Lucene search
+L

657019 matches found

Kitploit
Kitploit
•added 2026/11/03 7:59 p.m.•761 views

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

9.3CVSS8.3AI score0.0591EPSS
SaveExploits2References4
EUVD
EUVD
•added 2026/11/03 7:57 p.m.•8 views

EUVD-2026-116200

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system...

8.4CVSS7AI score0.00107EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/03 7:57 p.m.•26 views

CVE-2026-95723 Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) Client

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system...

8.4CVSS0.00107EPSS
SaveExploits0References1
CVE
CVE
•added 2026/11/03 7:57 p.m.•15 views

CVE-2026-95723

A missing integrity verification vulnerability exists in the Virtual Intranet Access (VIA) client . This flaw could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system. No specific exploit links or patch versions are provided...

8.4CVSS7AI score0.00107EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/03 7:51 p.m.•8 views

EUVD-2026-116167

A missing integrity verification vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system...

7.5CVSS6.9AI score0.00401EPSS
SaveExploits0References1
CVE
CVE
•added 2026/11/03 7:51 p.m.•15 views

CVE-2026-95749

A missing integrity verification vulnerability exists in HPE Networking Fabric Composer . Successful exploitation by an unauthenticated remote attacker could lead to arbitrary code execution on the affected system. No specific affected versions, root cause details, or remediation steps are provid...

7.5CVSS6.9AI score0.00401EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/03 7:50 p.m.•21 views

CVE-2026-95733 Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitrary Code Execution

A vulnerability exists in a component of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system...

9.6CVSS0.00235EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/03 7:50 p.m.•6 views

EUVD-2026-116277

A vulnerability exists in a component of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system...

9.6CVSS6.9AI score0.00235EPSS
SaveExploits0References1
CVE
CVE
•added 2026/11/03 7:50 p.m.•16 views

CVE-2026-95733

A vulnerability exists in a component of HPE Networking Fabric Composer caused by the use of hardcoded credentials . Successful exploitation by an unauthenticated adjacent attacker could allow for arbitrary code execution on the affected system. The vulnerability is characterized by a CRITICAL ba...

9.6CVSS6.9AI score0.00235EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/03 7:50 p.m.•22 views

CVE-2026-95732 Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code Execution

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system...

9.6CVSS0.0029EPSS
SaveExploits0References1
CVE
CVE
•added 2026/11/03 7:50 p.m.•16 views

CVE-2026-95732

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer . This flaw could allow an unauthenticated adjacent attacker to achieve arbitrary code execution on the affected system. No specific root cause, affected versions, or remediation ste...

9.6CVSS7AI score0.0029EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/03 7:50 p.m.•8 views

EUVD-2026-116276

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system...

9.6CVSS7AI score0.0029EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/03 7:48 p.m.•21 views

CVE-2026-63395 isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)

isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's git.checkout writes new child paths through symlinked leading directory components without checking them. A malicious repository can first place a directory symlink and later...

8.8CVSS0.00716EPSS
SaveExploits0References4
CVE
CVE
•added 2026/11/03 7:48 p.m.•18 views

CVE-2026-63395

The isomorphic-git library (prior to version 1.38.6 ) is vulnerable to arbitrary host file writes and potential code execution. The git.checkout function fails to validate leading directory components, allowing a malicious repository to use a directory symlink to write files outside the intended ...

8.8CVSS6.4AI score0.00716EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/11/03 7:48 p.m.•8 views

EUVD-2026-116274

isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's git.checkout writes new child paths through symlinked leading directory components without checking them. A malicious repository can first place a directory symlink and later...

8.8CVSS6.4AI score0.00716EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/11/03 7:48 p.m.•8 views

CVE-2026-63395 isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)

isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's git.checkout writes new child paths through symlinked leading directory components without checking them. A malicious repository can first place a directory symlink and later...

8.8CVSS6.6AI score
SaveExploits0References6
CVE
CVE
•added 2026/11/03 7:39 p.m.•22 views

CVE-2026-63478

The isomorphic-git library (a JavaScript implementation of Git for Node.js and browsers) contains a path traversal vulnerability in its tree parser located at src/models/GitTree.js. Prior to version 1.38.6 , the parser accepts a standalone .. tree-entry name because it only rejects path separator...

5.3CVSS6.5AI score0.00295EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/11/03 7:39 p.m.•23 views

CVE-2026-63478 isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout

isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's tree parser in src/models/GitTree.js accepts a standalone .. tree-entry name because it rejects only path separators. During clone or checkout from a malicious or...

5.3CVSS0.00295EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/11/03 7:39 p.m.•8 views

CVE-2026-63478 isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout

isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's tree parser in src/models/GitTree.js accepts a standalone .. tree-entry name because it rejects only path separators. During clone or checkout from a malicious or...

5.3CVSS6.7AI score
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/11/03 7:32 p.m.•11 views

CVE-2026-65168

A flaw was found in Slurm. A heap-based buffer overflow exists in the socket handling code of the slurmstepd service. A local attacker with low privileges could exploit this vulnerability by sending crafted data to the service socket, corrupting memory. This could allow the attacker to achieve...

7CVSS6.6AI score0.00148EPSS
SaveExploits0References2
Rows per page
Query Builder