Lucene search
+L

26526 matches found

OSV
OSV
•added 2026/09/25 1:23 p.m.•9 views

CVE-2026-80431 Out-of-bounds write in the kitty text sizing protocol allows termination of the terminal process

Out-of-bounds Write in the natural width branch of the text sizing protocol in kitty from 0.40.0 before 0.49.0 allows a program writing to the terminal to write past the end of a fixed-size buffer, because screenhandlemulticellcommand in kitty/screen.c appends each codepoint of a grapheme cluster...

6.8CVSS6.2AI score
SaveExploits0References6
CVE
CVE
•added 2026/09/25 12:54 p.m.•24 views

CVE-2026-95832

The kitty terminal emulator (versions 0.47.3 before 0.49.0 ) is vulnerable to arbitrary command execution due to improper neutralization of special elements in the colour control escape code handler . The flaw exists because color_control() in kitty/window.py includes unrecognised field names in ...

9.3CVSS6.3AI score0.0016EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/25 12:00 p.m.•12 views

brokentooth

brokentooth POC para CVE-2018-4327 al menos eso creo, ya que @SparkZheng discutió tanto CVE-2018-4327 como CVE-2018-4330, pero no queda claro por su parte cuál se relaciona con cada bug; pero como describió este primero, me lanzo a adivinar. Probado en iPhone 6S 11.3.1 Debería funcionar hasta 11....

9.3CVSS7.6AI score0.02326EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/09/25 11:14 a.m.•6 views

CVE-2026-79109

A flaw was found in Google Chrome's printing component. A remote attacker, after compromising the renderer process, could exploit improper input validation by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

8.3CVSS6.6AI score0.00432EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 10:33 a.m.•12 views

Presentations

Presentations 2025 CodeBlue 2025 - 18th to 19th November 2025 AI Accelerated Exploiting: Compromising MTE Enabled Pixel from DSP Coprocessor by PAN Zhenpeng & Billy JHENG Bing Jhong Dancing with Exynos Coprocessor: Pwning Samsung for fun and “profit” by Muhammad Ramdhan, PAN Zhenpeng & Billy JHEN...

7.3AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/25 10:05 a.m.•8 views

CVE-2026-93603

A flaw was found in vm2. This vulnerability allows an attacker who can execute untrusted script within the sandbox to achieve arbitrary code execution on the underlying host system by escaping sandbox containment. The issue occurs because vm2 fails to properly handle function calls lacking an...

10CVSS8.6AI score0.00726EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/25 10:01 a.m.•9 views

CVE-2026-21858-and-CVE-2025-68613

Ni8mare: n8n Pre-Auth RCE CVE-2026-21858 & CVE-2025-68613 — Vulnerability Lab & PoC Report Hands-on lab environment Vulnerable Lab and a detailed exploitation analysis report of the Ni8mare vulnerability chain on the n8n platform — from Arbitrary File Read CVE-2026-21858 to Remote Code Execution...

10CVSS8.7AI score0.98994EPSS
SaveExploits47References1
Kitploit
Kitploit
•added 2026/09/25 9:59 a.m.•14 views

foxcage

foxcage Run Firefox in a rootless Podman container for security isolation. Your browser runs with almost no Linux capabilities, in its own user and network namespace, isolated from the host — while still having full GPU acceleration, audio, and DRM support. Why foxcage? Firefox already has a...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 9:48 a.m.•11 views

UAP-protocol

root@kitploit: ██╗ ██╗ █████╗ ██████╗ ██║ ██║██╔══██╗██╔══██╗ ██║ ██║███████║██████╔╝ ██║ ██║██╔══██║██╔═══╝ ╚██████╔╝██║ ██║██║ ╚═════╝ ╚═╝ ╚═╝╚═╝ Universal Agent Protocol Un protocolo de comunicación unificado y centrado en la seguridad para el acceso a herramientas, la coordinación de agentes ...

9.4CVSS8.8AI score0.44453EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/09/25 9:36 a.m.•7 views

CVE-2026-93605

A flaw was found in vm2. The sandbox environment fails to restrict access to the childprocess module, which handles system command execution. In environments configured to allow built-in modules, an attacker capable of running untrusted code within the sandbox can load this module to break...

10CVSS8.5AI score0.00726EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/25 8:08 a.m.•7 views

CVE-2026-79129

A flaw was found in Google Chrome on Android. A remote attacker, leveraging social engineering, could exploit a use-after-free vulnerability in the Sessions component. This flaw allows the attacker to execute arbitrary code outside the sandbox through user interface interaction, potentially leadi...

9.6CVSS6.8AI score0.00426EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/25 8:03 a.m.•18 views

CVE-2026-97863

The cisco_firesight_manager_ACL_rule_export module in misp-modules is vulnerable to Shell Command Injection . The module generates a .sh script by interpolating configuration and MISP attribute values (such as destination IPs and URLs) into single-quoted shell strings without proper escaping. An ...

6.3CVSS6.3AI score0.0032EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 7:30 a.m.•6 views

CVE-2025-9074-Docker-Exploit

CVE-2025-9074 Docker Container Command Execution Tool A powerful Docker remote API exploitation tool for security research and testing of CVE-2025-9074 vulnerability. Core Advantages ✅ Fully automated container lifecycle management : Automatically creates temporary containers, cleans up after...

9.3CVSS8.5AI score0.01629EPSS
SaveExploits15
Kitploit
Kitploit
•added 2026/09/25 7:26 a.m.•15 views

vmware-exploitation

VMware Exploitation A collection of links related to VMware escape exploits. Pull requests are welcome. Follow @andreyknvl on Twitter or @[email protected] on Mastodon to be notified of updates. Research 2024 "Chaining N-days to Compromise All": "Part 4 — VMware Workstation Information...

6AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/09/25 7:04 a.m.•7 views

CVE-2026-78909

A flaw was found in Google Chrome. This use-after-free vulnerability in the Views component allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by leveraging social engineering tactics to entice a user to visit a specially crafted HTM...

9.6CVSS6.8AI score0.00462EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 6:51 a.m.•12 views

MAL-015

MAL-015: Isolation Escape 2 in Ansible Tower Installations of Ansible Tower on certain Rhel 7/8 setups are potentially vulnerable to “Job Isolation” Escapes that allows an attacker to elevate to the “awx” user from outside the isolated environment. The following files/setups can be leveraged by...

6.7CVSS7AI score0.00411EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/09/25 6:39 a.m.•26 views

CVE-2026-84281 Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'productTitle' in '_fpd_data' Order Item Meta

The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'productTitle' in 'fpddata' Order Item Meta in all versions up to, and including, 6.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

7.2CVSS0.00206EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/25 6:16 a.m.•6 views

CVE-2026-87509

A flaw was found in the Google Chrome Updater. This incorrect authorization vulnerability allows a local attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by exploiting the flaw through a local program, leading to unauthorized code execution on the...

8.1CVSS6.7AI score0.00122EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/25 6:15 a.m.•9 views

CVE-2026-87448

A flaw was found in DevTools in Google Chrome. This vulnerability, a use-after-free, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation occurs when a user visits a specially crafted HTML page...

9.6CVSS6.5AI score0.00462EPSS
SaveExploits0References2
Rockylinux
Rockylinux
•added 2026/09/25 6:09 a.m.•11 views

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

10CVSS6.3AI score0.00628EPSS
SaveExploits0
Rows per page
Query Builder