Lucene search
+L

40497 matches found

CVE
CVE
added 2026/09/14 8:09 p.m.22 views

CVE-2026-53717

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, internal/wasm/imagefetcher.go follows tenant-controlled EnvoyExtensionPolicy spec.wasm.code.image.url values to Docker or OCI Wasm layers, and...

6.5CVSS0.00044EPSS
SaveExploits0References9
CVE
CVE
added 2026/09/14 8:08 p.m.10 views

CVE-2026-15396

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...

6.5CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/14 8:01 p.m.10 views

CVE-2026-15634

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...

6.5CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 6:20 p.m.6 views

CVE-2023-44766_ConcreteCMS-Stored-XSS---SEO

ConcreteCMS Stored XSS v.9.2.1 Author: Sergio Description: Cross Site Scripting vulnerability in ConcreteCMS v.9.2.1 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Extra from Page Settings. Attack Vectors: Scripting A vulnerability in the sanitization of the...

4.8CVSS5.8AI score0.00558EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 6:19 p.m.7 views

Cookie-Swapper

Cookie Swapper Burp Suite extension that auto-replaces cookies and headers in requests. Stop wasting time copy-pasting session tokens into every request. Why? You got a retest, a needs more info bug, or just expired sessions. You need to replay dozens of requests from HTTP History and Repeater bu...

5.9AI score
SaveExploits0
NVD
NVD
added 2026/09/14 6:17 p.m.2 views

CVE-2026-54182

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Prior to 4.1.70, 5.6.2, 6.8.13, and 7.0.36, Backpack\CRUD\Stats::makeCurlRequest in src/Stats.php is reached from...

8.1CVSS
SaveExploits0References10
NVD
NVD
added 2026/09/14 6:17 p.m.2 views

CVE-2026-50270

dd-trace-java is a Datadog APM client for Java. Prior to 1.62.0, W3C baggage extraction does not enforce DDTRACEBAGGAGEMAXITEMS, which defaults to 64, or DDTRACEBAGGAGEMAXBYTES, which defaults to 8192, although those limits apply during baggage injection. A remote unauthenticated attacker can sen...

7.5CVSS0.00106EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/14 6:11 p.m.7 views

CVE-2020-35590

Exploit Information Exploit Title: WordPress Plugin Limit Login Attempts Reloaded 2.13.0 - Login Limit Bypass CVE: CVE-2020-35590 Date: 2020-06-09 Exploit Author: N4nj0 Software Link: https://wordpress.org/plugins/limit-login-attempts-reloaded/ Version: 2.13.0 Tested on: WordPress 5.4.1, 5.4.2...

9.8CVSS8AI score0.04348EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/14 6:10 p.m.6 views

Clickjacking-Exploit-Detector

Clickjacking-Exploit-Detector The Clickjacking Exploit Detector uses webpage scanning techniques to identify potential vulnerabilities and provide analysis of those elements. Features HTML Scanning: Checks HTML elements and iframe elements that can be exploited for clickjacking. Warning of...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 6:07 p.m.8 views

CVE-2026-42945-NGINX-Rift-Toolkit

CVE-2026-42945 Nginx Rift Vulnerability Toolkit Comprehensive toolkit for scanning, patching, and testing CVE-2026-42945 - a critical RCE vulnerability in nginx Table of Contents Overview CVE Details Features Toolkit Components Requirements Installation Usage Workflow Examples Security...

9.2CVSS7.7AI score0.68047EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/14 6:06 p.m.12 views

CVE-2024-50395

CVE-2024-50395 CVE Info An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege. We have already fixed the vulnerability in the following version:...

8.8CVSS5.9AI score0.0136EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 6:06 p.m.7 views

crlf-powered-desync-scanner

CRLF-Powered Desync Scanner This is the Burp Extension we used to detect all cases from our research CRLF-Powered Desync Attacks: Beheading HTTP Streams. It's a research-first scanner built using BulkScan similar to HTTP Request Smuggler and others. Implementation Request Header Injection probe...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 6:03 p.m.5 views

CVE-2025-55182-bypass

CVE-2025-55182 Header Bypass Next-Action header bypass for CVE-2025-55182. Achieves React RSC RCE without distinctive headers, bypassing WAF rules. Key Finding The Next-Action header is NOT required for exploitation...

10CVSS7.5AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/14 5:56 p.m.16 views

cloudfrunt

CloudFrunt CloudFrunt is a tool for identifying misconfigured CloudFront domains. Background CloudFront is a Content Delivery Network CDN provided by Amazon Web Services AWS. CloudFront users create "distributions" that serve content from specific sources an S3 bucket, for example. Each CloudFron...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 5:55 p.m.5 views

MOVEit-CVE-2023-34362

MOVEit-CVE-2023-34362 Repository with everything I have tracking the impact of MOVEit CVE-2023-34362 Includes possibly affected organizations and domains utilizing SFTP header and cookie discovery methods. I've also built a news ticker which tracks new stories about MOVEit, available at...

9.8CVSS8.4AI score0.99934EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/14 5:52 p.m.7 views

CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS

CVE-2024-54160-Opensearch-HTML-Injection + Stored XSS It was found that the Opensearch plugin called "reports" was vulnerable to HTML-injection in version 2.18.0. The report functionality allowed users to store HTML in the header and footer while creating a new report definition. Below is a quick...

6.4CVSS6.9AI score0.00603EPSS
SaveExploits2
Cvelist
Cvelist
added 2026/09/14 5:48 p.m.7 views

CVE-2026-54182 backpack/crud: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. Prior to 4.1.70, 5.6.2, 6.8.13, and 7.0.36, Backpack\CRUD\Stats::makeCurlRequest in src/Stats.php is reached from...

8.1CVSS
SaveExploits0References10
CVE
CVE
added 2026/09/14 5:48 p.m.47 views

CVE-2026-54182

backpack/crud , a Laravel Backpack package for building admin panels, contains a pre-auth OS command injection in Stats::makeCurlRequest (src/Stats.php). The function builds a shell command from the HTTP Host header and passes it to exec() without adequate escaping. The path is reached from Backp...

8.1CVSS
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/14 5:45 p.m.7 views

nextjs-cve-2025-29927-poc

Next.js POC for CVE-2025-29927 Authorization Bypass in Next.js Middleware · CVE-2025-29927 · GitHub Advisory Database Next.js and the corrupt middleware: the authorizing artifact - zherowebsecurity- What is this? This vulnerability allow to bypass middleware logics. src/middleware.ts:...

9.1CVSS7.5AI score0.99225EPSS
SaveExploits59References3
Kitploit
Kitploit
added 2026/09/14 5:43 p.m.8 views

spring-cloud-function-rce

Spring Cloud Function SPEL Expression Injection Vulnerability CVE-2022-22963 Spring framework provides a comprehensive programming and configuration model for modern Java-based enterprise applications on any type of deployment platform. The serverless framework in Spring Cloud, the RoutingFunctio...

9.8CVSS7.6AI score0.99938EPSS
SaveExploits37
Rows per page
Query Builder