Lucene search
+L

82 matches found

Kitploit
Kitploit
•added 2026/10/04 7:03 p.m.•50 views

nuclei-burp-plugin

Nuclei Template Generator Burp Plugin A Burp Suite plugin intended to help with nuclei template generation. Features Template matcher generation Word and Binary matcher creation using selected response snippets from Proxy history or Repeater contexts Multi-line selections are split to separate...

6.2AI score
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/08/17 2:46 a.m.•14 views

vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware...

8.4CVSS7.2AI score0.00145EPSS
SaveExploits0References7
NVD
NVD
•added 2026/07/31 4:17 p.m.•33 views

CVE-2026-56570

HCL iControl was affected by Auto complete Enabled vulnerabilities. It involves expose sensitive information such as: Valid usernames, Email addresses used for login, Account identifiers If the system is accessed from shared environments, attackers may enumerate valid usernames through browser...

5.3CVSS0.00296EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/31 2:59 p.m.•30 views

EUVD-2026-51544

HCL iControl was affected by Auto complete Enabled vulnerabilities. It involves expose sensitive information such as: Valid usernames, Email addresses used for login, Account identifiers If the system is accessed from shared environments, attackers may enumerate valid usernames through browser...

3.7CVSS5.4AI score0.00296EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/31 2:59 p.m.•15 views

CVE-2026-56570

HCL iControl was affected by Auto complete Enabled vulnerabilities. It involves expose sensitive information such as: Valid usernames, Email addresses used for login, Account identifiers If the system is accessed from shared environments, attackers may enumerate valid usernames through browser...

3.7CVSS5.4AI score0.00296EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/31 2:59 p.m.•51 views

CVE-2026-56570

Technical details about CVE-2026-56570 are not publicly provided in the connected documents. Monitor for updates; the available sources report exposure of usernames and emails but do not specify affected versions, vectors, or fixes.

5.3CVSS5.8AI score0.00296EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/31 2:59 p.m.•15 views

CVE-2026-56570 HCL iControl is affected by multiple security vulnerabilities.

HCL iControl was affected by Auto complete Enabled vulnerabilities. It involves expose sensitive information such as: Valid usernames, Email addresses used for login, Account identifiers If the system is accessed from shared environments, attackers may enumerate valid usernames through browser...

3.7CVSS5.8AI score0.00296EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/31 12:00 a.m.•3 views

CVE-2026-56570: Insufficiently Protected Credentials

HCL iControl was affected by Auto complete Enabled vulnerabilities. It involves expose sensitive information such as: Valid usernames, Email addresses used for login, Account identifiers If the system is accessed from shared environments, attackers may enumerate valid usernames through browser...

5.3CVSS5.8AI score0.00296EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2026/07/29 6:35 p.m.•19 views

vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware...

8.4CVSS7.2AI score0.00145EPSS
SaveExploits0References7
PyPA
PyPA
•added 2026/07/07 4:03 p.m.•25 views

Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity

SummaryUsing idlelib.autocomplete.AutoComplete.getentity, which is a built-in python library function to execute remote pickle file. DetailsThe attack payload executes in the following steps:First, the attacker craft the payload by calling to idlelib.autocomplete.AutoComplete.getentity function i...

8.1CVSS6.2AI score0.00314EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2026/07/06 8:03 a.m.•11 views

PYSEC-2026-913 Review Board Cross-site scripting (XSS) vulnerability in the reviews dropdown

Cross-site scripting XSS vulnerability in the auto-complete widget in htdocs/media/rb/js/reviews.js in Review Board 1.6.x before 1.6.17 and 1.7.x before 1.7.10 allows remote attackers to inject arbitrary web script or HTML via a full name...

6.1CVSS6.1AI score0.02182EPSS
SaveExploits1References11
attackerkb
attackerkb
•added 2026/06/22 9:04 p.m.•8 views

CVE-2025-71358

picklescan before 0.0.29 fails to detect malicious pickle files that exploit idlelib.autocomplete.AutoComplete.getentity function in reduce methods. Attackers can embed undetected code in pickle files that executes arbitrary commands when loaded by victims using pickle.load...

8.1CVSS6AI score0.00314EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/06/05 7:51 p.m.•21 views

CVE-2025-62309

HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to unintended exposure under specific conditions...

2.6CVSS5.4AI score0.00115EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/14 5:16 p.m.•34 views

CVE-2025-62309

HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to unintended exposure under specific conditions...

2.6CVSS0.00115EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/14 4:10 p.m.•13 views

CVE-2025-62309

HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to unintended exposure under specific conditions...

2.6CVSS5.8AI score0.00115EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/05/14 4:10 p.m.•17 views

CVE-2025-62309 HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields.

HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to unintended exposure under specific conditions...

2.6CVSS5.8AI score0.00115EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/14 4:10 p.m.•22 views

EUVD-2025-209850

HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to unintended exposure under specific conditions...

2.6CVSS5.8AI score0.00115EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/14 4:10 p.m.•64 views

CVE-2025-62309 HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields.

HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to unintended exposure under specific conditions...

2.6CVSS0.00115EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/14 4:10 p.m.•34 views

CVE-2025-62309

Technical details about CVE-2025-62309 are not publicly available in the provided documents. Monitor for updates.

2.6CVSS5.8AI score0.00115EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/14 12:00 a.m.•3 views

CVE-2025-62309: Insertion of Sensitive Information Into Sent Data

HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to unintended exposure under specific conditions...

2.6CVSS5.9AI score0.00115EPSS
SaveExploits0References2
Rows per page
Query Builder