Lucene search
+L

221 matches found

Kitploit
Kitploit
added 2026/09/06 7:53 a.m.7 views

porterminal

컴퓨터를 에이전트에게 넘기고, 완전한 제어권을 주고, 지켜보세요. 명령어 하나, URL 하나. 내 폰을 위한 멋진 터미널이기도 합니다. 1. uvx ptn 2. URL을 AI 에이전트에게 넘기거나, 직접 QR을 스캔하세요 3. 어떤 브라우저에서든 작업을 지켜보고, 언제든 직접 제어하세요 !WARNING 해당 전체 URL은 이 컴퓨터에 대한 완전한 접근 권한입니다. 여기에는 실행할 때마다 생성되는 무작위 접근 코드가 포함되어 있으며, 이 URL을 전달받은 사람또는 AI 에이전트은 누구든 여러분의 머신에서 실제 셸을 얻습니다...

6AI score
SaveExploits0References6
NVD
NVD
added 2026/08/29 6:17 a.m.10 views

CVE-2026-77010

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not consistently enforce the per-class access code, allowing unauthenticated users to obtain a signed meeting join link for any classroom,...

6.5CVSS0.00164EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/29 6:00 a.m.16 views

CVE-2026-77010

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin (through 1.0.3 ) fails to perform authorisation checks on its REST API routes and does not consistently enforce the per-class access code. This allows unauthenticated users to obtain a signed meeting join link for any classro...

6.5CVSS5.9AI score0.00164EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/29 6:00 a.m.8 views

EUVD-2026-68056

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not consistently enforce the per-class access code, allowing unauthenticated users to obtain a signed meeting join link for any classroom,...

6.5CVSS5.9AI score0.00164EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/29 6:00 a.m.46 views

CVE-2026-77010 HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Moderator Join URL Disclosure and Class Access Code Bypass

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not consistently enforce the per-class access code, allowing unauthenticated users to obtain a signed meeting join link for any classroom,...

0.00164EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/15 9:44 p.m.19 views

CVE-2026-73046

SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth middleware. The HTTP Basic Authentication branch, which guards nearly the entire /api/ surface, accepts the workspace access code Conf.AccessAuthCode as the Basic Auth password but never consults the...

5.6AI score0.00425EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/15 12:00 a.m.19 views

PT-2026-73053

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description Improper restriction of authentication attempts occurs in the CheckAuth middleware. The HTTP Basic Authentication branch, which protects most of the /api/ endpoints, accepts the workspace access code...

9.8CVSS5.5AI score0.00425EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/06/05 7:32 p.m.15 views

CVE-2026-6805

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link...

7.5CVSS5.5AI score0.00232EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/07 12:31 p.m.46 views

EUVD-2026-28342

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link...

6.9CVSS5.9AI score0.00232EPSS
SaveExploits0References2
NVD
NVD
added 2026/05/07 10:16 a.m.29 views

CVE-2026-6805

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link...

7.5CVSS0.00232EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/07 9:45 a.m.121 views

CVE-2026-6805 Vulnerability on Cryptobox external sharing feature

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link...

6.9CVSS0.00232EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/07 9:45 a.m.38 views

CVE-2026-6805

CVE-2026-6805 affects Cryptobox’s external sharing feature. An attacker who knows a sharing link URL can retrieve information from the server, enabling an offline brute-force attack against the access code associated with that link. The provided documents do not specify affected versions, mitigat...

7.5CVSS5.9AI score0.00232EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/07 9:45 a.m.8 views

CVE-2026-6805

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link...

6.9CVSS5.9AI score0.00232EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/07 9:45 a.m.11 views

CVE-2026-6805 Vulnerability on Cryptobox external sharing feature

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link...

6.9CVSS5.9AI score0.00232EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/07 12:00 a.m.41 views

PT-2026-38415

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link...

6.9CVSS5.9AI score0.00232EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/03/11 7:08 a.m.13 views

CVE-2026-30869

SiYuan is a personal knowledge management system. Prior to 3.5.10, a path traversal vulnerability in the /export endpoint allows an attacker to read arbitrary files from the server filesystem. By exploiting double‑encoded traversal sequences, an attacker can access sensitive files such as...

9.8CVSS6.4AI score0.01028EPSS
SaveExploits1References1
OSV
OSV
added 2026/03/09 10:28 p.m.13 views

CVE-2026-30869 SiYuan has a Path Traversal in /export Endpoint Allows Arbitrary File Read and Secret Leakage

SiYuan is a personal knowledge management system. Prior to 3.5.10, a path traversal vulnerability in the /export endpoint allows an attacker to read arbitrary files from the server filesystem. By exploiting double‑encoded traversal sequences, an attacker can access sensitive files such as...

9.3CVSS6.5AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 11:29 a.m.13 views

CVE-2021-27509

In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code...

7.5CVSS7AI score0.00972EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:58 a.m.13 views

CVE-2023-49132

A vulnerability has been identified in Solid Edge SE2023 All versions V223.0 Update 10. The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current...

7.8CVSS7AI score0.00202EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2025/10/30 12:31 a.m.16 views

Drupal Access code allows Brute Force Attempts

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force. This issue affects Access code: from 0.0.0 before 2.0.5...

6.3CVSS7.2AI score0.00222EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder