Lucene search
+L

837 matches found

Kitploit
Kitploit
•added 2026/11/01 1:33 a.m.•22 views

Anxun-isoon

ocr.json : contains CN text as processed from the png files ocroutputtranslated.json : contains the translated ocr.json file, the translation was done using a locally running LLM facebook/mbart-large-50-many-to-many-mmt All the used scripts are under /userscripts...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/31 11:58 p.m.•23 views

zeek-asyncrat-detector

A Zeek Based AsyncRAT Malware Detector Malware often hides communications with its command and control C2 server over HTTPS. The encryption in HTTPS usually conceals the compromise long enough for the malware to accomplish its goal. This makes detecting malware that uses HTTPS challenging, but on...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/31 5:50 p.m.•26 views

CVE-2024-6387

CVE-2024-6387 check if your server exist CVE-2024-6387 by below one line bash script: curl -fsSL https://dub.sh/cve-2024-6387-CN |bash...

8.1CVSS7.6AI score0.99506EPSS
SaveExploits74
Kitploit
Kitploit
•added 2026/10/31 2:42 p.m.•24 views

CVE-2024-2961

CVE-2024-2961 CVE-2024–2961 Security Issue Mitigation Script Description This repository contains a Bash script to check and mitigate the buffer overflow vulnerability identified in GNU libc glibc versions 2.39 and older, known as CVE-2024-2961. This vulnerability affects PHP when the iconv...

7.3CVSS7.7AI score0.8833EPSS
SaveExploits19
Redos
Redos
•added 2026/10/27 12:00 a.m.•11 views

ROS-20261027-73-0086

The vulnerability in the microprogramming software of the SIMATIC CN 4100 communication gateway is related to buffer overflow. Exploitation of this vulnerability may allow a remote attacker to cause a service outage...

9.8CVSS7.8AI score0.00243EPSS
SaveExploits0
Redos
Redos
•added 2026/10/27 12:00 a.m.•11 views

ROS-20261027-73-0085

The vulnerability in the microprogramming software of the SIMATIC CN 4100 communication gateway is related to buffer overflow. Exploitation of this vulnerability may allow a remote attacker to cause a service outage...

9.8CVSS7.8AI score0.00243EPSS
SaveExploits0
CVE
CVE
•added 2026/10/22 9:13 p.m.•17 views

CVE-2026-115221

A flaw in FreeIPA involves an improper authorization check where ownership of digital certificates is verified solely by matching the host name to the certificate's subject Common Name (CN) . Because the system fails to confirm actual ownership within the directory service, an authenticated host ...

5.4CVSS5.7AI score0.00145EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/22 9:13 p.m.•30 views

CVE-2026-115221 Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership

A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name...

5.4CVSS0.00145EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/22 9:13 p.m.•7 views

CVE-2026-115221 Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership

A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name...

5.4CVSS5.7AI score0.00145EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/22 12:00 a.m.•10 views

Red Hat: CVE-2026-115221: ipa: freeIPA: FreeIPA uses subject CN as proof of certificate ownership

A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name...

5.4CVSS5.8AI score0.00145EPSS
SaveExploits0References2
osv_bit
osv_bit
•added 2026/10/01 9:34 a.m.•21 views

BIT-PHP-MIN-2026-91769 TLS Hostname Verification Falls Back to CN After SAN Mismatch

PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC 6125 requires the CN to be ignored once the certificate presents any service identity, so a certificate carrying a non-matching DNS SAN w...

4.3CVSS5.9AI score0.00159EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/09/30 6:00 a.m.•11 views

CVE-2026-86789 Connections Business Directory <= 10.4.67 - Unauthenticated Non-Public Directory Entry Disclosure via cn-api/v1 REST Routes

The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and moderation-status restrictions on certain REST API read endpoints, allowing unauthenticated attackers to retrieve directory entries that are marked private or unlisted, or that are still pending...

5.6AI score0.00206EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 6:00 a.m.•22 views

CVE-2026-86789

The Connections Business Directory WordPress plugin, in versions up to and including 10.4.67 , fails to enforce visibility and moderation-status restrictions on specific REST API read endpoints (specifically cn-api/v1 routes). This flaw allows unauthenticated attackers to retrieve sensitive infor...

5.3CVSS5.6AI score0.00206EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/30 6:00 a.m.•37 views

CVE-2026-86789 Connections Business Directory <= 10.4.67 - Unauthenticated Non-Public Directory Entry Disclosure via cn-api/v1 REST Routes

The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and moderation-status restrictions on certain REST API read endpoints, allowing unauthenticated attackers to retrieve directory entries that are marked private or unlisted, or that are still pending...

0.00206EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/09/28 12:00 a.m.•36 views

Linux Distros Unpatched Vulnerability : CVE-2026-89134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A certificate with no dNSName SAN but another SAN type present e.g. registeredID or iPAddress bypassed the Subject CN dNSName name-constraint check. The CN-as-D...

9.1CVSS5.9AI score0.00173EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/27 10:16 a.m.•17 views

CVE-2026-89134

A certificate with no dNSName SAN but another SAN type present e.g. registeredID or iPAddress bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was gated on cert-subjectCN != NULL && cert-altNames == NULL && !cert-isCA instead of "no dNSName SAN", so an out-of-scope CN...

9.1CVSS0.00173EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/27 10:16 a.m.•19 views

CVE-2026-89134

A certificate with no dNSName SAN but another SAN type present e.g. registeredID or iPAddress bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was gated on cert-subjectCN != NULL && cert-altNames == NULL && !cert-isCA instead of "no dNSName SAN", so an out-of-scope CN...

9.1CVSS5.8AI score0.00173EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/09/27 10:16 a.m.•29 views

UBUNTU-CVE-2026-89134

A certificate with no dNSName SAN but another SAN type present e.g. registeredID or iPAddress bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was gated on cert-subjectCN != NULL && cert-altNames == NULL && !cert-isCA instead of "no dNSName SAN", so an out-of-scope CN...

9.1CVSS5.8AI score0.00173EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/09/27 9:16 a.m.•21 views

CVE-2026-89134 Subject CN name-constraint check bypassed when non-DNS SAN present

A certificate with no dNSName SAN but another SAN type present e.g. registeredID or iPAddress bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was gated on cert-subjectCN != NULL && cert-altNames == NULL && !cert-isCA instead of "no dNSName SAN", so an out-of-scope CN...

6.3CVSS5.8AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/27 9:16 a.m.•17 views

CVE-2026-89134 Subject CN name-constraint check bypassed when non-DNS SAN present

A certificate with no dNSName SAN but another SAN type present e.g. registeredID or iPAddress bypassed the Subject CN dNSName name-constraint check. The CN-as-DNS fallback was gated on cert-subjectCN != NULL && cert-altNames == NULL && !cert-isCA instead of "no dNSName SAN", so an out-of-scope CN...

6.3CVSS5.8AI score0.00173EPSS
SaveExploits0References1
Rows per page
Query Builder