Lucene search
+L

40059 matches found

CVE
CVE
added 2026/09/10 5:48 a.m.11 views

CVE-2026-0308

This CVE entry is reserved with no public technical details yet. The affected product, root cause, and impact are not specified in the provided documents. Monitor for updates as details are expected once the vulnerability is publicly announced.

4.8CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/10 5:48 a.m.7 views

EUVD-2026-75256

A stored cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama...

4.8CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 5:33 a.m.4 views

CVE-2020-25627

CVE-2020-25627 Stored XSS via moodlenetprofile parameter in user profile My PoC about this CVE User requirement: Student Or the site for registeration XSS in moodlenetprofile root@kitploit: Step 1: Log in with an authenticated user Can register or through creating a new user without assigning rol...

6.1CVSS6.5AI score0.03694EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 5:33 a.m.5 views

CVE-2024-41504

CVE-2024-41504 CVE: CVE-2024-41504 Software: Jetimob Plataforma Imobiliaria CRM/ERP/CMS Version: 20240627-0 Vulnerability: Stored Cross-Site Scripting XSS Description: In the "Oportunidades" section of the application when creating or editing an "Atividade" activity, the form field "Descrição"...

6.1CVSS5.8AI score0.0024EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 5:11 a.m.9 views

CVE-2025-26159

CVE-2025-26159 This script may only be used in authorized environments where explicit permission has been granted. The author is not responsible for any misuse, damage, or consequences resulting from the use of this script. This script decodes, filters, and extracts cookies as part of the...

6.1CVSS5.9AI score0.00292EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 5:03 a.m.9 views

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - Simple Proof of Concept Tool 🛠 About This Application This tool shows a technical proof of concept PoC for the security issue CVE-2026-2472. The issue affects the Vertex AI Python SDK from Google Cloud Platform. It relates to an unauthenticated and...

8.6CVSS8.1AI score0.00522EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/10 4:55 a.m.6 views

CVE-2025-70545

PPC Belden ONT 2K05X router Author : Jeyabalaji Affected Product Code Base: PPC 2K05X Router - V1.1.9206L Tested on : Windows 11 CVE : CVE-2025-70545 Description: A stored cross-site scripting XSS vulnerability exists in the web management interface of the PPC Belden ONT 2K05X router running...

6.1CVSS5.9AI score0.00318EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 4:54 a.m.5 views

CVE-2026-14856-TastyIgniter

CVE-2026-14856: Stored XSS to Account Takeover in TastyIgniter v4.3.0 📌 Summary A Stored Cross-Site Scripting XSS vulnerability was identified in the file upload functionality of the Media Manager in TastyIgniter v4.3.0. Due to insufficient validation and sanitization of uploaded .svg files, an...

6.3CVSS5.8AI score0.00286EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 4:44 a.m.7 views

CVE-2021-38602

CVE-2021-38602 A stored cross site scripting vulnerability is present on the Article editing page in version 5.8.7 of PluXML. User input is not properly sanitized in multiple fields. Vulnerable Fields: Headline optional: Content: Once inserted, XSS can be triggered by visiting the posted article ...

4.8CVSS5.9AI score0.00755EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 4:37 a.m.8 views

CVE-2019-17625

CVE-2019-17625 There is a stored XSS vulnerability in rambox 0.6.9 due to unsantized parameters in the name field when a user is adding a service. Since rambox runs on NodeJS this allows for the use of OS commands to be injected into an or tag. Note: This code has only been tested on MacOS and ma...

9CVSS8.1AI score0.03019EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 4:27 a.m.7 views

CVE-2025-51860

CVE-2025-51860 Vulnerability description TelegAI, a web application for constructing and chatting with AI Characters, is vulnerable to Stored Cross-Site Scripting XSS in its chat component and character container component. An attacker can achieve arbitrary client-side script execution by craftin...

6.1CVSS5.9AI score0.00281EPSS
SaveExploits2
NVD
NVD
added 2026/09/10 4:18 a.m.2 views

CVE-2026-76562

The Sidebar Manager Light plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sbmdescription' parameter in all versions up to, and including, 1.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS
SaveExploits0References4
NVD
NVD
added 2026/09/10 4:18 a.m.3 views

CVE-2026-4657

The Easy Google Fonts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the controlselectors meta field in all versions up to, and including, 2.0.4. This is due to the plugin registering the controlselectors meta field with showinrest enabled but without a sanitizecallback, an...

6.4CVSS
SaveExploits0References11
NVD
NVD
added 2026/09/10 4:17 a.m.4 views

CVE-2026-15820

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Photo Module 'attributes' Setting in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS
SaveExploits0References6
NVD
NVD
added 2026/09/10 4:17 a.m.4 views

CVE-2026-15796

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bgvideoserviceurl' Setting in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/10 4:10 a.m.4 views

CVE-2020-12432

CVE-2020-12432 Collabora CODE Click here 4. The victim opens the link and gets redirected to another service with all his cookies and local storage data sent over to anot...

6.1CVSS6.5AI score0.00866EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 4:09 a.m.7 views

moodle-cve

Challenge creation Inspiration moodle CVE-2025-26529: posoning admin logs to full admin account takeover @ref: https://www.youtube.com/watch?v=dhVF6hQUzWU @ref: https://github.com/NightBloodz/moodleTestingEnv @ref: https://medium.com/@Nightbloodz/admin-account-takeover-in-moodle-093708a0f749...

8.3CVSS6.6AI score0.00508EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/10 4:01 a.m.6 views

OpenNebula-CVE-2025-56534

OpenNebula-CVE-2025-56534 Exploit Title : OpenNebula 6.10.0.1 - Stored XSS Cross-site Scripting in the custom authenticator driver Exploit Author : Mark Artamonov Vendor Homepage : https://opennebula.io/ Tested Version : OpenNebula 6.10.0.1 Affected Versions : OpenNebula Proof of Concept :...

6.1CVSS6AI score0.00185EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 3:59 a.m.10 views

CVE-2024-39031

CVE-2024-39031 : Silverpeas Core Stored XSS in in Mes agendas Information Description: In Mes Agendas, a user can create new events and add them to their calendar. Additionally, users can invite others from the same domain, including administrators, to these events. A standard user can inject an...

5.4CVSS5.8AI score0.00767EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/10 3:58 a.m.5 views

CVE-2026-40791-WP-Time-Slots-Booking-Form-XSS

CVE-2026-40791: One Booking Slot to Admin XSS I found an unauthenticated stored XSS in the WordPress WP Time Slots Booking Form plugin. A public booking submission controls part of the stored time-slot value. The plugin later prints that value into the administrator Booking Orders page without...

7.1CVSS5.9AI score0.0021EPSS
SaveExploits0
Rows per page
Query Builder