Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1308412 matches found

Kitploit
Kitploit•added 2026/09/14 6:19 p.m.•7 views

CVE-2023-4966

CVE-2023-4966 仅用于测试！...

9.4CVSS7.8AI score0.99999EPSS
SaveExploits15
Kitploit
Kitploit•added 2026/09/14 6:18 p.m.•7 views

CVE-2021-3156

CVE-2021-3156...

7.8CVSS6.8AI score0.99969EPSS
SaveExploits83
Kitploit
Kitploit•added 2026/09/14 6:18 p.m.•11 views

CVE-2025-66391

此存储库没有 README。...

8.8CVSS5.7AI score0.00383EPSS
SaveExploits0
OSV
OSV•added 2026/09/14 6:17 p.m.•17 views

DEBIAN-CVE-2026-19542

Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as...

5.6CVSS5.6AI score0.00277EPSS
SaveExploits0References1
OSV
OSV•added 2026/09/14 6:17 p.m.•11 views

DEBIAN-CVE-2026-19499

Calling strfmon and strfmonl in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding. Exploitation requires an application code path that calls strfmon or strfmonl with right-justified width padding...

7.7CVSS6AI score0.00376EPSS
SaveExploits0References1
OSV
OSV•added 2026/09/14 6:17 p.m.•4 views

UBUNTU-CVE-2026-55847

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the ansi.js helper at allure-generator/src/main/javascript/helpers/ansi.js passes attacker-influenced statusMessage and statusTrace values through AnsiToHtml without HTML escaping and wraps...

6.1CVSS5.7AI score0.00245EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins•added 2026/09/14 6:15 p.m.•8 views

Security Bulletin: IBM Sterling Secure Proxy is vulnerable to unauthorized access or information disclosure due to Jetty (CVE-2026-8384)

Summary Eclipse Jetty path traversal/path normalization vulnerability can allow crafted URIs containing semicolon path parameters and .. sequences to bypass path-based authorization checks in applications relying on Jetty's canonicalized paths. IBM Sterling Secure Proxy has addressed the applicab...

5.3CVSS5.9AI score0.0033EPSS
SaveExploits1Affected Software1
Kitploit
Kitploit•added 2026/09/14 6:08 p.m.•7 views

BlueGate-CVE-2020-0609

RD Gateway BlueGate 验证器 CVE-2020-0609 / CVE-2020-0610 远程验证工具 一个用于远程验证与 Microsoft 远程桌面网关漏洞相关的补丁行为的仅检测 型小型 Python 实用工具： CVE-2020-0609 CVE-2020-0610 这些漏洞通常与 BlueGate 研究相关联，影响 Microsoft 远程桌面网关（RD Gateway） ，并可能允许未经认证的远程攻击者在未修补的服务器上执行任意代码 。 此工具不 实现远程代码执行、拒绝服务、持久化或载荷投递功能。 它仅执行一次协议级验证请求，并评估 RD Gateway 的响...

10CVSS8.9AI score0.74897EPSS
SaveExploits13
Kitploit
Kitploit•added 2026/09/14 6:06 p.m.•6 views

CVE-2023-4863

所有功劳归功于 DARKNAVY 的脚本。这只是修改后的版本，在文件顶部添加了 OFFSET 和 VALUE 常量，以便更容易调整。...

8.8CVSS7AI score0.99979EPSS
SaveExploits9References1
OSV
OSV•added 2026/09/14 6:04 p.m.•7 views

RLSA-2026:67283 Moderate: nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

7CVSS7.9AI score0.04452EPSS
SaveExploits6References3
Rockylinux
Rockylinux•added 2026/09/14 6:04 p.m.•5 views

nginx:1.26 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

9.2CVSS7.8AI score0.04452EPSS
SaveExploits6
OSV
OSV•added 2026/09/14 6:01 p.m.•6 views

RLSA-2026:67315 Moderate: nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

7CVSS7.9AI score0.04452EPSS
SaveExploits6References3
Kitploit
Kitploit•added 2026/09/14 6:01 p.m.•9 views

CVE-2024-1709

CVE-2024-1709 CVE-2024-1709 扫描器 - ConnectWise SecureConnect 身份验证绕过漏洞 用法 在脚本目录中创建一个 "hosts.txt" 文件，并在文件中包含您要扫描的主机。 在社交媒体上关注我： X: https://x.com/HussainMFathy LinkedIn: https://www.linkedin.com/in/0xsphinx 免责声明 本软件纯粹为学术研究和开发有效的防御技术而创建，除非获得明确授权，否则不得用于攻击系统。项目维护者不对软件的滥用负责。请负责任地使用。...

10CVSS8.1AI score0.9998EPSS
SaveExploits10
Kitploit
Kitploit•added 2026/09/14 6:01 p.m.•9 views

CVE-2017-16651

CVE-2017-16651 Implementación en Python de Roundcube LFI CVE-2017-16651...

7.8CVSS7.7AI score0.36919EPSS
SaveExploits5
Kitploit
Kitploit•added 2026/09/14 6:00 p.m.•7 views

nextjs-CVE-2024-34351-_exploit

CVE-2024-34351 漏洞利用 CVE-2024-34351 PoC Next.js Server Actions 中的服务器端请求伪造 · CVE-2024-34351 · GitHub 安全公告数据库 挖掘 NextJS 应用中的 SSRF 摘要 针对 NextJS SSRF 完整利用的 PoC。攻击者可以利用 CVE-2024-34351 漏洞从 Next.js 服务器获取任意网站内容。 该漏洞已在 [email protected] 中修复。 使用方法 准备一个重定向服务器。 TypeScript root@kitploit: deno run...

7.5CVSS7.7AI score0.05453EPSS
SaveExploits3References2
Circl
Circl•added 2026/09/14 6:00 p.m.•8 views

CVE-2025-61969

creationtimestamp| type| source ---|---|--- 2026-09-14 18:00:06+00:00| seen| https://t.me/purpsec/1418 2026-09-15 00:00:11+00:00| published-proof-of-concept| https://t.me/purpsec/1418...

7CVSS5.7AI score0.00136EPSS
SaveExploits0References1
Kitploit
Kitploit•added 2026/09/14 5:59 p.m.•9 views

struts1filter

struts1filter 针对 Apache Struts 1 的 CVE-2014-0114 请求参数过滤器解决方案，基于 Alvaro Munoz 与 HP Fortify 团队 的工作。 要使用此过滤器，请将以下过滤器声明及相应映射添加到要保护的 Apache Struts 1 应用程序的 web.xml 描述符中： root@kitploit: ParamWrapperFilter net.rgielen.struts1.filter.ParamWrapperFilter ParamWrapperFilter YOUR ACTION SERVLET...

7.5CVSS7.4AI score0.9895EPSS
SaveExploits4
Kitploit
Kitploit•added 2026/09/14 5:58 p.m.•6 views

smt878u-ionstack-poc

smt878u-ionstack-poc 純粋なC言語、ホスト支援型の再ルート概念実証で、Samsung Galaxy Tab S7 （SM-T878U / gts7l） の CVE-2026-43499 （IonStack / GhostLock）に対するものです。 ランタイムチェーンはネイティブC/ELFコンポーネントのみを使用します。Androidターゲット上でPython、Java、DEX、appprocess、JVMは必要ありません。ADBはデプロイと検証に使用されます。 対応プロファイル このPoCは、すべてのプロファイルチェックが一致しない限り、意図的にフェイルクローズしま...

7.8CVSS7.3AI score0.00789EPSS
SaveExploits99
Kitploit
Kitploit•added 2026/09/14 5:55 p.m.•7 views

CVE-2020-1971

CVE-2020-1971 CVE-2020-1971 Script de escaneo automático & explotación remota. Script de escaneo local automático & parcheo. Actualmente en desarrollo Código fuente parcheado de OpenSSL 1.1.1i Script de instalación desde el código fuente/actualización .deb Actualmente en desarrollo 5:38pm...

5.9CVSS6.9AI score0.07051EPSS
SaveExploits3References2
Kitploit
Kitploit•added 2026/09/14 5:55 p.m.•10 views

watchTowr-vs-Netscaler-CVE-2026-8451

CVE-2026-8451 Citrix Netscaler 内存越界读取 Citrix Netscaler 越界读取检测构件生成工具！ 检测实战 此检测构件生成器将接受目标 Netscaler 设备，并尝试通过 CVE-2026-8451 泄露内存。 只需提供目标系统。包含协议，例如 https://192.168.80.125。 以下是它泄露部分内存的示例： root@kitploit: $ python3 watchTowr-vs-Netscaler-CVE-2026-8451.py https://192.168.80.125 / | | |\ \ \ / / \ \ / |...

8.8CVSS8.3AI score0.15654EPSS
SaveExploits1
Rows per page
Query Builder