Lucene search
+L

138913 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/25 11:43 p.m.•8 views

The vulnerability of the setBufferingPeriodSEI function in the vvdecapp component (VVdeC), which relates to reading beyond the buffer, allows a hacker to trigger a service failure or gain access to protected information.

The vulnerability of the setBufferingPeriodSEI function in the vvdecapp VVdeC component is related to reading data beyond the buffer’s capacity. Exploiting this vulnerability could allow an attacker to cause a service failure or gain access to protected information...

7.1CVSS6.5AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/09/25 11:41 p.m.•7 views

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from incorrect restrictions on the path name to the catalog, allowing attackers to read and write arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files...

9.9CVSS6.7AI score
SaveExploits0Affected Software1
NVD
NVD
•added 2026/09/25 10:18 p.m.•6 views

CVE-2026-92842

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...

5.9CVSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/09/25 9:55 p.m.•1 views

CVE-2026-92842

A flaw was found in PHP. When processing certain conversion stream filters with line-break settings containing a null byte, the filter duplicates the string but retains the original length rather than the truncated size. An attacker who can influence filter options could exploit this out-of-bound...

5.9CVSS5.8AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/09/25 9:38 p.m.•2 views

khoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystem

Summary The /home/filepath:path endpoint in webclient.py serves static files by directly concatenating the user-supplied filepath with the homedirectory constant. There is no path traversal filtering, no path normalization check, and no authentication required. An attacker can use ../ sequences t...

5.9AI score
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2026/09/25 9:33 p.m.•2 views

EUVD-2026-87324

pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch WKB deserialization that allows authenticated database users to read adjacent heap memory. Attackers can supply crafted pcpatch values with attacker-controlled size fields to copy heap memory into...

7.2CVSS6AI score
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/09/25 9:16 p.m.•1 views

CVE-2026-91767

A flaw was found in PHP. When validating secure connections using Transport Layer Security TLS, an error in how wildcard domain names in server certificates are verified can lead to an out-of-bounds memory read. A malicious server presenting a specially crafted certificate can exploit this issue...

6.5CVSS5.7AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/09/25 9:11 p.m.•2 views

CVE-2025-1218

A flaw was found in PHP. The MySQL Native Driver mysqlnd wire protocol parser fails to verify that an incoming packet contains enough bytes before reading its fields. A malicious or compromised database server can send a truncated packet, causing the client application to read past the buffer...

3.7CVSS5.8AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/09/25 8:48 p.m.•2 views

EUVD-2025-211005

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...

3.4CVSS5.8AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 8:36 p.m.•22 views

CVE-2022-44311

Description for CVE-2022-44311 html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elmclosetreenodet nodo at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service DoS via a crafted html file. Reproduction T...

8.1CVSS7.7AI score0.01136EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/25 8:35 p.m.•8 views

CVE-2021-41773-POC

CVE-2021-41773 Informe de Reproducción de Vulnerabilidad Resumen de la Vulnerabilidad CVE ID : CVE-2021-41773 Nombre de la Vulnerabilidad : Vulnerabilidad de Path Traversal en Apache HTTP Server Nivel de Riesgo : Alto CVSS 7.5 Versiones Afectadas : Apache HTTP Server 2.4.49 Descripción de la...

9.8CVSS8.3AI score0.99992EPSS
SaveExploits167
Kitploit
Kitploit
•added 2026/09/25 8:29 p.m.•14 views

wpgarlic

wpgarlic Un fuzzer de plugins de WordPress como prueba de concepto que llevó al descubrimiento de más de 300 vulnerabilidades en plugins de WordPress instalados en casi 30 millones de sitios. La técnica utilizada se describe en https://kazet.cc/2022/02/03/fuzzing-wordpress-plugins.html Si deseas...

6.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/09/25 8:26 p.m.•2 views

CVE-2026-93682

A flaw was found in PHP. When the HTTP stream wrapper processes a redirect response containing an empty Location header, an out-of-bounds read occurs by accessing memory beyond the allocated buffer. A malicious server can exploit this flaw to influence the client's redirect target path, potential...

5.8CVSS5.8AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/25 8:20 p.m.•14 views

Adminer-CVE-2021-43008

Adminer CVE-2021-43008 PoC Exploit de prueba de concepto para CVE-2021-43008 que afecta a Adminer. Esta vulnerabilidad permite que un servidor MySQL malicioso solicite archivos locales arbitrarios desde la máquina cliente cuando LOAD DATA LOCAL INFILE está habilitado. El repositorio contiene...

7.5CVSS7.5AI score0.13641EPSS
SaveExploits4
NVD
NVD
•added 2026/09/25 8:17 p.m.•4 views

CVE-2026-93682

When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location. The value of that out-of-bounds byte decides which redirect target is built, so a malicious server...

5.8CVSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 8:17 p.m.•8 views

CVE-2024-23897

CVE-2024-23897 Jenkins CVE-2024-23897: Vulnerabilidad de Lectura Arbitraria de Archivos que Conduce a RCE Jenkins utiliza la librería args4j para analizar argumentos y opciones de comandos en el controlador de Jenkins al procesar comandos CLI. Este analizador de comandos tiene una función que...

9.8CVSS8.3AI score0.99999EPSS
SaveExploits50
Kitploit
Kitploit
•added 2026/09/25 8:13 p.m.•13 views

CVE-2019-3396

CVE-2019-3396 Vulnerabilidad de ejecución remota de código RCE no autenticada en Confluence CVE-2019-3396 Advertencia: algunas versiones requieren añadir el campo Referer para que funcione Lectura de archivos root@kitploit: POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: 10.10.20.181 User-Agent...

10CVSS8.9AI score0.99913EPSS
SaveExploits20
Kitploit
Kitploit
•added 2026/09/25 8:12 p.m.•10 views

evilMP4

evilMP4 Explora CVE-2022-41741 con el repositorio Evil MP4. Ofrece PoCs educativos y documentación detallada sobre cómo asegurar nginx contra vulnerabilidades de archivos MP4. Solo para pruebas de seguridad legales y éticas. Este repositorio proporciona herramientas, documentación y ejemplos para...

7.8CVSS7.4AI score0.00794EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/25 8:03 p.m.•9 views

CVE-2021-43798

Exploit de Grafana CVE-2021-43798 Resumen Este repositorio demuestra la explotación de CVE-2021-43798, una vulnerabilidad de directory traversal en Grafana. Esta vulnerabilidad permite a los atacantes leer archivos arbitrarios en el servidor. Detalles del CVE CVE : CVE-2021-43798 Descripción :...

7.5CVSS8.4AI score0.88503EPSS
SaveExploits48
Kitploit
Kitploit
•added 2026/09/25 8:03 p.m.•11 views

CVE-2019-11510-1

CVE-2019-11510-1 Exploit para lectura arbitraria de archivos en Pulse Secure SSL VPN CVE-2019-11510 uso de python: python CVE-2019-11510.py https://x.x.x.x Enlaces de referencia: https://hackerone.com/reports/591295 https://github.com/projectzeroindia/CVE-2019-11510...

10CVSS8.5AI score0.99999EPSS
SaveExploits22References1
Rows per page
Query Builder