Lucene search
+L

87 matches found

Kitploit
Kitploit
added 2026/09/04 9:38 a.m.6 views

CVE-2010-3333-reproduction

В этом репозитории нет README...

9.3CVSS8.5AI score0.89497EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/02 2:16 a.m.3 views

cve-2010-3333

이 저장소에는 README가 없습니다...

9.3CVSS8.5AI score0.89497EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/08/31 7:09 p.m.8 views

CVE-2026-3333-DNS-Rebinding-to-Steal-Cloud-Metadata

CVE-2026-3333 – 클라우드 메타데이터 탈취를 위한 DNS 리바인딩 프로그램 코드 Python 공격자 서버 + 취약한 앱 root@kitploit: !/usr/bin/env python3 dnsrebindingserver.py - Malicious DNS server that alternates between attacker IP and 169.254.169.254 import socket, threading, time This simple server resolves any subdomain of our domain...

6.4CVSS5.4AI score0.00235EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:23 a.m.43 views

GO-2024-3333 vulnerabilities

Vulnerabilities for packages: vault-benchmark, newrelic-k8s-metadata-injection, filebrowser, rook, kwok, secrets-store-csi-driver-provider-azure, guac, crossplane-provider-aws-route53, undock, kyverno-notation-aws, aws-privateca-issuer, terraform-provider-google, controller-gen, temporal-server,...

5.9AI score
SaveExploits0
Circl
Circl
added 2026/07/29 12:01 p.m.11 views

CVE-2016-3333

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:36+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:58+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-08-01 12:00:09+00:00| seen|...

9.3CVSS7.2AI score0.06767EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/06/08 12:00 a.m.18 views

Amazon Linux 2 : python-mako, --advisory ALAS2-2026-3333 (ALAS-2026-3333)

The version of python-mako installed on the remote host is prior to 0.8.1-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3333 advisory. Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path traversal when ...

8.7CVSS5.5AI score0.00361EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
added 2026/04/17 12:00 a.m.16 views

Eclipse Che Machine-Exec WebSocket Service Exposure Detector

This Python script is a lightweight security detection tool designed to identify potentially exposed or misconfigured machine-exec WebSocket services associated with Eclipse Che running on port 3333...

5.8AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2026/04/15 12:00 a.m.12 views

VulnCheck KEV: CVE-2025-12548

A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration SSH keys, tokens, etc. from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333...

9CVSS6.1AI score0.01211EPSS
SaveIn wildExploits2References6
Circl
Circl
added 2026/03/21 3:17 a.m.14 views

CVE-2026-3333

creationtimestamp| type| source ---|---|--- 2026-03-21 03:17:20+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3333...

6.4CVSS5.8AI score0.00235EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/20 12:00 a.m.13 views

EUVD-2026-3333

A NULL pointer dereference in the dacpreplyplayqueueeditmove function src/httpddacp.c of owntone-server commit b7e385f allows attackers to cause a Denial of Service DoS via sending a crafted DACP request to the server...

7.5CVSS5.5AI score0.00337EPSS
SaveExploits0References4
NVD
NVD
added 2026/01/13 4:15 p.m.11 views

CVE-2025-12548

A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration SSH keys, tokens, etc. from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333...

9CVSS0.01211EPSS
SaveExploits2References5
CVE
CVE
added 2026/01/13 3:35 p.m.46 views

CVE-2025-12548

The CVE-2025-12548 issue affects Eclipse Che che-machine-exec, exposed in Red Hat OpenShift Dev Spaces. A flaw allows unauthenticated remote arbitrary command execution and secret exfiltration from other users’ Developer Workspace containers via an unauthenticated JSON-RPC/WebSocket API on TCP po...

9CVSS6.9AI score0.01211EPSS
SaveIn wildExploits2References5
Cvelist
Cvelist
added 2026/01/13 3:35 p.m.30 views

CVE-2025-12548 Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333

A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration SSH keys, tokens, etc. from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333...

9CVSS0.01211EPSS
SaveExploits2References5
ATTACKERKB
ATTACKERKB
added 2026/01/13 3:35 p.m.7 views

CVE-2025-12548

A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration SSH keys, tokens, etc. from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333...

9CVSS5.7AI score0.01211EPSS
SaveExploits2References7
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.20 views

PT-2026-2441

Name of the Vulnerable Software and Affected Versions Eclipse Che versions affected versions not specified Description A flaw exists in Eclipse Che che-machine-exec that permits unauthenticated remote arbitrary command execution and secret exfiltration, including SSH keys and tokens, from other...

9CVSS5.8AI score0.01211EPSS
SaveExploits2References13
RedHat Linux
RedHat Linux
added 2025/12/02 3:28 p.m.7 views

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.24.1 Release.

Red Hat OpenShift Dev Spaces 3.24.1 has been released. This release addresses CVE-2025-12548 'Eclipse Che — unauthenticated RCE and secret exfiltration via TCP/3333'...

9CVSS5.7AI score0.01211EPSS
SaveExploits2References3
RedhatCVE
RedhatCVE
added 2025/05/23 10:16 a.m.13 views

CVE-2024-3333

The Essential Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL attributes of widgets in all versions up to, and including, 5.9.14 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.8AI score0.00402EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:15 a.m.14 views

CVE-2023-3333

Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacke...

7.2CVSS7.2AI score0.00713EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:56 p.m.13 views

CVE-2022-3333

A vulnerability, which was classified as problematic, was found in Zephyr Project Manager up to 3.2.4. Affected is an unknown function of the file /v1/tasks/create/ of the component REST Call Handler. The manipulation of the argument onanimationstart leads to cross site scripting. It is possible ...

5.4CVSS6.3AI score0.00459EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:35 p.m.13 views

CVE-2021-3333

Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting XSS. When outputting SQL statements for debugging, a maliciously crafted query can trigger an XSS attack. This attack only succeeds if the user is already logged in to Open-AudIT before they click the malicious link...

6.1CVSS6.2AI score0.00757EPSS
SaveExploits0References1
Rows per page
Query Builder