Lucene search
+L

219134 matches found

Nuclei
Nuclei
added 2026/09/20 2:05 a.m.53 views

Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection

The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.This makes ...

7.5CVSS8AI score0.46373EPSS
SaveExploits6References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.141 views

HP System Management Homepage (SMH) v2.x.x.x - Open Redirect

Open redirect vulnerability in red2301.html in HP System Management Homepage SMH 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter. id: CVE-2010-1586 info: name: HP System Management Homepage SMH v2.x.x.x - Open...

4.3CVSS6AI score0.10296EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.93 views

TerraMaster TOS <.1.29 - Remote Code Execution

TerraMaster TOS before 4.1.29 has invalid parameter checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with for example OS commands in the opt parameter. id:...

10CVSS8AI score0.28984EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.22 views

Pinger 1.0 - Remote Code Execution

Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php to write arbitrary PHP files and execute system commands by appending shell metacharacters. id:...

9.8CVSS6.3AI score0.03135EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.68 views

WeiPHP 5.0 - SQL Injection

WeiPHP 5.0 contains a SQL injection vulnerability via the wpwhere function. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id: CVE-2020-20300 info: name: WeiPHP 5.0 - SQL...

9.8CVSS8.2AI score0.08752EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.95 views

b2evolution CMS <6.11.6 - Open Redirect

b2evolution CMS before 6.11.6 contains an open redirect vulnerability via the redirectto parameter in emailpassthrough.php. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2020-22840 info:...

6.1CVSS6.2AI score0.13817EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.86 views

WordPress Canto 1.3.0 - Blind Server-Side Request Forgery

WordPress Canto plugin 1.3.0 is susceptible to blind server-side request forgery. An attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain and thereby possibly obtain sensitive information, modify data, and/or execute unauthorized administrative...

5.3CVSS6AI score0.27771EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.123 views

Commvault CommCell - Local File Inclusion

CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13 are vulnerable to local file inclusion because an attacker can view a log file can instead view a file outside of the log-files folder. id: CVE-2020-25780 info: name: Commvault...

7.5CVSS7.2AI score0.09884EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.46 views

Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion

A directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map comdrawroot component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1723 info: name:...

6.8CVSS6AI score0.08408EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.75 views

Tiki Wiki CMS Groupware 5.2 - Local File Inclusion

Tiki Wiki CMS Groupware 5.2 is susceptible to a local file inclusion vulnerability. id: CVE-2010-4239 info: name: Tiki Wiki CMS Groupware 5.2 - Local File Inclusion author: 0xakoko severity: critical description: Tiki Wiki CMS Groupware 5.2 is susceptible to a local file inclusion vulnerability...

9.8CVSS8.2AI score0.1343EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.46 views

Joomla! Component com_blog - Directory Traversal

A directory traversal vulnerability in index.php in the MyBlog commyblog component 3.0.329 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the task parameter. id: CVE-2010-1540 info: name: Joomla! Component comblog - Directory Traversal author: daffainfo severity:...

5CVSS5.9AI score0.08233EPSS
SaveExploits2References2
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.30 views

Lokomedia CMS - Local File Inclusion

A Local File Inclusion LFI vulnerability exists in Lokomedia CMS. The application allows an attacker to include files on the server that should not be accessible, potentially exposing sensitive information. id: CVE-2010-2018 info: name: Lokomedia CMS - Local File Inclusion author: r3Y3r53 severit...

5CVSS5.8AI score0.03258EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.26 views

SearchBlox <9.2.2 - Local File Inclusion

SearchBlox prior to version 9.2.2 is susceptible to local file inclusion in FileServlet that allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url= request. Additionally, this may be used to read the contents of the...

7.5CVSS7.3AI score0.13975EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.118 views

WordPress acf-to-rest-api <=3.1.0 - Insecure Direct Object Reference

WordPress acf-to-rest-ap through 3.1.0 allows an insecure direct object reference via permalinks manipulation, as demonstrated by a wp-json/acf/v3/options/ request that can read sensitive information in the wpoptions table such as the login and pass values. id: CVE-2020-13700 info: name: WordPres...

7.5CVSS7.2AI score0.13463EPSS
SaveExploits2
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.60 views

OpenSIS 7.3 - SQL Injection

OpenSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php. id: CVE-2020-6637 info: name: OpenSIS 7.3 - SQL Injection author: pikpikcu severity: critical description: OpenSIS Community Edition version 7.3 is vulnerable to SQL injection via the...

9.8CVSS8.2AI score0.20058EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.29 views

Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload

Cisco ISE and Cisco ISE-PIC contain an unrestricted file upload vulnerability caused by lack of file validation in an internal API, letting unauthenticated remote attackers upload and execute files as root, exploit requires crafted file upload. id: CVE-2025-20282 info: name: Cisco ISE 3.4P2 -...

10CVSS8.6AI score0.27498EPSS
SaveExploits3References4
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.95 views

AWStats < 6.95 - Open Redirect

An open redirect vulnerability in awredir.pl in AWStats 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. id: CVE-2009-5020 info: name: AWStats 6.95 - Open Redirect author: pdteam severity: medium description: An open...

5.8CVSS6AI score0.03488EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.90 views

Vite server.fs.deny Bypass - Local File Inclusion

Vite is a frontend tooling framework for javascript. The contents of arbitrary files can be returned to the browser. By adding ?.svg with ?.wasm?init or with sec-fetch-dest- script header, the server.fs.deny restriction was able to bypass. This bypass is only possible if the file is smaller than...

5.3CVSS6.9AI score0.40461EPSS
SaveExploits7References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.38 views

JumpServer - Open Redirect via Referer Header

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. id:...

6.9CVSS5.7AI score0.00488EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.19 views

EventON Lite <= 2.4 - Authenticated Local File Inclusion

Ashan Perera EventON contains a PHP remote file inclusion caused by improper control of filename in include/require statements, letting attackers include local files, exploit requires attacker to control include filename. id: CVE-2025-32614 info: name: EventON Lite = 2.4 - Authenticated Local Fil...

8.8CVSS8.2AI score0.01851EPSS
SaveExploits0References1
Rows per page
Query Builder