Lucene search
+L

19858 matches found

Kitploit
Kitploit
added 2026/08/31 1:59 a.m.4 views

CVE-2026-42527

Permissive Default ObjectInputFilter — DNS साइड-चैनल रिप्रोड्यूसर CVE-2026-42527 यह प्रोजेक्ट अपाचे कैमल में CVE-2026-42527 को प्रदर्शित करता है। डिफ़ॉल्ट ObjectInputFilter पैटर्न जो कई कैमल घटक डिफेंस-इन-डेप्थ डिसीरियलाइज़ेशन फ़िल्टरिंग के लिए शिप करते हैं — java.;javax.;org.apache.camel.;! — एक...

8.1CVSS5.2AI score0.00668EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-80657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer The management mailbox channel cleanup helpers can be called from error handling...

5.4AI score0.00155EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.9 views

Amazon Linux 2023 : apr-util, apr-util-devel, apr-util-ldap (ALAS2023-2026-2115)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2115 advisory. APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel...

9.1CVSS5.9AI score0.00508EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.6 views

Amazon Linux 2 : apr-util, --advisory ALAS2-2026-3892 (ALAS-2026-3892)

The version of apr-util installed on the remote host is prior to 1.6.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3892 advisory. APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or password...

9.1CVSS5.9AI score0.00508EPSS
SaveExploits0References10
Amazon
Amazon
added 2026/08/31 12:00 a.m.6 views

Important: apr-util

Issue Overview: APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or...

9.1CVSS5.8AI score0.00508EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-80696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: ltc4282 Fix reading the minimum alarm voltage Coverity reports an out-of-bounds access when reading the minimum alarm voltage for the VGPIO channel. Add...

7.8CVSS5.5AI score0.00128EPSS
SaveExploits0References2
Circl
Circl
added 2026/08/30 6:00 p.m.15 views

CVE-2026-80724

creationtimestamp| type| source ---|---|--- 2026-08-30 18:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100388 2026-08-31 00:00:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100388 2026-09-02 01:00:15+00:00| seen|...

8.8CVSS5.8AI score0.0012EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/30 4:16 p.m.4 views

CVE-2018-10933

POC of CVE-2018-10933 A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access. Usage : root@kitploit: python3 libssh.py -s SERVERADD -u...

9.1CVSS7.5AI score0.91789EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/08/30 3:30 p.m.3 views

LdapRelayScan

LDAP Relay Scan A tool to check Domain Controllers for LDAP server protections regarding the relay of NTLM authentication. If you're interested in the specifics of the error-based enumeration, see below. For details regarding what can be done when you identify a lack of LDAP protections, see the...

8.1CVSS8.8AI score0.07176EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/30 1:09 p.m.3 views

CVE-2018-10933

CVE-2018-10933 Se encontró una vulnerabilidad en la máquina de estados del lado del servidor de libssh antes de las versiones 0.7.6 y 0.8.4. Un cliente malicioso podría crear canales sin realizar primero la autenticación, lo que resulta en acceso no autorizado. ALGUNOS DETALLES El problema provie...

9.1CVSS7.6AI score0.91789EPSS
SaveExploits13References1
Circl
Circl
added 2026/08/30 11:00 a.m.13 views

CVE-2026-12513

creationtimestamp| type| source ---|---|--- 2026-08-30 11:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100338 2026-08-31 00:00:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100338 2026-09-01 20:00:04+00:00| published-proof-of-concept|...

6.8CVSS5.8AI score0.00272EPSS
SaveExploits1References2
Circl
Circl
added 2026/08/30 11:00 a.m.13 views

CVE-2026-79483

creationtimestamp| type| source ---|---|--- 2026-08-30 11:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100341 2026-08-31 00:00:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100341 2026-09-02 01:00:18+00:00| seen|...

5.3CVSS5.8AI score0.00369EPSS
SaveExploits1References1
Circl
Circl
added 2026/08/30 9:00 a.m.12 views

CVE-2023-41257

creationtimestamp| type| source ---|---|--- 2026-08-30 09:00:05+00:00| seen| Telegram/UGgGAoNEue2MyCujvvwdDQWtDO2xEIWXCSv0LD0eAe5covZ4 2026-08-31 00:00:27+00:00| seen| Telegram/UGgGAoNEue2MyCujvvwdDQWtDO2xEIWXCSv0LD0eAe5covZ4...

8.8CVSS7.1AI score0.01627EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/29 8:47 p.m.2 views

CVE-2025-32433-PoC-Analysis

FAQ - CVE-2025-32433 1. Che cos'è Erlang OTP? Erlang è un linguaggio di programmazione generico. OTP Open Telecom Platform è una raccolta di middleware, librerie e principi di progettazione utilizzati per la tolleranza ai guasti tramite la BEAM VPN. 2. Perché questa versione di Erlang è...

10CVSS7AI score0.98594EPSS
SaveExploits38
Circl
Circl
added 2026/08/29 8:00 p.m.15 views

CVE-2026-48273

creationtimestamp| type| source ---|---|--- 2026-08-29 20:00:05+00:00| seen| https://t.me/CyberDispatch/2538 2026-08-30 00:00:38+00:00| seen| https://t.me/CyberDispatch/2538...

6AI score
SaveExploits0References1
Circl
Circl
added 2026/08/29 6:00 p.m.12 views

CVE-2024-32760

creationtimestamp| type| source ---|---|--- 2026-08-29 18:00:05+00:00| seen| https://t.me/angiesoftware/51 2026-08-30 00:00:53+00:00| seen| https://t.me/angiesoftware/51...

6.5CVSS6.8AI score0.00864EPSS
SaveExploits0References1
Circl
Circl
added 2026/08/29 12:00 a.m.13 views

CVE-2026-67394

creationtimestamp| type| source ---|---|--- 2026-08-29 00:00:06+00:00| seen| https://t.me/captainsmok3rofficial/502 2026-09-01 04:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mugkfxftig2y 2026-09-01 13:53:24+00:00| seen|...

9CVSS5.8AI score0.01167EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/08/29 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-40203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When IMAP compression is enabled, the same compression state is reused across responses in a session, so response sizes depend on both attacker-supplied mail an...

3.7CVSS7.2AI score0.00219EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/28 11:17 p.m.15 views

CVE-2026-55785

free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/processor/ueauthentication.go with ordinary equality helpers. Auth5gAkaComfirmRequestProcedure compares RES and XRES with...

3.7CVSS0.00284EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/08/28 10:26 p.m.11 views

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

Summary The AUSF component of free5GC compares authentication response values with normal Go equality helpers instead of constant-time cryptographic comparison functions. Two authentication flows are affected in internal/sbi/processor/ueauthentication.go: 1. 5G-AKA confirmation compares RES and...

8.7CVSS6.8AI score0.00652EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder