Lucene search
+L

7012 matches found

Kitploit
Kitploit
added 2026/09/05 1:48 p.m.3 views

Airachnid-Burp-Extension

امتداد Burp لخداع ذاكرة التخزين المؤقت للويب امتداد Burp لاختبار التطبيقات للضعف أمام هجوم خداع ذاكرة التخزين المؤقت للويب. بمجرد تحميل الامتداد، يمكن الوصول إليه في علامة التبويب Target - Sitemap والنقر بالزر الأيمن على المورد الذي يجب اختباره. سيظهر عنصر قائمة سياقي يسمى "Web Cache Deception...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/05 1:30 p.m.5 views

LLMReaper

Capture passive de conversations LLM et recherche sur l'exposition de données sensibles Extension Chromium MV3 • Capture DOM en temps réel • Détection de secrets • Backend FastAPI !WARNING Ce projet est fourni strictement à des fins de recherche en sécurité, d'utilisation éducative et de...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/05 1:11 p.m.1 views

Oracle-WebLogic-CVE-2022-21371

Oracle-WebLogic-CVE-2022-21371 Oracle WebLogic Server Local File Inclusion : CVE-2022-21371 Version affectée : 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 et 14.1.1.0.0 Description : Le produit Oracle WebLogic Server d'Oracle Fusion Middleware composant Web Container est vulnérable à l'inclusion de fichie...

7.5CVSS7AI score0.92649EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/05 10:43 a.m.2 views

github-dorks

ثغرات غيت هب بحث غيت هب ميزة قوية ومفيدة جداً يمكن استخدامها للبحث عن بيانات حساسة في المستودعات. مجموعة استعلامات غيت هب يمكنها الكشف عن معلومات حساسة شخصية و/أو تنظيمية مثل المفاتيح الخاصة، بيانات الاعتماد، رموز المصادقة، إلخ. من المفترض أن تكون هذه القائمة مفيدة لتقييم الأمان وإجراء اختبارات...

5.4AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/05 10:26 a.m.4 views

CVE-2026-48907

CVE-2026-48907 Description هذا الملف CVE-2025-9209.py هو أداة استغلال جماعي تعمل على استهداف ثغرة CVE-2025-9209. الوظائف الأساسية: تفحص قائمة مواقع عبر استدعاء /wp-json/wp/v2/users يحلل الاستجابة ليبحث عن بيانات مستخدم حساسة مثل المفاتيح العامة والخاصة، والتوكنات، وبيانات الكوكيز يتجاهل المواقع...

10CVSS9AI score0.781EPSS
SaveExploits32
Kitploit
Kitploit
added 2026/09/05 6:47 a.m.5 views

CVE-2024-50961

Exposition de Données Sensibles CVE-2024-50961 Description Dans DonWeb Ferozo Hosting v1.1, un attaquant distant peut exploiter les paramètres d'URL pour accéder à des données sensibles, y compris les identifiants de base de données. Les vecteurs d'attaque incluent l'écoute réseau, les journaux d...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/05 6:11 a.m.2 views

CNVD-2022-27366__CVE-2023-37621

ID CVE CVE-2023-37621 PRODUIT Fronius Fronius Datalogger Web 2.0.5-4 VERSION Fronius Fronius Datalogger Web 2.0.5-4 TYPE DE PROBLÈME Vulnérabilité d'accès non autorisé DESCRIPTION Fronius est un fabricant européen de machines à souder. Un accès non autorisé à Fronius Datalogger Web permet aux...

8.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/05 5:34 a.m.9 views

SwaggerSpy

SwaggerSpy نظرة عامة SwaggerSpy هي أداة مصممة لجمع المعلومات الاستخباراتية مفتوحة المصدر OSINT بشكل آلي على SwaggerHub. يهدف هذا المشروع إلى تبسيط عملية جمع المعلومات من واجهات برمجة التطبيقات APIs الموثقة على SwaggerHub، مما يوفر رؤى قيمة لباحثي الأمن والمطورين ومتخصصي تكنولوجيا المعلومات. ما هو...

5.3AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/05 2:36 a.m.4 views

CVE-2020-29134

Totvs Fluig Platform root@kitploit: Fluig est la plateforme de productivité et de collaboration qui s'intègre au système ERP, et aux autres systèmes de votre entreprise pour révolutionner la façon dont vous et votre équipe travaillez. CVE-2020-29134 root@kitploit: La plateforme TOTVS Fluig permet...

8.6CVSS8.2AI score0.15025EPSS
SaveExploits2
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.67 views

Gravity SMTP WordPress Plugin - Sensitive Information Exposure

Gravity SMTP WordPress plugin = 2.1.4 contains a sensitive information exposure caused by an unrestricted REST API endpoint at /wp-json/gravitysmtp/v1/tests/mock-data, letting unauthenticated attackers retrieve detailed system configuration data, exploit requires no authentication. id:...

7.5CVSS5.5AI score0.39975EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.32 views

ListingPro < 2.6.1 - Sensitive Data Disclosure

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the /listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email...

5.3CVSS5.5AI score0.01608EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.59 views

Joomla! Component Music Manager - Local File Inclusion

A directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the cid parameter to album.html. id: CVE-2010-2857 info: name: Joomla! Component Music Manager - Local Fil...

6.8CVSS5.8AI score0.04848EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.72 views

DedeCMS 5.7.109 - Server-Side Request Forgery

Manipulation of the rssurl parameter in codo.php leads to server-side request forgery in DedeCMS version 5.7.109. id: CVE-2023-3578 info: name: DedeCMS 5.7.109 - Server-Side Request Forgery author: ritikchaddha severity: critical description: | Manipulation of the rssurl parameter in codo.php lea...

9.8CVSS6.2AI score0.0357EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.123 views

TrakSYS 11.x.x - Sensitive Data Exposure

A vulnerability was found in Parsec Automation TrackSYS 11.x.x and classified as problematic. This issue affects some unknown processing of the file /TS/export/pagedefinition. The manipulation of the argument ID leads to direct request. The attack may be initiated remotely. The exploit has been...

6.9CVSS5AI score0.02036EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.24 views

Scoold < 1.64.0 - Authentication Bypass

Scoold is a Q&A and a knowledge sharing platform for teams. A semicolon path injection vulnerability was found on the /api;/config endpoint. By appending a semicolon in the URL, attackers can bypass authentication and gain unauthorised access to sensitive configuration data. Furthermore, PUT...

8.7CVSS5.3AI score0.01035EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.51 views

Easy Appointments <= 3.12.21 - Information Disclosure

Easy Appointments WordPress plugin = 3.12.21 contains a sensitive information exposure caused by an unauthenticated REST API endpoint /wp-json/wp/v2/eablocks/eaappointments/ registered with permissioncallback allowing unrestricted access, letting unauthenticated attackers extract sensitive custom...

7.5CVSS7.9AI score0.0239EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.42 views

WordPress JobWP Plugin <= 2.3.9 - SQL Injection

The JobWP - Job Board, Job Listing, Career Page and Recruitment Plugin plugin for WordPress is vulnerable to SQL Injection via the 'jobwpuploadresume' parameter in all versions up to, and including, 2.3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparati...

7.5CVSS8.9AI score0.01737EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.37 views

Netgear R6850 - Information Disclosure

Netgear R6850 router firmware version V1.1.0.88 contains an information leakage vulnerability in the currentsetting.htm page.This hidden interface is not protected by authentication, allowing unauthenticated attackers to access sensitive informationsuch as firmware version, model details,...

7.5CVSS5.2AI score0.01907EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.37 views

PraisonAI AgentOS - Information Disclosure

PraisonAI's AgentOS FastAPI application server exposes an unauthenticated GET /api/agents endpoint that lists every registered agent's name, role and the opening of its instructions system prompt. No authentication is enforced on the route, allowing a remote attacker to enumerate agent...

7.3CVSS7.7AI score0.28571EPSS
SaveExploits4
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.61 views

Quttera Web Malware Scanner <= 3.4.1.48 - Sensitive Data Exposure

The Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 doesn't restrict access to detailed scan logs, which allows a malicious actor to discover local paths and portions of the site's code id: CVE-2023-6065 info: name: Quttera Web Malware Scanner = 3.4.1.48 - Sensitive Data Exposure...

5.3CVSS6.6AI score0.18552EPSS
SaveExploits2References3
Rows per page
Query Builder