Lucene search
+L

1253 matches found

Kitploit
Kitploit
added 2026/09/15 9:16 p.m.12 views

CVE-2026-9848

CVE-2026-9848 CVE-2026-9848 es una vulnerabilidad de inyección SQL SQLi no autenticada que afecta al plugin WP Ticket Customer Support Ticket System & Helpdesk para WordPress hasta la versión 6.0.4 inclusive. El fallo se produce porque el plugin toma el parámetro de búsqueda s de WordPress y lo...

7.5CVSS6AI score0.00655EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 4:57 p.m.4 views

CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overvi...

6.1CVSS6.5AI score0.00471EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/15 9:59 a.m.8 views

CVE-2020-35545

CVE-2020-35545 Spotweb 1.4.9 - 'search' SQL Injection...

9.8CVSS8.3AI score0.03803EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/15 9:51 a.m.4 views

cve-2022-42889-text4shell-docker

安装 Maven - maven-linux 1. 安装 Maven 以创建 fat jar root@kitploit: mvn clean install 2. Docker 构建 root@kitploit: docker build --tag=text4shell . 3. Docker 运行 root@kitploit: docker run -p 80:8080 text4shell 4. 测试应用 root@kitploit: http://localhost/text4shell/attack?search= 5...

9.8CVSS7.7AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/15 8:00 a.m.13 views

WordPress-XStore-theme-SQL-Injection

WordPress-XStore-theme-SQL-Injection CVE-2024-33559 XStore theme-SQL Injection CVE-2024-33551 is a SQL injection vulnerability found in 8theme XStore, an ecommerce platform built on WordPress. This vulnerability allows attackers to execute malicious SQL commands on the database, which can lead to...

9.8CVSS8.5AI score0.03553EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/15 7:26 a.m.4 views

text4shell-cve-2022-42889

Text4Shell CVE-2022-42889 Docker Lab for CVE-2022-42889 You can either build the Docker image locally or pull the image from Docker Hub and run the container. Clone the repo root@kitploit: git clone https://github.com/devenes/text4shell-cve-2022-42889.git Build the Docker image locally...

9.8CVSS7.7AI score0.99931EPSS
SaveExploits42References1
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.20 views

Lyrion Music Server <= 9.2.0 - Cross-Site Scripting

Lyrion Music Server 9.2.0 contains a reflected XSS caused by improper sanitization of the search parameter in the server.log endpoint, letting unauthenticated attackers execute arbitrary script in users' browsers. id: CVE-2026-50230 info: name: Lyrion Music Server = 9.2.0 - Cross-Site Scripting...

6.1CVSS6.1AI score0.00406EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/09/14 11:09 a.m.10 views

CVE-2026-76569

Phoca Download 中通过搜索 GET 参数导致的反射型 XSS Phoca Download ≤ 6.1.4 — 已认证攻击者可通过用户控制面板中的构造搜索 URL 执行任意 JavaScript 摘要 用于 Joomla 的 Phoca Download(comphocadownload)在用户控制面板的文件搜索功能中存在反射型跨站脚本(XSS)漏洞。search GET 参数通过 Joomla 的 'string' 过滤器处理——该过滤器仅调用 striptags 并保留 " 字符——随后未经 htmlspecialchars 转义即被回显到 HTML...

5.3CVSS5.9AI score0.00258EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/13 2:50 p.m.6 views

CVE-2016-10993

CVE-2016-10993 Wordpress Vulnerability - XSS Cross-Site Scripting Vulnerability Location https://themesinfo.com/scoreme-wordpress-theme-design-496 Proof of Concept PoC https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E Refrensi...

5.4CVSS6.1AI score0.02796EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 5:26 p.m.7 views

CVE-2024-50969

CVE-2024-50969 説明 Code-projects Jonnys Liquor 1.0 の browse.php における反射型クロスサイトスクリプティング XSS の脆弱性により、リモート攻撃者が search パラメータを介して任意のウェブスクリプトまたは HTML を注入できる可能性があります。 脆弱性タイプ クロスサイトスクリプティング XSS 製品ベンダー Code-projects 影響を受ける製品コードベース:...

6.1CVSS5.8AI score0.00517EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 4:55 p.m.9 views

CVE-2022-38553

CVE-2022-38553 CROSS SITE SCRIPTING XSS ON "ACADEMY LEARNING MANAGEMENT SYSTEM" POC VIDEO:...

6.1CVSS6.5AI score0.02512EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/11 1:52 a.m.9 views

CVE-2023-34632

CVE-2023-34632 XSS reflejado en 1000projects Book Management System 1.0 CVE-2023-34632 Cross-Site Scripting XSS reflejado en 1000projects Book Management System 1.0 Descripción Se descubrió una vulnerabilidad de Cross-Site Scripting XSS reflejado en 1000projects Book Management System versión 1.0...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 11:31 p.m.7 views

THM-Steel_Mountain-CVE-2014-6287

THM-SteelMountain-CVE-2014-6287 A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287 Credits I take no credit for the original discovery and exploitation of this vulnerability. Thank you to the following people! Discovery: Daniele Linguaglossa Metasploit Module...

10CVSS8.3AI score0.99323EPSS
SaveExploits23References1
Kitploit
Kitploit
added 2026/09/10 1:38 a.m.10 views

CVE-2025-61454

🛡️ CVE 披露:CVE-2025-61454 — 电子商务项目中的反射型 XSS 披露日期: 2025 年 10 月 14 日 CVE ID: CVE-2025-61454 严重性: 中危(CVSS 6.1) 🧩 摘要 E-commerce Project v1.0 中存在一个反射型跨站脚本(XSS)漏洞,具体位于 search.php 端点。search 参数中的未净化输入被直接反射回响应 HTML 中,攻击者可在访问恶意链接或提交精心构造请求的用户浏览器中执行任意 JavaScript。 该问题已被分配标识符 CVE-2025-61454 。在披露时,供应商尚未发布任何补丁 。 📦...

6.1CVSS5.9AI score0.00238EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 12:53 a.m.10 views

CVE-2023-51810

CVE-2023-51810 描述 StackIdeas EasyDiscuss v.5.0.5 中存在盲 SQL 注入漏洞,远程攻击者可通过 Users 模块中的 search 参数获取敏感信息。 产品 StackIdeas EasyDiscuss v5.0.5 - EasyDiscuss - Joomla 论坛讨论工具 - StackIdeas 修复方案 升级至 = 5.0.10 的版本。由于缺乏公开可用的源代码,版本 5.0.6-5.0.9 未进行测试。 步骤 安装在 Joomla 上的 EasyDiscuss 插件(v5.0.5)存在盲 SQL 注入漏洞: 该漏洞存在于...

7.5CVSS7.6AI score0.01138EPSS
SaveExploits2
OSV
OSV
added 2026/09/08 4:30 p.m.5 views

CVE-2026-86667 aircheng-org iWebShop-5 member.php member_list sql injection

A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function memberlist of the file controllers/member.php. This manipulation of the argument Search causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...

5.1CVSS5.5AI score
SaveExploits0References8
CVE
CVE
added 2026/09/08 4:30 p.m.8 views

CVE-2026-86667

A SQL injection vulnerability exists in aircheng-org iWebShop-5 (up to version 5.15), specifically in the member_list function within controllers/member.php. The flaw is triggered by manipulation of the Search argument , allowing a remote, authenticated attacker to execute arbitrary SQL queries. ...

5.8CVSS5.1AI score0.0021EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/04 2:17 a.m.6 views

CVE-2026-85397

A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.php. This manipulation of the argument Search causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

7.5CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/04 2:00 a.m.19 views

CVE-2026-85397

A SQL injection vulnerability exists in code-projects Hospital Information System 1.0 , specifically in the findBySearch function within addReq.php . An unauthenticated remote attacker can manipulate the Search argument to inject arbitrary SQL, leading to low-impact compromise of confidentiality,...

7.5CVSS6.9AI score0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/04 2:00 a.m.8 views

EUVD-2026-70859

A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.php. This manipulation of the argument Search causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

7.5CVSS6.9AI score0.00263EPSS
SaveExploits0References6
Rows per page
Query Builder