Lucene search
+L

483 matches found

Kitploit
Kitploit
added 2026/09/03 8:28 p.m.6 views

CVE-2012-4792

CVE-2012-4792 CVE-2012-4792 सरल कैल्क शोषण...

9.3CVSS7.4AI score0.78823EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/03 1:53 p.m.5 views

CVE-2012-1876

CVE-2012-1876 CVE-2012-1876 सरल कैल्क शोषण...

9.3CVSS5.9AI score0.64962EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/01 9:16 p.m.4 views

manageengine-auditad-cve-2022-28219

मेरे CVE-2022-28219 विश्लेषण के समर्थन के लिए कोड। निष्पादित करने के लिए, Ruby और Rubygems स्थापित होने पर: root@kitploit: gem install httparty ruby ./manageengine-poc.rb यह एक अवधारणा प्रमाण के रूप में डिज़ाइन किया गया है, स्थिर शोषण नहीं। यह केवल calc चलाता है। :...

9.8CVSS7.2AI score0.97193EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/31 7:30 a.m.5 views

win-exec-calc-shellcode

win-exec-calc-shellcode شيل كود صغير خالٍ من NUL ينفّذ calc.exe. يعمل على إصدارات x86 وx64 من ويندوز 5.0-6.3 2000، XP، 2003، 2008، 7، 8، 8.1، مع جميع حزم الخدمات. الأحجام build 306...

5.9AI score
SaveExploits0
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.3 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm/mglru: The issue of division by zero in vmpressurecalclevel has been fixed. evictfolios uses a second pass to reclaim folios that have undergone page writeback and become clean before the first pass is completed. This is becau...

5.5CVSS5.9AI score0.0021EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.5 views

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: fixed the divide by 0 error in calclcoefs The issue arises when the value of u64 is set to cost.model, and then trying to perform a division operation. This could lead to a divide by 0 error. Example: echo 8:0...

6AI score0.002EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability in OpenCV

A issue was discovered in OpenCV before versions 3.4.7 and 4.x before version 4.1.1. There is an out-of-bounds read/write operation in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to a denial of service...

7.5CVSS6.5AI score0.02783EPSS
SaveExploits1References2
NVD
NVD
added 2026/08/22 3:16 p.m.11 views

CVE-2026-77992

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...

9.5CVSS0.00262EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/22 2:20 p.m.14 views

EUVD-2026-64322

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...

9.5CVSS5.2AI score0.00262EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/22 2:20 p.m.33 views

CVE-2026-77992 Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...

9.5CVSS0.00262EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/22 2:20 p.m.47 views

CVE-2026-77992

Fabrik (a Joomla extension by fabrikar.com) versions prior to 4.7.2 are affected by a heredoc terminator breakout in the calc element . The root cause is that the onUpdateComment endpoint did not perform any access checks, allowing unauthenticated network-based attacks with low complexity and no ...

9.5CVSS5.2AI score0.00262EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/22 2:20 p.m.7 views

CVE-2026-77992 Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...

9.5CVSS5.2AI score0.00262EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/10 10:17 a.m.13 views

CVE-2026-66915

Joomla Extension - fabrikar.com - Remote code execution in Fabrik 4.7.2 - An unauthenticated attacker could execute arbitrary code by using the ajaxcalc feature of the calc plugin...

10CVSS0.00612EPSS
SaveExploits1References2
CVE
CVE
added 2026/08/10 9:53 a.m.149 views

CVE-2026-66915

CVE-2026-66915 concerns Joomla extension Fabrik prior to version 4.6.7. An unauthenticated attacker can achieve remote code execution via the ajax_calc feature in the calc plugin. The provided documents do not include explicit exploitation status or a confirmed remediation step; no patch/version ...

10CVSS6.3AI score0.00612EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/08/10 9:53 a.m.14 views

EUVD-2026-55159

Joomla Extension - fabrikar.com - Remote code execution in Fabrik 4.6.7 - An unauthenticated attacker could execute arbitrary code by using the ajaxcalc feature of the calc plugin...

10CVSS6.2AI score0.00612EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/08/10 12:00 a.m.11 views

PT-2026-69425

Name of the Vulnerable Software and Affected Versions Fabrik versions prior to 4.6.9 Description An unauthenticated attacker can execute arbitrary code by leveraging the ajax calc feature within the calc plugin. Recommendations Update to version 4.6.9 or later. As a temporary workaround, restrict...

10CVSS5.7AI score0.00612EPSS
SaveExploits1References7
NVD
NVD
added 2026/08/05 1:24 p.m.10 views

CVE-2026-71278

rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create api/src/controller/calcrulerouter.rs containing an arbitrary field. This route does not take the AuthToken request guard used elsewhere in the application, making it reachable without authentication...

9.8CVSS0.00358EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 12:26 p.m.68 views

CVE-2026-71278

The rust-iot-platform contains an unauthenticated endpoint to create a calc rule (POST /calc-rule/create) where a user-supplied script field is stored and later evaluated with quick_js::Context::eval() without sandboxing. Because this route bypasses the AuthToken guard, an unauthenticated attacke...

9.8CVSS5.4AI score0.00358EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/05 12:26 p.m.38 views

CVE-2026-71278 rust-iot-platform Unauthenticated Remote Code Execution via Unsandboxed Calc-Rule Script Evaluation

rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create api/src/controller/calcrulerouter.rs containing an arbitrary field. This route does not take the AuthToken request guard used elsewhere in the application, making it reachable without authentication...

9.8CVSS0.00358EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/05 12:26 p.m.8 views

CVE-2026-71278

rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create api/src/controller/calcrulerouter.rs containing an arbitrary field. This route does not take the AuthToken request guard used elsewhere in the application, making it reachable without authentication...

9.8CVSS5.4AI score0.00358EPSS
SaveExploits0References2
Rows per page
Query Builder