Lucene search
+L

6763 matches found

Kitploit
Kitploit
added 2026/09/13 3:07 a.m.9 views

vk-geosearch

vk-geosearch Búsqueda de fotos por geoetiquetas en la red socialvk.com Dependencias requests Instalación root@kitploit: git clone https://github.com/yevgen2020/vk-geosearch.git pip3 install requests cd vk-geosearch chmod +x search.py Uso Para buscar fotos en VK necesitas una clave de acceso de...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 12:56 a.m.7 views

CVE-2024-41312.

CVE-2024-41312. InstantCMS - Cross Site Scripting Almacenado XSS Versión afectada: InstantCMS 2.16.3 Pasos para reproducir: 1. Inicia sesión en https://demo.instantcms.io como un usuario demo. 2. Visita https://demo.instantcms.io/photos/upload. 3. Carga la imagen con el payload incrustado de prue...

5.9AI score
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 11:42 a.m.6 views

CVE-2022-40471

CVE-2022-40471 Remote code execution via unrestricted file upload vulnerability in the Clinic's Patient Management System v 1.0 Technical description: Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload...

9.8CVSS8.2AI score0.21769EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/12 9:20 a.m.69 views

chiasmodon

Chiasmodon Chiasmodon is an OSINT tool that allows users to gather information from various sources and conduct targeted searches based on domains, Google Play applications, email addresses, IP addresses, organizations, URLs, and more. It provides comprehensive scanning capabilities, customizable...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 6:45 a.m.8 views

CVE-2022-0169

CVE-2022-0169 — WordPress Photo Gallery SQLi PoC 이것은 WordPress Photo Gallery 플러그인의 SQL 인젝션 취약점인 CVE-2022-0169 에 대한 간단한 Python 개념 증명PoC입니다. 기능 WordPress 버전 확인 가능한 경우 취약한 admin-ajax.php 엔드포인트 공격 wpusers 사용자 이름과 비밀번호 해시 덤프 타임스탬프 폴더에 결과 저장 원하면 hashcat으로 크랙하도록 안내 이 도구는 교육 목적으로만 사용됩니다. 책임감 있게 사용하세요! 마치...

9.8CVSS8.2AI score0.74615EPSS
SaveExploits4
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.69 views

WordPress Photo Gallery by 10Web <1.5.69 - Cross-Site Scripting

WordPress Photo Gallery by 10Web plugin before 1.5.69 contains multiple reflected cross-site scripting vulnerabilities via the galleryid, tag, albumid and themeid GET parameters passed to the bwgfrontenddata AJAX action, available to both unauthenticated and authenticated users. id: CVE-2021-2429...

6.1CVSS6.5AI score0.1445EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.66 views

Joomla! Omilen Photo Gallery 0.5b - Local File Inclusion

Joomla! Omilen Photo Gallery comomphotogallery component Beta 0.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the controller parameter to index.php. id: CVE-2009-4202 info: name: Joomla! Omilen Photo Gallery 0.5b - Local File Inclusion...

7.5CVSS6.3AI score0.08109EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.16 views

Sunshine Photo Cart <= 3.1.1 - Reflected Cross-Site Scripting

WP Sunshine Sunshine Photo Cart versions up to 3.1.1 contain a cross-site scripting caused by improper neutralization of input during web page generation, letting attackers execute malicious scripts in users' browsers, exploit requires attacker to craft malicious input. id: CVE-2024-30194 info:...

7.1CVSS7.9AI score0.00721EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.28 views

Sunshine Photo Cart <= 3.2.5 - Reflected Cross-Site Scripting

WP Sunshine Sunshine Photo Cart versions up to 3.2.5 contain a reflected cross-site scripting caused by improper input neutralization during web page generation, letting attackers execute malicious scripts in users' browsers, exploit requires attacker to craft malicious input. id: CVE-2024-43971...

7.1CVSS5.8AI score0.00624EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.35 views

10Web Photo Gallery < 1.5.55 - SQL Injection

WordPress plugin 10Web Photo Gallery versions before 1.5.55 contains a SQL injection caused by unvalidated input in the 'bwgsearchx' parameter in frontend/models/model.php, letting attackers execute arbitrary SQL commands, exploit requires attacker to control the 'bwgsearchx' parameter. id:...

9.8CVSS8.2AI score0.05502EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.77 views

Joomla! Component Photo Battle 1.0.1 - Local File Inclusion

A directory traversal vulnerability in the Photo Battle comphotobattle component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via the view parameter to index.php. id: CVE-2010-1461 info: name: Joomla! Component Photo Battle 1.0.1 - Local File Inclusion author: daffainfo...

5CVSS5.9AI score0.08233EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.41 views

WordPress Widgets for Social Photo Feed <= 1.8 - Information Disclosure

Widgets for Social Photo Feed WordPress plugin = 1.8 contains a broken access control caused by missing capability checks on specific REST API endpoints, letting unauthenticated attackers access and modify plugin settings remotely. id: CVE-2025-14726 info: name: WordPress Widgets for Social Photo...

6.5CVSS5.8AI score0.0083EPSS
SaveExploits0References3
Fedora
Fedora
added 2026/09/11 7:07 p.m.6 views

[SECURITY] Fedora 45 Update: darktable-5.6.1-2.fc45

darktable manages your camera raw files and images in a database, lets you view them through lighttable mode and develop/enhance them in darkroom mode...

9.8CVSS0.00735EPSS
SaveExploits4
NVD
NVD
added 2026/09/11 4:17 a.m.6 views

CVE-2026-18579

The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTPXFORWARDEDFOR' parameter in all versions up to, and including, 9.2.08.003 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

7.2CVSS0.00292EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2026/09/11 3:39 a.m.37 views

CVE-2026-18579 WP Photo Album Plus <= 9.2.08.003 - Unauthenticated Stored Cross-Site Scripting

The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTPXFORWARDEDFOR' parameter in all versions up to, and including, 9.2.08.003 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

7.2CVSS0.00292EPSS
SaveExploits0References11
EUVD
EUVD
added 2026/09/11 3:39 a.m.7 views

EUVD-2026-75953

The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTPXFORWARDEDFOR' parameter in all versions up to, and including, 9.2.08.003 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

7.2CVSS0.00292EPSS
SaveExploits0References11
CVE
CVE
added 2026/09/11 3:39 a.m.13 views

CVE-2026-18579

WP Photo Album Plus (WordPress plugin) versions up to and including 9.2.08.003 are vulnerable to unauthenticated Stored XSS via the HTTP_X_FORWARDED_FOR parameter. The root cause is insufficient input sanitization and output escaping: a deliberately failed nonce check on the getshortcodedrendered...

7.2CVSS0.00292EPSS
SaveExploits0References11
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.36 views

QNAP Photo Station < 6.0.3 - Remote Code Execution

QNAP Photo Station versions prior to 6.0.3 contain multiple vulnerabilities that, when chained together, enable unauthenticated remote code execution RCE. id: CVE-2019-7194 info: name: QNAP Photo Station 6.0.3 - Remote Code Execution author: x-stp severity: critical description: | QNAP Photo...

9.8CVSS8.3AI score0.83124EPSS
SaveExploits8References1
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.123 views

Photo Gallery by 10Web < 1.6.0 - SQL Injection

The Photo Gallery by 10Web WordPress plugin before 1.6.0 does not validate and escape the bwgtagidbwgthumbnails0 parameter before using it in a SQL statement via the bwgfrontenddata AJAX action available to unauthenticated and authenticated users, leading to an unauthenticated SQL injection id:...

9.8CVSS8AI score0.74615EPSS
SaveExploits4References4
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.11 views

Photo Gallery WordPress v1.6.3 - SQL Injection

Photo Gallery WordPress plugin v1.6.3 contains a SQL injection caused by improper escaping of $POST'filtertag' parameter in SQL queries, letting attackers execute arbitrary SQL commands, exploit requires sending crafted POST requests. id: CVE-2022-1281 info: name: Photo Gallery WordPress v1.6.3 -...

9.8CVSS8.3AI score0.43036EPSS
SaveExploits2References3
Rows per page
Query Builder