Lucene search
K

8 matches found

Packet Storm
Packet Storm
added 6 days ago28 views

📄 dwol 1.0.0 Command Injection

This Python script is a security auditing tool designed to assess a potential unauthenticated command injection vulnerability in dwol. It interacts with the target application's API to register test machines and inject controlled payloads into the host parameter to determine whether arbitrary...

5.9AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/03/26 3:14 p.m.1 views

CVE-2024-51222

A stored cross-site scripting XSS vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...

4.8CVSS5.8AI score0.00054EPSS
Exploits1References1
NVD
NVD
added 2026/03/23 4:16 p.m.1 views

CVE-2024-51226

A stored cross-site scripting XSS vulnerability in the component /admin/search-vehicle.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Search parameter...

6.1CVSS0.00059EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/12/25 12:34 a.m.6 views

CVE-2024-40317

A reflected cross-site scripting XSS vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter HTTP...

6.1CVSS6.3AI score0.00041EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/12/24 12:0 a.m.1 views

CVE-2024-40317

A reflected cross-site scripting XSS vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter HTTP...

5.9AI score0.00041EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/10/02 11:27 p.m.7 views

CVE-2025-60991

A reflected cross-site scripted XSS vulnerability in Codazon Magento Themes v1.1.0.0 to v2.4.7 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload injected into the cat parameter...

8.8CVSS6.6AI score0.0004EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2023/05/24 12:0 a.m.207 views

LeadPro CRM 1.0 SQL Injection

Exploit Title: LeadPro CRM v1.0 - SQL Injection Date: 2023-05-17 Exploit Author: Ahmet Ümit BAYRAM Vendor: https://codecanyon.net/item/leadifly-lead-call-center-crm/43485578 Demo Site: https://demo.leadifly.in Tested on: Kali Linux CVE: N/A Request GET...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2020/05/11 12:0 a.m.124 views

Complaint Management System 1.0 SQL Injection

Exploit Title: complaint management system 1.0 - Authentication Bypass Google Dork: N/A Date: 2020-05-10 Exploit Author: BKpatron Vendor Homepage: https://www.sourcecodester.com/php/14206/complaint-management-system.html Software Link:...

0.3AI score
Exploits0
Rows per page
Query Builder