Lucene search
+L

110767 matches found

GithubExploit
GithubExploit
•added 2026/08/01 7:27 p.m.•45 views

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499-A36 Standalone, device-tested CVE-2026-43499 p...

7.8CVSS7AI score0.00278EPSS
SaveExploits105
Kitploit
Kitploit
•added 2026/08/01 5:19 p.m.•9 views

Apkx-Hunter v2.6.0

APKX-Hunter v2.7.1 — Debian Package APKX-Hunter is an open-source Android Static Analysis Framework written entirely in C , purpose-built for Android security assessments, reverse engineering, malware analysis, OWASP MASVS compliance scanning, bug bounty hunting, and penetration testing. The...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/08/01 5:16 p.m.•5 views

Docker IPsec VPN Server — Updated!

English | 简体中文 | 繁體中文 | Русский IPsec VPN Server on Docker Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Based on Alpine 3.23 or Debian 12 with Libreswan IPsec VPN software and xl2tpd L2TP daemon. An IPsec VPN encrypts your network traffic, so that nobody betwee...

6AI score
SaveExploits0References25
OSV
OSV
•added 2026/08/01 11:12 a.m.•13 views

OESA-2026-3213 mozjs102 security update

SpiderMonkey is the code-name for Mozilla Firefox's C++ implementation of JavaScript. It is intended to be embedded in other applications that provide host environments for JavaScript. Security Fixes: Unexpected data returned from the Safe Browsing API could have led to memory corruption and a...

9.8CVSS8.6AI score0.99979EPSS
SaveExploits10References38
OSV
OSV
•added 2026/08/01 11:12 a.m.•10 views

OESA-2026-3215 mozjs102 security update

SpiderMonkey is the code-name for Mozilla Firefox's C++ implementation of JavaScript. It is intended to be embedded in other applications that provide host environments for JavaScript. Security Fixes: Unexpected data returned from the Safe Browsing API could have led to memory corruption and a...

9.8CVSS7.4AI score0.12584EPSS
SaveExploits1References37
OSV
OSV
•added 2026/08/01 11:12 a.m.•11 views

OESA-2026-3214 mozjs102 security update

SpiderMonkey is the code-name for Mozilla Firefox's C++ implementation of JavaScript. It is intended to be embedded in other applications that provide host environments for JavaScript. Security Fixes: Unexpected data returned from the Safe Browsing API could have led to memory corruption and a...

9.8CVSS9.2AI score0.12584EPSS
SaveExploits1References37
Kitploit
Kitploit
•added 2026/08/01 8:22 a.m.•7 views

oxo v2.9.18

OXO Scan Orchestration Engine OXO is a security scanning framework built for modularity, scalability, and simplicity. OXO Engine combines specialized tools to work cohesively to find vulnerabilities and perform actions like recon, enumeration, and fingerprinting. Documentation Agents Store CLI...

5.8AI score
SaveExploits0References16
Kitploit
Kitploit
•added 2026/08/01 6:28 a.m.•9 views

bramble v1.13.0-chromium

Bramble A password manager that keeps your secrets on your own devices. No account, no server holding your vault, no company to get breached and leak everything. You hold the vault, you hold the password, and that's it. Bramble runs where you do: Browser extension for Chromium browsers Brave,...

5.7AI score
SaveExploits0References7
Kitploit
Kitploit
•added 2026/08/01 4:31 a.m.•7 views

ziti v1.6.19

OpenZiti OpenZiti is an open-source zero-trust networking platform that makes network services invisible to unauthorized users. Every connection, whether from a user, a service, a device, or a workload, is authenticated with cryptographic identity, authorized by policy, and encrypted end-to-end...

6.1AI score
SaveExploits0References29
Tenable Nessus
Tenable Nessus
•added 2026/08/01 12:00 a.m.•17 views

Microsoft Edge (Chromium) < 151.0.4129.59 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.59. It is, therefore, affected by multiple vulnerabilities as referenced in the July 31, 2026 advisory. - Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute...

9.6CVSS6AI score0.01099EPSS
SaveExploits0References767
GithubExploit
GithubExploit
•added 2026/07/31 9:02 p.m.•66 views

Selflearning

🎯 Hacking & Cybersecurity Masterclass — Zero → ULTRA PRO MAX...

5.4AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
•added 2026/07/31 9:01 p.m.•143 views

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

In this article 1. The CaptiveCrunch campaign 2. Storm-2945 and Midnight Blizzard 3. CaptiveCrunch tradecraft and tooling 4. How to protect against CaptiveCrunch activity 5. Microsoft Defender detections and hunting guidance 6. Indicators of compromise Since early May 2026, Microsoft Threat...

6.4AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
•added 2026/07/31 9:01 p.m.•22 views

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

In this article 1. The CaptiveCrunch campaign 2. Storm-2945 and Midnight Blizzard 3. CaptiveCrunch tradecraft and tooling 4. How to protect against CaptiveCrunch activity 5. Microsoft Defender detections and hunting guidance 6. Indicators of compromise Since early May 2026, Microsoft Threat...

6.4AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/07/31 7:09 p.m.•11 views

kuri v0.5.1

Kuri 🌰 Install root@kitploit: curl -fsSL https://kuri.trilok.ai/download | sh macOS arm64/x8664 and Linux x8664/arm64. Single binary, no runtime deps. Direct downloads: macOS arm64 · macOS x8664 · Linux x8664 · Linux arm64 Browser automation & web crawling for AI agents. Written in Zig. Zero...

6.5AI score
SaveExploits0References17
GithubExploit
GithubExploit
•added 2026/07/31 6:56 p.m.•60 views

Exploit for Use After Free in Linux Linux_Kernel

GhostLock CVE-2026-43499 — POCO F3 GT aresin A data-only...

7.8CVSS7.3AI score0.00278EPSS
SaveExploits105
NVD
NVD
•added 2026/07/31 6:17 p.m.•29 views

CVE-2026-34490

Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53...

5.5CVSS0.00103EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/31 5:17 p.m.•20 views

CVE-2026-34490

Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53...

4.8CVSS5.5AI score0.00103EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/31 5:17 p.m.•59 views

CVE-2026-34490 XAAP Android Data Stored in Unencrypted Database

Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53...

4.8CVSS0.00103EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/31 5:17 p.m.•73 views

CVE-2026-34490

CVE-2026-34490 affects the XAAP Android application (pre-1.53). The issue is cleartext storage of sensitive data in an unencrypted local database on the device, allowing a local attacker on a jailbroken or otherwise compromised device to retrieve sensitive information. CVSS v4.0 base score 4.8 (M...

5.5CVSS5.5AI score0.00103EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/07/31 5:17 p.m.•25 views

EUVD-2026-51576

Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53...

4.8CVSS5.5AI score0.00103EPSS
SaveExploits0References1
Rows per page
Query Builder