Lucene search
+L

22868 matches found

Kitploit
Kitploit
added 2026/09/16 6:30 a.m.10 views

dirhunt

.. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/v0.2.0/images/dirhunt.png | .. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/pip-rating-badge/pip-rating-badge.svg :target: https://github.com/Nekmo/dirhunt/actions/workflows/pip-rating.yml :alt: pip-rating badge .. image::...

5.8AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/16 3:43 a.m.7 views

pocindex

Just landed Trending in 2026 Trending in 2025 2024, 2023 Trending in 2024 Data Every file is plain JSON on the CDN. No key, no rate limit. root@kitploit: everything the index knows about one CVE curl -s https://pocindex.io/CVElist.json \ | jq '. | select.cve == "CVE-2021-44228" | cve, poc: .poc |...

10CVSS7.7AI score0.99999EPSS
SaveExploits370References3
Kitploit
Kitploit
added 2026/09/16 2:58 a.m.5 views

german-owasp-day

german-owasp-day German OWASP Day conference site & presentation archive You can find the page at god.owasp.de Please create a folder for each year and then point the redirect from the main index to that folder...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 11:05 p.m.8 views

getsploit

Getsploit Search and download public exploits from theVulners database — online, or fully offline from a local index...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/15 10:07 p.m.7 views

GoogleIndexRetriever

Google index Retriever ¿Alguna vez has encontrado una página web que parece hablar exactamente de lo que necesitas, pero ha sido eliminada? Sí, el caché de Google es la respuesta, pero... ¿Qué pasa si el caché también ha sido eliminado? ¿Qué pasa si el sitio solo está en la página de índice de...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 10:00 p.m.8 views

ecs-logstash-mappings

Corelight ECS Logstash Pipeline The repository is compromised of Logstash Pipeline files required to be used with the installer script in the repository https://github.com/corelight/ecs-templates The installer in that repository will download the files from this repository therefore using this...

5.8AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/15 8:58 p.m.60 views

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

5.6AI score
SaveExploits0References1
CVE
CVE
added 2026/09/15 8:04 p.m.7 views

CVE-2026-83272

A high-severity (CVSS 3.1: 8.5 ) vulnerability exists in the Oracle Text component of Oracle Database Server , affecting versions 19.3–19.32 , 21.3–21.23 , and 23.4.0–23.26.3 . A low-privileged attacker holding the Create Index privilege can exploit this over Oracle Net (high attack complexity) t...

8.5CVSS5.6AI score
SaveExploits0References1
EUVD
EUVD
added 2026/09/15 8:04 p.m.4 views

EUVD-2026-79624

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having Create Index privilege with network access via Oracle Net to compromis...

8.5CVSS5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 7:21 p.m.6 views

intelmq

docs/index.md...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 6:22 p.m.5 views

trivy-java-db

trivy-java-db 概述 trivy-java-db 从 maven-index 仓库数据构建一个 SQLite 数据库,存储 jar 文件的 ArtifactID、GroupID、Version 和 sha1。 该数据库在 Trivy 中用于发现内部没有 GAV 信息的 jars 的相关信息。 更新间隔 每天 00:00 下载 java 索引数据库 你可以通过 Trivy 或 Oras CLI 下载实际编译好的数据库。 Trivy: root@kitploit: TRIVYTEMPDIR=$mktemp -d trivy --cache-dir $TRIVYTEMPDIR...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 4:34 p.m.5 views

reconerator

Resumen Este es un ensamblado .NET personalizado que realiza una serie de actividades de reconocimiento situacional. Hay varios conjuntos de funcionalidades actuales: BASIC - Obtiene información del disco y del registro. LDAP - Permite realizar consultas LDAP personalizadas de Active Directory...

5.9AI score
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/15 3:18 p.m.6 views

CVE-2026-91958

FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xfdetectmonitors. Attackers can craft a malicious RDP file with an out-of-range selectedmonitors value to trigger out-of-bounds heap read and write...

6.9CVSS5.8AI score
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/15 3:18 p.m.5 views

CVE-2026-91956

FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's funcgetepdesc function that indexes interface arrays by position instead of protocol field InterfaceNumber. A malicious RDP server can send a crafted SELECTCONFIGURATION message with permuted InterfaceNumbe...

7.1CVSS5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 2:04 p.m.28 views

wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...

6AI score
SaveExploits0References5
OSV
OSV
added 2026/09/15 9:56 a.m.11 views

ROOT-APP-PYPI-CVE-2026-24049 CVE-2026-24049 in wheel - Patched by Root

Root has patched CVE-2026-24049 in the wheel package for Root:PyPI. Multiple fixed versions available...

7.1CVSS6.7AI score0.00324EPSS
SaveExploits2
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.32 views

MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting

paintballrefjosh/MaNGOSWebV4 4.0.8 contains a reflected XSS caused by unsanitized input in install/index.php step parameter, letting attackers execute arbitrary scripts in the victim's browser, exploit requires victim to visit a maliciously crafted URL id: CVE-2017-6478 info: name: MaNGOSWebV4...

6.1CVSS6.6AI score0.02574EPSS
SaveExploits6References4
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.26 views

Vite dev server - Cross-Site Scripting

Vite's dev server, when used with appType: 'custom' and manually invoking server.transformIndexHtml using the unmodified request URL, is vulnerable to XSS via a crafted URL payload. If the HTML being served includes an inline module script ..., an attacker can inject a script via the URL,...

6.1CVSS6.9AI score0.00997EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.42 views

OfficeWeb365 Indexs Interface - Arbitrary File Read

There is any file reading in the officeWeb365 Indexs interface. id: CVE-2024-37728 info: name: OfficeWeb365 Indexs Interface - Arbitrary File Read author: DhiyaneshDK severity: high description: | There is any file reading in the officeWeb365 Indexs interface. impact: | Unauthenticated attackers...

7.5CVSS5.7AI score0.01852EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/14 4:11 p.m.34 views

CVE-2026-84445 gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers

gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer allow internal/transport/http2server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go...

8.7CVSS0.00685EPSS
SaveExploits0References10
Rows per page
Query Builder