Lucene search
+L

121 matches found

Kitploit
Kitploit
added 2026/08/26 11:57 a.m.2 views

CVE-2023-6985

CVE-2023-6985 10Web AI Assistant – AI content writing assistant = 1.0.18 - Mancanza di autorizzazione per l'installazione/attivazione arbitraria di plugin per utenti autenticati Subscriber+ Descrizione Il plugin 10Web AI Assistant – AI content writing assistant per WordPress è vulnerabile alla...

8.8CVSS0.01365EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.3 views

CVE-2026-67598

CVE-2026-67598 Emlog Pro — Deaktivierte TLS-Zertifikatsprüfung im KI-Assistenten Netzwerknaher MITM → Diebstahl des LLM-Anbieter-API-Schlüssels & Injektion von KI-Antworten...

9.1CVSS5.2AI score0.00205EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 12:58 a.m.2 views

stavrobot

Stavrobot Stavrobot ist ein persönlicher KI-Assistent, der nach dem Prinzip „so viel Zugriff, wie ein KI-Assistent benötigt, und nicht mehr“ aufgebaut ist. Er bietet alle nützlichen Funktionen eines KI-Assistenten, konzentriert sich jedoch auf Sandboxing, Isolierung und minimale Berechtigungen. E...

5.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 10:07 p.m.2 views

GeoSentinel

🌍 GeoSentinel GeoSentinel è una piattaforma di monitoraggio geospaziale che traccia i movimenti globali in tempo reale. Aggrega rotte di navi e aerei, coordinate in tempo reale e geodati in un sistema unificato, fornendo una chiara consapevolezza geografica e geopolitica per analisi,...

5.2AI score
SaveExploits0References16
Kitploit
Kitploit
added 2026/08/25 9:34 p.m.2 views

CVE-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Generatore di Contenuti e Immagini = 1.7.7 - Autenticato Editor+ Caricamento Arbitrario di File Il plugin WordPress S2B AI Assistant versioni 2.47 e precedenti contiene una vulnerabilità di caricamento arbitrario di file che consente agli utenti...

7.2CVSS5.5AI score0.00932EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/25 9:17 p.m.2 views

pentest-muse-cli

Pentest Muse Pentest Muse ist ein KI-Assistent, der speziell für Cybersicherheitsexperten entwickelt wurde. Er kann Penetrationstestern helfen, Ideen zu entwickeln, Payloads zu schreiben, Code zu analysieren und Aufklärungsarbeit zu leisten. Er kann auch Aktionen ausführen, Befehlszeilencodes...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 7:35 p.m.2 views

ironclaw

IronClaw Il tuo assistente AI personale sicuro, sempre al tuo fianco English | 简体中文 | Русский | 日本語 | 한국어 Reborn Quick Start • Philosophy • Features • Installation • Configuration • Security • Architecture IronClaw Reborn Quick Start IronClaw Reborn è il runtime standalone presente nel branch...

5.5AI score
SaveExploits0References5
NVD
NVD
added 2026/08/25 1:19 p.m.7 views

CVE-2026-78581

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier t...

4.2CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/25 1:08 p.m.5 views

EUVD-2026-65489

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier t...

4.2CVSS5.2AI score
SaveExploits0References1
CVE
CVE
added 2026/08/25 1:08 p.m.15 views

CVE-2026-78581

CVE-2026-78581 is an authorization bypass (CWE-639) in Kibana affecting the AI Assistant feature. An authenticated user could reference another user's AI Assistant conversation identifier to access or modify a conversation they do not own. Successful exploitation requires knowledge of a hard-to-g...

4.2CVSS5.3AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/25 1:08 p.m.22 views

CVE-2026-78581 Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Data Modification in Kibana

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier t...

4.2CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 4:32 a.m.1 views

jebmcp

Un server e plugin MCP rapido e sporco per JEB Pro. Testato su Cline, Cursor e RooCode. Riferimento: https://github.com/mrexodia/ida-pro-mcp Installazione Requisiti root@kitploit: Python = 3.11 uv: https://docs.astral.sh/uv/getting-started/installation/ Utilizzo COPIA il file src/jebmcp/MCP.py in...

5.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 4:32 a.m.1 views

pgadmin-ai-assistant-sql-injection-cve-2026-17351-lexer-differential-bypass

CVE-2026-17351 — pgAdmin 4 KI-Assistent Read-Only-Bypass durch Lexer-Differenz PoC für CVE-2026-17351, einen kritischen CVSS 9.0 SQL-Injection-Bypass im KI-Assistenten von pgAdmin 4. Zusammenfassung der Schwachstelle pgAdmin 4 Versionen 9.13 bis 9.16 verwenden die Python-Bibliothek sqlparse, um z...

9.4CVSS5.6AI score0.00407EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/23 10:40 a.m.1 views

CVE-2026-73847-emlog-PoC

CVE-2026-73847 — Assistente de IA do emlog: CSRF → Execução de SQL → Assunção total da conta de administrador PoC para a falta de proteção contra CSRF no endpoint executetool do Assistente de IA do emlog pro, que permite a um atacante aproveitar a sessão autenticada de um administrador para...

6.8CVSS0.00197EPSS
SaveExploits1
NVD
NVD
added 2026/08/14 6:19 p.m.10 views

CVE-2026-73847

Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant executetool action in admin/ai.php lets a remote unauthenticated attacker submit a forged cross-site request from an attacker-controlled page to a recently logged-in administrator...

6.8CVSS0.00197EPSS
SaveExploits1References1
NVD
NVD
added 2026/08/12 6:17 a.m.8 views

CVE-2026-12976

The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain material from paid courses they have not enrolled in...

6.5CVSS0.0027EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/12 6:00 a.m.11 views

CVE-2026-12976

The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain material from paid courses they have not enrolled in...

5.3AI score0.0027EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/12 6:00 a.m.29 views

CVE-2026-12976 LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI Assistant

The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain material from paid courses they have not enrolled in...

0.0027EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/12 6:00 a.m.35 views

CVE-2026-12976

The CVE identifies a vulnerability in the LearnPress WordPress plugin prior to version 4.4.4 where enrollment checks are not performed for AI‑assistant requests against a course’s lesson content. This allows any authenticated user (e.g., a subscriber) to access material from paid courses they hav...

6.5CVSS5.3AI score0.0027EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/03 2:09 p.m.12 views

CVE-2026-17351

A flaw was found in pgAdmin 4. The AI Assistant's SQL query tool, designed for read-only operations, contains a vulnerability where a disagreement between its SQL validator and the PostgreSQL database parser allows for a transaction bypass. A remote attacker with low-privilege database write acce...

9.4CVSS6.5AI score0.00407EPSS
SaveExploits1References2
Rows per page
Query Builder