Lucene search
+L

6519 matches found

Nuclei
Nuclei
added 2026/09/14 5:13 a.m.111 views

kkFileView 4.1.0 - Cross-Site Scripting

kkFileView 4.1.0 contains multiple cross-site scripting vulnerabilities via the errorMsg parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and...

6.1CVSS6.3AI score0.01199EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.216 views

mooSocial 3.1.8 - External Service Interaction

mooSocial 3.1.8 is vulnerable to external service interaction via multiple parameters in the post function. id: CVE-2023-43323 info: name: mooSocial 3.1.8 - External Service Interaction author: ritikchaddha severity: medium description: | mooSocial 3.1.8 is vulnerable to external service...

6.5CVSS6.6AI score0.0186EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.44 views

Movies <= 0.6 - Cross-Site Scripting

A cross-site scripting vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. id: CVE-2014-4539 info: name: Movies = 0.6 - Cross-Site Scripting author: daffainfo...

6.1CVSS6.3AI score0.03983EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.172 views

Odoo <= 8.0-20160726 & 9.0 - Open Redirect

An Open Redirect vulnerability in Odoo versions = 8.0-20160726 and 9.0. This issue allows an attacker to redirect users to untrusted sites via a crafted URL. id: CVE-2017-5871 info: name: Odoo = 8.0-20160726 & 9.0 - Open Redirect author: 1337rokudenashi severity: medium description: | An Open...

5.8CVSS5.8AI score0.02676EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/13 10:46 p.m.15 views

docker-confluence-patched

docker-confluence-patched Confluence 7.12.2 parcheado CVE-2021-26084...

9.8CVSS7.8AI score0.99999EPSS
SaveExploits46
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.137 views

NeDi 1.9C - Cross-Site Scripting

NeDi 1.9C is vulnerable to cross-site scripting because of an incorrect implementation of sanitize in inc/libmisc.php. This function attempts to escape the SCRIPT tag from user-controllable values, but can be easily bypassed, as demonstrated by an onerror attribute of an IMG element as a...

6.1CVSS6.2AI score0.03442EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.97 views

Cherokee HTTPD <=0.5 - Cross-Site Scripting

Cherokee HTTPD 0.5 and earlier contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated. id: CVE-2006-1681 info:...

4.3CVSS5.9AI score0.06643EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.111 views

mooSocial v.3.1.8 - Cross-Site Scripting

Cross-Site Scripting XSS vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to the mode parameter of the invite friend login function. id: CVE-2023-44813 info: name: mooSocial v.3.1.8 - Cross-Site Scripting author: ritikchaddha severity:...

6.1CVSS7.1AI score0.01754EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.64 views

Node.js st module Directory Traversal

A directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e encoded dot dot in an unspecified path. id: CVE-2014-3744 info: name: Node.js st module Directory Traversal author: geeknik severity: high description: A...

7.5CVSS7.6AI score0.34012EPSS
SaveExploits0References5
CBLMariner
CBLMariner
added 2026/09/11 11:52 p.m.6 views

CVE-2026-73283 affecting package openssh for versions less than 9.8p1-10

CVE-2026-73283 affecting package openssh for versions less than 9.8p1-10. A patched version of the package is available...

2.5CVSS0.00091EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/09/11 11:52 p.m.6 views

CVE-2026-63074 affecting package openssl for versions less than 3.3.7-6

CVE-2026-63074 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

5.9CVSS0.00495EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/09/11 11:52 p.m.6 views

CVE-2026-63072 affecting package openssl for versions less than 3.3.7-6

CVE-2026-63072 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

7.5CVSS0.00676EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/09/11 11:52 p.m.7 views

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

9.8CVSS0.00929EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2026/09/11 11:52 p.m.7 views

CVE-2026-75803 affecting package openssl for versions less than 3.3.7-6

CVE-2026-75803 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

9.1CVSS0.00221EPSS
SaveExploits0
OSV
OSV
added 2026/09/11 9:07 a.m.19 views

ROOT-OS-DEBIAN-11-CVE-2024-5642 CVE-2024-5642 in python3.9 - Patched by Root

Root has patched CVE-2024-5642 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...

6.5CVSS5.9AI score0.00744EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 5:38 p.m.6 views

thymeleaf-check

thymeleaf-check ThymeleafCVE-2026-40477 / CVE-2026-41901 离线排查工具 —— 零依赖、单 jar、不联网。 两条 CVSS 9.0 的 SSTI 绕过,九天内连出两个修复版。它先回答「我中了哪几条」, 然后回答那个更难受的问题: 我这条版本线,有没有能升的修复版? 对 3.1.x ,有升到 3.1.5.RELEASE 就完事。 对 3.0.x 及更早 ,没有 —— 而那恰恰是装机面最大的一批人。 为什么需要它 两条 advisory 的受影响范围,在 OSV 里都是 introduced: 0: root@kitploit: cur...

9CVSS8.2AI score0.00851EPSS
SaveExploits0
NVD
NVD
added 2026/09/10 2:17 p.m.6 views

CVE-2026-88871

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 master, 2026-08-23 contains a cross-site request forgery vulnerability in the CustomizeUser plugin's plugin/CustomizeUser/setSubscribers.json.php endpoint. The script reads usersid and ExtraSubscribers from $REQUEST and calls...

5.3CVSS0.00137EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/10 10:29 a.m.7 views

ROOT-OS-DEBIAN-11-CVE-2023-44487 CVE-2023-44487 in varnish - Patched by Root

Root has patched CVE-2023-44487 in the varnish package for Root:Debian:11. Multiple fixed versions available...

7.5CVSS7.2AI score0.99999EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/10 1:37 a.m.21 views

CVE-2026-1357-Lab

CVE-2026-1357 — WPvivid Backup & Migration Vuln vs Patched Docker Lab Local-only Docker lab for comparing WPvivid Backup & Migration: Vulnerable: 0.9.123 Patched: 0.9.124 Built for learning practice lab setup, verification, logs, notes. Anything PoC-related is intended to run only inside this lab...

9.8CVSS8.4AI score0.32714EPSS
SaveExploits14References1
OSV
OSV
added 2026/09/09 3:37 a.m.18 views

ROOT-OS-DEBIAN-12-CVE-2025-68344 CVE-2025-68344 in linux - Patched by Root

Root has patched CVE-2025-68344 in the linux package for Root:Debian:12. Multiple fixed versions available...

7.4AI score0.00208EPSS
SaveExploits0
Rows per page
Query Builder