Lucene search
+L

958 matches found

Kitploit
Kitploit
added 2026/09/15 5:24 p.m.10 views

attackgen

AttackGen AttackGen 是一款网络安全事件响应测试工具,它利用大语言模型的能力以及全面的 MITRE ATT&CK 和 ATLAS 框架。该工具根据用户选择的威胁行为者组织、AI 攻击案例研究以及您组织的详细信息,生成量身定制的事件响应场景。 目录 为仓库加星 功能特性 版本发布 环境要求 安装 LangSmith 设置 数据设置 运行 AttackGen MCP 服务器 Agent 技能 使用方法 安全最佳实践 贡献指南 许可证 为仓库加星 如果您觉得 AttackGen 有用,请考虑在 GitHub 上为仓库加星。这有助于更多人发现该工具。非常感谢您的支持!⭐ 功能特...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/15 4:18 p.m.7 views

stride-gpt

STRIDE GPT is an AI-powered threat modelling tool that leverages Large Language Models LLMs to generate threat models and attack trees for a given application based on the STRIDE methodology. Users provide application details, such as the application type, authentication methods, and whether the...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 10:38 a.m.9 views

Atlas

Atlas - 高速SQLMapタンパーサジェスター v1.0 Atlasは、WAF/IDS/IPSをバイパスするためのsqlmapタンパーを提案できるオープンソースツールです。このツールは返されたステータスコードに基づいています。 スクリーンショット インストール root@kitploit: $ git clone https://github.com/m4ll0k/Atlas.git atlas $ cd atlas $ python atlas.py python3+ 使い方 root@kitploit: $ python atlas.py --url...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 11:12 p.m.8 views

cve-2019-10070-apache-atlas-xss

此存储库没有 README。...

6.1CVSS6.3AI score0.01787EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 11:49 a.m.11 views

Atlas

Atlas Atlas is a cross-platform Windows/Linux network execution and security assessment toolkit built on top of TrustedSec's Titanis protocol library. It is inspired by the workflow of NetExec/CrackMapExec: target lists, credential sets, modular enumeration, and compact HH:mm:ss + host - message...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 6:42 a.m.10 views

AtlasLdr

Atlas 是一个反射式 x64 加载器,具有以下功能: 功能 从远程服务器获取 DLL 和 PE 在远程进程中手动映射 擦除 DOS Header 和 NTHeader 的 Magic 字节 位置无关代码 使用间接系统调用 ZwOpenProcess ZwAllocateVirtualMemory ZwProtectVirtualMemory ZwQuerySystemInformation ZwFreeVirtualMemory ZwCreateThreadEx 所有系统调用共用一个 Stub 动态获取 SSN 动态解析系统调用地址 Atlas 还使用 LdrLoadDll...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:03 a.m.9 views

CVE-2026-3909

CVE-2026-3909 Chromium 浏览器 PoC 本仓库包含一个针对 CVE-2026-3909 的概念验证(PoC),可在 Chromium 浏览器中可靠触发。 背景 官方针对此漏洞的 Skia 修复仅包含一个简化的演示测试用例: 官方演示 :AtlasOobTest.cpp 它无法在真实的 Chromium 环境中运行。官方演示有意进行了限制,并省略了关键的触发条件。 本 PoC 基于官方演示构建,并经过修改,可在真实的 Chromium 浏览器环境中可靠触发该漏洞。 包含的补丁 本 PoC 包含对以下文件的修改: 1...

8.8CVSS7.8AI score0.01629EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-82073

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks...

7.1CVSS5.7AI score0.00263EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/08 5:18 p.m.5 views

CVE-2026-82073

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...

7.1CVSS0.00263EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/08 4:12 p.m.25 views

CVE-2026-82073 Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...

7.1CVSS0.00263EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 4:12 p.m.6 views

EUVD-2026-72916

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...

7.1CVSS5.8AI score0.00263EPSS
SaveExploits0References1
MongoDB
MongoDB
added 2026/09/08 4:12 p.m.7 views

Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...

7.1CVSS5.8AI score0.00263EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/09/08 4:12 p.m.20 views

CVE-2026-82073

MongoDB Server aggregation framework is affected by an improper validation vulnerability (CVE-2026-82073). When Atlas Search features are in use, an authenticated user with limited read privileges can bypass view-level authorization checks and read data from unauthorized collections by manipulati...

7.1CVSS5.8AI score0.00263EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/05 7:17 a.m.7 views

CVE-2026-15247

The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite or delete the site's stored Google service-account...

5.4CVSS0.00209EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/09/05 6:00 a.m.9 views

WordPress Search Atlas SEO plugin < 2.6.24 - Subscriber+ Google Service Account Credential Overwrite/Deletion vulnerability

Subscriber+ Google Service Account Credential Overwrite/Deletion vulnerability discovered by Shivamani Vastrala in WordPress Plugin Search Atlas SEO versions 2.6.24...

5.4CVSS5.2AI score0.00209EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/09/05 6:00 a.m.7 views

EUVD-2026-71845

The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite or delete the site's stored Google service-account...

5.3AI score0.00209EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/05 6:00 a.m.8 views

CVE-2026-15247 Search Atlas SEO < 2.6.24 - Subscriber+ Google Service Account Credential Overwrite/Deletion

The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite or delete the site's stored Google service-account...

5.8AI score0.00209EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/05 6:00 a.m.10 views

CVE-2026-15247

CVE-2026-15247 affects the Search Atlas SEO WordPress plugin in versions prior to 2.6.24 . The root cause is a missing nonce or capability check before processing a settings update in one of the plugin's early-priority handlers. This allows any authenticated user at the Subscriber level or above ...

5.4CVSS5.3AI score0.00209EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/05 6:00 a.m.32 views

CVE-2026-15247 Search Atlas SEO < 2.6.24 - Subscriber+ Google Service Account Credential Overwrite/Deletion

The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite or delete the site's stored Google service-account...

0.00209EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/05 12:00 a.m.16 views

PT-2026-86319

🚨 CVE-2026-15247 The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite or delete the site's stored Google...

5.4CVSS5.7AI score0.00209EPSS
SaveExploits0References3
Rows per page
Query Builder