Lucene search
+L

817896 matches found

NVD
NVD
•added 2026/10/04 11:16 p.m.•1 views

CVE-2026-105221

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because httpconnection in lib/gist.rb sets VERIFYNONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth tokens...

9.1CVSS
SaveExploits0References5
NVD
NVD
•added 2026/10/04 11:16 p.m.•1 views

CVE-2026-105167

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

7.5CVSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/04 11:15 p.m.•2 views

CVE-2026-105169 kishor-23 food-waste-management-system Take Order delivery.php sql injection

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument...

7.5CVSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/04 11:00 p.m.•1 views

CVE-2026-105168 kishor-23 food-waste-management-system Order Assignment Block admin.php sql injection

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument...

6.5CVSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/04 10:45 p.m.•2 views

EUVD-2026-92136

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

7.5CVSS
SaveExploits0References6
CVE
CVE
•added 2026/10/04 10:45 p.m.•3 views

CVE-2026-105167

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

7.5CVSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/04 10:45 p.m.•2 views

CVE-2026-105167 kishor-23 food-waste-management-system donate.php sql injection

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

7.5CVSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/04 10:31 p.m.•2 views

EUVD-2026-92134

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because httpconnection in lib/gist.rb sets VERIFYNONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth tokens...

9.1CVSS
SaveExploits0References5
CVE
CVE
•added 2026/10/04 10:31 p.m.•4 views

CVE-2026-105221

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because httpconnection in lib/gist.rb sets VERIFYNONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth tokens...

9.1CVSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/04 10:31 p.m.•3 views

CVE-2026-105221 Gist RubyGem before 6.1.0 Disabled TLS Certificate Verification

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because httpconnection in lib/gist.rb sets VERIFYNONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth tokens...

9.1CVSS
SaveExploits0References5
NVD
NVD
•added 2026/10/04 10:16 p.m.•1 views

CVE-2026-105164

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

5.1CVSS
SaveExploits0References7
EUVD
EUVD
•added 2026/10/04 10:00 p.m.•2 views

EUVD-2026-92130

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

5.1CVSS
SaveExploits0References7
CVE
CVE
•added 2026/10/04 10:00 p.m.•6 views

CVE-2026-105164

A flaw in NASA cFS versions up to 7.0.1 allows for an out-of-bounds read via the CFE_FS_ParseInputFileNameEx function located in cfe/modules/fs/fsw/src/cfe_fs_api.c. This vulnerability can be triggered through remote exploitation . While a pull request to address the issue exists, the documents i...

5.1CVSS5.4AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2026/10/04 10:00 p.m.•7 views

CVE-2026-105164 NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

5.1CVSS
SaveExploits0References7
GithubExploit
GithubExploit
•added 2026/10/04 8:43 p.m.•6 views

ai_bobao

aibobao AI-Powered Vulnerability Intelligence Feed Simp...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/04 8:15 p.m.•19 views

mitm-proxy

Go MITM Proxy A lightweight, developer-friendly Man‑in‑the‑Middle MITM HTTP/HTTPS proxy written in Go. It supports HTTP/1.1 and HTTP/2, CONNECT tunneling, WebSocket tunneling ws/wss, on‑disk response caching with flexible filters, and live config reloading. Badges Admin Dashboard Preview Overview...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/04 8:15 p.m.•16 views

USBArmyKnife

🚀 USB Army Knife v2 is steeping — and its going to be a beast After two years of active development on v1, v2 is planned to turn the USB Army Knife into a full red-team platform in your pocket. A big announcement is coming this autumn but I still wanted to tease: Brand-new web UI — smaller, faste...

5.8AI score
SaveExploits0References10
Kitploit
Kitploit
•added 2026/10/04 8:13 p.m.•17 views

adPEAS

adPEAS v2 — Scripts Awesome de Escalada de Privilegios en Active Directory Evaluación integral de seguridad de Active Directory — sin dependencias, un solo archivo, listo para usar. ¿Qué es adPEAS? adPEAS es una herramienta de evaluación de seguridad basada en PowerShell que identifica...

6.5AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/04 8:13 p.m.•21 views

C2

C2 via python generated favicon, read with powershell...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/04 8:13 p.m.•21 views

CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support PoC de RCE pre-autenticación !WARNING Este script está destinado únicamente a fines educativos y de investigación. No lo utilices contra sistemas sin permiso explícito. El acceso o las pruebas no autorizados son ilegales y poco éticos. Lee el DESCARGO DE...

9.9CVSS8.7AI score0.90891EPSS
SaveExploits11References1
Rows per page
Query Builder