Lucene search
+L

1240 matches found

Kitploit
Kitploit
added 2026/08/25 8:58 p.m.2 views

WordPress-XStore-theme-SQL-Injection

WordPress-XStore主题-SQL注入 CVE-2024-33559 XStore主题SQL注入 CVE-2024-33551 是 8theme XStore(一个基于 WordPress 构建的电子商务平台)中的一个 SQL 注入漏洞。该漏洞允许攻击者在数据库上执行恶意 SQL 命令,从而导致数据被窃取、删除甚至篡改。 Poc root@kitploit: POST /?s=%27%3B+SELECT++FROM+wpposts%3B+-- HTTP/1.1 Host: example.com User-Agent: Mozilla/5.0 Windows NT 10.0;...

9.8CVSS8.9AI score0.03553EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/25 2:57 p.m.1 views

CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability 익스플로잇 작성자: ersinerenler 공급업체 홈페이지 https://code-projects.org/blood-bank-in-php-with-source-code 소프트웨어 링크 https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip 개요 Code-Projects Blood...

6.1CVSS6.5AI score0.00471EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 1:55 p.m.1 views

text4shell-cve-2022-42889

Text4Shell CVE-2022-42889 CVE-2022-42889용 Docker 실습 Docker 이미지를 로컬에서 직접 빌드하거나 Docker Hub에서 이미지를 가져와 컨테이너를 실행할 수 있습니다. 저장소 클론하기 root@kitploit: git clone https://github.com/devenes/text4shell-cve-2022-42889.git Docker 이미지를 로컬에서 빌드하기 root@kitploit: docker build --tag=text4shell . Docker 컨테이너 실행하기...

9.8CVSS7.3AI score0.99931EPSS
SaveExploits42References1
Kitploit
Kitploit
added 2026/08/25 6:32 a.m.1 views

cve-2022-42889-text4shell-docker

Установка maven - maven-linux 1. Установка Maven для создания fat jar root@kitploit: mvn clean install 2. Сборка Docker root@kitploit: docker build --tag=text4shell . 3. Запуск Docker root@kitploit: docker run -p 80:8080 text4shell 4. Тестирование приложения root@kitploit:...

9.8CVSS7.4AI score0.99931EPSS
SaveExploits42
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.19 views

Lyrion Music Server <= 9.2.0 - Cross-Site Scripting

Lyrion Music Server 9.2.0 contains a reflected XSS caused by improper sanitization of the search parameter in the server.log endpoint, letting unauthenticated attackers execute arbitrary script in users' browsers. id: CVE-2026-50230 info: name: Lyrion Music Server = 9.2.0 - Cross-Site Scripting...

6.1CVSS5.5AI score0.00406EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/08/25 5:08 a.m.2 views

CVE-2022-38553

CVE-2022-38553 크로스 사이트 스크립팅 XSS - "ACADEMY LEARNING MANAGEMENT SYSTEM" v5.9.1 미만 - 개념 증명 POC CVE-2022-38553 익스플로잇 제목: ACADEMY LEARNING MANAGEMENT SYSTEM POC 동영상:...

6.1CVSS6AI score0.02406EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 4:32 a.m.1 views

CVE-2026-9848

CVE-2026-9848 CVE-2026-9848 は、WordPress 用プラグイン WP Ticket Customer Support Ticket System & Helpdesk のバージョン 6.0.4 以前に影響する未認証SQLインジェクション(SQLi)脆弱性です。この欠陥は、プラグインがWordPressの検索パラメータ s を取得し、それを $wpdb-prepare や適切なエスケープ処理を使わずにUNIONサブクエリ内のSQL...

7.5CVSS0.00655EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 4:19 a.m.4 views

CVE-2020-35545

CVE-2020-35545 Spotweb 1.4.9 - 'search' SQL Injection...

9.8CVSS9.1AI score0.03803EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 4:15 a.m.1 views

CVE-2024-50969

CVE-2024-50969 Описание Отражённая межсайтовая скриптинговая XSS уязвимость в browse.php приложения Code-projects Jonnys Liquor 1.0 позволяет удалённым злоумышленникам внедрять произвольные веб-скрипты или HTML через параметр search. Тип уязвимости Межсайтовый скриптинг XSS Производитель...

6.1CVSS5AI score0.00517EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 4:14 a.m.3 views

CVE-2016-10993

CVE-2016-10993 WordPressの脆弱性 - XSS(クロスサイトスクリプティング) 脆弱性の場所 https://themesinfo.com/scoreme-wordpress-theme-design-496 概念実証 PoC https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E 参考文献 https://wpscan.com/vulnerability/8431...

5.4CVSS5.4AI score0.02796EPSS
SaveExploits1
EUVD
EUVD
added 2026/08/24 12:33 a.m.8 views

EUVD-2026-64668

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...

6.9CVSS7.3AI score0.00263EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/23 11:16 p.m.8 views

CVE-2026-78143

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...

7.5CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/23 10:15 p.m.16 views

CVE-2026-78143

A SQL injection vulnerability exists in the Barangay Resident Profiling Management System 1.0 (code-projects), specifically in the Resident Search Functionality within the file residents.php. The unsanitized Search argument allows a remote, unauthenticated attacker to inject SQL commands. The exp...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/23 10:15 p.m.31 views

CVE-2026-78143 code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...

7.5CVSS0.00263EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/23 12:00 a.m.15 views

PT-2026-79785

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...

7.5CVSS5.2AI score0.00263EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/21 7:16 a.m.8 views

CVE-2026-16959

The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection...

6.8CVSS0.00231EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 6:00 a.m.12 views

EUVD-2026-63820

The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection...

6.8CVSS5.8AI score0.00231EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/20 11:30 p.m.1 views

THM-Steel_Mountain-CVE-2014-6287

THM-SteelMountain-CVE-2014-6287 TryHackMe.com의 Steel Mountain 박스에 대한 분석 글 및 CVE-2014-6287 익스플로잇 크레딧 저는 이 취약점의 최초 발견 및 익스플로잇에 대한 공로를 주장하지 않습니다. 다음 분들께 감사드립니다! 발견: Daniele Linguaglossa Metasploit 모듈 작성자: Muhamad Fadzil Ramli TryHackMe 룸 및 작성자: https://tryhackme.com/room/steelmountain...

10CVSS0.99323EPSS
SaveExploits23References1
Github Security Blog
Github Security Blog
added 2026/08/20 6:45 p.m.6 views

Winter: Reflected XSS through the search query parameter in the backend Table widget

Impact Affected versions of Winter CMS render the search query parameter without HTML encoding inside a block in the backend Table widget partial modules/backend/widgets/table/partials/table.php: php value="" is an HTML raw-text context, so the surrounding value="…" attribute quoting is not a...

5.9AI score
SaveExploits0References4Affected Software1
NVD
NVD
added 2026/08/20 8:16 a.m.5 views

CVE-2026-76569

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...

5.3CVSS0.00258EPSS
SaveExploits0References1
Rows per page
Query Builder