Lucene search
+L

106265 matches found

Kitploit
Kitploit
•added 2026/09/27 12:52 a.m.•11 views

drupalgeddon-2

Drupalgeddon-2 Проверка уязвимости для Drupal v7.x + v8.x Использование : php drupalgeddon.php Target http://example.com :...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 12:40 a.m.•12 views

CVE-2026-9691

CVE-2026-9691 CVE-2026-9691: Интеграция для ActiveCampaign и Contact Form 7, WPForms, Elementor, Ninja Forms = 1.1.1 Неавторизованное внедрение PHP-объектов PoC, анализ исправлений и правило...

9.8CVSS6AI score0.00564EPSS
SaveExploits1
EUVD
EUVD
•added 2026/09/27 12:31 a.m.•11 views

EUVD-2026-87814

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file viewresult.php. Performing a manipulation of the argument seno results in sql injection. Remote exploitation of the attack is...

7.5CVSS6.9AI score0.00254EPSS
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/27 12:11 a.m.•14 views

CVE-2024-52433

CVE-2024-52433 My Geo Posts Free = 1.2 - Injection d'objets PHP non authentifiée Description Le plugin My Geo Posts Free pour WordPress est vulnérable à l'injection d'objets PHP dans les versions jusqu'à la 1.2 incluse via la désérialisation d'entrées non fiables. Cela permet à des attaquants non...

9.8CVSS8.5AI score0.03049EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 12:11 a.m.•10 views

CVE-2024-4577

CVE-2024-4577 - Injection d'arguments PHP-CGI RCE | | ---|---|--- CVE| Description| CVSSv3 CVE-2024-4577| Vulnérabilité d'injection d'arguments PHP-CGI| 9.8 | | "CVE-2024-4577 est une vulnérabilité critique d'injection d'arguments dans PHP qui peut être exploitée pour exécuter du code à distance...

9.8CVSS7.8AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
•added 2026/09/27 12:10 a.m.•12 views

CVE-2025-49113

CVE-2025-49113 Exploit Roundcube Un exploit Python pour CVE-2025-49113, ciblant une vulnérabilité dans le webmail Roundcube qui permet l'exécution de code à distance via une désérialisation d'objet PHP. Aperçu Cet exploit exploite une vulnérabilité de désérialisation dans la fonctionnalité de...

9.9CVSS8.5AI score0.98897EPSS
SaveExploits29
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/27 12:00 a.m.•7 views

CVE-2026-100873: Cross-Site Request Forgery (CSRF)

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit is now public and may be...

5.3CVSS5.3AI score0.00211EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/27 12:00 a.m.•7 views

CVE-2026-100877: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functionality of the file registrationform.php. Executing a manipulation of the argument FName/LName/Addrs can lead to cross site...

5.3CVSS3.8AI score0.00263EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/27 12:00 a.m.•6 views

CVE-2026-100875: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatedetailsfromfaculty.php. Such manipulation of the argument myfid leads to sql injection. The attack may be launched remotely...

7.5CVSS5.6AI score0.00254EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/27 12:00 a.m.•7 views

CVE-2026-100876: Missing Authentication for Critical Function

A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file loginlinkstudent.php. Performing a manipulation of the argument umail results in missing authentication. Remote exploitation of the atta...

6.5CVSS5.4AI score0.00278EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/27 12:00 a.m.•8 views

CVE-2026-100874: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file addnewstudent.php. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been published and may be...

7.5CVSS5.5AI score0.00254EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/26 11:19 p.m.•19 views

CVE-2023-24249-Exploit

Script d'exploit CVE-2023-24249 Description Ce dépôt contient un script d'exploit pour CVE-2023-24249, une vulnérabilité critique présente dans laravel-admin version 1.8.19. Cette vulnérabilité permet un téléchargement de fichiers arbitraires, permettant aux attaquants d'exécuter du code arbitrai...

7.2CVSS7.8AI score0.02382EPSS
SaveExploits3References1
Kitploit
Kitploit
•added 2026/09/26 10:53 p.m.•12 views

CVE-2024-12877-Exploit

GO-TO CVE – CVE-2024-12877-Exploit 66주차 | 작성자: Ali Soltani soltanali0 GO-TO CVE 시리즈의 66주차 에 오신 것을 환영합니다. 이 시리즈에서는 취약점을 분석하고, 근본 원인을 파악하며, 안전한 교육적 맥락에서 실용적인 익스플로잇 기술을 시연합니다. 🚨 개요 CVE-2024-12877 는 가장 널리 사용되는 WordPress 기부 플러그인 중 하나인 GiveWP 에서 발견된 PHP 객체 주입 취약점입니다. 사용자 제어 입력에 대한 unserialize의 안전하지 않은...

9.8CVSS8.4AI score0.01257EPSS
SaveExploits1References1
NVD
NVD
•added 2026/09/26 10:16 p.m.•14 views

CVE-2026-100739

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file viewresult.php. Performing a manipulation of the argument seno results in sql injection. Remote exploitation of the attack is...

7.5CVSS0.00254EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/26 10:00 p.m.•6 views

CVE-2026-100739 mathurvishal CloudClassroom-PHP-Project viewresult.php sql injection

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file viewresult.php. Performing a manipulation of the argument seno results in sql injection. Remote exploitation of the attack is...

7.5CVSS6.9AI score0.00254EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/26 10:00 p.m.•19 views

CVE-2026-100739

A SQL injection vulnerability exists in the mathurvishal CloudClassroom-PHP-Project (up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be). The flaw impacts an unknown function within the viewresult.php file, specifically allowing for exploitation via manipulation of the seno argument. This vuln...

7.5CVSS6.9AI score0.00254EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/26 10:00 p.m.•35 views

CVE-2026-100739 mathurvishal CloudClassroom-PHP-Project viewresult.php sql injection

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file viewresult.php. Performing a manipulation of the argument seno results in sql injection. Remote exploitation of the attack is...

7.5CVSS0.00254EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/26 9:40 p.m.•9 views

CVE-2021-40373

CVE-playsms Il existe une vulnérabilité dans playsms 1.4.3 qui permet à des attaquants potentiels d'exécuter du code à distance. comment reproduire RCE shell: docker pull playsms/playsms:1.4.3 docker run -d -p 80:80 playsms/playsms connectez-vous avec admin:admin...

9.8CVSS8.6AI score0.04735EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/26 8:30 p.m.•15 views

CVE-2024-25600-EXPLOIT

CVE-2024-25600 - WordPress Bricks Builder 远程代码执行 RCE 🌐 WordPress 的 Bricks 主题被确认存在一个关键安全漏洞,编号为 CVE-2024-25600。该漏洞影响 Bricks Builder 插件的所有版本(包括 1.9.6)。此漏洞构成重大风险,因为它允许未经身份验证的攻击者在托管存在漏洞的 WordPress 网站的服务器上远程执行任意代码。CVE-2024-25600 属于远程代码执行 RCE 漏洞,使攻击者能够在无需任何身份验证的情况下操纵服务器执行恶意代码。该漏洞利用了 Bricks Builder...

10CVSS8.4AI score0.88234EPSS
SaveExploits19
Kitploit
Kitploit
•added 2026/09/26 8:18 p.m.•11 views

WG-CVE-2026-1555-Linux

██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ ██║ ╚██╗ ██╔╝██╔══╝ ██╔═══╝ ████╔╝██║██╔═══╝ ██╔═══██╗ ╚██████╗ ╚████╔╝ ███████╗ ███████╗╚██████╔╝███████╗╚██████╔╝ ╚═════╝ ╚═══╝...

9.8CVSS7.9AI score0.00984EPSS
SaveExploits4
Rows per page
Query Builder