Lucene search
+L

53 matches found

Kitploit
Kitploit
added 2026/09/15 11:36 a.m.725 views

jsteg

jsteg root@kitploit: go get lukechampine.com/jsteg jsteg is a package for hiding data inside jpeg files, a technique known as steganography. This is accomplished by copying each bit of the data into the least-significant bits of the image. The amount of data that can be hidden depends on the...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 10:26 a.m.7 views

python-codext

CodExt Encode/decode anything. CodExt is a Python2-3 compatible library that extends the native codecs library namely for adding new custom encodings and character mappings and provides 120+ new codecs , hence its name combining CODecs EXTension. It also features a guess mode for decoding multipl...

6AI score
SaveExploits0References10
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.40 views

9Router <= 0.4.36 - Unauthenticated RCE

9Router = 0.4.36 middleware only guards 8 explicitly listed routes, leaving /api/cli-tools/ and /api/mcp/ entirely unauthenticated. An attacker can POST to /api/cli-tools/cowork-settings to register a custom MCP plugin with attacker-controlled command and args stored verbatim into globalThis, the...

10CVSS5.9AI score0.03352EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/14 10:51 p.m.6 views

whad-client

WHAD: ワイヤレスハッキングデバイス このフレームワークは、ワイヤレスプロトコルやデバイスを操作・ハッキング・調査するためのコマンドラインツール群と、互換性のあるファームウェアを実行するハードウェアデバイスで使用する強力なワイヤレスツールを作成するためのライブラリを提供します。 インストール pip を使えばインストールはとても簡単です: root@kitploit: pip install whad オンラインドキュメント プロジェクトのドキュメントは ReadTheDocs で公開されています。 ユニットテストの実行 デフォルトの Python...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 5:51 a.m.15 views

CTT-Enhanced-CVE-2026-46339-Exploit-Engine

CTT-Enhanced-CVE-2026-46339-Exploit-Engine 9Router Model Context Protocol(MCP)ブリッジを介して、33層の時間位相カスケード、リーマン・アダマール分散、11 nsウェッジフィルターを展開することで、従来のプロキシおよびプロセス監視防御を回避し、認証なしのリモートコード実行を実行する専門のPythonフレームワークです。 CTT強化エクスプロイトの詳細...

10CVSS5.8AI score0.03352EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 4:42 a.m.6 views

thethe

The Threat Hunting Environment You are a Threat Hunter. While investigating, did you find yourself with more than 20 tabs opened in your browser, scattered .txt files with data and some terminals showing up in the background? theTHE centralizes all the information on an investigation in a single...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/09 1:17 p.m.12 views

regipy

regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/09 1:16 p.m.93 views

regipy

regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...

5.8AI score
SaveExploits0References6
OSV
OSV
added 2026/07/13 3:35 p.m.12 views

PYSEC-2026-2908 PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate

Summary The fix for GHSA-9mqq-jqxf-grvw / CVE-2026-44336 is incomplete. The original advisory description named four vulnerable handlers in mcpserver/adapters/clitools.py: "registers four file-handling tools by default, praisonai.rules.create, praisonai.rules.show, praisonai.rules.delete, and...

8.7CVSS6.1AI score0.0049EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/08 4:24 p.m.15 views

MAL-2026-7005 Malicious code in visa-cli-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e8f566e285de1eec2c3cae07b0faaa8828080a4e1fed7e76e1fe43dfa571ec Package presents as an internal-looking corporate tooling name 'visa-cli-tools' published at an inflated version 99.9.1 — the canonical...

6.2AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/08 4:24 p.m.36 views

Malicious code in visa-cli-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e8f566e285de1eec2c3cae07b0faaa8828080a4e1fed7e76e1fe43dfa571ec Package presents as an internal-looking corporate tooling name 'visa-cli-tools' published at an inflated version 99.9.1 — the canonical...

6.2AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/19 12:00 a.m.32 views

PT-2026-42036

Name of the Vulnerable Software and Affected Versions 9router versions 0.4.30 through 0.4.36 Description 9router contains a flaw where the Next.js middleware fails to protect several API endpoints, allowing unauthenticated network-adjacent attackers to execute arbitrary OS commands as the user...

10CVSS6.4AI score0.03352EPSS
SaveExploits1References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.30 views

EUVD-2019-17185

Malware in sbrugna...

9.8CVSS9.1AI score0.02263EPSS
SaveExploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2019-0003

Malware in sbrugna...

6.5CVSS7AI score0.01515EPSS
SaveExploits0References19
Wolfi
Wolfi
added 2025/07/30 1:47 p.m.8 views

GHSA-X4RX-4GW3-53P4 vulnerabilities

Vulnerabilities for packages: dagger, apko, trufflehog, k9s, zarf, trivy, tw, openfga, buildah, opentelemetry-collector, buildkitd, zot, falcoctl, syft, kargo, cadvisor, osv-scanner, wolfictl, buf, docker-compose, goreleaser, splunk-otel-collector, grype, docker-cli-buildx, melange,...

5.9AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2025/02/20 3:49 p.m.28 views

postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...

8.1CVSS7.3AI score0.9003EPSS
SaveExploits10References7
Tenable Nessus
Tenable Nessus
added 2024/11/07 12:00 a.m.18 views

RHEL 8 : Red Hat OpenShift Serverless Client kn 1.12.0 (Moderate) (RHSA-2021:0145)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0145 advisory. Red Hat OpenShift Serverless Client kn CLI is delivered as an RPM package for installation on RHEL platforms, and as binaries for non-Linux...

7.5CVSS7.1AI score0.03859EPSS
SaveExploits2References13
Ubuntu
Ubuntu
added 2024/05/16 1:40 p.m.50 views

USN-6773-1: .NET vulnerabilities

It was discovered that .NET did not properly handle memory in it's Double Parse routine. An attacker could possibly use this issue to achieve remote code execution. CVE-2024-30045 It was discovered that .NET did not properly handle the usage of a shared resource. An attacker could possibly use th...

6.3CVSS7.9AI score0.01688EPSS
SaveExploits0
OSV
OSV
added 2024/03/06 11:03 a.m.32 views

BIT-RABBITMQ-2021-32718 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in RabbitMQ management UI

RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper tag sanitization, potentially allowing for JavaScript code execution in the...

5.4CVSS5.8AI score0.01432EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2023/02/26 12:00 a.m.15 views

Fedora: Security Advisory for kde-cli-tools (FEDORA-2023-e31c3e4b6c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Rows per page
Query Builder