Lucene search
+L

11554 matches found

Kitploit
Kitploit
•added 2026/08/06 11:57 p.m.•18 views

monitor v0.35.0

BetterDB Monitor The monitoring layer that Valkey deserves. BetterDB persists what Valkey throws away - slowlogs, command patterns, client activity, anomaly signals - so you can debug what happened at 3am, not just what's happening now. Built for Valkey 8.x with native support for COMMANDLOG,...

6AI score
SaveExploits0References21
Kitploit
Kitploit
•added 2026/08/06 11:54 p.m.•12 views

nightingale v9.1.0

Open-Source Alerting Expert English | 中文 🎯 What is Nightingale Nightingale is an open-source monitoring project that focuses on alerting. Similar to Grafana, Nightingale also connects with various existing data sources. However, while Grafana emphasizes visualization, Nightingale places greater...

6.1AI score
SaveExploits0References14
OSV
OSV
•added 2026/08/06 12:14 p.m.•21 views

MAL-2026-13393 Malicious code in wallet-monitor-snap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c50a0acdc6be5b64538f83b0c14c3808ea3a57b963233ba32a2d80c3e4cc2c3 wallet-monitor-snap is a MetaMask Snap whose onRpcRequest handler implements a 'showSecurityAlert' method that opens a snapdialog inside MetaMask's...

5.5AI score
SaveExploits0References2
CNVD
CNVD
•added 2026/08/06 12:00 a.m.•28 views

N-able N-central authorization issue vulnerability

N-able N-central is a remote monitoring and management system developed by the Canadian company N-able. Versions of N-able N-central prior to 2026.1 contained security vulnerabilities. Attackers could exploit these vulnerabilities to bypass authentication processes...

8.2CVSS6.2AI score0.07882EPSS
SaveExploits0
OSV
OSV
•added 2026/08/05 1:08 p.m.•16 views

MAL-2026-12484 Malicious code in trailserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c4162f378d4eac522f50de4af9ac836cd0ec727ea90a33633a3cd36e29211e The package's declared main entry launcher.js invokes launch at top level, so require'trailserver' triggers system-level installation of Python via...

5.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 12:25 p.m.•26 views

Malicious code in aegis-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66d1f02c3c943836d41a7ec92c150c5529880890a4cc502115412dddb0c519c The package's declared postinstall hook runs node src/test.js, which issues an HTTPS GET to https://workconfig.vercel.app with TLS certificate...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/08/05 4:24 a.m.•13 views

NetAlertX v26.8.5

NetAlertX - Network Visibility & Asset Intelligence Framework 📷 Click for more screenshots | | ---|---|--- !presencehttps://assets.kitploit.com/production/public/readmes/295/d2773fcfbdc9d1a31a6e178016e1333b685afe85257bb3...

6AI score
SaveExploits0References18
BDU FSTEC
BDU FSTEC
•added 2026/08/05 12:00 a.m.•25 views

The vulnerability of the Config.get_value() function in the Glances monitoring tool allows a malicious actor to escalate their privileges.

The vulnerability of the Config.getvalue function in the Glances monitoring tool is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS6.1AI score0.0078EPSS
SaveExploits3References3Affected Software2
OSV
OSV
•added 2026/08/04 10:17 p.m.•13 views

UBUNTU-CVE-2026-67856

An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via crafted CreateSubscription, CreateMonitoredItemsSampling, Publish, TransferSubscriptions, and DeleteSubscriptions requests...

7.5CVSS6.1AI score0.00759EPSS
SaveExploits0References7
Kitploit
Kitploit
•added 2026/08/03 9:43 p.m.•10 views

prismor v1.38.0

Prismor Runtime security hooks for Claude Code, Codex, and other AI coding agents. Prismor can also be used in observe mode to see agent session activity and dangerous actions in a local self-serve dashboard Website • Onboard with Skill !Trae / Trae CNht...

6.1AI score
SaveExploits0References34
OSV
OSV
•added 2026/08/03 7:08 p.m.•14 views

JLSEC-2026-1131

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credentials for all clients provided via argv the command-line, then those credentials are visible to any user who can see the...

5.3CVSS6.9AI score0.00538EPSS
SaveExploits0References8
OSV
OSV
•added 2026/08/03 7:08 p.m.•15 views

JLSEC-2026-1124

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, for MQTT deployments using usercodes/passwords: MQTT passwords are incorrectly classified as a non-authenticating identity statement JWT and exposed via monitoring...

7.5CVSS7AI score0.00631EPSS
SaveExploits0References9
GithubExploit
GithubExploit
•added 2026/08/03 5:07 p.m.•36 views

wazuh-iis-defense

Guia de Configuração — Monitoramento IIS com Wazuh + Sysmon...

5.6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/08/03 10:36 a.m.•15 views

prismor v1.37.0

Prismor Runtime security hooks for Claude Code, Codex, and other AI coding agents. Prismor can also be used in observe mode to see agent session activity and dangerous actions in a local self-serve dashboard Website • Onboard with Skill !Trae / Trae CNht...

6.1AI score
SaveExploits0References34
Packet Storm News
Packet Storm News
•added 2026/08/03 12:00 a.m.•30 views

OSSEC HIDS 4.2.0

OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. This is the source code release...

5.6AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/08/03 12:00 a.m.•69 views

SparSEEty: Extracting Tokens from Sparsity-Exploiting LLM Serving Systems Via Deterministic Side Channels

Modern large language models LLMs exhibit activation sparsity, wherein only a subset of their neurons is activated for given input tokens. Researchers have leveraged this property to optimize LLM serving systems by omitting weight accesses and computations pertaining to inactive neurons...

5.5AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/08/03 12:00 a.m.•3 views

PT-2026-76168

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credentials for all clients provided via argv the command-line, then those credentials are visible to any user who can see the...

7.5CVSS6.9AI score0.00538EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/08/03 12:00 a.m.•5 views

PT-2026-76162

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, for MQTT deployments using usercodes/passwords: MQTT passwords are incorrectly classified as a non-authenticating identity statement JWT and exposed via monitoring...

8.6CVSS7AI score0.00631EPSS
SaveExploits0References10
Packet Storm News
Packet Storm News
•added 2026/08/03 12:00 a.m.•37 views

Evading Chain-Of-Thought Monitoring through Model Poisoning

Chain-of-thought CoT monitoring is an increasingly important component of AI safety stacks but relies on the assumption that a model's reasoning trace is informative about its actions. This work studies the limits of CoT monitoring through the lens of model poisoning. We demonstrate that backdoor...

5.5AI score
SaveExploits0
Veracode
Veracode
•added 2026/08/01 5:33 p.m.•20 views

Exposure Of Sensitive Information To An Unauthorized Actor

linuxfabrik-lib is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor. The vulnerability is due to lib.url.fetch following cross-origin redirects while forwarding caller-supplied credential headers other than Authorization and Cookie, which allows an attacker controlling a...

6CVSS6AI score0.00497EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder