Lucene search
+L

298 matches found

Kitploit
Kitploit
•added 2026/10/24 3:46 p.m.•18 views

crtsh

crtsh API client for crt.sh crtsh allows to get the information about a HTTPS website. e.g. Search subdoimains. This tool uses Certificate Transparency logs. For more information, check https://crt.sh/ Example Subdomains Search subdomains of example.com Organization In --query, % can be used as...

6.3AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/24 11:58 a.m.•29 views

resterm

Resterm An API-as-code workbench for the terminal. resterm.app · docs Resterm is a code-first API client built around plain .http/.rest files. A request is a few lines of text you can read, diff and keep in git, and the same goes for workflows and local mocks. You send them from the terminal UI...

6.3AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/10/24 8:00 a.m.•22 views

hulak

Hulak Your messenger in the terminal. Quick Start • GraphQL Explorer • Project Layout • Documentation Run one request, a whole directory, or stay interactive hulak run ./requests/ Hulak runs request files directly from your project. It supports concurrent directory execution. It falls back to an...

6.3AI score
SaveExploits0References10
Kitploit
Kitploit
•added 2026/10/24 2:57 a.m.•22 views

python-inquestlabs

RETIRED November 2025 inquestlabs A Pythonic interface and command line tool for interacting with the InQuest Labs API. Note that an API key is not required to interact with this API. An API key does provide the ability to increase their lookback, remove rate limitations, and download available...

6.2AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/24 1:09 a.m.•26 views

metashield-clean-up-sdk-python

============================== Metashield-clean-up-sdk-python Installation Install the metashieldcleanup package using pip:: pip install metashieldcleanup Usage Example for cleaning a file. .. code-block:: python import time import base64 from metashieldcleanup.api import MetashieldCleanUp api =...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/23 8:00 p.m.•15 views

bruno

Bruno - Opensource IDE for exploring and testing APIs. English | Українська | Русский | Türkçe | Deutsch | Français | Português BR | 한국어 | বাংলা | Español | Italiano | Română | Polski | 简体中文 | 正體中文 | العربية | 日本語 | ქართული | Nederlands | فارسی | हिन्दी Bruno is a new and innovative API client,...

6.3AI score
SaveExploits0References23
NVD
NVD
•added 2026/10/14 4:17 p.m.•11 views

CVE-2026-91882

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this...

8.6CVSS0.00424EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/14 3:15 p.m.•19 views

CVE-2026-91882

The Dell Terraform Provider for OME versions 1.0.0 through 1.2.3 is vulnerable to an Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-209). The flaw exists within the API client error handling component , where unauthenticated attackers with remote access can p...

8.6CVSS5.8AI score0.00424EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/14 3:15 p.m.•38 views

CVE-2026-91882

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this...

8.6CVSS0.00424EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/14 3:15 p.m.•12 views

EUVD-2026-101159

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this...

8.6CVSS5.8AI score0.00424EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•5 views

CVE-2026-91882: Generation of Error Message Containing Sensitive Information

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this...

8.6CVSS5.8AI score0.00424EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/09 9:17 p.m.•23 views

CVE-2026-107852

Jexactyl is a customisable game management panel and billing system. Prior to 4.0.5, the POST /api/client/billing/stripe/process endpoint accepts a client-supplied Stripe Checkout Session when paymentstatus is paid but does not compare amounttotal or currency with the referenced order and...

7.1CVSS0.0016EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/09 9:17 p.m.•20 views

CVE-2026-107854

Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without restricting the lookup to servers owned by the authenticated account. On installations...

5.4CVSS0.00211EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/09 8:31 p.m.•15 views

EUVD-2026-95983

Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without restricting the lookup to servers owned by the authenticated account. On installations...

5.4CVSS5.8AI score0.00211EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/10/09 8:31 p.m.•30 views

CVE-2026-107854 Jexactyl: Free-billing order endpoint renews and unsuspends arbitrary servers by ID (missing ownership check)

Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without restricting the lookup to servers owned by the authenticated account. On installations...

5.4CVSS5.9AI score
SaveExploits0References5
CVE
CVE
•added 2026/10/09 8:28 p.m.•24 views

CVE-2026-107852

In Jexactyl (a game management and billing system), a vulnerability exists prior to version 4.0.5 in the POST /api/client/billing/stripe/process endpoint. The system fails to verify if the amount_total or currency of a client-supplied Stripe Checkout Session matches the referenced order's require...

7.1CVSS5.9AI score0.0016EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/09 8:28 p.m.•48 views

CVE-2026-107852 Jexactyl: Stripe checkout confirmation accepts mismatched-currency/amount payments as full payment (payment forgery)

Jexactyl is a customisable game management panel and billing system. Prior to 4.0.5, the POST /api/client/billing/stripe/process endpoint accepts a client-supplied Stripe Checkout Session when paymentstatus is paid but does not compare amounttotal or currency with the referenced order and...

7.1CVSS0.0016EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/09 12:00 a.m.•8 views

CVE-2026-107854: Authorization Bypass Through User-Controlled Key

Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without restricting the lookup to servers owned by the authenticated account. On installations...

5.4CVSS5.8AI score0.00211EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/09 12:00 a.m.•10 views

CVE-2026-107852: Insufficient Verification of Data Authenticity

Jexactyl is a customisable game management panel and billing system. Prior to 4.0.5, the POST /api/client/billing/stripe/process endpoint accepts a client-supplied Stripe Checkout Session when paymentstatus is paid but does not compare amounttotal or currency with the referenced order and...

7.1CVSS5.9AI score0.0016EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2026/10/01 4:38 p.m.•4 views

directory-api-client (>=9.14.0, <=9.15.0), directory-api-external (>=4.1.1, <=4.2.0) +9 more potentially affected by CVE-2026-15307 via django (1.11.5)

django PYPI version 1.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-api-client =9.14.0, =4.1.1, =0.0.1, =0.0.1, =1.0.5, =6.4.1, =0.3.0, =2.4.1, =2.0.1, =0.0.6, =0.0.11 Source cves: CVE-2026-15307 Source...

8.8CVSS6AI score0.01134EPSS
SaveExploits0
Rows per page
Query Builder