Lucene search
+L

17120 matches found

Kitploit
Kitploit
added 2026/09/16 4:02 a.m.42 views

behave

Behave! A Still in Development monitoring browser extension for pages acting as bad boys. NB : This is the code repository of the project, if you're looking for the packed extensions: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 4:45 p.m.8 views

corsair_scan

Welcome to Corsairscan Corsairscan is a security tool to test Cross-Origin Resource Sharing CORS misconfigurations. CORS is a mechanism that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served. If this is not...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 4:12 p.m.298 views

dnstwist

See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 8:42 a.m.7 views

ChangeTower

ChangeTower ChangeTower is intended to help you watch changes in web pages and get notified of any changes written in Go. This tool is good to know the web pages are updated something or not to work on the new site before others Installation Instructions ChangeTower requires go1.16+ to install...

5.9AI score
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.52 views

Agentejo Cockpit 0.10.2 - Cross-Site Scripting

Agentejo Cockpit 0.10.2 contains a reflected cross-site scripting vulnerability due to insufficient sanitization of the to parameter in the /auth/login route, which allows for injection of arbitrary JavaScript code into a web page's content. id: CVE-2020-14408 info: name: Agentejo Cockpit 0.10.2 ...

6.1CVSS6.3AI score0.03003EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.1060 views

Moodle LTI module Reflected - Cross-Site Scripting

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

6.1CVSS6.3AI score0.04458EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.95 views

FortiWeb - Cross Site Scripting

FortiWeb 6.3.0 through 6.3.7 and versions before 6.2.4 contain an unauthenticated cross-site scripting vulnerability. Improper neutralization of input during web page generation can allow a remote attacker to inject malicious payload in vulnerable API end-points. id: CVE-2021-22122 info: name:...

6.1CVSS6.2AI score0.1052EPSS
SaveExploits0References5
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.6 views

Astra Linux – Vulnerability in Chromium

Using after-free in WebXR in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

8.8CVSS6.3AI score0.00456EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.9 views

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.9AI score0.00265EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.8 views

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted inputs in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.7AI score0.0028EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.5 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Views in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.9AI score0.00192EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.6 views

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in the Network component of Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Mediu...

6.5CVSS6.6AI score0.00308EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.6 views

Astra Linux – Vulnerability in Chromium

Uninitialized use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.9AI score0.0025EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.9 views

Astra Linux – Vulnerability in Chromium

Before version 88.0.4324.96, using Blink with a "after free" mechanism allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

8.8CVSS7.8AI score0.0701EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.7 views

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.164, using "after free" in WebSerial with Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

8.8CVSS8.4AI score0.01312EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 3:01 p.m.5 views

CVE-2022-30190

CVE-2022-30190 CVE-2022-30190 CVE-2022-30190 Follina POC Host exploit.html on localhost, port 80. Open the docx to pop calc. To change the remote address the doc points to, open in 7Z and edit word\rels\document.xml.rels to point to a new location. YOU MUST keep the exclamation mark. It will...

9.3CVSS7.9AI score0.99234EPSS
SaveExploits63
NVD
NVD
added 2026/09/11 6:16 p.m.8 views

CVE-2026-7298

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in IdeaSoft Software Industry and Trade Inc. Smart E-Commerce allows Reflected XSS. This issue affects Smart E-Commerce: through 11092026. NOTE: The vendor was contacted early about this disclosure bu...

6.1CVSS0.00149EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/11 5:28 p.m.13 views

CVE-2026-7298

CVE-2026-7298 is a Reflected XSS vulnerability in IdeaSoft Smart E-Commerce (through version 11092026), caused by improper neutralization of input during web page generation. The CVSS 3.1 score is 6.1 (Medium) with a network attack vector, low complexity, no required privileges, but user interact...

6.1CVSS5.7AI score0.00149EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/11 5:28 p.m.8 views

EUVD-2026-76163

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in IdeaSoft Software Industry and Trade Inc. Smart E-Commerce allows Reflected XSS. This issue affects Smart E-Commerce: through 11092026. NOTE: The vendor was contacted early about this disclosure bu...

6.1CVSS5.7AI score0.00149EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/10 2:16 p.m.8 views

CVE-2026-12683

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosu...

5.4CVSS0.00162EPSS
SaveExploits0References1
Rows per page
Query Builder