Lucene search
+L

322 matches found

Kitploit
Kitploit
•added 2026/09/25 8:14 p.m.•9 views

Name-That-Hash

➡️ Discord | 网站 ⬅️ 现代哈希识别系统 pip3 install name-that-hash && nth 无需安装的 Web 应用 🤔 这是什么? 你是否曾经遇到过像 5f4dcc3b5aa765d61d8327deb882cf99 这样的哈希值,然后好奇这是什么类型的哈希?🤔 Name-that-hash 可以告诉你那个哈希的类型! 🔥 特性 📺 流行度评级 - Name that hash 会首先显示最流行的哈希。在旧系统中,它会将 Skype Hash 与 Active Directory 的 NTLM 等同对待,这就像说我的 GitHub 和 VSCode...

6AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/25 1:05 p.m.•20 views

Boucle-framework

Boucle Hooks de Claude Code que realmente hacen cumplir tus reglas. 7 hooks independientes, además de enforce-hooks para la política de CLAUDE.md, herramientas de auditoría, más de 1,900 pruebas y un corpus de brechas de Claude Code con clasificaciones de gravedad y soluciones. Enlaces rápidos:...

5.9AI score
SaveExploits0References6
NVD
NVD
•added 2026/09/18 8:17 p.m.•8 views

CVE-2026-93870

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attackers to forge ratings on behalf of authenticated users. Attackers can craft malicious pages that auto-submit POST requests to modify stored rating data when visited by logged-in users...

5.3CVSS0.0019EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/18 8:17 p.m.•10 views

CVE-2026-93869

Cotonti through 1.0.0 contains an open redirect vulnerability in the coturlcheck function that validates redirect destinations using a regular expression lacking an end-of-string anchor. Attackers can bypass the redirect guard by supplying hostnames beginning with the site domain to redirect user...

6.1CVSS0.0036EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/18 7:56 p.m.•10 views

EUVD-2026-83367

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attackers to forge ratings on behalf of authenticated users. Attackers can craft malicious pages that auto-submit POST requests to modify stored rating data when visited by logged-in users...

5.3CVSS5.8AI score0.0019EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/18 7:56 p.m.•44 views

CVE-2026-93870 Cotonti through 1.0.0 Cross-Site Request Forgery in the Ratings Plugin AJAX Handler

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attackers to forge ratings on behalf of authenticated users. Attackers can craft malicious pages that auto-submit POST requests to modify stored rating data when visited by logged-in users...

5.3CVSS0.0019EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/18 7:56 p.m.•7 views

CVE-2026-93870 Cotonti through 1.0.0 Cross-Site Request Forgery in the Ratings Plugin AJAX Handler

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attackers to forge ratings on behalf of authenticated users. Attackers can craft malicious pages that auto-submit POST requests to modify stored rating data when visited by logged-in users...

5.3CVSS5.8AI score
SaveExploits0References7
CVE
CVE
•added 2026/09/18 7:56 p.m.•16 views

CVE-2026-93870

Cotonti through 1.0.0 has a Cross-Site Request Forgery (CSRF) vulnerability in the ratings plugin AJAX handler (ratings.ajax.php). The root cause is a failure to validate anti-CSRF tokens, allowing an attacker to craft a malicious page that auto-submits POST requests to modify stored rating data ...

5.3CVSS5.8AI score0.0019EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/18 7:56 p.m.•4 views

CVE-2026-93870 Cotonti through 1.0.0 Cross-Site Request Forgery in the Ratings Plugin AJAX Handler

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attackers to forge ratings on behalf of authenticated users. Attackers can craft malicious pages that auto-submit POST requests to modify stored rating data when visited by logged-in users...

5.3CVSS5.8AI score0.0019EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/18 7:56 p.m.•39 views

CVE-2026-93869 Cotonti through 1.0.0 Open Redirect via Unanchored cot_url_check() Regex

Cotonti through 1.0.0 contains an open redirect vulnerability in the coturlcheck function that validates redirect destinations using a regular expression lacking an end-of-string anchor. Attackers can bypass the redirect guard by supplying hostnames beginning with the site domain to redirect user...

6.1CVSS0.0036EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/18 4:17 p.m.•9 views

CVE-2026-93736

Mealie before 3.21.0 fails to validate user ownership in the ratings and favorites endpoints, allowing authenticated attackers to read any user's recipe ratings and favorites by specifying arbitrary user IDs in the URL path. Attackers can access private recipe identifiers, rating values, and...

5.3CVSS0.00387EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/18 4:04 p.m.•10 views

EUVD-2026-83026

Mealie before 3.21.0 fails to validate user ownership in the ratings and favorites endpoints, allowing authenticated attackers to read any user's recipe ratings and favorites by specifying arbitrary user IDs in the URL path. Attackers can access private recipe identifiers, rating values, and...

5.3CVSS5.9AI score0.00387EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/09/18 4:04 p.m.•9 views

CVE-2026-93736 Mealie before 3.21.0 Information Disclosure via Ratings Endpoint

Mealie before 3.21.0 fails to validate user ownership in the ratings and favorites endpoints, allowing authenticated attackers to read any user's recipe ratings and favorites by specifying arbitrary user IDs in the URL path. Attackers can access private recipe identifiers, rating values, and...

5.3CVSS5.9AI score0.00387EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/09/18 4:04 p.m.•43 views

CVE-2026-93736 Mealie before 3.21.0 Information Disclosure via Ratings Endpoint

Mealie before 3.21.0 fails to validate user ownership in the ratings and favorites endpoints, allowing authenticated attackers to read any user's recipe ratings and favorites by specifying arbitrary user IDs in the URL path. Attackers can access private recipe identifiers, rating values, and...

5.3CVSS0.00387EPSS
SaveExploits0References8
CVE
CVE
•added 2026/09/18 4:04 p.m.•20 views

CVE-2026-93736

Mealie before 3.21.0 contains an information disclosure vulnerability in the ratings and favorites endpoints , where user ownership is not validated. An authenticated attacker can read any user's recipe ratings, favorites, and private recipe identifiers by specifying arbitrary user IDs in the URL...

5.3CVSS5.9AI score0.00387EPSS
SaveExploits0References8
OSV
OSV
•added 2026/09/18 4:04 p.m.•6 views

CVE-2026-93736 Mealie before 3.21.0 Information Disclosure via Ratings Endpoint

Mealie before 3.21.0 fails to validate user ownership in the ratings and favorites endpoints, allowing authenticated attackers to read any user's recipe ratings and favorites by specifying arbitrary user IDs in the URL path. Attackers can access private recipe identifiers, rating values, and...

5.3CVSS5.9AI score
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•1 views

CVE-2026-93870: Cross-Site Request Forgery (CSRF)

Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attackers to forge ratings on behalf of authenticated users. Attackers can craft malicious pages that auto-submit POST requests to modify stored rating data when visited by logged-in users...

5.3CVSS5.8AI score0.0019EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•2 views

CVE-2026-93736: Authorization Bypass Through User-Controlled Key

Mealie before 3.21.0 fails to validate user ownership in the ratings and favorites endpoints, allowing authenticated attackers to read any user's recipe ratings and favorites by specifying arbitrary user IDs in the URL path. Attackers can access private recipe identifiers, rating values, and...

5.3CVSS5.9AI score0.00387EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•3 views

CVE-2026-93869: URL Redirection to Untrusted Site

Cotonti through 1.0.0 contains an open redirect vulnerability in the coturlcheck function that validates redirect destinations using a regular expression lacking an end-of-string anchor. Attackers can bypass the redirect guard by supplying hostnames beginning with the site domain to redirect user...

6.1CVSS5.7AI score0.0036EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/08/25 6:56 p.m.•10 views

WordPress kk Star Ratings – Rate Post & Collect User Feedbacks plugin <= 5.4.10.3 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Ronnachai Sretawat Na Ayutaya Simonhaskelly in WordPress Plugin kk Star Ratings versions = 5.4.10.3...

5.3CVSS5.3AI score0.00521EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder