Blink Router - Command Injection

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain a command injection vulnerability via the bsSetSSIDHide function. id: CVE-2025-45985 info: name: Blin...

Chamilo model.ajax.php - SQL Injection

main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter. id: CVE-2021-34187 info: name: Chamilo model.ajax.php - SQL Injection author: DhiyaneshDK severity: critical description: | main/inc/ajax/model.ajax.php in Chamilo...

Youzify < 1.2.0 - Unauthenticated SQLi

The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection id: CVE-2022-1950 info: name: Youzify 1.2.0 - Unauthenticated SQLi author:...

Kyocera Net View Address Book Exposure

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function. id: CVE-2022-1026 info: name: Kyocera Net View Address Book Exposure autho...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

Jordy Meow AI Engine - Unrestricted File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine- ChatGPT Chatbot.This issue affects AI Engine- ChatGPT Chatbot- from n/a through 1.9.98. id: CVE-2023-51409 info: name: Jordy Meow AI Engine - Unrestricted File Upload author: pussycat0x severity: critical...

Oracle Business Intelligence - Path Traversal

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

cve-scores

CVE 점수 EPSS 및 VEDAS 점수 집계기 CVE용 데이터 제공자 점수| 유지관리자| 목적| 범위| 출처| 갱신 주기 ---|---|---|---|---|--- Exploit Prediction Scoring System EPSS| Empirical Security| 미래 악용 예측| 1개 식별자 CVE| 데이터 파트너로부터 제공된 독점 데이터| 24시간 Vulnerability & Exploit Data Aggregation System VEDAS| A.R.P. Syndicate| 취약점 보급률 및 익스플로잇 성숙도 추...

criticality_score

オープンソースプロジェクトの重要度スコア（ベータ版） このプロジェクトは、Securing Critical Projects WG のメンバーによって保守されています。 目標 1. すべてのオープンソースプロジェクトの重要度スコア を生成する。 2. オープンソースコミュニティが依存する重要プロジェクトのリストを作成する。 3. このデータを使用して、これらの重要プロジェクトのセキュリティ態勢を事前に改善する。 重要度スコア プロジェクトの重要度スコアは、プロジェクトの影響力と重要性を定義します。 これは 0（重要度最小） と 1（重要度最大） の間の数値です。これは、Rob Pike...

kube-score

kube-score kube-score는 Kubernetes 오브젝트 정의의 정적 코드 분석을 수행하는 도구입니다. 출력은 애플리케이션을 더욱 안전하고 탄력적으로 만들기 위해 개선할 수 있는 사항에 대한 권장 사항 목록입니다. 온라인 데모 소스를 통해 브라우저에서 kube-score를 테스트할 수 있습니다...

OpenEMR < 7.0.1 - Cross-Site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1. id: CVE-2023-2948 info: name: OpenEMR 7.0.1 - Cross-Site Scripting author: ritikchaddha,princechaddha severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr...

SEVulDet

SEVulDet SEVulDet는 더 많은 시맨틱을 추출, 보존 및 학습하여 취약점 패턴을 정확하게 찾아내는 시맨틱 강화 딥러닝 기반 프레임워크입니다. 이메일 문의: [email protected] SEVulDet 상세 정보 최근 몇 년간 신경망을 활용하여 취약점 패턴을 식별하는 딥러닝 기반 취약점 탐지 프레임워크에 대한 관심이 증가했습니다. 많은 노력이 있었지만, 기존 접근 방식은 실제로 정확도가 낮습니다. 이전 연구들은 소스 코드에서 시맨틱을 포괄적으로 캡처하지 못하거나 신경망의 적절한 설계를 채택하지 못합니다. ...

MailAccess

root@kitploit: ███╗ ███╗ █████╗ ██╗██╗ █████╗ ██████╗ ██████╗███████╗███████╗███████╗ ████╗ ████║██╔══██╗██║██║ ██╔══██╗██╔════╝██╔════╝██╔════╝██╔════╝██╔════╝ ██╔████╔██║███████║██║██║ ███████║██║ ██║ █████╗ ███████╗███████╗ ██║╚██╔╝██║██╔══██║██║██║ ██╔══██║██║ ██║ ██╔══╝ ╚════██║╚════██║ ██║...

CVE-2024-38063

CVE-2024-38063 - 通过IPv6远程利用内核 自从8月13日发布最新的Windows补丁以来，我一直深入研究tcpip.sys（负责处理TCP/IP数据包的内核驱动程序）。一个CVSS评分高达9.8的漏洞出现在Windows内核最容易触及的部分，我实在无法错过。我以前从未真正研究过IPv6（或负责解析它的驱动程序），所以我知道逆向分析这个漏洞将极具挑战性，但也是一次很好的学习体验。 史上最简单的补丁分析...

metahub

MetaHub is an automated contextual security findings enrichment and impact evaluation tool for vulnerability management. You can use it with AWS Security Hub or any ASFF-compatible security scanner. Stop relying on useless severities and switch to impact scoring definitions based on YOUR context...

cve-collector

CVE-Collector Simple Latest CVE Collector Written in Python There are various methods for collecting the latest CVE Common Vulnerabilities and Exposures information. This code was created to provide guidance on how to collect, what information to include, and how to code when creating a CVE...

pocindex

Just landed Trending in 2026 Trending in 2025 2024, 2023 Trending in 2024 Data Every file is plain JSON on the CDN. No key, no rate limit. root@kitploit: everything the index knows about one CVE curl -s https://pocindex.io/CVElist.json \ | jq '. | select.cve == "CVE-2021-44228" | cve, poc: .poc |...

CVE-2024-44313

エクスプロイト 🛠️ ケーススタディ: CVE-2024-44313と脆弱性優先順位付けにおけるEPSS このケーススタディは、EPSS（Exploit Prediction Scoring System）に関する講演のために作成され、スコアが実際に脆弱性の優先順位付けにどのように影響するかを示しています。 TastyIgniter 3.7.6で見つかった脆弱性CVE-2024-44313は、認証されていないユーザーが注文の請求書にアクセスできるようにし、財務データや個人情報を露呈させます。 EPSSスコア: 0.02%（パーセンタイル2.7%） 評価日: 19/03/2025...

cve-2020-29007

CVEID : CVE-2020-29007 影響を受ける製品とバージョン : Mediawiki Score 0.3.0 までの全バージョン 問題の種類 : CWE-96: 静的に保存されたコードにおけるディレクティブの無害化の不適切（'静的コードインジェクション'） 概要 Score は、ユーザーが提供した Lilypond または ABC マークアップに基づいて楽譜を生成する Mediawiki 拡張機能です。 テスト中に、Lilypond マークアップに埋め込まれた Scheme コードを介したリモートコード実行に対して脆弱であることを確認しました。 Score...