Lucene search
+L

32 matches found

Kitploit
Kitploit
•added 2026/09/22 9:57 a.m.•13 views

CVE-2025-31864

CVE-2025-31864 1️⃣ コンポーネントタイプ WordPress プラグイン 2️⃣ コンポーネント詳細 コンポーネント名 Beam me up Scotty – Back to Top Button 脆弱性バージョン alert"XSS"foobottom:0 !imagehttps://assets.kitploit.com/production/public/readmes/35690/5dedc88e6e2e3a54ec...

5.9CVSS8.5AI score0.00331EPSS
SaveExploits1
NVD
NVD
•added 2026/09/18 5:17 p.m.•10 views

CVE-2026-93534

A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file app/Updater/SelfUpdater.php of the component Self Update Handler. Such manipulation leads to download of code without integrity check. It is possible to launch the attack remotely...

7.5CVSS0.00213EPSS
SaveExploits0References8
NVD
NVD
•added 2026/09/18 5:17 p.m.•10 views

CVE-2026-93533

A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of the argument host causes os command...

7.5CVSS0.01443EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/09/18 4:30 p.m.•11 views

CVE-2026-93534 spatie Scotty Self Update SelfUpdater.php update code download

A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file app/Updater/SelfUpdater.php of the component Self Update Handler. Such manipulation leads to download of code without integrity check. It is possible to launch the attack remotely...

7.5CVSS6AI score0.00213EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/18 4:30 p.m.•11 views

EUVD-2026-83165

A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file app/Updater/SelfUpdater.php of the component Self Update Handler. Such manipulation leads to download of code without integrity check. It is possible to launch the attack remotely...

7.5CVSS6AI score0.00213EPSS
SaveExploits0References8
CVE
CVE
•added 2026/09/18 4:30 p.m.•18 views

CVE-2026-93534

spatie Scotty (versions up to 1.4.2 ) is affected by a vulnerability in the SelfUpdater::update function within app/Updater/SelfUpdater.php, part of the Self Update Handler component. The root cause is that the self-update process downloads code without an integrity check , allowing an attacker t...

7.5CVSS6AI score0.00213EPSS
SaveExploits0References8
OSV
OSV
•added 2026/09/18 4:30 p.m.•9 views

CVE-2026-93534 spatie Scotty Self Update SelfUpdater.php update code download

A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file app/Updater/SelfUpdater.php of the component Self Update Handler. Such manipulation leads to download of code without integrity check. It is possible to launch the attack remotely...

5.3CVSS5.2AI score
SaveExploits0References10
Cvelist
Cvelist
•added 2026/09/18 4:30 p.m.•42 views

CVE-2026-93534 spatie Scotty Self Update SelfUpdater.php update code download

A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file app/Updater/SelfUpdater.php of the component Self Update Handler. Such manipulation leads to download of code without integrity check. It is possible to launch the attack remotely...

7.5CVSS0.00213EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/18 4:15 p.m.•11 views

EUVD-2026-83045

A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of the argument host causes os command...

7.5CVSS6.4AI score0.01443EPSS
SaveExploits0References7
CVE
CVE
•added 2026/09/18 4:15 p.m.•17 views

CVE-2026-93533

spatie Scotty (a Laravel package) is affected by an OS command injection in the Doctor Command Handler component, specifically in the DoctorCommand::checkSshConnectivity and DoctorCommand::checkRemoteTools functions within app/Commands/DoctorCommand.php. The vulnerability exists in versions up to...

7.5CVSS6.4AI score0.01443EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/09/18 4:15 p.m.•42 views

CVE-2026-93533 spatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injection

A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of the argument host causes os command...

7.5CVSS0.01443EPSS
SaveExploits0References7
OSV
OSV
•added 2026/09/18 4:15 p.m.•7 views

CVE-2026-93533 spatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injection

A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of the argument host causes os command...

5.3CVSS5.5AI score
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•4 views

CVE-2026-93534: Download of Code Without Integrity Check

A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file app/Updater/SelfUpdater.php of the component Self Update Handler. Such manipulation leads to download of code without integrity check. It is possible to launch the attack remotely...

7.5CVSS6AI score0.00213EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•2 views

CVE-2026-93533: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of the argument host causes os command...

7.5CVSS6.4AI score0.01443EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/11/11 7:26 a.m.•6 views

EUVD-2025-80631

Malicious code in scotty-teadev npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2001-0749

Malware in sbrugna...

7.2CVSS6.4AI score0.01444EPSS
SaveExploits2References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-9168

Malicious code in bioql PyPI...

5.9CVSS6.8AI score0.00331EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/04/03 4:44 p.m.•23 views

CVE-2025-31864

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Out the Box Beam me up Scotty beam-me-up-scotty allows Stored XSS.This issue affects Beam me up Scotty: from n/a through = 1.0.23...

5.9CVSS7.2AI score0.00331EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2025/04/03 12:38 a.m.•153 views

Exploit for CVE-2025-31864

CVE-2025-31864 1️⃣ Component type WordPress plugin 2️...

5.9CVSS6.1AI score0.00331EPSS
SaveExploits1
NVD
NVD
•added 2025/04/01 3:16 p.m.•40 views

CVE-2025-31864

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Out the Box Beam me up Scotty beam-me-up-scotty allows Stored XSS.This issue affects Beam me up Scotty: from n/a through = 1.0.23...

5.9CVSS0.00331EPSS
SaveExploits1References1
Rows per page
Query Builder