Lucene search
+L

6875 matches found

Nuclei
Nuclei
added 2026/09/20 2:05 a.m.64 views

eShop 3.0.4 - Cross-Site Scripting

eShop 3.0.4 contains a reflected cross-site scripting vulnerability in json search parse and json response in wrteam.in. id: CVE-2022-35493 info: name: eShop 3.0.4 - Cross-Site Scripting author: arafatansari severity: medium description: | eShop 3.0.4 contains a reflected cross-site scripting...

6.1CVSS6.2AI score0.01696EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.130 views

Sercomm VD625 Smart Modems - CRLF Injection

Sercomm AGCOMBO VD625 Smart Modems with firmware version AGSOT2.1.0 are vulnerable to Carriage Return Line Feed CRLF injection via the Content-Disposition header. id: CVE-2021-27132 info: name: Sercomm VD625 Smart Modems - CRLF Injection author: geeknik severity: critical description: Sercomm...

9.8CVSS8.2AI score0.16487EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.74 views

WBCE CMS v1.5.4 - Cross Site Scripting (Stored)

A cross-site scripting XSS vulnerability in /admin/settings/save.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website Footer field. id: CVE-2022-45038 info: name: WBCE CMS v1.5.4 - Cross Site Scripting Stored author:...

5.4CVSS6.2AI score0.01035EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.48 views

WordPress Sunshine Photo Cart <2.9.15 - Cross-Site Scripting

WordPress Sunshine Photo Cart plugin before 2.9.15 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape a parameter before outputting it back in the page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affecte...

6.1CVSS6.2AI score0.00902EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.65 views

Seo Panel 4.8.0 - Cross-Site Scripting

Seo Panel 4.8.0 contains a reflected cross-site scripting vulnerability via the seo/seopanel/login.php?sec=forgot email parameter. id: CVE-2021-3002 info: name: Seo Panel 4.8.0 - Cross-Site Scripting author: edoardottt severity: medium description: Seo Panel 4.8.0 contains a reflected cross-site...

6.1CVSS6.2AI score0.04278EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.204 views

Hotel Druid 3.0.2 - Cross-Site Scripting

Hotel Druid 3.0.2 contains a cross-site scripting vulnerability in multiple pages which allows for arbitrary execution of JavaScript commands. id: CVE-2021-37833 info: name: Hotel Druid 3.0.2 - Cross-Site Scripting author: pikpikcu,s4e-io severity: medium description: Hotel Druid 3.0.2 contains a...

6.1CVSS6.3AI score0.04878EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.119 views

AppCMS - Cross-Site Scripting

AppCMS 2.0.101 has a cross-site scripting vulnerability in \templates\m\inchead.php. id: CVE-2021-45380 info: name: AppCMS - Cross-Site Scripting author: pikpikcu severity: medium description: AppCMS 2.0.101 has a cross-site scripting vulnerability in \templates\m\inchead.php. impact: | Successfu...

6.1CVSS6.1AI score0.02521EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.56 views

2 Click Socialmedia Buttons < 0.34 - Cross-Site Scripting

A cross-site scripting vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter. id: CVE-2012-4273 info: name: 2 Click Socialmedia Buttons 0.34 - Cross-Site Scripti...

4.3CVSS5.8AI score0.0578EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/20 2:05 a.m.82 views

Redwood Report2Web 4.3.4.5 & 4.5.3 - Cross-Site Scripting

Redwood Report2Web 4.3.4.5 and 4.5.3 contains a cross-site scripting vulnerability in the login panel which allows remote attackers to inject JavaScript via the signIn.do urll parameter. id: CVE-2021-26710 info: name: Redwood Report2Web 4.3.4.5 & 4.5.3 - Cross-Site Scripting author: pikpikcu...

6.1CVSS6.2AI score0.075EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/20 1:40 a.m.7 views

CVE-2025-50754-PoC

CVE-2025-50754 存储型XSS导致PHP CMS平台远程代码执行 摘要 某基于PHP的CMS平台(版本5)的“报告”功能中存在存储型跨站脚本(XSS)漏洞。当管理员查看用户提交的报告时,恶意JavaScript会在管理面板上下文中执行。这使得攻击者能够劫持管理员会话,并利用内置的模板编辑器上传PHP Web Shell,最终在服务器上实现完全远程代码执行(RCE)。 技术细节 漏洞类型: 存储型跨站脚本(XSS) 受影响产品: CMS平台 v5 攻击类型: 远程 影响: 远程代码执行(RCE):是 信息泄露:是 攻击向量(抽象描述)...

9.6CVSS5.9AI score0.0056EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 1:11 a.m.11 views

CVE-2025-68461

CVE-2025-68461 扫描器 一个用于检测 Roundcube Webmail 安装中跨站脚本 XSS 漏洞的 C++ 安全扫描工具。 影响 未经授权访问用户账户 会话劫持 数据泄露 以用户身份执行未授权操作 受影响版本 扫描器检查以下存在漏洞的版本: 1.5.x 系列: 1.5.0 至 1.5.11 1.6.x 系列: 1.6.0 至 1.6.11 缓解措施 升级到: Roundcube Webmail 1.5.12 或更高版本(适用于 1.5.x) Roundcube Webmail 1.6.12 或更高版本(适用于 1.6.x) ✨ 特性 自动检测 Roundcube...

7.2CVSS7.5AI score0.26842EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/20 12:24 a.m.10 views

NetworkAssessment

NetworkAssessment: Herramienta de Evaluación de Compromiso de Red La Herramienta de Evaluación de Compromiso de Red está diseñada para analizar archivos pcap y detectar tráfico de red potencialmente sospechoso. Esta herramienta se centra en identificar actividades anormales en el tráfico de red y...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/20 12:16 a.m.10 views

QRLJacking

QRLJacking - 一种新的社会工程攻击向量 在我们的 Wiki 中查找文档。 什么是 QRLJacking? QRLJacking 或快速响应码登录劫持是一种简单的社会工程攻击向量,能够劫持所有依赖“使用二维码登录”功能作为安全登录方式的应用程序的会话。简而言之,受害者扫描攻击者的二维码,导致会话被劫持。 利用,客户端设置(攻击者的浏览器): 使用 QRLJacker - QRLJacking 利用框架 演示视频: 攻击 WhatsApp Web 应用程序并执行 MITM 攻击以注入包含 WhatsApp 二维码的虚假广告。 演示视频 技术论文 详细说明 QRLJacking...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/19 11:53 p.m.6 views

CVE-2024-57427

CVE-2024-57427 - Cross-Site Scripting XSS Reflejado PHPJabbers Cinema Booking System v2.0 es vulnerable a cross-site scripting XSS reflejado. Múltiples endpoints manejan de forma incorrecta la entrada del usuario, permitiendo que scripts maliciosos se ejecuten en el navegador de la víctima. Los...

6.1CVSS8.5AI score0.00445EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/19 11:40 p.m.8 views

CVE-2024-57428

CVE-2024-57428 Existe una vulnerabilidad de Cross-Site Scripting XSS almacenado en PHPJabbers Cinema Booking System v2.0 debido a la entrada sin sanitizar en los campos de subida de archivos eventimg, seatmaps y en las configuraciones de numeración de asientos numbernewX en pjActionCreate. Los...

9.3CVSS8.2AI score0.00757EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/19 11:10 p.m.15 views

TeleShadow3

TeleShadow3 TeleShadow3 - 高级 Telegram 桌面会话劫持工具! 下载 点击 此处 下载最新版本! 截图 窃取桌面 Telegram 从未如此简单! 设置发件人和收件人的电子邮件和发件人详细信息,或使用 Telegram API!并在编译后将其发送给受害者。 如何使用会话文件? 只需将 tdata 和 telegram.exe 放在同一目录下,然后运行 telegram.exe 演示? 即将推出... 它有哪些功能? 绕过新的安全机制 绕过两步验证! 绕过固有身份验证和5位验证码需求! 支持 SMTP 传输 支持 Telegram API 传输(带代理)...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/19 10:51 p.m.16 views

SessionHop

SessionHop SessionHop 是一个 C 工具,它利用配置为以交互用户运行的 IHxHelpPaneServer COM 对象,来劫持指定的用户会话。通过创建会话名字对象并利用 COM 对象的 Execute 接口,操作员可以在另一个用户的会话内运行任意文件。这种会话劫持技术是远程进程注入或转储 lsass 的替代方案,当操作员需要在受影响用户的环境中进行键盘记录、截图或访问 LDAP 时可能派上用场。感谢 James Forshaw...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/19 10:50 p.m.17 views

ja4

JA4+™ 网络指纹识别 JA4+ 是由 FoxIO 开发的一套网络指纹识别方法,易于使用且易于共享。这些方法既适合人类阅读,也适合机器解析,有助于更有效地进行威胁狩猎和分析。这些指纹的用例包括扫描威胁行为者、恶意软件检测、会话劫持防护、合规自动化、位置追踪、DDoS 检测、威胁行为者分组、反向 Shell 检测等。 如需快速了解 JA4+ 并在分析时作为参考,请参阅: JA4+ 速查表 如需深入了解,请阅读我们关于 JA4+ 工作原理、为何有效以及可检测/预防哪些内容的博客文章: JA4+ 网络指纹识别 JA4/S/H/L/X/SSH JA4T:TCP 指纹识别 JA4T/TS/TSc...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/19 10:33 p.m.10 views

CVE-2024-44000

ES GenCookieSessionHijack es una herramienta PoC diseñada para explotar registros de depuración expuestos de forma insegura en sitios WordPress y extraer cookies de sesión. Esto permite al atacante secuestrar sesiones activas de administrador y obtener acceso no autorizado al panel de...

9.8CVSS8.4AI score0.82335EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/19 10:18 p.m.7 views

CVE-2025-46173

CVE-2025-46173 - Cross-Site Scripting XSS Almacenado en Online Exam Mastering System 1.0 📌 Resumen CVE-2025-46173 es una vulnerabilidad de Cross-Site Scripting XSS Almacenado descubierta en Online Exam Mastering System 1.0 de code-projects. La vulnerabilidad existe en el componente feedback.php...

6.1CVSS6.1AI score0.00303EPSS
SaveExploits1
Rows per page
Query Builder