Lucene search
+L

171399 matches found

Kitploit
Kitploit
added 2026/08/25 4:45 p.m.1 views

espoofer

espoofer espoofer एक ओपन-सोर्स परीक्षण उपकरण है जो ईमेल सिस्टम में SPF, DKIM और DMARC प्रमाणीकरण को बायपास करने के लिए है। यह मेल सर्वर प्रशासकों और पेनिट्रेशन टेस्टर्स को यह जांचने में मदद करता है कि लक्ष्य ईमेल सर्वर और क्लाइंट ईमेल स्पूफिंग हमलों के प्रति संवेदनशील हैं या नहीं, या स्पूफिंग ईमे...

9.8CVSS6.1AI score0.02554EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/08/25 4:18 p.m.2 views

CVE-2024-23897

अनंत द्वारा संशोधन /etc/os-release जैसी फ़ाइलों को पढ़ने पर सामग्री कट जाती थी। अब यह ठीक हो गया है। प्रमाणित सत्र के लिए समर्थन जोड़ा गया: कमांडलाइन तर्कों के रूप में उपयोगकर्ता नाम और पासवर्ड प्रदान करें root@kitploit: usage: jenkinsfileread.py -h -u URL -a USERAGENT -f FILE -t TIMEOUT -s -o -p...

9.8CVSS8.7AI score0.99999EPSS
SaveExploits49
EUVD
EUVD
added 2026/08/25 4:17 p.m.6 views

EUVD-2026-65608

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP requests. A successful exploit of this vulnerability might lead to code execution and escalation of...

8.8CVSS6AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/25 4:17 p.m.13 views

CVE-2026-24170

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause improper authentication by sending specially crafted HTTP requests. A successful exploit of this vulnerability might lead to code execution and escalation of...

8.8CVSS
SaveExploits0References3
CVE
CVE
added 2026/08/25 4:17 p.m.11 views

CVE-2026-24170

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component that allows an attacker on an adjacent network to send specially crafted HTTP requests, leading to improper authentication . A successful exploit may result in code execution and privilege escalation , wit...

8.8CVSS6AI score
SaveExploits0References3
NVD
NVD
added 2026/08/25 4:17 p.m.6 views

CVE-2026-79776

rclone before 1.75.0 mounts the pprof debug handler as its own router route, bypassing the fail-closed authentication rule in the main handler. Attackers can access the /debug/pprof/cmdline endpoint unauthenticated to retrieve the full process argv including backend credentials...

6.9CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/25 4:16 p.m.2 views

CVE-2025-52399-SQLi-Institute-of-Current-Students

CVE-2025-52399 - वर्तमान छात्र संस्थान में SQL इंजेक्शन सारांश Institute-of-Current-Students एप्लिकेशन में loginlinkfaculty एंडपॉइंट, fid POST पैरामीटर के माध्यम से SQL इंजेक्शन के लिए असुरक्षित है। SQL क्वेरी में उपयोग करने से पहले पैरामीटर को उचित रूप से साफ नहीं किया जाता है, जिससे दूरस्थ हमला...

5.9AI score
SaveExploits0
NVD
NVD
added 2026/08/25 4:16 p.m.8 views

CVE-2026-55640

Nextcloud MCP Server is a production-ready MCP server that connects AI assistants to a Nextcloud instance. Prior to 0.117.2, the POST /webhooks/nextcloud endpoint in nextcloudmcpserver/vector/webhookreceiver.py has no authentication by default because WEBHOOKSECRET defaults to None and startup...

9.1CVSS
SaveExploits0References3
NVD
NVD
added 2026/08/25 4:16 p.m.7 views

CVE-2026-55539

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, the Jobs API createapp function mounts /api/v1/runs without authentication. Any reachable caller can submit jobs, read results, cancel runs, or delete jobs using operator credentials. The fix adds PRAISONAIJOBSAPIKEY middleware f...

8.6CVSS
SaveExploits0References3
NVD
NVD
added 2026/08/25 4:16 p.m.5 views

CVE-2026-55533

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, createauthmiddleware allows requests when auth=api-key lacks PRAISONAIAPIKEY or JWT authentication lacks PRAISONAIJWTSECRET. An externally bound Recipe server can therefore accept unauthenticated POST /v1/recipes/run requests...

8.2CVSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/25 4:14 p.m.2 views

CVE-2018-13257

Contournement de l'en-tête Host du ticket CAS dans Blackboard Learn Un module d'authentification dans Blackboard Learn est vulnérable à un contournement de l'en-tête Host HTTP lors de la validation du ticket de service du Central Authentication Service CAS. Un ticket de service CAS n'est destiné...

6.1CVSS6AI score0.0121EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 4:13 p.m.1 views

CVE-2026-29145-Everything

CVE-2026-29145 Everything Apache Tomcat CLIENTCERT + OCSP soft-fail bypass पूर्ण पुनरुत्पादन वातावरण, शोषण ट्रैफ़िक पैकेट, और Suricata डिटेक्शन नियम लेखन सामग्री। केवल अधिकृत सुरक्षा अनुसंधान और डिटेक्शन नियम विकास के लिए। अधिकृत प्रणालियों के लिए उपयोग न करें। भेद्यता सारांश आइटम| विवरण ---|---...

9.1CVSS7.7AI score0.00715EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/08/25 4:11 p.m.1 views

cve-2025-29927-nextjs

لوحة إدارة Himalaya Tech — عرض CVE-2025-29927 تحذير: هذا التطبيق ضعيف بشكل متعمد. للأغراض التعليمية وأبحاث الأمن المصرح بها فقط. لا تقم بنشره على خادم عام. حول هذا العرض التوضيحي يُظهر هذا التطبيق CVE-2025-29927 ، وهي ثغرة خطيرة لتجاوز المصادقة في برمجية Next.js الوسيطة CVSS 9.1. يحاكي التطبيق لو...

9.1CVSS7.3AI score0.99203EPSS
SaveExploits58
Kitploit
Kitploit
added 2026/08/25 4:11 p.m.2 views

jboss-autopwn

jboss-autopwn JBoss Autopwn كما تم عرضه في BlackHat Europe 2010 - هذه النسخة تتضمن CVE-2010-0738، ثغرة تجاوز المصادقة في JBoss عبر التلاعب بـ VERB والتي اكتشفتها Minded Security C. Papathanasiou 2010 المقدمة يقوم هذا السكريبت الخاص بـ JBoss بنشر واجهة JSP على الخادم المستهدف. بمجرد النشر، يستخدم...

5.3CVSS6.1AI score0.79415EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/08/25 4:08 p.m.1 views

CVE-2023-32315

CVE-2023-32315 أداة لاستغلال ثغرة CVE-2023-32315. الميزات: يمسح أهدافًا مفردة أو متعددة من ملفات txt يستخدم المعالجة المتعددة لمسح أسرع إمكانية تسجيل الدخول التلقائي التثبيت: تأكد من أنك في مجلد هذا المستودع وأن لديك python3 مثبتًا ثبت الحزم المطلوبة باستخدام: root@kitploit: pip install -r...

8.6CVSS8.1AI score0.99999EPSS
SaveExploits15References1
Github Security Blog
Github Security Blog
added 2026/08/25 4:06 p.m.5 views

djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls

Impact djust's LiveViewConsumer mounts a LiveView over a WebSocket. When a view is gated loginrequired / permissionrequired, or an onmount hook that returns a redirect and the connecting user is not authorized, the consumer sent the client a "type":"navigate","to":... redirect frame and then...

8.2CVSS5.5AI score
SaveExploits0References4Affected Software1
Kitploit
Kitploit
added 2026/08/25 4:06 p.m.1 views

CVE-2024-4358

Обход аутентификации Telerik Report Server - CVE-2024-4358 Дисклеймер : Этот Proof of Concept POC создан только для образовательных и этических целей тестирования. Использование этого инструмента для атаки на цели без предварительного взаимного согласия незаконно. Ответственность за соблюдение вс...

9.8CVSS9AI score0.97482EPSS
SaveExploits14
CVE
CVE
added 2026/08/25 4:05 p.m.10 views

CVE-2026-55571

djust , a Phoenix LiveView-style reactive server-side rendering library for Django, is vulnerable to an authentication bypass in versions prior to 1.0.4 . When LiveViewConsumer.handle_mount denies a mount via login_required, permission_required, or a redirecting on_mount hook, it sends a navigate...

8.2CVSS5.3AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/25 4:05 p.m.12 views

CVE-2026-55571 djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to 1.0.4, LiveViewConsumer.handlemount sends a "type":"navigate","to":... frame when loginrequired, permissionrequired, or a redirecting onmount hook denies a LiveView mount, but...

8.2CVSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/25 4:05 p.m.5 views

EUVD-2026-65600

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to 1.0.4, LiveViewConsumer.handlemount sends a "type":"navigate","to":... frame when loginrequired, permissionrequired, or a redirecting onmount hook denies a LiveView mount, but...

8.2CVSS5.3AI score
SaveExploits0References4
Rows per page
Query Builder