Lucene search
+L
NucleiRecent

4305 matches found

Nuclei
Nuclei
added 2026/08/25 6:03 a.m.61 views

WordPress Fancy Product Designer <4.6.9 - Arbitrary File Upload

WordPress Fancy Product Designer plugin before 4.6.9 is susceptible to an arbitrary file upload. An attacker can upload malicious files and execute code on the server, modify data, and/or gain full control over a compromised system without authentication. id: CVE-2021-24370 info: name: WordPress...

9.8CVSS9.2AI score0.47091EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.101 views

Doctor Appointment System 1.0 - SQL Injection

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page. id: CVE-2021-27314 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: critical description: |...

9.8CVSS9.1AI score0.12394EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.38 views

XWiki - Cross-Site Scripting

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. id: CVE-2023-35155 info: name: XWiki - Cross-Site Scripting author: ritikchaddha severity: medium...

8.8CVSS7AI score0.01496EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.165 views

phpIPAM - 1.6 - Cross-Site Scripting

phpIPAM 1.6 contains a cross-site scripting vulnerability via the closeClass parameter at /subnet-masks/popup.php. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

6.1CVSS6AI score0.03904EPSS
SaveExploits3References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.63 views

MooDating 1.2 - Cross-Site Scripting

A vulnerability was found in mooSocial mooDating 1.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /friends/ajaxinvite of the component URL Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. id:...

6.1CVSS3.1AI score0.05955EPSS
SaveExploits4References4
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.91 views

ChurchCRM 4.5.3 - Cross-Site Scripting

A stored Cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the NoteEditor.php. id: CVE-2023-26843 info: name: ChurchCRM 4.5.3 - Cross-Site Scripting author: Harsh severity: medium description: | A stored Cross-site scripti...

5.4CVSS5.7AI score0.0142EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.74 views

AP Pricing Tables Lite <= 1.1.6 - SQL Injection

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins. id: CVE-2023-0900 info: name: AP Pricing Tables Lite = 1.1.6 - SQL Injection author: r3Y3r53 severity: high description: ...

7.2CVSS7.9AI score0.03229EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.86 views

Adobe ColdFusion - Access Control Bypass

An attacker is able to access every CFM and CFC endpoint within the ColdFusion Administrator path /CFIDE/, of which there are 437 CFM files and 96 CFC files in a ColdFusion 2021 Update 6 install. id: CVE-2023-29298 info: name: Adobe ColdFusion - Access Control Bypass author:...

7.5CVSS8.2AI score0.99757EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.71 views

Twittee Text Tweet <= 1.0.8 - Cross-Site Scripting

The Twittee Text Tweet WordPress plugin through 1.0.8 does not properly escape POST values which are printed back to the user inside one of the plugin's administrative page, which allows reflected XSS attacks targeting administrators to happen. id: CVE-2023-0602 info: name: Twittee Text Tweet =...

6.1CVSS6.7AI score0.00886EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.189 views

Adobe Coldfusion - Cross-Site Scripting

Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within th...

6.1CVSS6.2AI score0.84811EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.46 views

osTicket < v1.16.6 - Cross-Site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to v1.16.6. id: CVE-2023-1315 info: name: osTicket v1.16.6 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prio...

5.4CVSS5.4AI score0.01059EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.107 views

XWiki < 4.10.15 - Information Disclosure

The Solr-based search suggestion provider that also duplicates as generic JavaScript API for search results in XWiki exposes the content of all documents of all wikis to anybody who has access to it, by default it is public. This exposes all information stored in the wiki but not some protected...

7.5CVSS7.4AI score0.7282EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.136 views

PrestaShop TshirteCommerce - Directory Traversal

The Custom Product Designer tshirtecommerce module for PrestaShop allows HTTP requests to be forged using POST and GET parameters, enabling a remote attacker to perform directory traversal on the system and view the contents of code files. id: CVE-2023-27639 info: name: PrestaShop TshirteCommerce...

7.5CVSS7.6AI score0.03551EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.47 views

WordPress WP Clone <= 2.4.2 - Database Backup Exposure

Clone WordPress plugin 2.4.3 contains a buffer overflow caused by storing in-progress backup information in publicly accessible buffer files at a static file path, letting attackers access sensitive backup data, exploit requires no special privileges id: CVE-2023-6750 info: name: WordPress WP Clo...

7.5CVSS8.3AI score0.01961EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.51 views

Appwrite <=1.2.1 - Server-Side Request Forgery

Appwrite through 1.2.1 is susceptible to server-side request forgery via the component /v1/avatars/favicon. An attacker can potentially access network resources and sensitive information via a crafted GET request, thereby also making it possible to modify data and/or execute unauthorized...

7.5CVSS7.3AI score0.36171EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.119 views

CAREL Boss Mini <= 1.4.0 - Local File Inclusion

Boss Mini 1.4.0 Build 6221 contains a file inclusion caused by manipulation of the 'path' argument in boss/servlet/document, letting remote attackers include arbitrary files, exploit requires remote access. id: CVE-2023-3643 info: name: CAREL Boss Mini = 1.4.0 - Local File Inclusion author:...

9.8CVSS7.9AI score0.75363EPSS
SaveExploits6References4
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.22 views

MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation

The MStore API plugin for WordPress is vulnerable to Unauthorized Account Access and Privilege Escalation in versions up to, and including, 4.10.7 due to improper implementation of the Apple login feature. This allows unauthenticated attackers to log in as any user as long as they know the user's...

9.8CVSS8.7AI score0.02888EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.83 views

Anyscale Ray - Remote Code Execution

Anyscale Ray 2.6.3 and 2.8.0 contain a remote code execution vulnerability due to insecure job submission API, allowing attackers to execute arbitrary code remotely if they have network access to the Ray Dashboard API. id: CVE-2023-48022 info: name: Anyscale Ray - Remote Code Execution author:...

9.8CVSS8.2AI score0.83942EPSS
SaveExploits6References6
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.52 views

PaperCut NG - Authentication Bypass

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper...

8.2CVSS8.2AI score0.77388EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.104 views

Fortinet FortiWLM Unauthenticated Command Injection Vulnerability

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands Successful exploitation of this vulnerability could allow an attacker to...

9.8CVSS8.9AI score0.18148EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.17 views

WP Sessions Time Monitoring Full Automatic <= 1.0.8 - SQL Injection

The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to SQL Injection via request parameters in all versions up to, and including, 1.0.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make...

7.5CVSS7.8AI score0.02202EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.115 views

MooSocial 3.1.8 - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability exisits in the dataredirecturl parameter on user login function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. id: CVE-2023-43325 info: name: MooSocial 3.1.8 - Cross-Sit...

6.1CVSS5.7AI score0.01857EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.111 views

Academy LMS 6.2 - Cross-Site Scripting

A vulnerability was found in Academy LMS 6.2 on Windows. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument...

6.1CVSS3.1AI score0.01835EPSS
SaveExploits4References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.50 views

LMS by Masteriyo < 1.6.8 - Information Exposure

The plugin does not properly safeguards sensitive user information, like other user's email addresses, making it possible for any students to leak them via some of the plugin's REST API endpoints. id: CVE-2023-3345 info: name: LMS by Masteriyo 1.6.8 - Information Exposure author: DhiyaneshDK...

6.5CVSS7.2AI score0.0197EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.88 views

Mosparo < 1.0.2 - Open Redirect

Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2. id: CVE-2023-5375 info: name: Mosparo 1.0.2 - Open Redirect author: shankaracharya severity: medium description: | Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2. impact: | Unauthenticated attackers can exploit...

6.1CVSS4.8AI score0.35128EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.41 views

ReadToMyShoe - Generation of Error Message Containing Sensitive Information

ReadToMyShoe generates an error message containing sensitive information prior to commit 8533b01. If an error occurs when adding an article, the website shows the user an error message. If the error originates from the Google Cloud TTS request, it will include the full URL of the request, which...

7.4CVSS6.3AI score0.03857EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.48 views

Old Age Home Management System v1.0 - SQL Injection

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter. id: CVE-2023-33338 info: name: Old Age Home Management System v1.0 - SQL Injection author: Harsh severity: critical description: | Old Age Home Management 1.0 is vulnerable to SQL Injection via the username...

9.8CVSS9.2AI score0.03632EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.101 views

IncomCMS 2.0 - Arbitrary File Upload

IncomCMS 2.0 has a an insecure file upload vulnerability in modules/uploader/showcase/script.php. This allows unauthenticated attackers to upload files into the server. id: CVE-2020-29597 info: name: IncomCMS 2.0 - Arbitrary File Upload author: princechaddha severity: critical description: |...

9.8CVSS8.7AI score0.71006EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.30 views

SRS Simple Hits Counter 1.0.3-1.0.4 - Unauthenticated Blind SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' in SRS Simple Hits Counter Plugin for WordPress 1.0.3 and 1.0.4 allows a remote, unauthenticated attacker to determine the value of database fields. id: CVE-2020-5766 info: name: SRS Simple Hits Counter 1.0.3-1.0.4...

7.5CVSS8.1AI score0.07233EPSS
SaveExploits3References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.43 views

EyesOfNetwork - Hardcoded API Key

An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key hardcoded as EONAPIKEY in include/apifunctions.php for API version 2.4.2 by default for all installations, hence allowing an attacker to calculate/guess the admin access token. id: CVE-2020-8657 info: name:...

9.8CVSS8.6AI score0.91874EPSS
SaveExploits4References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.70 views

Zoho ManageEngine OpManger - Arbitrary File Read

Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a specially crafted request. id: CVE-2020-12116 info: name: Zoho ManageEngine OpManger - Arbitrary File Read author:...

7.5CVSS7.7AI score0.97418EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.17 views

PHPGurukul Hospital Management System 4.0 - SQL Injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain sensitive database information. id: CVE-2020-22165 info: name: PHPGurukul Hospital Management System 4.0 - SQL Injection...

7.5CVSS7.8AI score0.06348EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.84 views

Apache Cocoon 2.1.12 - XML Injection

Apache Cocoon 2.1.12 is susceptible to XML injection. When using the StreamGenerator, the code parses a user-provided XML. A specially crafted XML, including external system entities, can be used to access any file on the server system. id: CVE-2020-11991 info: name: Apache Cocoon 2.1.12 - XML...

7.5CVSS7.6AI score0.72456EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.108 views

74cms - ajax_common.php SQL Injection

SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php. id: CVE-2020-22209 info: name: 74cms - ajaxcommon.php SQL Injection author: ritikchaddha severity: critical description: | SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php. impact: | Successful...

9.8CVSS9.3AI score0.08579EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.47 views

Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery

A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves as an instructor and performing other malicious actions such as blocking legitimate instructors. id: CVE-2020-8615 info: name: Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Reque...

6.5CVSS6.3AI score0.0883EPSS
SaveExploits6References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.59 views

Ruckus vRioT IoT Controller - Authentication Bypass

Ruckus vRioT through 1.5.1.0.21 contains an API backdoor caused by a hardcoded token in validatetoken.py,letting unauthenticated attackers interact with the API without authentication. id: CVE-2020-26879 info: name: Ruckus vRioT IoT Controller - Authentication Bypass author: DhiyaneshDk severity:...

10CVSS8.8AI score0.45083EPSS
SaveExploits1References6
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.144 views

OX Appsuite - Cross-Site Scripting

OX App Suite through 7.10.4 allows XSS via the app loading mechanism the PATHINFO to the /appsuite URI. id: CVE-2020-24701 info: name: OX Appsuite - Cross-Site Scripting author: DhiyaneshDk severity: medium description: | OX App Suite through 7.10.4 allows XSS via the app loading mechanism the...

6.1CVSS6AI score0.06788EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.18 views

HomeAutomation 3.3.2 - Open Redirect

HomeAutomation 3.3.2 contains a redirect vulnerability caused by improper verification of the 'redirect' GET parameter in 'api.php', letting attackers redirect users to arbitrary websites, exploit requires user interaction with a crafted link. id: CVE-2020-21998 info: name: HomeAutomation 3.3.2 -...

6.1CVSS6.3AI score0.01319EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.29 views

WordPress AI ChatBot (WPBot) <= 4.8.9 - SQL Injection

ChatBot plugin for WordPress up to 4.8.9 contains a sqlinjection caused by insufficient escaping and lack of preparation on the $strid parameter, letting unauthenticated attackers extract sensitive data, exploit requires no authentication. id: CVE-2023-5204 info: name: WordPress AI ChatBot WPBot ...

9.8CVSS8.3AI score0.06888EPSS
SaveExploits4References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.135 views

WordPress My Calendar <3.4.22 - SQL Injection

WordPress My Calendar plugin versions before 3.4.22 are vulnerable to an unauthenticated SQL injection within the 'from' and 'to' parameters of the '/my-calendar/v1/events' REST route. id: CVE-2023-6360 info: name: WordPress My Calendar 3.4.22 - SQL Injection author: xxcdd severity: critical...

9.8CVSS9.1AI score0.63141EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.122 views

Cloudpanel 2 < 2.3.1 - Remote Code Execution

CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication. id: CVE-2023-35885 info: name: Cloudpanel 2 2.3.1 - Remote Code Execution author: DhiyaneshDk severity: critical description: | CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication. impact: | Successfu...

9.8CVSS8.7AI score0.74888EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.99 views

SupportCandy < 3.1.5 - Unauthenticated SQL Injection

The SupportCandy WordPress plugin before 3.1.5 does not validate and escape user input before using it in an SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks. id: CVE-2023-1730 info: name: SupportCandy 3.1.5 - Unauthenticated SQL Injection author:...

9.8CVSS9.2AI score0.40586EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.99 views

Academy LMS 6.0 - Cross-Site Scripting

Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting XSS vulnerability through query parameter. id: CVE-2023-38964 info: name: Academy LMS 6.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Creative Item Academy LMS 6.0 was discovered to...

6.1CVSS5.7AI score0.01101EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.74 views

KubePi JwtSigKey - Admin Authentication Bypass

KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resulting in the same Jwtsigkeys for all online projects. This means that an attacker can forge any jwt token to take over the administrator account of any online project. Furthermor...

9.8CVSS8.6AI score0.69667EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.179 views

Weaver OA 9.5 - Information Disclosure

A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2config.ini. The manipulation leads to files or directories accessible. The attack may be initiated remotely. id:...

7.5CVSS5.1AI score0.54232EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.80 views

Strapi Versions <=4.5.6 - Authentication Bypass

Strapi through 4.5.5 does not verify the access or ID tokens issued during the OAuth flow when the AWS Cognito login provider is used for authentication. A remote attacker could forge an ID token that is signed using the 'None' type algorithm to bypass authentication and impersonate any user that...

8.2CVSS7.8AI score0.04158EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.79 views

L-Soft LISTSERV 16.5 - Cross-Site Scripting

The REPORT after z but before a parameter in wa.exe in L-Soft LISTSERV 16.5 before 17 allows an attacker to conduct XSS attacks via a crafted URL. id: CVE-2023-27641 info: name: L-Soft LISTSERV 16.5 - Cross-Site Scripting author: ritikchaddha severity: medium description: | The REPORT after z but...

6.1CVSS6AI score0.01092EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.136 views

Simple URLs < 115 - Cross Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2023-0099 info: name: Simple URLs 115 - Cross Site Scripting author: r3Y3r53 severit...

6.1CVSS5.9AI score0.01726EPSS
SaveExploits6References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.26 views

System Dashboard < 2.8.10 - Cross-Site Scripting

The System Dashboard WordPress plugin before 2.8.10 does not sanitize and escape some parameters, which could allow administrators in multisite WordPress configurations to perform Cross-Site Scripting attacks through header injection, specifically in the X-Forwarded-For header. id: CVE-2023-7246...

5.4CVSS5.2AI score0.00813EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.46 views

SolarView Compact 6.00 - OS Command Injection

SolarView Compact 6.00 was discovered to contain a command injection vulnerability, attackers can execute commands by bypassing internal restrictions through downloader.php. id: CVE-2023-23333 info: name: SolarView Compact 6.00 - OS Command Injection author: Mr-xn severity: critical description: ...

9.8CVSS8.8AI score0.99291EPSS
SaveExploits9References5
Total number of security vulnerabilities4305