Lucene search
+L

1881 matches found

Kitploit
Kitploit
•added 2026/09/24 9:29 p.m.•15 views

kong

Kong: The Agentic Reverse Engineer LLM orchestration for reverse engineering binaries What is Kong? Most tasks follow a linear relationship: the more difficult a task, the longer it usually takes. Reverse engineering and binary analysis is a task in which the actual difficulty is somewhat trivial...

10CVSS8.6AI score0.85974EPSS
SaveExploits41References10
Nuclei
Nuclei
•added 2026/09/24 2:06 a.m.•191 views

Kong Admin <=2.03 - Admin API Access

Kong Admin through 2.0.3 contains an issue via docker-kong which makes the admin API port accessible on interfaces other than 127.0.0.1. id: CVE-2020-11710 info: name: Kong Admin =2.03 - Admin API Access author: pikpikcu severity: critical description: Kong Admin through 2.0.3 contains an issue v...

9.8CVSS8.2AI score0.33127EPSS
SaveExploits1References5
Kitploit
Kitploit
•added 2026/09/19 11:37 a.m.•3 views

cve-2014-6271-mengjia-kong

This repository does not have a README...

10CVSS8.2AI score0.99999EPSS
SaveExploits146
Kitploit
Kitploit
•added 2026/09/18 5:31 a.m.•9 views

kong-pwn

kong-pwn Usa KongAPI expuesto para actuar como un proxy y obtener URLs de metadatos o URLs internas. CVE-2020-11710 - No es una vulnerabilidad, es una mala configuración. Cómo usar root@kitploit: usage: kong-pwn.py -h -u URL -s SSRF -p PROXY kong-pwn.py: error: the following arguments are require...

9.8CVSS8.5AI score0.33127EPSS
SaveExploits1
NVD
NVD
•added 2026/09/16 11:16 a.m.•11 views

CVE-2026-14916

A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...

7.7CVSS0.00668EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 10:16 a.m.•7 views

CVE-2026-14917

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...

7.7CVSS0.00694EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/16 10:11 a.m.•24 views

CVE-2026-14916 Kong API Gateway Enterprise: JWT Algorithm-Confusion

A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...

7.7CVSS6.1AI score0.00668EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/16 10:11 a.m.•12 views

CVE-2026-14916

Kong API Gateway Enterprise is affected by a JWT algorithm-confusion vulnerability in components that validate JWTs for MCP OAuth2 or DataKit integrations. The root cause is a failure to verify that the JWT signing algorithm is compatible with the type of key used for verification, allowing an un...

7.7CVSS6.1AI score0.00668EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/16 10:11 a.m.•27 views

CVE-2026-14916 Kong API Gateway Enterprise: JWT Algorithm-Confusion

A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...

7.7CVSS0.00668EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/16 10:11 a.m.•6 views

EUVD-2026-80389

A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...

7.7CVSS6.1AI score0.00668EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/16 10:06 a.m.•11 views

CVE-2026-14917 Kong API Gateway Enterprise: SAML Authentication bypass

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...

7.7CVSS5.9AI score0.00694EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/16 10:06 a.m.•30 views

CVE-2026-14917 Kong API Gateway Enterprise: SAML Authentication bypass

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...

7.7CVSS0.00694EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/16 10:06 a.m.•5 views

EUVD-2026-80387

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...

7.7CVSS5.9AI score0.00694EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/16 10:06 a.m.•24 views

CVE-2026-14917

CVE-2026-14917 is a SAML authentication bypass in the Kong API Gateway Enterprise SAML plugin. When the validate_assertion_signature option is explicitly set to false (it is enabled by default ), the plugin extracts the SAML identity from an unsigned assertion without verifying a valid cryptograp...

7.7CVSS5.9AI score0.00694EPSS
SaveExploits0References1
Circl
Circl
•added 2026/09/15 5:16 a.m.•12 views

CVE-2026-86879

creationtimestamp| type| source ---|---|--- 2026-09-15 05:16:04+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260915 2026-09-15 21:16:33+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19 2026-09-16 22:00:56+00:00|...

5.7AI score0.00394EPSS
SaveExploits0References3
Circl
Circl
•added 2026/09/03 8:45 a.m.•20 views

CVE-2025-20064

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:36+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2047...

8.7CVSS5.8AI score0.00115EPSS
SaveExploits0References1
Circl
Circl
•added 2026/09/03 8:45 a.m.•25 views

CVE-2026-77180

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:16+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2047 2026-09-03 12:45:06+00:00| seen| https://www.acn.gov.it/portale/w/f5-risolte-vulnerabilita-nei-prodotti-nginx 2026-09-03 13:45:08+00:00| seen|...

8.7CVSS5.7AI score0.00498EPSS
SaveExploits0References4
Circl
Circl
•added 2026/09/03 8:45 a.m.•32 views

CVE-2026-63020

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:05+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2047 2026-09-03 13:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mumli32zq72z...

3.1CVSS5.8AI score0.0023EPSS
SaveExploits0References2
Circl
Circl
•added 2026/09/03 8:45 a.m.•16 views

CVE-2026-20355

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:03+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2046 2026-09-03 08:46:09+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24 2026-09-03 10:44:22+00:00| seen|...

5.9CVSS5.7AI score0.00161EPSS
SaveExploits0References8
Circl
Circl
•added 2026/08/27 8:45 a.m.•17 views

CVE-2026-53313

creationtimestamp| type| source ---|---|--- 2026-08-27 08:45:08+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2038...

5.5CVSS3.6AI score0.00162EPSS
SaveExploits0References1
Rows per page
Query Builder