Lucene search
+L

1206 matches found

Kitploit
Kitploit
•added 2026/11/05 4:18 p.m.•30 views

XSSFuzzer

XSS Fuzzer XSS Fuzzer is a simple application written in plain HTML/JavaScript/CSS which generates XSS payloads based on user-defined vectors using multiple placeholders which are replaced with fuzzing lists. It offers the possibility to just generate the payloads as plain-text or to execute them...

6.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/11/05 2:05 p.m.•38 views

wardn

wardn A credential firewall for AI agents. The headline claim is structural, not policy: agents receive placeholder tokens, never real API keys. The real key crosses only one network seam — inside the wardn proxy, on its way to the upstream API — and is stripped from responses before they reach t...

6.3AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/11/05 12:39 p.m.•30 views

CVE-2020-17103

🛡️ MiniPlasma - CVE-2020-17103 A Windows Local Privilege Escalation Zero-Day Turning placeholder files into SYSTEM access 📋 Overview MiniPlasma is a powerful local privilege escalation exploit targeting CVE-2020-17103 in the Windows Cloud Files Mini Filter Driver cldflt.sys. It allows any standard...

7.8CVSS7.9AI score0.23836EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/11/05 12:13 p.m.•51 views

rastrea2r

.. image:: https://github.com/rastrea2r/rastrea2r/blob/master/logo.png :align: center :alt: logo .. image:: https://travis-ci.org/rastrea2r/rastrea2r.svg?branch=master :target: https://travis-ci.org/rastrea2r/rastrea2r.svg?branch=master :alt: travis-ci for master branch .. image::...

6.2AI score
SaveExploits0References3
NVD
NVD
•added 2026/11/04 1:17 p.m.•6 views

CVE-2026-118516

The Symfony Routing components CompiledUrlMatcher and UrlMatcher interpret the host and path information differently, allowing path-based authorization rules to be bypassed in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to 7.4.23, and 8.x prior to 8.1.11. For routes that defi...

6.3CVSS0.00446EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/11/04 12:33 p.m.•7 views

EUVD-2026-116904

The Symfony Routing components CompiledUrlMatcher and UrlMatcher interpret the host and path information differently, allowing path-based authorization rules to be bypassed in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to 7.4.23, and 8.x prior to 8.1.11. For routes that defi...

6.3CVSS5.7AI score0.00446EPSS
SaveExploits0References2
CVE
CVE
•added 2026/11/04 12:33 p.m.•23 views

CVE-2026-118516

The Symfony Routing components (CompiledUrlMatcher and UrlMatcher) are vulnerable to a path-based authorization bypass in versions prior to 5.4.56 , 6.x prior to 6.4.50 , 7.x prior to 7.4.23 , and 8.x prior to 8.1.11 . The root cause is an interpretation conflict where CompiledUrlMatcher concaten...

6.3CVSS5.7AI score0.00446EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/11/04 12:33 p.m.•24 views

CVE-2026-118516 Symfony: Host Placeholders Can Match the Start of the Path in Compiled URL Matchers, Bypassing Path-Based Access Control

The Symfony Routing components CompiledUrlMatcher and UrlMatcher interpret the host and path information differently, allowing path-based authorization rules to be bypassed in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to 7.4.23, and 8.x prior to 8.1.11. For routes that defi...

6.3CVSS0.00446EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/11/04 12:33 p.m.•0 views

CVE-2026-118516 Symfony: Host Placeholders Can Match the Start of the Path in Compiled URL Matchers, Bypassing Path-Based Access Control

The Symfony Routing components CompiledUrlMatcher and UrlMatcher interpret the host and path information differently, allowing path-based authorization rules to be bypassed in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to 7.4.23, and 8.x prior to 8.1.11. For routes that defi...

6.3CVSS5.8AI score
SaveExploits0References6
Mend
Mend
•added 2026/11/04 12:33 p.m.•5 views

CVE-2026-118516

The Symfony Routing components CompiledUrlMatcher and UrlMatcher interpret the host and path information differently, allowing path-based authorization rules to be bypassed in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to 7.4.23, and 8.x prior to 8.1.11. For routes that defi...

6.5CVSS5.7AI score0.00446EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/04 12:00 a.m.•4 views

CVE-2026-118516: sensiolabs symfony: The Symfony Routing components CompiledUrlMatcher and UrlMatcher interpret the host and path information differently,…

The Symfony Routing components CompiledUrlMatcher and UrlMatcher interpret the host and path information differently, allowing path-based authorization rules to be bypassed in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to 7.4.23, and 8.x prior to 8.1.11. For routes that defi...

6.3CVSS5.8AI score0.00446EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/11/04 12:00 a.m.•3 views

PT-2026-136950

The Symfony Routing components CompiledUrlMatcher and UrlMatcher interpret the host and path information differently, allowing path-based authorization rules to be bypassed in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to 7.4.23, and 8.x prior to 8.1.11. For routes that defi...

6.3CVSS5.8AI score0.00446EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/11/01 8:21 a.m.•24 views

asdsadsadasdasdsadsad

This repository does not have a README...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/11/01 6:50 a.m.•25 views

CVE-2026-44024_exploit

CVE-2026-44024 — Fluentd outfile $tag Path-Traversal Arbitrary File Write Unauthenticated arbitrary file write in Fluentd's outfile plugin via the $tag placeholder. outfile lets operators template the output path with a $tag placeholder e.g. path /var/log/fluent/$tag. Outputextractplaceholders...

9.8CVSS9AI score0.01085EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/10/31 11:04 p.m.•31 views

CVE-2017-18019

CVE-2017-18019 Under Construction : Please come back later...

7.1CVSS7.2AI score0.01242EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/31 10:05 p.m.•20 views

secveri-cve-2026-50011-negative

This repository does not have a README...

7.5CVSS7.5AI score0.00461EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/31 9:20 p.m.•25 views

CVE-2025-5777

CVE-2025-5777 placeholder for CitrixBleed 2.0 CVE-2025-5777...

9.3CVSS8.9AI score0.99972EPSS
SaveExploits20
Kitploit
Kitploit
•added 2026/10/31 9:07 p.m.•26 views

MiniPlasma

MiniPlasma After re-investigating the technique used in GreenPlasma specifically SetPolicyVal, it turns out cldflt!HsmOsBlockPlaceholderAccess is still vulnerable to the exact same issue that was reported to Microsoft 6 years ago. I'm not taking full credit for this, James Forshaw from google...

7.8CVSS7.2AI score0.23836EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/31 7:07 p.m.•66 views

gf

gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: ▶ grep -HnrE...

6AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/31 12:14 p.m.•21 views

CVE-2019-0708

CVE-2019-0708 Create it first, wait for the big guys to come, and I will update...

10CVSS8.4AI score0.99999EPSS
SaveExploits127
Rows per page
Query Builder