Lucene search
+L

111 matches found

Kitploit
Kitploit
added 2026/08/25 11:30 p.m.2 views

CVE-2020-13937

CVE-2020-13937 1. Описание уязвимости: Apache Kylin имеет restful API, который предоставляет информацию о конфигурации без какой-либо аутентификации. 2. Воспроизведение Сравнение с уязвимостью Сравнение без уязвимости Написание PoC Проверка правильного URL: pocsuite -r CVE-2022-26134.py -u url...

9.8CVSS7.6AI score0.99999EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/08/25 11:25 a.m.2 views

CVE-2020-17519

CVE-2020-17519 Lecture arbitraire de fichiers via l'API RESTful d'Apache Flink Apache Flink est un framework et un moteur de traitement distribué pour des calculs avec état sur des flux de données non bornés et bornés, développé en Java et Scala. Un changement introduit dans Apache Flink 1.11.0 e...

9.1CVSS7.8AI score0.97856EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/08/25 4:31 a.m.1 views

xxl-job

RCE par accès non autorisé à l'API RESTful de l'exécuteur xxl-job Utilisez la console de journaux d'exécution pour obtenir le résultat des commandes exécutées avec succès : Exemple : /joblog/logDetailPage?id=xxxx Voir les variables d'environnement JDK root@kitploit: String var3 =...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 4:16 a.m.1 views

Drupal-cve-2019-6340

Recherche CVE 2019-6340 root@kitploit: Le site avec le module Drupal 8 core RESTful API Services activé permet à l'utilisateur d'envoyer des requêtes GET, PATCH ou POST au serveur. Une requête GET suffit pour déclencher la vulnérabilité d'exécution de code même si la méthode PATCH est désactivée ...

8.1CVSS8.4AI score0.92017EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/08/25 4:10 a.m.2 views

hackazon

هيكازون هيكازون هو موقع اختبار ضعيف ومجاني، عبارة عن متجر إلكتروني مبني بنفس التقنيات المستخدمة في تطبيقات الويب والأجهزة المحمولة الحديثة. يتميز هيكازون بواجهة AJAX، وسير عمل صارم، وواجهات برمجة تطبيقات RESTful تُستخدم من خلال تطبيق جوال مصاحب، مما يوفر بيئة تدريب واختبار فريدة وفعالة لمحترفي أم...

5.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 4:10 a.m.1766 views

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 4:10 a.m.204 views

intelmq

docs/index.md...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/24 9:33 a.m.2 views

BreakEscape

محرك BreakEscape لـ Rails لعبة غرفة هروب للتدريب على الأمن السيبراني كمحرك Rails قابل للتركيب. الميزات أكثر من 24 سيناريو لغرفة هروب للأمن السيبراني تتبع التقدم من جانب الخادم بمخطط جدولين كلمات مرور عشوائية لكل مثيل لعبة عبر ERB تجميع نصوص Ink في الوقت المناسب لحوار الشخصيات غير اللاعبة دعم لاعب...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/23 11:48 p.m.41 views

syft

Syft A CLI tool and Go library for generating a Software Bill of Materials SBOM from container images and filesystems. Exceptional for vulnerability detection when used with a scanner likeGrype...

5.5AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/08/03 7:05 p.m.9 views

CVE-2026-48031 Go Restful API Boilerplate: Hardcoded JWT Secret "random" Allows Token Forgery

go-base is a Go RESTful API Boilerplate template with JWT Authentication, backed by PostgreSQL. In versions prior to 2026-05-18, the JWT signing secret is hardcoded to the known string "random", letting any attacker who reads the public repository forge tokens for arbitrary users, including admin...

9.1CVSS7.7AI score0.00346EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/03 7:05 p.m.19 views

CVE-2026-48031 Go Restful API Boilerplate: Hardcoded JWT Secret "random" Allows Token Forgery

go-base is a Go RESTful API Boilerplate template with JWT Authentication, backed by PostgreSQL. In versions prior to 2026-05-18, the JWT signing secret is hardcoded to the known string "random", letting any attacker who reads the public repository forge tokens for arbitrary users, including admin...

9.1CVSS5.6AI score
SaveExploits0References5
OSV
OSV
added 2026/06/25 10:34 p.m.12 views

GO-2026-5515 Go Restful API Boilerplate: Hardcoded JWT Secret "random" Allows Token Forgery in github.com/dhax/go-base

Go Restful API Boilerplate: Hardcoded JWT Secret "random" Allows Token Forgery in github.com/dhax/go-base...

9.1CVSS5.8AI score0.00346EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/06/23 12:12 p.m.45 views

CVE-2026-56248 Capgo - Unauthenticated Denial-of-Service via audit_logs RLS Policy

Cap-go capgo capgo-backend before 12.128.12 contains an unauthenticated denial-of-service vulnerability arising from the auditlogs table's Row-Level Security RLS policy when accessed via the Supabase PostgREST API. Because the PostgreSQL query planner executes costly logic before RLS rejection,...

8.7CVSS0.00488EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/03/28 12:26 a.m.9 views

SUSE CVE-2026-33065

Free5GC is an open-source Linux Foundation project for 5th generation 5G mobile core networks. In versions prior to 1.4.2, the UDM incorrectly converts a downstream 400 Bad Request from UDR into a 500 Internal Server Error when handling DELETE requests with an empty supi path parameter. This leak...

6.9CVSS5.8AI score0.00282EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/25 12:00 a.m.8 views

CVE-2025-32991

In N2WS Backup & Recovery before 4.4.0, a two-step attack against the RESTful API results in remote code execution...

6.1AI score0.00339EPSS
SaveExploits0References3
OSV
OSV
added 2026/02/17 6:09 p.m.15 views

GO-2026-4481 Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise in github.com/milvus-io/milvus

Milvus: Unauthenticated Access to Restful API on Metrics Port 9091 Leads to Critical System Compromise in github.com/milvus-io/milvus. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...

9.8CVSS5.6AI score0.36912EPSS
SaveExploits2References3
RedhatCVE
RedhatCVE
added 2026/01/09 12:34 p.m.45 views

CVE-2023-31585

Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php...

9.8CVSS6.9AI score0.00837EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2021-19573

Malware in sbrugna...

9.9CVSS8.9AI score0.04583EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2019-0308

Malware in sbrugna...

5.4CVSS5.8AI score0.00686EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2023-35882

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00837EPSS
SaveExploits0References3
Rows per page
Query Builder