Lucene search
+L

1263691 matches found

Kitploit
Kitploit
added 2026/09/17 9:10 p.m.15 views

creep-web-app-scanner

creep-web-app-scanner A very primitive website scanner currently under development by an NCC Group employee and University graduate with 20% research time. creep currently crawls a site, and searches for potentially interesting information within each page. creep will crawl your HTTP only target...

5.8AI score
SaveExploits0
CVE
CVE
added 2026/09/17 9:04 p.m.25 views

CVE-2026-77281

Caddy (an extensible HTTP server platform) versions 2.11.3 and earlier are affected by a placeholder re-expansion vulnerability in the rewrite handler (modules/caddyhttp/rewrite/rewrite.go). When a rewrite URI ends with a literal question mark, Rewrite.Rewrite() passes attacker-controlled replace...

6.5CVSS5.7AI score0.0036EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/17 9:04 p.m.8 views

CVE-2026-77281 Caddy: rewrite placeholder re-expansion

Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, three configuration-dependent weaknesses affect the handler and placeholder layer. In modules/caddyhttp/rewrite/rewrite.go, Rewrite.Rewrite can pass attacker-controlled replacement bytes through...

6.5CVSS5.8AI score
SaveExploits0References6
Debian CVE
Debian CVE
added 2026/09/17 9:04 p.m.8 views

CVE-2026-77281

Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, three configuration-dependent weaknesses affect the handler and placeholder layer. In modules/caddyhttp/rewrite/rewrite.go, Rewrite.Rewrite can pass attacker-controlled replacement bytes through...

6.5CVSS5.7AI score0.0036EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/09/17 9:04 p.m.26 views

CVE-2026-77281 Caddy: rewrite placeholder re-expansion

Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, three configuration-dependent weaknesses affect the handler and placeholder layer. In modules/caddyhttp/rewrite/rewrite.go, Rewrite.Rewrite can pass attacker-controlled replacement bytes through...

6.5CVSS0.0036EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/17 9:04 p.m.4 views

grafana: Grafana: Information disclosure via SQL Expressions vulnerability

A flaw was found in Grafana. An authenticated attacker can exploit a vulnerability in SQL Expressions to read arbitrary files from the Grafana server's filesystem. This information disclosure is possible only when the sqlExpressions feature toggle is enabled...

6.5CVSS6.7AI score0.00353EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/17 8:59 p.m.9 views

OutlookLeakTest

The Outlook HTML Leak Test Project! Blog post: https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/may/smb-hash-hijacking-and-user-tracking-in-ms-outlook/ What's in "./Schemes-List.xlsx"? List of URI schemes that might work in Windows. These schemes/protocols can be useful in...

6.1AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/09/17 8:47 p.m.13 views

CVE-2026-85124

A flaw was found in @fastify/http-proxy. This component, designed to proxy HTTP requests, does not correctly validate incoming request paths, specifically failing to account for backslash-based dot-segments. An unauthenticated network attacker can exploit this vulnerability to bypass the proxy's...

7.5CVSS5.7AI score0.00552EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/17 8:46 p.m.8 views

shell-history-leaks

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install shell-history-leaks Run bellow command to check shell-history-leaks -h Configurations 2. We integrated with the...

6AI score
SaveExploits0References2
EUVD
EUVD
added 2026/09/17 8:31 p.m.19 views

EUVD-2026-81098

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs...

2CVSS5.6AI score0.00187EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/17 8:31 p.m.9 views

GHSA-8WMF-6V46-5GFG OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Summary OpenTelemetry Go versions 1.5.0 through 1.44.0 can include trace exporter endpoint configuration in an internal diagnostic log emitted when an SDK TracerProvider is created. The default OpenTelemetry logger does not emit this event. Exposure requires an application to install a logger tha...

2CVSS5.7AI score0.00187EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2026/09/17 8:31 p.m.15 views

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

Summary OpenTelemetry Go versions 1.5.0 through 1.44.0 can include trace exporter endpoint configuration in an internal diagnostic log emitted when an SDK TracerProvider is created. The default OpenTelemetry logger does not emit this event. Exposure requires an application to install a logger tha...

2CVSS5.7AI score0.00187EPSS
SaveExploits0References7Affected Software5
CVE
CVE
added 2026/09/17 8:29 p.m.32 views

CVE-2026-54604

Prior to 4.0.1 , OpenSlide is affected by a bug where a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c to request a full-height destination for a partial bottom tile row, allowing uninitialized heap memory to enter pixel data returned by opensli...

5.3CVSS5.8AI score0.003EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2026/09/17 8:28 p.m.11 views

Jupyter Server: 5xx request logging leaks token-bearing Referer header values

Summary When a request returns a 500, jupyterserver/log.py logs a small JSON block of request headers. The Referer header was copied into it as-is, so a token in the Referer URL ended up in the logs in plain text. Impact Anyone who can read the server logs can pick tokens out of these 500 entries...

7.1CVSS5.8AI score0.00238EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/09/17 8:28 p.m.7 views

GHSA-C3MW-737P-C7G2 Jupyter Server: 5xx request logging leaks token-bearing Referer header values

Summary When a request returns a 500, jupyterserver/log.py logs a small JSON block of request headers. The Referer header was copied into it as-is, so a token in the Referer URL ended up in the logs in plain text. Impact Anyone who can read the server logs can pick tokens out of these 500 entries...

7.1CVSS5.8AI score0.00238EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/17 8:28 p.m.10 views

CVE-2026-86049 Jupyter Server: 5xx request logging leaks token-bearing Referer header values

Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyterserver/log.py copies the Referer header into a JSON header block without applying the token scrubbing used for the request URI. A request that returns HTTP 500 while the...

7.1CVSS5.8AI score
SaveExploits0References6
EUVD
EUVD
added 2026/09/17 8:28 p.m.14 views

EUVD-2026-82436

Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyterserver/log.py copies the Referer header into a JSON header block without applying the token scrubbing used for the request URI. A request that returns HTTP 500 while the...

7.1CVSS5.8AI score0.00238EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/09/17 8:28 p.m.11 views

CVE-2026-86049

Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyterserver/log.py copies the Referer header into a JSON header block without applying the token scrubbing used for the request URI. A request that returns HTTP 500 while the...

7.1CVSS5.8AI score0.00238EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/09/17 8:28 p.m.8 views

CVE-2026-86049 Jupyter Server: 5xx request logging leaks token-bearing Referer header values

Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyterserver/log.py copies the Referer header into a JSON header block without applying the token scrubbing used for the request URI. A request that returns HTTP 500 while the...

7.1CVSS5.8AI score0.00238EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/09/17 8:27 p.m.9 views

Grav: media_directory() Twig function allows filesystem path traversal and file content disclosure from sandboxed page content

Summary The mediadirectory Twig function is allow-listed for use in sandboxed, editor-authored page content system/config/security.yaml. Its implementation, GravExtension::mediaDirFunc, only treats the input as unsafe when it looks like a Grav stream user://, theme://, etc. If the input is instea...

7.1CVSS6AI score0.00307EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder