Lucene search
+L

689 matches found

Kitploit
Kitploit
added 2026/09/13 2:03 a.m.76 views

wonitor

web monitor fast, zero config web endpoint change monitor. for comparing responses, a selected list of http headers and the full response body is stored on a local key/value store file. no configuration needed. to increase network throughput, a --worker flag allows to set the concurrency when...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 2:35 p.m.7 views

CVE-2024-56428

CVE-2024-56428 iLabClient のローカルデータベース内の平文資格情報 設定(パスワードを含む)を読み出す iLabClient は、ラボサーバーから結果をダウンロードするために使用されます。設定データは、Apache Derby インスタンス iLabClient にローカルに保存されます。パスワードは平文で保存されます。これを読み取るには、まずローカルデータベースへの接続を確立する必要があります。例えば、CVE-2024-56429 に記載されている方法を使用します。 パスワードを読み出します: root@kitploit: select EINSTELLUNGE...

7.7CVSS5.9AI score0.00157EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/12 9:48 a.m.7 views

Threat-Intelligence-Hunter

TIH — это инструмент разведки, который помогает искать IOCs в нескольких общедоступных источниках безопасности и некоторых известных API. Идея инструмента заключается в облегчении поиска и хранения часто добавляемых IOCs для создания собственного набора индикаторов. Threat-Intelligence-Hunter...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 9:24 a.m.3 views

screenpipe

СКАЧАТЬ SCREENPIPE screenpipe | YC S26 Screenpipe запоминает, как вы на самом деле работаете Записывайте свой экран непрерывно локально и предоставляйте контекст своим агентам Claude, Codex, Openclaw, Hermes, Runner... https://github.com/user-attachments/assets/70fe94eb-6d2a-47ca-b7c3-c8ead13a5b7...

6AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/12 2:48 a.m.5 views

phonepe-sensitive-data-exposure-cve-2025-5154

-Небезопасное локальное хранение конфиденциальных данных пользователей в Android-приложении PhonePe не исправлено- Обнаруженоhc4 Дата сообщения: апрель 2025 Статус CVE: CVE запрошен ожидается Запрос CVE 1862785 для получения идентификатора CVE 📌 Обзор Критическая локальная уязвимость была...

4.6CVSS5.7AI score0.002EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/10 6:46 p.m.7 views

passera

Примечание: У меня больше нет времени продолжать разработку Passera, но пул-реквесты приветствуются! Самым востребованным пунктом было бы обновлённое расширение для Firefox, так как последнее изменение API сломало текущую версию. Passera Простой инструмент, который позволяет пользователям иметь...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 10:13 p.m.9 views

CyberQRM

CyberQRM – Количественное управление киберрисками Локальная платформа с открытым исходным кодом для количественной оценки кибербезопасности с использованием фреймворка FAIR v3.1 Factor Analysis of Information Risk. Моделируйте угрозы, запускайте симуляции Монте-Карло, измеряйте эффективность...

5.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/09/04 12:00 a.m.5 views

The vulnerability of the bpf_selem_unlink() function in the kernel/bpf/bpf_local_storage.c module, which supports the BPF interpreter for the Linux operating system’s kernel, allows a malicious actor to trigger a service failure.

The vulnerability of the bpfselemunlink function in the kernel/bpf/bpflocalstorage.c module, which is part of the BPF interpreter support for the Linux operating system, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service...

5.5CVSS4.3AI score0.001EPSS
SaveExploits0References8Affected Software3
CVE
CVE
added 2026/09/01 3:18 p.m.15 views

CVE-2026-84232

CVE-2026-84232 is a stored cross-site scripting (XSS) vulnerability in pulpcore's content serving application (python-pulpcore). The root cause is that files uploaded to Pulp file-type repositories are served with their original MIME type (e.g., text/html, image/svg+xml) and without a Content-Dis...

5.4CVSS5.8AI score0.00176EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.19 views

Astra Linux – Vulnerability in Ceph

A flaw was discovered in ceph-dashboard. The JSON Web Token JWT used for user authentication is stored by the frontend application in the browser’s localStorage, which is potentially vulnerable to attacks via XSS attacks. The most significant threat of this vulnerability is related to data...

5.4CVSS6.1AI score0.02449EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/08/18 12:23 p.m.15 views

CVE-2026-74966

Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

7.5CVSS5.3AI score0.00256EPSS
SaveExploits0
NVD
NVD
added 2026/08/13 12:17 p.m.9 views

CVE-2026-73610

SiYuan before v3.7.4 contains an information disclosure vulnerability in the local storage filter that returns the administrator's entire storage map with only three keys sanitized. Unauthenticated attackers or publish readers can retrieve closed-tab history, search keywords, private document...

6.9CVSS0.00201EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/13 11:28 a.m.12 views

EUVD-2026-57814

SiYuan before v3.7.4 contains an information disclosure vulnerability in the local storage filter that returns the administrator's entire storage map with only three keys sanitized. Unauthenticated attackers or publish readers can retrieve closed-tab history, search keywords, private document...

6.9CVSS5.2AI score0.00201EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/13 11:28 a.m.36 views

CVE-2026-73610 SiYuan before v3.7.4 Information Disclosure via Local Storage

SiYuan before v3.7.4 contains an information disclosure vulnerability in the local storage filter that returns the administrator's entire storage map with only three keys sanitized. Unauthenticated attackers or publish readers can retrieve closed-tab history, search keywords, private document...

6.9CVSS0.00201EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/13 11:28 a.m.34 views

CVE-2026-73610

SiYuan before v3.7.4 has an information-disclosure vulnerability in the local storage filter. The getLocalStorage endpoint returns the administrator’s full storage map with only three keys sanitized, enabling unauthenticated users (or publish readers) to retrieve closed-tab history, search keywor...

6.9CVSS5.2AI score0.00201EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/05 1:50 p.m.10 views

CVE-2026-16071 Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary

A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external directories. The issue occurs when a delegated administrator performs a search using a specific LDAP entry Distinguished Name DN. Due to missing validation, the system allows lookups...

5.4CVSS5.4AI score0.00227EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/04 10:17 p.m.19 views

CVE-2026-70593

Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This could be used to alter the behavior of the installation through custom theme upload path traversal in LocalStorageBas...

6.6CVSS0.0029EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/04 8:53 p.m.22 views

CVE-2026-70492 Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, src/lib/components/chat/Messages/Markdown/KatexRenderer.svelte could store and render a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. Th...

8.7CVSS5.4AI score
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/08/04 8:02 p.m.20 views

Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin

Summary Any authenticated user with access to a terminal server could get script of their choosing to run in the Open WebUI origin itself. The HTML file preview rendered terminal-served files in an iframe whose sandbox always granted allow-same-origin alongside allow-scripts, and the file is serv...

8.2CVSS6AI score0.00374EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2026/08/04 8:01 p.m.48 views

CVE-2026-70486 Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, the terminal file-preview serveUrl iframe branch always granted allow-same-origin together with allow-scripts for HTML files served from the application origin. Any authenticated user wi...

8.2CVSS0.00374EPSS
SaveExploits0References4
Rows per page
Query Builder