Lucene search
+L

661 matches found

Kitploit
Kitploit
•added 2026/09/26 5:24 a.m.•50 views

nuclei-burp-plugin

Nuclei Template Generator Burp Plugin A Burp Suite plugin intended to help with nuclei template generation...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/26 2:13 a.m.•36 views

golddigger

Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. root@kitploit: virtualenv...

5.5AI score
SaveExploits0References1
NVD
NVD
•added 2026/08/18 6:19 p.m.•13 views

CVE-2026-71551

Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. Prior to 18.13.0, the EXEC IPC handler in electron/ipc-handlers/exec.ts accepts a command string from the renderer through the IPC.EXEC channel and executes it with childprocess.exec. The...

7.8CVSS0.00221EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/18 6:06 p.m.•38 views

CVE-2026-71551

The EXEC IPC handler in electron/ipc-handlers/exec.ts passes arbitrary commands via child_process.exec() without requiring nodeExecution permission. Community plugins run with new Function() can call window.ea.exec() to execute OS commands under the desktop account's privileges. The confirmation ...

7.8CVSS5.7AI score0.00221EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/18 6:06 p.m.•28 views

CVE-2026-71551 Super Productivity: Arbitrary OS Command Execution via IPC EXEC Handler with Persistent Whitelist

Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. Prior to 18.13.0, the EXEC IPC handler in electron/ipc-handlers/exec.ts accepts a command string from the renderer through the IPC.EXEC channel and executes it with childprocess.exec. The...

7.8CVSS0.00221EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/18 6:06 p.m.•14 views

CVE-2026-71551 Super Productivity: Arbitrary OS Command Execution via IPC EXEC Handler with Persistent Whitelist

Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. Prior to 18.13.0, the EXEC IPC handler in electron/ipc-handlers/exec.ts accepts a command string from the renderer through the IPC.EXEC channel and executes it with childprocess.exec. The...

7.8CVSS5.8AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/08/18 6:06 p.m.•14 views

EUVD-2026-61102

Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. Prior to 18.13.0, the EXEC IPC handler in electron/ipc-handlers/exec.ts accepts a command string from the renderer through the IPC.EXEC channel and executes it with childprocess.exec. The...

7.8CVSS5.7AI score0.00221EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/18 6:06 p.m.•17 views

CVE-2026-71551 Super Productivity: Arbitrary OS Command Execution via IPC EXEC Handler with Persistent Whitelist

Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. Prior to 18.13.0, the EXEC IPC handler in electron/ipc-handlers/exec.ts accepts a command string from the renderer through the IPC.EXEC channel and executes it with childprocess.exec. The...

7.8CVSS5.6AI score0.00221EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•0 views

CVE-2026-71551: Improper Neutralization of Special Elements used in an OS Command

Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. Prior to 18.13.0, the EXEC IPC handler in electron/ipc-handlers/exec.ts accepts a command string from the renderer through the IPC.EXEC channel and executes it with childprocess.exec. The...

7.8CVSS5.9AI score0.00221EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•18 views

PT-2026-77271

Name of the Vulnerable Software and Affected Versions Super Productivity versions prior to 18.13.0 Description The EXEC IPC handler in electron/ipc-handlers/exec.ts accepts a command string from the renderer via the IPC.EXEC channel and executes it using the child process.exec function. The...

7.8CVSS5.6AI score0.00221EPSS
SaveExploits0References5
NVD
NVD
•added 2026/07/16 9:17 p.m.•28 views

CVE-2026-57896

An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This could lead to limited information disclosure or disruption of the affected product...

6.9CVSS0.00151EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/16 9:17 p.m.•26 views

CVE-2026-60073

An out-of-bounds read in the Productivity Suite allows a physical attacker to control the length of data sent to a USB device. This can lead to a system crash or disclosure of kernel memory...

5.9CVSS0.00245EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/16 9:17 p.m.•27 views

CVE-2026-61378

A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to a system crash...

6.8CVSS0.0016EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/16 8:30 p.m.•43 views

CVE-2026-61378

CVE-2026-61378 affects the Productivity Suite and stems from a divide-by-zero in a local component, leading to a system crash. The NVD metrics indicate a Local attack vector with Low privileges required and no user interaction, and an impact profile showing High availability impact with no confid...

6.8CVSS6.1AI score0.0016EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/07/16 8:30 p.m.•16 views

CVE-2026-61378

A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to a system crash...

6.8CVSS6.1AI score0.0016EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/07/16 8:30 p.m.•31 views

EUVD-2026-45038

A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to a system crash...

6.8CVSS6.1AI score0.0016EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/16 8:30 p.m.•48 views

CVE-2026-61378 AutomationDirect Productivity Suite Divide By Zero

A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to a system crash...

6.8CVSS0.0016EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/16 8:30 p.m.•18 views

CVE-2026-61378 AutomationDirect Productivity Suite Divide By Zero

A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a division by zero leading to a system crash...

6.8CVSS5.2AI score0.0016EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/16 8:22 p.m.•14 views

CVE-2026-60073 AutomationDirect Productivity Suite Out-of-bounds Read

An out-of-bounds read in the Productivity Suite allows a physical attacker to control the length of data sent to a USB device. This can lead to a system crash or disclosure of kernel memory...

5.9CVSS5.1AI score0.00245EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/07/16 8:22 p.m.•17 views

CVE-2026-60073

An out-of-bounds read in the Productivity Suite allows a physical attacker to control the length of data sent to a USB device. This can lead to a system crash or disclosure of kernel memory...

5.9CVSS6.1AI score0.00245EPSS
SaveExploits0References4
Rows per page
Query Builder