Lucene search
+L

218 matches found

Kitploit
Kitploit
•added 2026/10/15 7:28 p.m.•19 views

PoT

Phishing on Twitter Generate tweet automatically like him/her How it works? 1- Collect data from target's twitter account 2- Find target's friend and copy her/him account 3- Generate tweet automatically with markov chain algorithm and send it Installation git clone https://github.com/omergunal/Po...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/15 6:03 p.m.•17 views

h0neytr4p

Adjusted for T-Pot This fork of h0neytr4p was revised for T-Pot with the following features: Add Docker support Dockerfile, docker-compose.yml Use a single logfile instead of two Log to JSON instead of CSV Enrich JSON log file with additional info i.e. Cookies, Headers, Destination Port, etc...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/15 11:21 a.m.•85 views

ssh-mitm

SSH-MITM - ssh audits made simple An interactive SSH interception tool for authorized security audits. Intercept sessions, monitor live traffic, inject commands, and manipulate file transfers — all in real time. !Follow me on...

6.2AI score
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/10/14 12:31 a.m.•9 views

Malicious code in @accenturecodefoundry/mfe-pot-shared-ui-scds-core (npm)

@accenturecodefoundry/mfe-pot-shared-ui-scds-core describes itself as “A simple placeholder for npm.” Its preinstall hook runs node index.js || true on npm install. Version 99.99.2 encodes the hostname and username as hexadecimal query parameters and sends them to...

5.9AI score
SaveExploits0References4Affected Software1
osv-mal
osv-mal
•added 2026/10/13 1:37 p.m.•6 views

MAL-2026-17867 Malicious code in @accenturecodefoundry/mfe-pot-shared-ui-scds-core (npm)

@accenturecodefoundry/mfe-pot-shared-ui-scds-core describes itself as “A simple placeholder for npm.” Its preinstall hook runs node index.js || true on npm install. Version 99.99.2 encodes the hostname and username as hexadecimal query parameters and sends them to...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/13 1:37 p.m.•5 views

Malicious code in @accenturecodefoundry/mfe-pot-shared-ui-scds-core (npm)

@accenturecodefoundry/mfe-pot-shared-ui-scds-core describes itself as “A simple placeholder for npm.” Its preinstall hook runs node index.js || true on npm install. Version 99.99.2 encodes the hostname and username as hexadecimal query parameters and sends them to...

5.8AI score
SaveExploits0References1
osv-mal
osv-mal
•added 2026/10/13 12:00 a.m.•6 views

MAL-2026-17873 Malicious code in @newspage/libx-amount (npm)

npm user 'priyashareek' published this package in a dependency confusion campaign against the internal scopes @accenturecodefoundry and @newspage. The publisher used 99.99.x versions to outrank the internal packages. 0.0.0-stage and 99.99.1 are empty placeholders. In versions 99.99.4 and 99.99.41...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/11 4:35 p.m.•27 views

tpotce

T-Pot - La Plataforma Multi Honeypot Todo en Uno T-Pot es la plataforma honeypot todo en uno, opcionalmente distribuida, multiarquitectura amd64, arm64, que admite más de 20 honeypots y un sinfín de opciones de visualización utilizando Elastic Stack, mapas animados de ataques en vivo y muchas...

6.3AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/09 4:08 a.m.•68 views

honssh

!!! This project is no longer maintained. !!! HonSSH https://github.com/tnich/honssh Copyright C 2016 Thomas Nicholson HonSSH is designed to be used in conjunction with a high interaction honeypot. HonSSH sits between the attacker and the honey pot and creates two separate SSH conncetions. Read t...

5.4AI score
SaveExploits0References3
Snyk
Snyk
•added 2026/07/27 10:59 p.m.•9 views

Malicious Package

Overview hicks-soluble-pot is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.7AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 10:59 p.m.•9 views

Malicious Package

Overview harrington-soluble-pot is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

9.8CVSS5.7AI score
SaveExploits0References2
EUVD
EUVD
•added 2026/02/27 9:30 a.m.•24 views

EUVD-2025-208134

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash // prefix in the gatewaypath. A malicious or socially engineered administrator can configure a...

6.7CVSS5.8AI score0.0017EPSS
SaveExploits0References7
NVD
NVD
•added 2026/02/27 8:17 a.m.•26 views

CVE-2025-9909

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash // prefix in the gatewaypath. A malicious or socially engineered administrator can configure a...

6.7CVSS0.0017EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/02/27 7:30 a.m.•47 views

CVE-2025-9909 Aap-gateway: improper path validation in gateway allows credential exfiltration

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash // prefix in the gatewaypath. A malicious or socially engineered administrator can configure a...

6.7CVSS0.0017EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/02/27 7:30 a.m.•31 views

CVE-2025-9909 Aap-gateway: improper path validation in gateway allows credential exfiltration

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash // prefix in the gatewaypath. A malicious or socially engineered administrator can configure a...

6.7CVSS5.8AI score0.0017EPSS
SaveExploits0References6
CVE
CVE
•added 2026/02/27 7:30 a.m.•45 views

CVE-2025-9909

The CVE-2025-9909 issue affects Red Hat Ansible Automation Platform Gateway route creation: improper gateway_path handling allows an attacker with admin privileges to create misleading routes (double-slash prefix) to intercept credentials, potentially enabling persistent backdoors. It is describe...

6.7CVSS5.8AI score0.0017EPSS
SaveExploits0References6Affected Software3
attackerkb
attackerkb
•added 2026/02/27 7:30 a.m.•29 views

CVE-2025-9909

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash // prefix in the gatewaypath. A malicious or socially engineered administrator can configure a...

6.7CVSS5.8AI score0.0017EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/02/27 12:00 a.m.•31 views

PT-2025-54839

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash // prefix in the gateway path. A malicious or socially engineered administrator can configure a...

6.7CVSS5.8AI score0.0017EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2026/02/09 12:00 a.m.•20 views

The vulnerability of the pot_hole() function in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pothole function in the Linux operating system’s kernel is related to copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

7.8CVSS7.2AI score0.00279EPSS
SaveExploits0References8Affected Software2
RedHat Linux
RedHat Linux
•added 2025/12/10 6:00 p.m.•21 views

aap-gateway: Improper Path Validation in Gateway Allows Credential Exfiltration

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash // prefix in the gatewaypath. A malicious or socially engineered administrator can configure a...

6.7CVSS5.8AI score0.0017EPSS
SaveExploits0References4
Rows per page
Query Builder