Lucene search
+L

121 matches found

Kitploit
Kitploit
added 2026/08/26 7:35 a.m.3 views

CVE-2026-67598

CVE-2026-67598 Emlog Pro — Validação de Certificado TLS Desativada no Assistente de IA MITM adjacente à rede → roubo de chave de API do provedor de LLM e injeção de resposta de IA...

9.1CVSS5.2AI score0.00205EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 12:58 a.m.1 views

stavrobot

Stavrobot Stavrobot é um assistente pessoal de IA construído com o princípio de "todo o acesso que um assistente de IA precisa, e nada mais". Ele tem todos os recursos interessantes de um assistente de IA, mas foca em sandboxing, isolamento e permissões mínimas. É leve e é implantado com apenas u...

5.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 10:07 p.m.2 views

GeoSentinel

🌍 جيوسنتينل GeoSentinel هي منصة مراقبة جغرافية مكانية تتبع الحركة العالمية في الوقت الفعلي. تقوم بتجميع مسارات الطيران والسفن والإحداثيات الحية والبيانات الجغرافية في نظام موحد، مما يوفر وعيًا جغرافيًا وجيوسياسيًا واضحًا للتحليل والتصور واتخاذ القرار. 🚀 !TIP 🚀 قم بزيارة المدونة تحديثات ورؤى Geo...

5.2AI score
SaveExploits0References16
Kitploit
Kitploit
added 2026/08/25 9:34 p.m.2 views

CVE-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator putcontents$outfile, $filecontent, FSCHMODFILE 344행 취약점은 다음과 같은 이유로 발생합니다: 1. 경로 등록 : 업로드 엔드포인트는 AdminChatBotController.php에 등록됩니다. 2. 컨트롤러 접근 : processAssistantUpload 메서드가 업로드 요청을 처리합니다 1103행. 3. 입력 처리 :...

7.2CVSS5.5AI score0.00932EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/25 9:17 p.m.1 views

pentest-muse-cli

Pentest Muse Pentest Muse é um assistente de IA projetado para profissionais de cibersegurança. Ele pode ajudar testadores de penetração a gerar ideias, escrever payloads, analisar código e realizar reconhecimento. Também pode executar ações, executar códigos de linha de comando e resolver tarefa...

5.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 7:35 p.m.1 views

ironclaw

IronClaw आपका सुरक्षित व्यक्तिगत AI सहायक, हमेशा आपके साथ English | 简体中文 | Русский | 日本語 | 한국어 रिबॉर्न त्वरित प्रारंभ • दर्शन • विशेषताएँ • स्थापना • कॉन्फ़िगरेशन • सुरक्षा • आर्किटेक्चर IronClaw Reborn त्वरित प्रारंभ IronClaw Reborn, reborn-integration शाखा पर एक स्टैंडअलोन रनटाइम है। यह...

5.5AI score
SaveExploits0References5
NVD
NVD
added 2026/08/25 1:19 p.m.7 views

CVE-2026-78581

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier t...

4.2CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/25 1:08 p.m.5 views

EUVD-2026-65489

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier t...

4.2CVSS5.2AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/25 1:08 p.m.13 views

CVE-2026-78581 Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Data Modification in Kibana

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized data modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Under certain conditions, an authenticated user could reference another user's AI Assistant conversation identifier t...

4.2CVSS
SaveExploits0References1
CVE
CVE
added 2026/08/25 1:08 p.m.15 views

CVE-2026-78581

CVE-2026-78581 is an authorization bypass (CWE-639) in Kibana affecting the AI Assistant feature. An authenticated user could reference another user's AI Assistant conversation identifier to access or modify a conversation they do not own. Successful exploitation requires knowledge of a hard-to-g...

4.2CVSS5.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 4:32 a.m.1 views

jebmcp

Um servidor e plugin MCP rápido e improvisado para JEB Pro. Testado no Cline, Cursor e RooCode. Referência: https://github.com/mrexodia/ida-pro-mcp Instalação Requisitos root@kitploit: Python = 3.11 uv: https://docs.astral.sh/uv/getting-started/installation/ Uso COPIE o arquivo src/jebmcp/MCP.py...

5.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 4:32 a.m.1 views

pgadmin-ai-assistant-sql-injection-cve-2026-17351-lexer-differential-bypass

CVE-2026-17351 — Bypass de Somente Leitura do Assistente de IA do pgAdmin 4 via Diferencial de Lexer PoC para CVE-2026-17351, um bypass crítico CVSS 9.0 de injeção de SQL no Assistente de IA do pgAdmin 4. Resumo da Vulnerabilidade As versões 9.13 a 9.16 do pgAdmin 4 usam a biblioteca sqlparse do...

9.4CVSS5.6AI score0.00407EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/23 10:40 a.m.1 views

CVE-2026-73847-emlog-PoC

CVE-2026-73847 — Assistant IA d'emlog CSRF → Exécution SQL → Prise de contrôle admin PoC pour l'absence de protection CSRF sur le point de terminaison executetool de l'Assistant IA d'emlog pro, qui permet à un attaquant d'utiliser la session authentifiée d'un administrateur pour exécuter du SQL...

6.8CVSS0.00197EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/19 11:57 a.m.1 views

CVE-2023-6985

CVE-2023-6985 10Web AI Assistant – Assistente de escrita de conteúdo com IA = 1.0.18 – Autorização ausente para instalação/ativação arbitrária de plugins por usuários autenticados Assinante+ Descrição Descrição O plugin 10Web AI Assistant – Assistente de escrita de conteúdo com IA para WordPress ...

8.8CVSS0.01365EPSS
SaveExploits1
NVD
NVD
added 2026/08/14 6:19 p.m.10 views

CVE-2026-73847

Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant executetool action in admin/ai.php lets a remote unauthenticated attacker submit a forged cross-site request from an attacker-controlled page to a recently logged-in administrator...

6.8CVSS0.00197EPSS
SaveExploits1References1
NVD
NVD
added 2026/08/12 6:17 a.m.8 views

CVE-2026-12976

The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain material from paid courses they have not enrolled in...

6.5CVSS0.0027EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/12 6:00 a.m.11 views

CVE-2026-12976

The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain material from paid courses they have not enrolled in...

5.3AI score0.0027EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/12 6:00 a.m.29 views

CVE-2026-12976 LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI Assistant

The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain material from paid courses they have not enrolled in...

0.0027EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/12 6:00 a.m.35 views

CVE-2026-12976

The CVE identifies a vulnerability in the LearnPress WordPress plugin prior to version 4.4.4 where enrollment checks are not performed for AI‑assistant requests against a course’s lesson content. This allows any authenticated user (e.g., a subscriber) to access material from paid courses they hav...

6.5CVSS5.3AI score0.0027EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/03 2:09 p.m.12 views

CVE-2026-17351

A flaw was found in pgAdmin 4. The AI Assistant's SQL query tool, designed for read-only operations, contains a vulnerability where a disagreement between its SQL validator and the PostgreSQL database parser allows for a transaction bypass. A remote attacker with low-privilege database write acce...

9.4CVSS6.5AI score0.00407EPSS
SaveExploits1References2
Rows per page
Query Builder