Lucene search
+L

501 matches found

Kitploit
Kitploit
•added 2026/09/29 5:23 p.m.•14 views

TrashEmail

简而言之 TrashEmail 是一个托管的 Telegram 机器人,通过提供一次性电子邮件地址来保护你的私人邮箱。它可以创建、管理临时邮箱,并将其与你的 Telegram 机器人聊天关联起来。 机器人在哪里? - @trashemailbot 如何创建一次性邮箱? - 决定一个用户名,然后告诉机器人即可 😄 一次可以拥有多少个邮箱? - 目前数量限制为 8 个。 如何查看我的邮件? - 如果有你的邮件,它会直接发送到 Telegram 😄 很简单吧。 我需要设置并记住任何密码吗? - 不需要,这就是它的巧妙之处。 我为什么要维护并托管它? - 这是我为社区提供的第一个这类工具...

6.1AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/03/26 5:01 p.m.•25 views

CVE-2026-29092

Kiteworks is a private data network PDN. Prior to version 9.2.1, a vulnerability in Kiteworks Email Protection Gateway session management allows blocked users to maintain active sessions after their account is disabled. This could allow unauthorized access to continue until the session naturally...

4.9CVSS5.8AI score0.00335EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/25 5:16 p.m.•17 views

CVE-2026-29092

Kiteworks is a private data network PDN. Prior to version 9.2.1, a vulnerability in Kiteworks Email Protection Gateway session management allows blocked users to maintain active sessions after their account is disabled. This could allow unauthorized access to continue until the session naturally...

7.5CVSS0.00335EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/25 4:59 p.m.•9 views

CVE-2026-29092

Kiteworks is a private data network PDN. Prior to version 9.2.1, a vulnerability in Kiteworks Email Protection Gateway session management allows blocked users to maintain active sessions after their account is disabled. This could allow unauthorized access to continue until the session naturally...

4.9CVSS5.8AI score0.00335EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/03/25 4:59 p.m.•69 views

EUVD-2026-15807

Kiteworks is a private data network PDN. Prior to version 9.2.1, a vulnerability in Kiteworks Email Protection Gateway session management allows blocked users to maintain active sessions after their account is disabled. This could allow unauthorized access to continue until the session naturally...

4.9CVSS5.8AI score0.00335EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/25 4:59 p.m.•34 views

CVE-2026-29092 Kiteworks Email Protection Gateway has an Insufficient Session Expiration

Kiteworks is a private data network PDN. Prior to version 9.2.1, a vulnerability in Kiteworks Email Protection Gateway session management allows blocked users to maintain active sessions after their account is disabled. This could allow unauthorized access to continue until the session naturally...

4.9CVSS0.00335EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•18 views

PT-2026-28070

Kiteworks is a private data network PDN. Prior to version 9.2.1, a vulnerability in Kiteworks Email Protection Gateway session management allows blocked users to maintain active sessions after their account is disabled. This could allow unauthorized access to continue until the session naturally...

4.9CVSS5.8AI score0.00335EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•1 views

CVE-2026-29092: Insufficient Session Expiration

Kiteworks is a private data network PDN. Prior to version 9.2.1, a vulnerability in Kiteworks Email Protection Gateway session management allows blocked users to maintain active sessions after their account is disabled. This could allow unauthorized access to continue until the session naturally...

7.5CVSS5.9AI score0.00335EPSS
SaveExploits0References1
OSV
OSV
•added 2026/03/19 6:21 p.m.•28 views

GHSA-H29G-Q5C2-9H4F Parse Server email verification resend page leaks user existence

Impact The Pages route and legacy PublicAPI route for resending email verification links return distinguishable responses depending on whether the provided username exists and has an unverified email. This allows an unauthenticated attacker to enumerate valid usernames by observing different...

6.3CVSS5.9AI score0.00431EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/03/01 1:43 a.m.•18 views

CVE-2026-28272

Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...

8.1CVSS5.9AI score0.00434EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/27 9:16 p.m.•24 views

CVE-2026-28272

Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...

8.1CVSS0.00434EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/27 8:22 p.m.•8 views

CVE-2026-28272

Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...

8.1CVSS5.9AI score0.00434EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/02/27 8:22 p.m.•45 views

CVE-2026-28272 Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability

Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...

8.1CVSS0.00434EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/27 8:22 p.m.•14 views

CVE-2026-28272 Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability

Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...

8.1CVSS5.8AI score0.00434EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/02/27 8:22 p.m.•19 views

EUVD-2026-9067

Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...

8.1CVSS5.9AI score0.00434EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/27 8:22 p.m.•66 views

CVE-2026-28272

Kiteworks Email Protection Gateway (pre-9.2.0) has a stored XSS vulnerability exploitable by authenticated administrators via a configuration interface. The stored script can execute when users interact with the affected UI, potentially impacting confidentiality and integrity (C=HIGH, I=HIGH) wit...

8.1CVSS5.9AI score0.00434EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/27 12:00 a.m.•3 views

CVE-2026-28272: Improper Neutralization of Input During Web Page Generation

Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...

8.1CVSS5.8AI score0.00434EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/27 12:00 a.m.•16 views

Kiteworks 跨站脚本漏洞

Kiteworks is a security private network data software developed by Kiteworks Corporation in the United States. Versions of Kiteworks prior to 9.2.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from defects in the configuration interface of Email Protection Gateway,...

8.1CVSS5.6AI score0.00434EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/27 12:00 a.m.•16 views

PT-2026-22396

Name of the Vulnerable Software and Affected Versions Kiteworks versions prior to 9.2.0 Description Kiteworks Email Protection Gateway contains a flaw that allows authenticated administrators to inject malicious scripts through a configuration interface. These scripts execute when users interact...

8.1CVSS6AI score0.00434EPSS
SaveExploits0References6
The Hacker News
The Hacker News
•added 2026/01/22 11:30 a.m.•16 views

Filling the Most Common Gaps in Google Workspace Security

Security teams at agile, fast-growing companies often have the same mandate: secure the business without slowing it down. Most teams inherit a tech stack optimized for breakneck growth, not resilience. In these environments, the security team is the helpdesk, the compliance expert, and the incide...

5.9AI score
SaveExploits0
Rows per page
Query Builder