Lucene search
+L

1238 matches found

Kitploit
Kitploit
added 2026/08/25 8:58 p.m.2 views

WordPress-XStore-theme-SQL-Injection

WordPress-XStore主题-SQL注入 CVE-2024-33559 XStore主题SQL注入 CVE-2024-33551 是 8theme XStore(一个基于 WordPress 构建的电子商务平台)中的一个 SQL 注入漏洞。该漏洞允许攻击者在数据库上执行恶意 SQL 命令,从而导致数据被窃取、删除甚至篡改。 Poc root@kitploit: POST /?s=%27%3B+SELECT++FROM+wpposts%3B+-- HTTP/1.1 Host: example.com User-Agent: Mozilla/5.0 Windows NT 10.0;...

9.8CVSS8.9AI score0.03553EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/25 2:57 p.m.1 views

CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability エクスプロイト作成者: ersinerenler ベンダーホームページ https://code-projects.org/blood-bank-in-php-with-source-code ソフトウェアリンク https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip 概要 Code-Projects...

6.1CVSS6.5AI score0.00471EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 1:55 p.m.1 views

text4shell-cve-2022-42889

Text4Shell CVE-2022-42889 CVE-2022-42889 用 Docker ラボ Docker イメージはローカルでビルドするか、Docker Hub からプルしてコンテナを実行できます。 リポジトリをクローンする root@kitploit: git clone https://github.com/devenes/text4shell-cve-2022-42889.git Docker イメージをローカルでビルドする root@kitploit: docker build --tag=text4shell . Docker コンテナを実行する...

9.8CVSS7.3AI score0.99931EPSS
SaveExploits42References1
Kitploit
Kitploit
added 2026/08/25 6:32 a.m.1 views

cve-2022-42889-text4shell-docker

安装 Maven - maven-linux 1. 安装 Maven 以创建 fat jar root@kitploit: mvn clean install 2. Docker 构建 root@kitploit: docker build --tag=text4shell . 3. Docker 运行 root@kitploit: docker run -p 80:8080 text4shell 4. 测试应用 root@kitploit: http://localhost/text4shell/attack?search= 5...

9.8CVSS0.99931EPSS
SaveExploits42
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.19 views

Lyrion Music Server <= 9.2.0 - Cross-Site Scripting

Lyrion Music Server 9.2.0 contains a reflected XSS caused by improper sanitization of the search parameter in the server.log endpoint, letting unauthenticated attackers execute arbitrary script in users' browsers. id: CVE-2026-50230 info: name: Lyrion Music Server = 9.2.0 - Cross-Site Scripting...

6.1CVSS5.5AI score0.00406EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/08/25 5:08 a.m.2 views

CVE-2022-38553

CVE-2022-38553 ACADEMY LEARNING MANAGEMENT SYSTEM POC 動画:...

6.1CVSS6.1AI score0.02406EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 4:19 a.m.4 views

CVE-2020-35545

CVE-2020-35545 Spotweb 1.4.9 - 'search' SQL注入...

9.8CVSS9.1AI score0.03803EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 4:14 a.m.2 views

CVE-2016-10993

CVE-2016-10993 WordPressの脆弱性 - XSS(クロスサイトスクリプティング) 脆弱性の場所 https://themesinfo.com/scoreme-wordpress-theme-design-496 概念実証 PoC https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E 参考文献 https://wpscan.com/vulnerability/8431...

5.4CVSS5.4AI score0.02796EPSS
SaveExploits1
EUVD
EUVD
added 2026/08/24 12:33 a.m.8 views

EUVD-2026-64668

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...

6.9CVSS7.3AI score0.00263EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/23 11:16 p.m.8 views

CVE-2026-78143

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...

7.5CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/23 10:15 p.m.16 views

CVE-2026-78143

A SQL injection vulnerability exists in the Barangay Resident Profiling Management System 1.0 (code-projects), specifically in the Resident Search Functionality within the file residents.php. The unsanitized Search argument allows a remote, unauthenticated attacker to inject SQL commands. The exp...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/23 10:15 p.m.31 views

CVE-2026-78143 code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...

7.5CVSS0.00263EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/23 12:00 a.m.15 views

PT-2026-79785

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...

7.5CVSS5.2AI score0.00263EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/21 7:16 a.m.8 views

CVE-2026-16959

The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection...

6.8CVSS0.00231EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 6:00 a.m.12 views

EUVD-2026-63820

The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection...

6.8CVSS5.8AI score0.00231EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/20 11:30 p.m.1 views

THM-Steel_Mountain-CVE-2014-6287

THM-SteelMountain-CVE-2014-6287 TryHackMe.comのSteel Mountainボックスの攻略記とCVE-2014-6287のエクスプロイト クレジット 私はこの脆弱性の原本の発見および悪用に対して一切の功績を主張しません。以下の方々に感謝します! 発見: Daniele Linguaglossa Metasploitモジュール作成者: Muhamad Fadzil Ramli TryHackMeルームと作者: https://tryhackme.com/room/steelmountain...

10CVSS0.99323EPSS
SaveExploits23References1
Github Security Blog
Github Security Blog
added 2026/08/20 6:45 p.m.6 views

Winter: Reflected XSS through the search query parameter in the backend Table widget

Impact Affected versions of Winter CMS render the search query parameter without HTML encoding inside a block in the backend Table widget partial modules/backend/widgets/table/partials/table.php: php value="" is an HTML raw-text context, so the surrounding value="…" attribute quoting is not a...

5.9AI score
SaveExploits0References4Affected Software1
NVD
NVD
added 2026/08/20 8:16 a.m.5 views

CVE-2026-76569

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...

5.3CVSS0.00258EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/20 7:29 a.m.7 views

EUVD-2026-63211

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...

5.3CVSS5.2AI score0.00258EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/20 7:29 a.m.27 views

CVE-2026-76569 Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...

5.3CVSS0.00258EPSS
SaveExploits0References1
Rows per page
Query Builder