Lucene search
+L

12329 matches found

Kitploit
Kitploit
added 2026/08/26 1:47 a.m.2 views

noapi-google-search-mcp

noapi-google-search-mcp [email protected] Si vous souhaitez soutenir noapi-google-mcp ou gpt-oss-20B/120B-Vision et d'autres modèles open source à venir, veuillez contribuer à mon fonds de calcul GPU : environ 3000 $ sont nécessaires. Si vous trouvez cela utile, envisagez de soutenir le...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 6:08 p.m.2 views

Microsoft-2024-December-Update-Control

Windows 2024年12月 セキュリティパッチ監査スクリプト このPowerShellスクリプトは、2024年12月のMicrosoftセキュリティ情報で発表された特定の脆弱性(CVE-2024-49124、CVE-2024-49117、CVE-2024-49118、CVE-2024-49122)に必要なKB更新プログラムがシステムにインストールされているかどうかを確認します。スクリプトはオペレーティングシステムのバージョンを検出して、どのパッチを適用する必要があるかを判断し、まず検出したオペレーティングシステムを画面に表示します。 特徴 CVEチェック:...

8.8CVSS8.1AI score0.20411EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 2:13 p.m.2 views

bash-cve-2014-6271-fixes

Correctifs CVE-2014-6271 pour bash Le message original de la liste de diffusion ne vous permet de récupérer les correctifs que via HTTP non authentifié. Soupir J'ai téléchargé ces fichiers via HTTP et les ai mis dans un dépôt git que vous pouvez récupérer via HTTPS et vérifier indépendamment. Je...

10CVSS8.8AI score0.99999EPSS
SaveExploits138References10
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.59 views

Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion

Oracle GlassFish Server Open Source Edition 3.0.1 build 22 is vulnerable to unauthenticated local file inclusion vulnerabilities that allow remote attackers to request arbitrary files on the server. id: CVE-2017-1000029 info: name: Oracle GlassFish Server Open Source Edition 3.0.1 - Local File...

7.5CVSS8AI score0.08348EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.36 views

Netsweeper 4.0.3 - Cross-Site Scripting

A cross-site scripting vulnerability in webadmin/policy/grouptableajax.php/ in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO. id: CVE-2014-9608 info: name: Netsweeper 4.0.3 - Cross-Site Scriptin...

6.1CVSS6AI score0.04663EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.39 views

Jira Improper Authorization

The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames via an incorrect authorisation check. id: CVE-2019-8446 info: name: Jira Improper Authorization author: dhiyaneshDk severity: medium description: The /rest/issueNav/1/issueTable...

5.3CVSS5.6AI score0.1755EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.99 views

kkFileView 4.1.0 - Cross-Site Scripting

kkFileView 4.1.0 contains multiple cross-site scripting vulnerabilities via the errorMsg parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and...

6.1CVSS6.1AI score0.01157EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.54 views

ManageEngine ServiceDesk 9.3.9328 - Arbitrary File Retrieval

ManageEngine ServiceDesk 9.3.9328 is vulnerable to an arbitrary file retrieval due to improper restrictions of the pathname used in the name parameter for the download-snapshot path. An unauthenticated remote attacker can use this vulnerability to download arbitrary files. id: CVE-2017-11512 info...

7.5CVSS7.7AI score0.79604EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.65 views

Phoenix Framework - Open Redirect

Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 contain an open redirect vulnerability, which may result in phishing or social engineering attacks. id: CVE-2017-1000163 info: name: Phoenix Framework - Open Redirect author: 0xAkoko severity: medium...

6.1CVSS5.9AI score0.02377EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.79 views

Magento Server Mass Importer - Cross-Site Scripting

Magento Server Mass Importer plugin contains multiple cross-site scripting vulnerabilities which allow remote attackers to inject arbitrary web script or HTML via the 1 profile parameter to web/magmi.php or 2 QUERYSTRING to web/magmiimportrun.php. id: CVE-2015-2068 info: name: Magento Server Mass...

4.3CVSS5.3AI score0.1404EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.68 views

OpenDreambox 2.0.0 - Remote Code Execution

OpenDreambox 2.0.0 is susceptible to remote code execution via the webadmin plugin. Remote attackers can execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI in enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py. id: CVE-2017-14135 info: nam...

10CVSS9.9AI score0.21842EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.76 views

EPrints 3.4.2 - Cross-Site Scripting

EPrints 3.4.2 contains a reflected cross-site scripting vulnerability via the cgi/cal URI. id: CVE-2021-26475 info: name: EPrints 3.4.2 - Cross-Site Scripting author: geeknik severity: medium description: EPrints 3.4.2 contains a reflected cross-site scripting vulnerability via the cgi/cal URI...

6.1CVSS6.7AI score0.07326EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.92 views

EPrints 3.4.2 - Cross-Site Scripting

EPrints 3.4.2 contains a reflected cross-site scripting vulnerability in the dataset parameter to the cgi/dataset dictionary URI. id: CVE-2021-26702 info: name: EPrints 3.4.2 - Cross-Site Scripting author: ritikchaddha severity: medium description: EPrints 3.4.2 contains a reflected cross-site...

6.1CVSS6.7AI score0.03072EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.214 views

Sharp Multifunction Printers - Directory Listing

It was observed that Sharp printers are vulnerable to an arbitrary directory listing without authentication. Any attacker can list any directory located in the printer and recover any file. id: CVE-2024-33605 info: name: Sharp Multifunction Printers - Directory Listing author: gy741 severity: hig...

7.5CVSS8.8AI score0.06175EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.24 views

LoLLMS WebUI < 9.8 - Path Traversal

parisneo/lollms-webui contains a path traversal caused by improper handling of 'category' parameter in /listpersonalities endpoint, letting attackers list arbitrary directories, exploit requires control over 'category' parameter. id: CVE-2024-4322 info: name: LoLLMS WebUI 9.8 - Path Traversal...

7.5CVSS7.6AI score0.30987EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.160 views

WAGO - Remote Command Execution

In multiple products of WAGO, a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behavior, Denial of Service, and full system compromise. id: CVE-2023-1698 info: name: WAGO - Remote Command Execution...

9.8CVSS8.6AI score0.82037EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.194 views

Nette Framework - Remote Code Execution

Nette Framework versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, and 3.0.6 are vulnerable to a code injection attack via specially formed parameters being passed to a URL. Nette is a PHP/Composer MVC Framework. id: CVE-2020-15227 info: name: Nette Framework - Remote Code Execution author:...

9.8CVSS8.7AI score0.34424EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.133 views

SAP Internet Graphics Server (IGS) - XML External Entity Injection

SAP Internet Graphics Servers IGS running versions 7.20, 7.20EXT, 7.45, 7.49, or 7.53 has two XML external entity injection XXE vulnerabilities within the XMLCHART page - CVE-2018-2392 and CVE-2018-2393. These vulnerabilities occur due to a lack of appropriate validation on the Extension HTML tag...

7.5CVSS7.5AI score0.41051EPSS
SaveExploits2References6
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.49 views

qdPM 9.1 - Cross-site Scripting

qdPM V9.1 is vulnerable to Cross Site Scripting XSS via qdPM\install\modules\databaseconfig.php. id: CVE-2020-19515 info: name: qdPM 9.1 - Cross-site Scripting author: theamanrawat severity: medium description: | qdPM V9.1 is vulnerable to Cross Site Scripting XSS via...

6.1CVSS6AI score0.01789EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.60 views

Jira - Local File Inclusion

Jira before version 7.13.4, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1, allows remote attackers to access files in the Jira webroot under the META-INF directory via local file inclusion. id: CVE-2019-8442 info: name: Jira - Local File Inclusion author:...

7.5CVSS7.3AI score0.59832EPSS
SaveExploits1References5
Rows per page
Query Builder