Lucene search
+L

19856 matches found

EUVD
EUVD
added 2026/09/03 11:22 a.m.6 views

EUVD-2026-70391

WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to view unlisted and group-restricted videos through hardcoded visibility flags and an undefined property. Attackers can access the channel endpoint to retrieve sensitive video...

6.9CVSS5.8AI score0.00205EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/03 11:22 a.m.11 views

CVE-2026-85156 WWBN AVideo Broken Access Control via Channel Page

WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to view unlisted and group-restricted videos through hardcoded visibility flags and an undefined property. Attackers can access the channel endpoint to retrieve sensitive video...

6.9CVSS5.5AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/03 7:52 a.m.3 views

next88

next88 - RCE-сканер для React Server Components Высокопроизводительная реализация на Go для обнаружения RCE-уязвимостей в React Server Components CVE-2025-55182 и CVE-2025-66478. Возможности 🚀 Высокая производительность : скомпилированный бинарный файл Go с конкурентностью на основе горутин 🔍...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 1:32 a.m.6 views

CVE-2026-42167-Exploit

CVE-2026-42167 Master Exploit Tool Профессиональный инструмент для исследования безопасности, предназначенный для эксплуатации уязвимости CVE-2026-42167 в модуле modsql сервера ProFTPD. Этот инструмент выполняет неаутентифицированную SQL-инъекцию для извлечения конфиденциальных файлов с сервера с...

8.1CVSS8.4AI score0.07389EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/03 1:04 a.m.6 views

copy.fail-mitigation-MLM

Создайте новый канал конфигурации State Channel в Multi-Linux Manager, используя код из файла copy-fail.sls. Назначьте канал конфигурации всем вашим машинам и запустите его, или выполните Highstate. Это временное исправление!...

5.4AI score
SaveExploits0
OSV
OSV
added 2026/09/03 12:00 a.m.3 views

UBUNTU-CVE-2026-78662

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

7.5CVSS5.2AI score0.0032EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/09/03 12:00 a.m.3 views

CVE-2026-78662

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

7.5CVSS5.3AI score0.0032EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/03 12:00 a.m.2 views

UBUNTU-CVE-2026-56855

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

7.5CVSS5.3AI score0.00384EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/09/03 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-84308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php...

6.3CVSS5.7AI score0.00212EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/02 11:49 p.m.7 views

CVE-2025-6792

Exploit : Abonnement non autorisé à un canal Pusher écoute clandestine 1 Obtenir les identifiants Pusher depuis la console du navigateur root@kitploit: console.log window.wpguppyscriptsvars.pusherKey, window.wpguppyscriptsvars.pusherCluster ; 2 S'abonner au canal privé d'une victime root@kitploit...

5.3CVSS5.2AI score0.00344EPSS
SaveExploits0
Circl
Circl
added 2026/09/02 11:00 p.m.8 views

CVE-2025-52942

creationtimestamp| type| source ---|---|--- 2026-09-02 23:00:05+00:00| seen| https://t.me/payloadUAV/168 2026-09-03 00:00:36+00:00| seen| https://t.me/payloadUAV/168...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 10:43 p.m.9 views

CVE-2025-32433-available-for-windows

CVE-2025-32433 Информация об уязвимости: https://nvd.nist.gov/vuln/detail/CVE-2025-32433 POC root@kitploit: kdev :: /erlang/CVE-2025-32433 ‹main› » python3 cve-2025-32433.py -h usage: cve-2025-32433.py -h -d --host HOST --port PORT Exploit for CVE-2025-32433 Erlang OTP SSH server. options: -h,...

10CVSS8AI score0.98594EPSS
SaveExploits38
OSV
OSV
added 2026/09/02 8:17 p.m.8 views

DEBIAN-CVE-2026-78662

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

7.5CVSS5.2AI score0.0032EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/02 8:17 p.m.5 views

CVE-2026-78662

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

7.5CVSS0.0032EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/02 8:17 p.m.7 views

DEBIAN-CVE-2026-56855

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

7.5CVSS5.3AI score0.00384EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/02 8:17 p.m.6 views

CVE-2026-56855

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

7.5CVSS0.00384EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/02 7:37 p.m.44 views

CVE-2026-56855

CVE-2026-56855 is a denial-of-service vulnerability in the golang.org/x/crypto/ssh package. After an SSH channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection . The root cause was that the implementation was buffering and blocking on ...

7.5CVSS5.8AI score0.00384EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2026/09/02 7:37 p.m.34 views

CVE-2026-78662

CVE-2026-78662 affects the golang.org/x/crypto/ssh library. A channel registered in the mux's chanList was not marked as established until fully set up. A malicious peer could flood the channel's incomingRequests, deadlocking the entire connection (DoS). The fix introduces an atomic established s...

7.5CVSS5.9AI score0.0032EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/09/02 7:37 p.m.39 views

CVE-2026-78662 Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

0.0032EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/02 7:37 p.m.40 views

CVE-2026-56855 Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

0.00384EPSS
SaveExploits0References4
Rows per page
Query Builder