Lucene search
+L

5482207 matches found

Packet Storm News
Packet Storm News
added 2026/09/10 12:00 a.m.252 views

IServ Schoolserver User Enumeration

IServ Schoolserver suffers from a user enumeration vulnerability. The vendor does not feel this is an issue...

5.8AI score
SaveExploits0
Cvelist
Cvelist
added 2026/08/26 3:39 a.m.2 views

CVE-2026-19632 TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the 'trpgettranslationsregular' AJAX action. This makes it possible for unauthenticated attackers to extract t...

9.8CVSS
SaveExploits0References10
CVE
CVE
added 2026/08/26 3:39 a.m.16 views

CVE-2026-19632 TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the 'trpgettranslationsregular' AJAX action. This makes it possible for unauthenticated attackers to extract t...

9.8CVSS
SaveExploits0References10
Kitploit
Kitploit
added 2026/08/26 3:37 a.m.2 views

Laravel-CVE-2018-15133

CVE-2018-15133 - Laravel APPKEY Unserialization Vulnerability WhiteHat School 3e promotion, classe 28, Lee Yebin - Configuration Docker vulnérable https://github.com/yeahhbean/Laravel-CVE-2018-15133 Aperçu Ce projet est un environnement basé sur Docker configuré pour vérifier PoC la vulnérabilité...

8.1CVSS8AI score0.76814EPSS
SaveExploits11References1
GithubExploit
GithubExploit
added 2026/08/26 3:30 a.m.4 views

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC...

8.9CVSS0.01506EPSS
SaveExploits4
Cvelist
Cvelist
added 2026/08/26 3:14 a.m.4 views

CVE-2026-29988

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

8.3CVSS
SaveExploits0References1
CVE
CVE
added 2026/08/26 3:14 a.m.27 views

CVE-2026-29988

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

8.3CVSS5.1AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 2:55 a.m.3 views

CVE-2024-11318

CVE-2024-11318 IDOR - AbsysNet 2.3.1 Détournement d'utilisateur AVERTISSEMENT Cet outil est conçu pour aider à identifier et à exploiter si une application est vulnérable à cette CVE-2024-11318 spécifique. Il est destiné à être utilisé par les professionnels de la cybersécurité, les chercheurs et...

7.5CVSS7.4AI score0.00909EPSS
SaveExploits1
EUVD
EUVD
added 2026/08/26 2:51 a.m.2 views

EUVD-2026-66228

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

8.3CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 2:43 a.m.1 views

CVE-2024-38856-ApacheOfBiz

CVE-2024-38856-ApacheOfBiz Apache OFBiz — это система планирования ресурсов предприятия с открытым исходным кодом. Она предоставляет набор корпоративных приложений, которые интегрируют и автоматизируют многие бизнес-процессы предприятия. CVE-2024-38856 — это уязвимость до аутентификации в Apache...

9.8CVSS9AI score0.99427EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/26 2:22 a.m.1 views

log4noshell

Log4NoShell A Java Agent that disables Apache Log4J's JNDI Lookup to mitigate CVE-2021-44228 "Log4Shell". If possible, update your program to use the latest Log4J version, as the vulnerability is fixed as of version 2.17.1. Otherwise, download log4noshell-0.8.1.jar and continue reading. Usage To...

10CVSS7.5AI score0.99999EPSS
SaveExploits363References1
Kitploit
Kitploit
added 2026/08/26 2:15 a.m.1 views

CVE-2026-67689-FineAdmin.Mvc-vulnerability

В этом репозитории нет README...

9.8CVSS5.2AI score0.00685EPSS
SaveExploits1
EUVD
EUVD
added 2026/08/26 2:11 a.m.2 views

EUVD-2026-66227

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server...

8.6CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/26 2:05 a.m.1 views

CVE-2024-50623

CVE-2024-50623 Cleo - PoC de téléchargement et téléversement de fichiers sans restriction CVE-2024-50623 Écriture arbitraire de fichier root@kitploit: python CVE-2024-50623.py --target http://192.168.1.18:5080/Synchronization --action write --what poc.dll --where "........\poc.dll" / | | |\ \ ...

9.8CVSS9AI score0.98607EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/26 2:05 a.m.1 views

CVE-2024-40711

CVE-2024-40711 Эксплойт для Veeam backup and Replication: Pre-Auth Deserialization CVE-2024-40711 Технические детали см. в нашем посте в блоге https://github.com/user-attachments/assets/24e8122c-3e84-408b-87a9-684a9aabeb70 PoC в действии root@kitploit: CVE-2024-40711.exe -f binaryformatter -g Vee...

9.8CVSS9.3AI score0.90369EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/08/26 1:52 a.m.1 views

CVE-2024-51030

CVE-2024-51030 Description Уязвимость SQL-инъекции в manageclient.php и viewcab.php в Sourcecodester Cab Management System 1.0 позволяет удалённым злоумышленникам выполнять произвольные SQL-команды через параметр id, что приводит к несанкционированному доступу и возможной компрометации...

6.5CVSS5.3AI score0.00686EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 1:47 a.m.1 views

move-vulnerability-database

Добро пожаловать в базу данных уязвимостей Move MVD v3.0! Всеобъемлющая коллекция шаблонов уязвимостей в экосистеме Move. Что внутри Шаблоны уязвимостей — категоризированные проблемы безопасности с примерами и уровнями серьёзности Приложение — отчёты об аудитах и ссылки на протоколы Обучающие...

5.3AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/26 1:45 a.m.1 views

wordpress-really-simple-security-authn-bypass-exploit

wordpress-really-simple-security-authn-bypass-exploit Ceci est un programme Python3 qui exploite la vulnérabilité de contournement d'authentification Really Simple Security 9.1.2 CVE-2024-10924. AVERTISSEMENT Cet outil est destiné aux ingénieurs en sécurité et aux professionnels de la sécurité...

9.8CVSS7.4AI score0.82025EPSS
SaveExploits21References3
Kitploit
Kitploit
added 2026/08/26 1:45 a.m.1 views

wordpress-jetpack-broken-access-control-exploit

wordpress-jetpack-exploit-de-contrôle-d-accès-brisé Il s'agit d'un programme Python3 qui exploite la vulnérabilité de contrôle d'accès brisé dans Jetpack 13.9.1 CVE-2024-9926. AVERTISSEMENT Cet outil est destiné aux ingénieurs en sécurité et aux personnes chargées de la sécurité des applications...

4.3CVSS5.2AI score0.01283EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/08/26 1:44 a.m.2 views

CVE-2026-41096

CVE-2026-41096 - Preuve de concept de crash Débordement de tas dans DnsRawTruncateMessageForUdp dnsapi.dll. Une réponse DNS malveillante avec QDCOUNT=0 et un enregistrement OPT volumineux provoque un débordement de tas de 604 octets lorsque la logique de troncature calcule mal le pointeur de...

9.8CVSS8.8AI score0.01932EPSS
SaveExploits4
Rows per page
Query Builder