Lucene search
K

9165 matches found

GithubExploit
GithubExploit
added 2025/12/07 11:49 a.m.159 views

Exploit for CVE-2025-9074

CVE-2025-9074 Exploit Tool A sophisticated exploitation frame...

9.3CVSS7.9AI score0.01594EPSS
Exploits15
GithubExploit
GithubExploit
added 2025/12/07 11:4 a.m.148 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell 핵심 패키지 📦 포함 파일 1. 취약한 Do...

10CVSS7.2AI score0.99562EPSS
Exploits369
GithubExploit
GithubExploit
added 2025/12/06 5:33 p.m.134 views

nim-pentest-agent

NimPentestAgent Agent autonome de pentest intelligent pour CT...

7.1AI score
Exploits0
SUSE CVE
SUSE CVE
added 2025/12/06 12:24 a.m.3 views

SUSE CVE-2025-12744

A flaw was found in the ABRT daemon's handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command docker inspect %s without proper validation. An unprivileged local user can craft a payload that injects shell...

8.8CVSS6.7AI score0.00563EPSS
Exploits1References3
GithubExploit
GithubExploit
added 2025/12/05 5:25 p.m.252 views

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Exploiting Log4Shell CVE-2021-44228: A Complete, Modern Demo...

10CVSS8.3AI score0.99999EPSS
Exploits346
GithubExploit
GithubExploit
added 2025/12/05 8:35 a.m.132 views

Exploit for Deserialization of Untrusted Data in Getlaminas Laminas-Http

CVE-2021-3007 — Laminas/Zend HTTP Deserialization RCE ==========...

9.8CVSS7.3AI score0.75313EPSS
Exploits3
GithubExploit
GithubExploit
added 2025/12/05 5:11 a.m.158 views

Exploit for CVE-2025-55182

CVE-2025-55182 Scanner & Exploit Lab This repository contains...

10CVSS7.7AI score0.99562EPSS
Exploits369
GithubExploit
GithubExploit
added 2025/12/04 11:29 p.m.263 views

Exploit for CVE-2025-55182

CVE-2025-55182 - Dockerized Proof of Concept This repository...

10CVSS7.8AI score0.99562EPSS
Exploits369
Wolfi
Wolfi
added 2025/12/04 7:47 p.m.9 views

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: rancher, gotestsum, azurefile-csi, terraform-provider-time, fuse-overlayfs-snapshotter, apache-exporter, govulncheck, kratos, sigstore-scaffolding, grafana-alloy, github-mcp-server, opentelemetry-collector, terraform-provider-tls, kor, pluto, sbom-convert, petname,...

5.8AI score
Exploits0
Wolfi
Wolfi
added 2025/12/04 7:47 p.m.7 views

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: rancher, gotestsum, azurefile-csi, terraform-provider-time, fuse-overlayfs-snapshotter, apache-exporter, govulncheck, kratos, sigstore-scaffolding, grafana-alloy, github-mcp-server, opentelemetry-collector, terraform-provider-tls, kor, pluto, sbom-convert, petname,...

7.5CVSS7.2AI score0.00451EPSS
Exploits2
GithubExploit
GithubExploit
added 2025/12/04 2:34 p.m.206 views

Exploit for CVE-2025-55182

CVE-2025-55182-docker-lab Vulnerable Docker environment for l...

10CVSS7AI score0.99562EPSS
Exploits369
GithubExploit
GithubExploit
added 2025/12/04 2:46 a.m.135 views

Exploit for CVE-2025-55182

CVE-2025-55182 Scanner & Exploit Lab This repository contains...

10CVSS7.7AI score0.99562EPSS
Exploits369
Tenable Nessus
Tenable Nessus
added 2025/12/04 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-12744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the ABRT daemon's handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them direct...

8.8CVSS7AI score0.00563EPSS
Exploits1References2
GithubExploit
GithubExploit
added 2025/12/03 9:28 p.m.416 views

Exploit for CVE-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python C...

10CVSS7AI score0.99562EPSS
Exploits369
EUVD
EUVD
added 2025/12/03 5:41 p.m.3 views

EUVD-2025-200985

MCP Gateway allows easy and secure running and deployment of MCP servers. In versions 0.27.0 and earlier, when MCP Gateway runs in sse or streaming transport mode, it is vulnerable to DNS rebinding. An attacker who can get a victim to visit a malicious website or be served a malicious advertiseme...

7.3CVSS6.2AI score0.00374EPSS
Exploits0References7
OSV
OSV
added 2025/12/03 4:7 p.m.2 views

GHSA-46GC-MWH4-CC5R Docker MCP Plugin and Docker MCP Gateway have DNS Rebinding vulnerability when running in sse or streaming mode

Impact When ran in sse or streaming mode --transport, the Docker MCP Gateway is vulnerable to a DNS rebinding attack. Vulnerability allows for Browser-Based exploitation of any MCP servers that are executing within the Docker MCP Gateway. Any tools or other features exposed by MCP servers can be...

7.3CVSS6.8AI score0.00374EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2025/12/03 4:7 p.m.6 views

Docker MCP Plugin and Docker MCP Gateway have DNS Rebinding vulnerability when running in sse or streaming mode

Impact When ran in sse or streaming mode --transport, the Docker MCP Gateway is vulnerable to a DNS rebinding attack. Vulnerability allows for Browser-Based exploitation of any MCP servers that are executing within the Docker MCP Gateway. Any tools or other features exposed by MCP servers can be...

9.6CVSS6.9AI score0.00374EPSS
Exploits0References7Affected Software1
NVD
NVD
added 2025/12/03 3:15 p.m.6 views

CVE-2025-13948

A vulnerability was determined in opsre go-ldap-admin up to 20251011. This issue affects some unknown processing of the file docs/docker-compose/docker-compose.yaml of the component JWT Handler. Executing manipulation of the argument secret key can lead to use of hard-coded cryptographic key . Th...

6.3CVSS0.00252EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/12/03 2:32 p.m.17 views

CVE-2025-13948 opsre go-ldap-admin JWT docker-compose.yaml hard-coded key

A vulnerability was determined in opsre go-ldap-admin up to 20251011. This issue affects some unknown processing of the file docs/docker-compose/docker-compose.yaml of the component JWT Handler. Executing manipulation of the argument secret key can lead to use of hard-coded cryptographic key . Th...

6.3CVSS0.00252EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/12/03 2:32 p.m.2 views

CVE-2025-13948 opsre go-ldap-admin JWT docker-compose.yaml hard-coded key

A vulnerability was determined in opsre go-ldap-admin up to 20251011. This issue affects some unknown processing of the file docs/docker-compose/docker-compose.yaml of the component JWT Handler. Executing manipulation of the argument secret key can lead to use of hard-coded cryptographic key . Th...

6.3CVSS6.6AI score0.00252EPSS
Exploits0References4
Rows per page
Query Builder