790140 matches found
CVE-2025-56819
CVE-2025-56819 An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter. root@kitploit: POST /api/v1/data-provider/test HTTP/1.1 Host: test.com:8080 Content-Type: application/json Content-Length: 520 "name": "jdbc-data-provider", "type":...
Ghost-CMS-Code-Injection-Audit-CVE-2026-26980
Ghost CMS Code Injection Cleaner Removes injected code from every post and page on a Ghost CMS website via the Admin API. Use this to clean up a compromised Ghost site — for example, one affected by the code injection vulnerability CVE-2026-26980 — by stripping attacker-supplied tags and other...
CVE-2026-6279.py
Description This Python script is an exploit tool for CVE-2026-6279 targeting Avada Builder = 3.15.2. Key behavior: scans targets for fusionloadnonce via Avada-specific shortcode/page patterns discovers AJAX endpoint and origin IP bypass if Cloudflare blocks admin-ajax builds exploit requests for...
Xenotix-Python-Keylogger
Xenotix Python Keylogger for Windows IMPORTANT: PROJECT DEVELOPMENT AND SUPPORT IS DISCONTINUED usage: xenotixpythonlogger.py mode optional mode: local: store the logs in a file keylogs.txt remote: send the logs to a Google Form. You must specify the Form URL and Field Name in the script. email:...
OpenSC.tokend
OpenSC.tokend The open source OS X smart card driver A tokend makes the keys and certificates on your smart card appear in Keychain Access.app and available to applications like Safari or Chrome. OpenSC.tokend is the open source tokend implementation from OpenSC, with support for many different...
CVE-2026-90781
A flaw was found in alsa-lib. This vulnerability is an off-by-one stack buffer overflow in the sndctlasciielemidparse function. A local attacker can exploit this by supplying a specially crafted, long control-element identifier string through saved state files or command-line arguments. This can...
cs50-cybersecurity-final-project
Technical Analysis of the XZ Utils Backdoor CVE-2024-3094 Video URL: https://www.youtube.com/watch?v=6hpVp7prlO8 Overview This repository contains the final project for CS50's Introduction to Cybersecurity. The project provides a thorough technical analysis of the supply chain attack on XZ Utils...
CVE-2026-82792
A cross-site scripting (XSS) vulnerability exists in the Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit . If exploited, an arbitrary script may be executed in a logged-in user's web browser. The attack requires the attacker to be on an adjacent network and active user interaction...
CVE-2026-82792
Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
EUVD-2026-77247
Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82792
Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82790
A cross-site scripting (XSS) vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and DIO-0404RY-LWF-US , two wireless I/O devices manufactured by Contec. If exploited, an arbitrary script may be executed on a logged-in user's web browser. The CVSS 3.1 base score is 5.4 (MEDIUM) with a c...
CVE-2026-82790
Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82790
Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
EUVD-2026-77245
Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82763
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
EUVD-2026-77242
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82763
A cross-site scripting (XSS) vulnerability affects Contec FX5000, FX4000, and FX3000 series devices. When exploited, an arbitrary script may be executed in a logged-in user's web browser . The CVSS 3.1 score is 5.4 (Medium) with low privileges required, user interaction required, and a changed sc...
CVE-2026-82763
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...