Lucene search
+L

74 matches found

Kitploit
Kitploit
•added 2026/11/04 11:28 a.m.•28 views

iDictPy

iDictPy A salty-ass 100% verified hacker status python script to turn apple id's into apple crisp nicememe I initially made this as a better alternative to this piece of shit: https://github.com/Pr0x13/iDict/ but then i forgot i'm a little bit drunk and then this happened. prerequisites are...

6.1AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/11/03 4:17 p.m.•32 views

CVE-2026-65107

NVIDIA Slurm contains a vulnerability where a user could alter the supplemental group list as part of an sbcast file transmission to write a file to a path they would not normally have access to...

6.3CVSS5.8AI score0.00116EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/31 12:54 a.m.•19 views

CVE-2026-84181

CVE-2026-84181 — camel-shiro: authentication bypass via a thread-bound subject Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the Shiro security processor skipped credential verification when the Shiro Subject already bound to the current thread carried the same...

5.9CVSS6.5AI score0.00505EPSS
SaveExploits1References3
NVD
NVD
•added 2026/10/19 11:17 a.m.•15 views

CVE-2026-84181

Improper Authentication vulnerability in Apache Camel Shiro component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Shiro security processor skipped credential verification when the subject already bound to the current thread carried the same principal...

5.9CVSS0.00505EPSS
SaveExploits1References5
Mend
Mend
•added 2026/10/19 10:31 a.m.•14 views

CVE-2026-84181

Improper Authentication vulnerability in Apache Camel Shiro component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Shiro security processor skipped credential verification when the subject already bound to the current thread carried the same principal...

8.2CVSS6.1AI score0.00505EPSS
SaveExploits1References6
EUVD
EUVD
•added 2026/10/19 10:31 a.m.•17 views

EUVD-2026-104184

Improper Authentication vulnerability in Apache Camel Shiro component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Shiro security processor skipped credential verification when the subject already bound to the current thread carried the same principal...

5.9CVSS6.1AI score0.00505EPSS
SaveExploits1References5
GithubExploit
GithubExploit
•added 2026/10/19 9:33 a.m.•26 views

Exploit for CVE-2026-84181

CVE-2026-84181 — camel-shiro: authentication bypass via a thre...

6.4AI score0.00505EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/19 12:00 a.m.•13 views

CVE-2026-84181: Improper Authentication

Improper Authentication vulnerability in Apache Camel Shiro component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Shiro security processor skipped credential verification when the subject already bound to the current thread carried the same principal...

5.9CVSS6.2AI score0.00505EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/10/19 12:00 a.m.•14 views

PT-2026-117344

Improper Authentication vulnerability in Apache Camel Shiro component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Shiro security processor skipped credential verification when the subject already bound to the current thread carried the same principal...

5.9CVSS6.2AI score0.00505EPSS
SaveExploits1References6
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•21 views

Astra Linux – vulnerability in munge

MUNGE is an authentication service used to create and validate user credentials. In versions 0.5 through 0.5.17, a local attacker can exploit a buffer overflow vulnerability in munged the MUNGE authentication daemon to leak cryptographic key material from process memory. Using this leaked key...

7.8CVSS7.2AI score0.00344EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/15 12:31 a.m.•27 views

EUVD-2026-101709

In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenticated user can supply a caller-controlled Identifier parameter to validate credentials for another account and receive responses that distinguish nonexistent users, invalid...

7.5CVSS5.8AI score0.00437EPSS
SaveExploits0References4
NVD
NVD
•added 2026/10/14 10:17 p.m.•19 views

CVE-2026-102298

In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenticated user can supply a caller-controlled Identifier parameter to validate credentials for another account and receive responses that distinguish nonexistent users, invalid...

7.5CVSS0.00437EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/14 9:55 p.m.•45 views

CVE-2026-102298

The Omada Controller in MSP mode contains an authorization bypass vulnerability in the user-confirmation endpoint . Due to a failure to enforce required permission checks, an authenticated user can provide a caller-controlled Identifier parameter to validate credentials for other accounts. The en...

7.5CVSS5.8AI score0.00437EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/14 9:55 p.m.•11 views

CVE-2026-102298 Insufficient Authorization and User Boundary Validation in Omada Controller MSP

In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenticated user can supply a caller-controlled Identifier parameter to validate credentials for another account and receive responses that distinguish nonexistent users, invalid...

7.5CVSS5.8AI score0.00437EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•17 views

PT-2026-113935

Name of the Vulnerable Software and Affected Versions Omada Controller affected versions not specified Description In MSP mode, the user-confirmation endpoint fails to enforce necessary permission checks. An authenticated user can provide a caller-controlled Identifier parameter to validate...

7.5CVSS5.8AI score0.00437EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•12 views

CVE-2026-102298: Authorization Bypass Through User-Controlled Key

In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenticated user can supply a caller-controlled Identifier parameter to validate credentials for another account and receive responses that distinguish nonexistent users, invalid...

7.5CVSS5.8AI score0.00437EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/11 4:41 a.m.•25 views

keimpx

Introducción keimpx es una herramienta de código abierto, publicada bajo la Licencia Apache 2.0. Se puede usar para verificar rápidamente credenciales válidas en una red a través de SMB. Las credenciales pueden ser: Combinación de usuario / contraseña en texto plano. Combinación de usuario / hash...

6.3AI score
SaveExploits0References8
NVD
NVD
•added 2026/09/15 11:17 a.m.•23 views

CVE-2026-91923

KubeSphere through 4.1.3 contains a server-side request forgery vulnerability in the git credential verification endpoint that accepts unvalidated caller-supplied URLs without allowlist restrictions. Authenticated attackers can supply arbitrary URLs to reach internal services and exfiltrate...

8.3CVSS0.00454EPSS
SaveExploits0References6
Mend
Mend
•added 2026/09/15 11:00 a.m.•16 views

CVE-2026-91923

KubeSphere through 4.1.3 contains a server-side request forgery vulnerability in the git credential verification endpoint that accepts unvalidated caller-supplied URLs without allowlist restrictions. Authenticated attackers can supply arbitrary URLs to reach internal services and exfiltrate...

8.3CVSS6AI score0.00454EPSS
SaveExploits0References8
CVE
CVE
•added 2026/09/15 11:00 a.m.•57 views

CVE-2026-91923

KubeSphere through 4.1.3 is affected by a server-side request forgery (SSRF) vulnerability in its git credential verification endpoint . The endpoint accepts caller-supplied URLs without allowlist restrictions, allowing authenticated attackers to direct requests to internal services and exfiltrat...

8.3CVSS6AI score0.00454EPSS
SaveExploits0References6
Rows per page
Query Builder