Lucene search
+L

4306 matches found

Kitploit
Kitploit
added 2026/09/13 12:43 p.m.46 views

dymerge

A simple, yet powerful tool - written purely in python - which takes given wordlists and merges them into one dynamic dictionary that can then be used as ammunition for a successful dictionary based or bruteforce attack. Compatible with Python 2.6 & 2.7. Author: Nikolaos Kamarinakis nikolaskama.m...

5.4AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2026/09/13 11:42 a.m.19 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

9CVSS6.3AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/13 11:42 a.m.19 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/13 11:42 a.m.18 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/13 11:42 a.m.22 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the use of cryptographic algorithms that contain defects, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to protected information...

6.8CVSS5.5AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/13 11:42 a.m.20 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/13 11:42 a.m.23 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in improper restrictions on path names to the catalog. This allows attackers to gain unauthorized access to local files and directories.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in incorrect restrictions on the path to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to local files and directories on the server...

9CVSS5.5AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/13 11:42 a.m.22 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

7.5CVSS5.5AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/13 11:42 a.m.19 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/13 11:42 a.m.24 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

10CVSS6.3AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/13 11:42 a.m.20 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/13 11:42 a.m.18 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

9CVSS6.1AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/13 11:42 a.m.21 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/13 11:42 a.m.17 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
Kitploit
Kitploit
added 2026/09/13 7:23 a.m.7 views

juice-shop

OWASP Juice Shop...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 6:01 a.m.10 views

Juiceshopgl

Logotipo de Juice Shop OWASP Juice Shop Test Coverage Maintainability...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 4:09 a.m.6 views

CVE-2024-8949-POC

Vulnerabilidad de Control de Acceso Roto descubierta en el sitio web de compras de gafas en línea de Sourcecodester: la manipulación de ID/Cart ID permite la adición y eliminación no deseadas de artículos en el carrito del usuario CVE-2024-8949 Vendedor: Sourcecodester...

8.8CVSS6.7AI score0.00723EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 3:53 a.m.4 views

multi-juicer

Realizar CTF y entrenamientos de seguridad con OWASP Juice Shop suele ser bastante complicado, ya que Juice Shop no está diseñado para ser usado por múltiples usuarios al mismo tiempo. Instruir a todos para que inicien Juice Shop en su propia máquina funciona, pero consume demasiado tiempo valios...

5.8AI score
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.79 views

Welcart eCommerce <=2.7.7 - Local File Inclusion

Welcart eCommerce 2.7.7 and before are vulnerable to unauthenticated local file inclusion. id: CVE-2022-41840 info: name: Welcart eCommerce =2.7.8 or apply the provided patch to fix the LFI vulnerability. reference: -...

9.8CVSS8AI score0.05212EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.62 views

PHPGurukul Dairy Farm Shop Management System 1.0 - SQL Injection

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName and ProductPrice parameters in...

9.8CVSS7AI score0.15652EPSS
SaveExploits1References4
Rows per page
Query Builder