process to attempt to acquire the uninitialized mutex, which could lead to system...

5.5CVSS0.00168EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/11 9:56 p.m.7 views

BlackNET

BlackNET 😈 VB.NET を使用して開発された、無料で高度かつモダンな Windows ボットネットで、洗練された安全な PHP パネルを備えています。 BlackNET について 🤓 VB.NET を使用して構築された、無料で高度かつモダンな Windows ボットネットで、洗練された安全な PHP パネルを備えています。 このボットネットコントローラーには多くの機能が搭載されており、無料で最も安全なパネルを利用できます。 開発者: Black.Hacker できること 💪 1. ファイルをアップロード URLから ディスクから 2. DDoS攻撃...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/11 9:42 p.m.5 views

CVE-2023-41362_MyBB_ACP_RCE

CVE-2023-41362 - MyBB ACP RCE CVE-2023-41362에 대한 익스플로잇 블로그 포스트: https://blog.sorcery.ie/posts/mybbacprce...

7.2CVSS7.3AI score0.02034EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2026/09/11 9:31 p.m.7 views

Shopper: Missing authorization on product removal actions in CollectionProducts component

Title Missing authorization on product removal actions in CollectionProducts component Description A lack of authorization control was discovered on both the per-record delete action and the bulk delete action inside packages/admin/src/Livewire/Components/Collection/CollectionProducts.php. Neithe...

SaveExploits0References2Affected Software1
OSV
OSV
added 2026/09/11 9:29 p.m.5 views

GHSA-G3F9-G5VJ-P62F Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

Title Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component Description A lack of authorization control was discovered in the stockAction method in packages/admin/src/Livewire/Components/Products/VariantStock.php. The component exposes a public $variant...

8.1CVSS
SaveExploits0References2
Rows per page
Query Builder