Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

281409 matches found

NVD
NVD•added 2026/10/08 9:18 p.m.•6 views

CVE-2026-78407

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...

5.4CVSS0.00136EPSS
SaveExploits0References1
NVD
NVD•added 2026/10/08 9:17 p.m.•6 views

CVE-2026-17189

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadin...

8.2CVSS0.00146EPSS
SaveExploits0References1
NVD
NVD•added 2026/10/08 9:17 p.m.•3 views

CVE-2026-11930

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may not enforce authorization correctly for some web servers...

7.5CVSS0.00193EPSS
SaveExploits0References1
NVD
NVD•added 2026/10/08 9:17 p.m.•7 views

CVE-2026-11936

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus...

5.4CVSS0.00118EPSS
SaveExploits0References1
Kitploit
Kitploit•added 2026/10/08 9:13 p.m.•13 views

AutoRepeater

AutoRepeater: Burp Suite를 이용한 자동화된 HTTP 요청 반복 tl;dr Extender에서 AutoRepeater.jar를 가져오세요. 간단한 지침 AutoRepeater는 정의된 치환replacement에 의해 변경된 요청만 다시 전송합니다. AutoRepeater가 특정 탭에 설정된 조건과 일치하는 요청을 수신하면, 먼저 정의된 모든 기본 치환base replacement을 요청에 적용한 다음, 각 정의된 치환에 대해 기본 치환이 수행된 요청을 복사하고 해당 치환을 요청에 적용합니다. 소개 Burp...

6.1AI score
SaveExploits0
Kitploit
Kitploit•added 2026/10/08 9:10 p.m.•19 views

creep-web-app-scanner

creep-web-app-scanner NCC Groupの従業員であり、大学卒業者でもある開発者が、研究時間の20%を使って現在開発中の（非常に）原始的なWebサイトスキャナです。creepは現在、サイトをクロールし、各ページ内で潜在的に興味深い情報を検索します。 creepは、（HTTPのみの）ターゲットをクロールし、サイト上の興味深い情報を収集します。例えば以下のようなものです： ソースコードのコメント エラー（MySQLエラー、警告、致命的エラーなど） Linuxのファイルパス...

6AI score
SaveExploits0
CVE
CVE•added 2026/10/08 9:06 p.m.•15 views

CVE-2026-17189

IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3) are vulnerable to reflected cross-site scripting . This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI, which could alter intend...

8.2CVSS5.7AI score0.00146EPSS
SaveExploits0References1Affected Software4
Cvelist
Cvelist•added 2026/10/08 9:06 p.m.•34 views

CVE-2026-17189 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadin...

8.2CVSS0.00146EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/10/08 9:06 p.m.•9 views

EUVD-2026-95279

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadin...

8.2CVSS5.7AI score0.00146EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/10/08 9:02 p.m.•10 views

EUVD-2026-95266

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus...

4.9CVSS5.7AI score0.00118EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/10/08 9:02 p.m.•36 views

CVE-2026-11936 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus...

4.9CVSS0.00118EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/10/08 9:01 p.m.•39 views

CVE-2026-78407 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...

5.4CVSS0.00136EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/10/08 9:01 p.m.•7 views

EUVD-2026-95264

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...

5.4CVSS5.7AI score0.00136EPSS
SaveExploits0References1
CVE
CVE•added 2026/10/08 9:01 p.m.•15 views

CVE-2026-78407

IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3) are vulnerable to cross-site scripting (XSS) . An authenticated user can embed arbitrary JavaScript code in the Web UI, potentially altering functionality and leading to crede...

5.4CVSS5.7AI score0.00136EPSS
SaveExploits0References1Affected Software4
Vulnrichment
Vulnrichment•added 2026/10/08 9:01 p.m.•4 views

CVE-2026-78407 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...

5.4CVSS5.7AI score0.00136EPSS
SaveExploits0References1
Kitploit
Kitploit•added 2026/10/08 8:57 p.m.•13 views

requests-racer

Requests-Racer Requests-Racer は、Requests ライブラリを使用して、宛先が異なる場合やペイロードのサイズが異なる場合でも、複数のリクエストをそれらの宛先サーバーでほぼ同時に処理されるように送信できる小さな Python ライブラリです。これは、Web アプリケーションにおける競合状態の脆弱性を検出および悪用するのに役立ちます。詳細については、motivation.md を参照してください。 免責事項 Requests および Requests が内部で使用する urllib3...

6.2AI score
SaveExploits0References2
Kitploit
Kitploit•added 2026/10/08 8:56 p.m.•23 views

CVE-2025-40554

CVE-2025-40554 익스플로잇 스위트 SolarWinds Web Help Desk의 인증 우회 취약점CVE-2025-40554 / CVE-2025-40536을 탐지하고 익스플로잇하기 위한 종합적인 보안 테스트 도구입니다. ⚠️ 면책 조항 교육 및 공인된 보안 테스트 목적으로만 사용 이 도구는 사용자가 소유하거나 명시적인 서면 허가를 받은 시스템에 대한 보안 연구, 침투 테스트, 취약점 평가를 위해 제공됩니다. 컴퓨터 시스템에 대한 무단 접근은 불법입니다. 작성자는 이 도구의 오용이나 이로 인한 손해에 대해 책임을 지지...

9.8CVSS8.8AI score0.60642EPSS
SaveExploits2
Kitploit
Kitploit•added 2026/10/08 8:52 p.m.•12 views

WebFEET

Web フィルタ外部列挙ツール WebFEET WebFEET NCC Group Plc によりオープンソースとして公開 - http://www.nccgroup.com/ 開発者: Ben Williams https://github.com/nccgroup/webfeet AGPL のもとで公開されています。詳細は LICENSE を参照してください WebFEET は、Web セキュリティプロキシとポリシーのドライブバイ列挙（drive-by enumeration）を行う Web アプリケーションです。関連ホワイトペーパー:...

6AI score
SaveExploits0References3
Kitploit
Kitploit•added 2026/10/08 8:48 p.m.•16 views

CVE-2026-2413

CVE-2026-2413 Ally – Web Accessibility & Usability = 4.0.3 - URLパスを介した未認証SQLインジェクション 説明 WordPress用プラグイン「Ally – Web Accessibility & Usability」は、バージョン4.0.3までの全バージョンにおいて、URLパスを介したSQLインジェクションに対して脆弱です。これは、getglobalremediations メソッドにおいて、ユーザーが指定したURLパラメータのエスケープが不十分なためです。このパラメータはSQL...

7.5CVSS7.3AI score0.02331EPSS
SaveExploits1
Kitploit
Kitploit•added 2026/10/08 8:47 p.m.•16 views

shell-history-leaks

バッジ ライセンス MIT インストール 1. Python3 と pip をインストールします 手順はこちら これが分からない場合は、このツールを使うべきではないでしょう pip でインストール pip install shell-history-leaks 確認するには以下のコマンドを実行します shell-history-leaks -h 設定 2. 脆弱性検出の即時通知を受け取るために、Telegram API と統合しました。 Telegram 通知 shell-history-leaks --chatid Telegram...

6AI score
SaveExploits0References2
Rows per page
Query Builder