Lucene search
+L

47284 matches found

CVE
CVE
added 2026/08/26 3:14 a.m.36 views

CVE-2026-29988

Milesight IoT devices (multiple models, affected firmware versions) are vulnerable to cleartext transmission of sensitive information through the NFC interface. An unauthenticated attacker with physical proximity can read LoRaWAN ABP NwkSKey , AppSKey , and D2D keys via a simple NFC read operatio...

8.3CVSS5.1AI score0.0015EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/26 3:14 a.m.7 views

EUVD-2026-66229

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

8.3CVSS5AI score0.0015EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/26 2:51 a.m.6 views

EUVD-2026-66228

duplicate record...

8.3CVSS5.1AI score
SaveExploits0
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.18 views

EyesOfNetwork - Hardcoded API Key & SQL Injection

An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/apifunctions.php. id: CVE-2020-8656 info: name:...

9.8CVSS8.8AI score0.846EPSS
SaveExploits8References3
CVE
CVE
added 2026/08/26 12:00 a.m.10 views

CVE-2023-42179

Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control through its key derivation process and password validation process. This could allow unauthorized parties to gain access to the device by exploiting weaknesses in how keys are derived or passwords are validated. N...

5.2AI score0.00145EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/26 12:00 a.m.5 views

EUVD-2023-60608

Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, password validation process...

5.2AI score0.00145EPSS
SaveExploits0References2
Grafana
Grafana
added 2026/08/26 12:00 a.m.6 views

Broken access control in dashboard snapshots

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot’s secret delete key using only its public share key broken access control...

6.3CVSS5.3AI score0.00202EPSS
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2026/08/26 12:00 a.m.7 views

VulnCheck KEV: CVE-2023-49105

An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. This occurs because pre-signed URLs can be accepted even when no...

9.8CVSS8.9AI score0.11074EPSS
SaveIn wildExploits1References5
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-74750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: defer key slot crypto freeing to workqueue Key slots are released through a kref and the existing release path frees the AEAD transforms from an RCU...

7.5CVSS5.5AI score0.00359EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-80520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. Tha...

7.5CVSS5.6AI score0.00432EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.11 views

PT-2026-82228

Name of the Vulnerable Software and Affected Versions Bird Home Automation GmbH D1101V-F 000140 affected versions not specified Description Incorrect access control exists due to flaws in the key derivation process and the password validation process. Recommendations At the moment, there is no...

5.2AI score0.00145EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.7 views

PT-2026-82215

Name of the Vulnerable Software and Affected Versions one-api affected versions not specified Description An issue exists in middleware/auth.go where one of two channel-pinning paths is not properly gated. While requests using a suffix on the API key require model.IsAdmin to succeed, requests usi...

8.5CVSS5.2AI score0.00286EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/25 11:19 p.m.11 views

CVE-2026-80198

Kimai versions before 2.56.0 fail to properly restrict the config() Twig function within sandboxed invoice and export templates. This allows users with admin privileges to upload malicious templates that read arbitrary configuration keys, potentially exfiltrating sensitive server-wide secrets suc...

8.7CVSS5.5AI score0.00335EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/25 10:33 p.m.4 views

CVE-2026-22001-SPHINCS-WOTS-Weak-Randomness-Forgeable-Signature

CVE-2026-22001 – Falsificazione di firma per debole casualità in SPHINCS+ WOTS+ Panoramica Un'implementazione dello schema di firma post‑quantum SPHINCS+ utilizza un generatore di numeri casuali difettoso durante la generazione delle firme WOTS+. Lo stesso nonce k viene riutilizzato su più firme,...

2.7CVSS7.8AI score0.00259EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 10:32 p.m.4 views

Google-api-key-scanner

Übersicht Ein Python-Tool zum Testen von Google-Maps-API-Schlüsseln gegen 21 verschiedene Google-API-Endpunkte, um zu prüfen, welche Dienste offengelegt und verwundbar sind. !IMPORTANT 🎥 Für eine vollständige Vorführung des Tools schau dir das Demo-Video hier an: https://youtu.be/3KMUnLdlOSE. Das...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 10:32 p.m.3 views

Gemini-api-key-hunter

Toolkit per chiavi API Gemini Un toolkit per scoprire, validare e testare chiavi API Google Gemini esposte. È composto da due componenti: Gemisc.py – Uno scanner Python ad alta velocità che scopre chiavi API Google esposte da siti web e file JavaScript, le verifica tramite l'API Gemini e identifi...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 9:58 p.m.1 views

CVE-2026-22020-Weak-Seed-in-Quantum-Key-Distribution-Error-Correction

CVE-2026-22020 – Schwacher Seed in der Fehlerkorrektur der Quantenschlüsselverteilung Programmcode Python root@kitploit: qkdweakseed.py - Simulated QKD privacy amplification with weak seed import hashlib, os, time def privacyamplificationsiftedkey, seed: Weak: seed derived from current time,...

5.4AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/08/25 9:57 p.m.7 views

openssl: heap buffer overflow in CMS key unwrapping

A flaw was found in OpenSSL. A crafted CMS Cryptographic Message Syntax message can cause an 8-byte out-of-bounds heap write when it is decrypted with CMSdecrypt. This issue occurs because the CMS decryption process incorrectly sizes the key-unwrap output buffer when using the AES-WRAP-PAD unwrap...

7.5CVSS5.6AI score0.00612EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/25 7:19 p.m.3 views

zeek-xor-exe-plugin

================= Corelight::PEXOR XOR-ओबफ़स्केटेड Windows EXE का पता लगाने और डिक्रिप्ट करने के लिए Zeek प्लगइन। फ़ाइल को XOR करने के लिए उपयोग की गई कुंजी स्वचालित रूप से खोजी जाएगी और फ़ाइल को वापस मूल Windows निष्पादन योग्य में बदलने के लिए उपयोग की जाएगी। फ़ाइल डिओबफ़स्केट हो जाने के बाद, इस...

5.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 7:09 p.m.79 views

chlonium

Chlonium Chlonium is an application designed for cloning Chromium Cookies. From Chromium 80 and upwards, cookies are encrypted using AES-256 GCM, with a state key which is stored in the Local State file. This state key is encrypted using DPAPI. This is a change from older versions, which used DPA...

6.2AI score
SaveExploits0References5
Rows per page
Query Builder