Lucene search
+L

278 matches found

Kitploit
Kitploit
added 2026/09/16 6:05 p.m.77 views

poastal

Poastal - the Email OSINT tool Poastal is an email OSINT tool that provides valuable information on any email address. With Poastal, you can easily input an email address and it will quickly answer several questions, providing you with crucial information. ✨ Features Determine the name of the...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 10:17 p.m.12 views

CVE-2021-42362

CVE-2021-42362 The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the /src/Image.php file which makes it possible for attackers with contributor level access and above to upload malicious files that can be...

8.8CVSS8.1AI score0.79823EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/11 10:58 p.m.6 views

nate158g-m-w-n-l-p-d-a-o-e

nate158g-m-w-n-l-p-d-a-o-e 此模块需要 Metasploit:https://metasploit.com/download 当前来源:https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress Popular Posts 插件认证远程代码执行', 'Description' = %q 此漏洞利用要求 Metasploit 拥有一个 FQDN,并且能够运行端口 80、443 或 8080 上的有效载荷 Web 服务器。 FQDN...

8.8CVSS7.8AI score0.79823EPSS
SaveExploits5References1
OSV
OSV
added 2026/07/21 5:32 a.m.9 views

MAL-2026-10973 Malicious code in fluffy-octo-broccoli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b017d48fb884ba615e0b62dfd421f8fe24e52695a7ae86c8c158eb2ded44286f fluffy-octo-broccoli ships a 10.7 MB qiwi.zip archive whose contents yield no readable filenames or strings via extraction, alongside a run.sh that...

5.6AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/20 5:07 a.m.30 views

Malicious code in kimichat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57c88bce76fccb6cb2b3a99ef53a62402a8d56b4918ba4c7f2b634036317093 The package presents itself as a 'Python wrapper for the bundled kimichat runtime' and exposes a kimichat-run console script plus kimichat.run...

5.5AI score
SaveExploits0References4
Patchstack
Patchstack
added 2026/04/14 11:36 a.m.14 views

WordPress Trending/Popular Post Slider and Widget plugin <= 1.8.6 - Backdoor vulnerability

Backdoor vulnerability discovered by ? in WordPress Plugin Trending/Popular Post Slider and Widget versions = 1.8.6...

5.8AI score
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/02 12:00 a.m.12 views

PT-2026-5759

Name of the Vulnerable Software and Affected Versions OpenClaw affected versions not specified Description The software contains a remote code execution issue, a path traversal issue, and a server-side request forgery SSRF protection bypass. The issue is considered serious. Recommendations At the...

6.3AI score
SaveExploits0References25
HackRead
HackRead
added 2026/01/30 3:24 p.m.16 views

Arsink Spyware Posing as WhatsApp, YouTube, Instagram, TikTok Hits 143 Countries

Another day, another Android malware campaign targeting unsuspecting users worldwide by masquerading as popular apps...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/24 3:17 p.m.13 views

CVE-2026-24587

Missing Authorization vulnerability in kutsy AJAX Hits Counter + Popular Posts Widget ajax-hits-counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Hits Counter + Popular Posts Widget: from n/a through = 0.10.210305...

5.4CVSS5.4AI score0.00282EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.15 views

CVE-2026-24587

Missing Authorization vulnerability in kutsy AJAX Hits Counter + Popular Posts Widget ajax-hits-counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Hits Counter + Popular Posts Widget: from n/a through = 0.10.210305...

5.4CVSS0.00282EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:29 p.m.5 views

CVE-2026-24587

Missing Authorization vulnerability in kutsy AJAX Hits Counter + Popular Posts Widget ajax-hits-counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Hits Counter + Popular Posts Widget: from n/a through = 0.10.210305...

5.4CVSS5.9AI score0.00282EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/23 2:29 p.m.6 views

CVE-2026-24587 WordPress AJAX Hits Counter + Popular Posts Widget plugin <= 0.10.210305 - Broken Access Control vulnerability

Missing Authorization vulnerability in kutsy AJAX Hits Counter + Popular Posts Widget ajax-hits-counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Hits Counter + Popular Posts Widget: from n/a through = 0.10.210305...

5.4CVSS5.4AI score0.00282EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/23 2:29 p.m.38 views

CVE-2026-24587 WordPress AJAX Hits Counter + Popular Posts Widget plugin <= 0.10.210305 - Broken Access Control vulnerability

Missing Authorization vulnerability in kutsy AJAX Hits Counter + Popular Posts Widget ajax-hits-counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Hits Counter + Popular Posts Widget: from n/a through = 0.10.210305...

5.4CVSS0.00282EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/23 2:29 p.m.29 views

CVE-2026-24587

CVE-2026-24587 affects the WordPress plugin AJAX Hits Counter + Popular Posts Widget (ajax-hits-counter). Connected sources confirm a Missing Authorization / Broken Access Control vulnerability in this plugin, affecting versions up to and including 0.10.210305. Core details from Red Hat/NVD/CVE l...

5.4CVSS5.4AI score0.00282EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/23 12:00 a.m.21 views

WordPress plugin AJAX Hits Counter + Popular Posts Widget security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

5.4CVSS5.8AI score0.00282EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/23 12:00 a.m.25 views

PT-2026-4424

Name of the Vulnerable Software and Affected Versions kutsy AJAX Hits Counter + Popular Posts Widget versions through 0.10.210305 Description An issue exists in kutsy AJAX Hits Counter + Popular Posts Widget related to incorrectly configured access control security levels, potentially allowing...

5.4CVSS5.3AI score0.00282EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2026/01/18 10:28 a.m.14 views

WordPress AJAX Hits Counter + Popular Posts Widget plugin <= 0.10.210305 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin AJAX Hits Counter + Popular Posts Widget versions = 0.10.210305...

5.4CVSS5.4AI score0.00282EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2025/11/11 3:19 p.m.7 views

EUVD-2025-89472

Malicious code in popularfelidaez3n npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/11 7:44 a.m.9 views

Malicious code in popular_meadowlark-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d94753387b06e961c8f03213d1e876caf1ff84f4f6a3e01b3f0ab9be671448c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/11/11 7:44 a.m.8 views

EUVD-2025-76001

Malicious code in popularmeadowlark-tool npm...

6.6AI score
SaveExploits0
Rows per page
Query Builder