Lucene search
+L

1257772 matches found

RedHat Linux
RedHat Linux
added 2026/09/16 6:05 p.m.7 views

No title provided

A flaw was found in Arc. This vulnerability allows a remote unauthenticated attacker to access Go debug pprof endpoints due to improper authentication bypass. Successful exploitation can lead to the disclosure of sensitive runtime state information and enable a CPU-burn Denial of Service DoS...

8.8CVSS0.00358EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/09/16 6:05 p.m.7 views

postcss: PostCSS: Information disclosure via crafted sourceMappingURL

A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration the 'from' parameter is not set. This can cause the application to read and expose unintended source-map files, potentially revealing...

6.3CVSS0.00451EPSS
SaveExploits2References7
OSV
OSV
added 2026/09/16 6:04 p.m.2 views

RLSA-2026:67614 Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

7CVSS0.01821EPSS
SaveExploits0References4
Rockylinux
Rockylinux
added 2026/09/16 6:04 p.m.4 views

.NET 8.0 security, bug fix, and enhancement update

An update is available for dotnet8.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a fast, lightweight and modular platform for creating cross platfor...

6.5CVSS0.00272EPSS
SaveExploits0
Rockylinux
Rockylinux
added 2026/09/16 6:04 p.m.3 views

.NET 9.0 security, bug fix, and enhancement update

An update is available for dotnet9.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a fast, lightweight and modular platform for creating cross platfor...

7CVSS0.01821EPSS
SaveExploits0
Rockylinux
Rockylinux
added 2026/09/16 6:04 p.m.4 views

.NET 10.0 security, bug fix, and enhancement update

An update is available for dotnet10.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a fast, lightweight and modular platform for creating cross platfo...

7CVSS0.01821EPSS
SaveExploits0
OSV
OSV
added 2026/09/16 6:04 p.m.4 views

RLSA-2026:67524 Moderate: .NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

6.5CVSS0.00272EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/16 6:04 p.m.3 views

RLSA-2026:67613 Important: .NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

7CVSS0.01821EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/16 6:02 p.m.12 views

CVE-2021-38314

CVE-2021-38314 Python Exploit Detail The Gutenberg Template Library & Redux Framework plugin Example PoC - https://youtu.be/n1e4aFmXvOk Links CVE-2021-38314...

5.3CVSS5.9AI score0.28961EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/16 6:00 p.m.7 views

derailed

derailed CVE-2021-40875: Improper Access Control in Gurock TestRail versions give it the url of the target without the md5 path https://foo.com Run dirsearch or your preferred fuzzing tool against the list. You'll noticed that a lot of the files a fairly standard in size 0B/15B or 25B/31B/32MB --...

7.5CVSS7.5AI score0.48417EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/16 5:53 p.m.7 views

CVE-2025-50565

CVE-2025-50565 Description Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, which can be remotely initiated by an attacker. Vulnerability Type SQL Injection Attack Type Remote Impact Information Disclosure true Has vendor confirmed true Discoverer...

6.5CVSS5.9AI score0.00249EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 5:38 p.m.7 views

ecologyExp.jar

ecologyExp.jar 泛微oa数据库配置文件读取 java -jar ecologyExp.jar http://127.0.0.1 源码 package com.test; import org.apache.http.HttpEntity; import org.apache.http.client.methods.CloseableHttpResponse; import org.apache.http.client.methods.HttpGet; import org.apache.http.impl.client.CloseableHttpClient; import...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 5:38 p.m.8 views

CVE-2026-36438

CVE-2026-36438: Sensitive information via password reset The Intelbras VIP 1230 B/D G4 versions prior to 6 allows a remote attacker to obtain sensitive information of administrator account via password reset functionality under OutsideCmd file. Discovered by Henrique Koji, Feb 2026. References:...

5.3CVSS5.9AI score0.00349EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 5:36 p.m.11 views

CVE-2026-36374

描述 已发现一个公共端点,允许使用可预测的标识符(证书代码)进行证书查询,且无需任何身份验证或授权机制。 通过枚举该标识符,攻击者可以访问第三方个人数据,包括全名、CPF(巴西个人纳税人登记号)、RG(巴西身份证号)、出生日期和出生地。 同时还观察到,即使证书持有人选择在专业网络或其他平台上公开分享其带有部分脱敏个人数据的文凭,证书标识符通常仍然可见。通过该标识符,可以直接查询端点并获取完整数据,完全绕过界面中实施的脱敏机制。 受影响的端点 https://www.fiap.com.br/consultadocumento 载荷示例 8 字符标识符 概念验证(PoC)...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 5:33 p.m.10 views

CVE-2024-9466

CVE-2024-9466 CVE-2024-9466 Proof of Concept PoC Description This script checks for the CVE-2024-9466 vulnerability by appending /home/userSpace/devices/debug.txt to a list of target URLs or IP addresses. It determines if the target is vulnerable based on the HTTP response status code and whether...

8.2CVSS7AI score0.13584EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 5:31 p.m.11 views

r3con

R3CON Multifunctional Web Recon & Vulnerability Scanner Tool r3con is a Multifunctional Web Recon & Vulnerability Scanner Tool and incredibly fast crawler that can find multiple vulnerabilitys and gather information. Check for vulnerabilities Reflected XSS Multi-threaded crawling Open-redirection...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/16 5:23 p.m.12 views

CVE-2023-32117

CVE-2023-32117 Integrate Google Drive ","username":"admin","name":"admin","email":"[email protected]","role":"Administrator","folders":,"id":2,"avatar":"img alt='' src="http:///%5C/%5C/2.gravatar.com%5C/avatar%5C/b58996c504c5638798eb6b511e6f49af?s=32&d=mm&r=g"...

9.8CVSS8AI score0.07335EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 5:22 p.m.8 views

CVE-2025-11174

CVE-2025-11174: Unauthenticated Information Disclosure in Document Library Lite WordPress Plugin Keywords: CVE-2025-11174, Document Library Lite vulnerability, information disclosure, WordPress security, unauthenticated AJAX exploit, WordPress plugin vulnerability, CWE-862, WordPress document...

5.3CVSS5.9AI score0.00284EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/16 5:22 p.m.9 views

CVE-2023-30458

CVE-2023-30458 Exploit Title: Medicine Tracker System 1.0 - Observable Discrepancy: Username enumeration via response timing Date: April, 22 2023 Exploit Author: William David Mathisen d34dun1c02n Vendor Homepage:...

5.3CVSS6.1AI score0.00836EPSS
SaveExploits1
NVD
NVD
added 2026/09/16 5:18 p.m.3 views

CVE-2026-87028

Concrete CMS 9 through 9.5.3 did not confirm that a board InstanceItem submitted to the custom-slot preview endpoint belonged to the board instance the requesting user was authorized to edit, and did not enforce page-view permission before generating page-backed summary content. As a result, an...

5.3CVSS0.00272EPSS
SaveExploits0References1
Rows per page
Query Builder