Lucene search
+L

143334 matches found

Kitploit
Kitploit
•added 2026/09/24 2:58 p.m.•13 views

Docassemble_poc

Docassemblepoc Docassemble の任意ファイル読み取り脆弱性 CVE-2024-27292 python Docassemblepoc.py -h root@kitploit: -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--' --' usage:...

7.5CVSS7.9AI score0.69486EPSS
SaveExploits2
EUVD
EUVD
•added 2026/09/24 2:58 p.m.•9 views

EUVD-2026-85336

Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files...

6.5CVSS5.7AI score0.00267EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/24 2:58 p.m.•7 views

GHSA-VF2X-4V53-PM7V Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files

Summary HTTPSession mounts a FileAdapter for the file:// scheme and inherits redirect handling unchanged from requests.Session. requests does not check for scheme downgrades or cross-protocol transitions when it follows a redirect, so any https request Streamlink makes can be redirected by the...

6.5CVSS5.8AI score0.00267EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/24 2:56 p.m.•8 views

CVE-2019-17662

CVE-2019-17662 CVE-2019-17662 TinyVNC 任意ファイル読み取りによる認証バイパスエクスプロイトのPython実装 Nikhith Tumamlapalli によるオリジナルのEDB PoCに基づく EDB ID: 47519 オリジナルのPoCエクスプロイトは、Python Requestsライブラリにおけるパス正規化のために動作しません。このリポジトリのコードは、オリジナルのエクスプロイトを修正し、改良しています。 エクスプロイトはほぼ自動化されています。全スイッチの一覧については ./CVE-2019-17662.py --help を参照してくださ...

9.8CVSS8.4AI score0.96758EPSS
SaveExploits11
Kitploit
Kitploit
•added 2026/09/24 2:54 p.m.•9 views

CVE-2019-19204

CVE-2019-19204 Oniguruma 6.x 6.9.4rc2 より前 に問題が発見されました。regparse.c の fetchintervalquantifier 旧称 fetchrangequantifier 関数において、PEND をチェックせずに PFETCH が呼び出されています。これにより、ヒープベースのバッファオーバーリードが発生します。 研究者: ManhND of The Tarantula Team, VinCSS a member of Vingroup Oniguruma とは K. Kosako による Oniguruma は、BSD...

7.5CVSS7.3AI score0.06889EPSS
SaveExploits1
CVE
CVE
•added 2026/09/24 2:52 p.m.•14 views

CVE-2026-58005

Altera Trusted Firmware on HPS is vulnerable to an out-of-bounds read through unvalidated SiP v2 mailbox pointers . This flaw allows for Privilege Escalation and Overflow Buffers , specifically enabling non-secure EL1 access to arbitrary physical addresses through EL3 . The vulnerability affects ...

8.3CVSS5.8AI score0.00109EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 2:52 p.m.•8 views

EUVD-2026-85926

Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpgav2.14.0...

8.3CVSS5.8AI score0.00109EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 2:51 p.m.•9 views

EUVD-2026-85925

Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpgav2.14.0...

8.3CVSS5.8AI score0.00109EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 2:49 p.m.•19 views

CVE-2026-90959

A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fileurl' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check uses a string prefix comparison that only rejects...

8.1CVSS5.7AI score0.00316EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/24 2:49 p.m.•34 views

CVE-2026-90959 Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft

A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fileurl' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check uses a string prefix comparison that only rejects...

8.1CVSS0.00316EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/24 2:49 p.m.•7 views

CVE-2026-90959

A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fileurl' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check uses a string prefix comparison that only rejects...

8.1CVSS5.8AI score0.00316EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/24 2:38 p.m.•10 views

Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

Summary IBM Enterprise Build of Quarkus is affected by vulnerabilities in JSoup, Elytron, Reactor, BouncyCastle and zstd-jni Vulnerability Details CVEID:CVE-2026-75140 DESCRIPTION: jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in...

8.8CVSS6.8AI score0.00633EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2026/09/24 2:21 p.m.•11 views

EUVD-2026-86011

IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint GET /v1/admin/logs/file. The path confinement check uses str.startswith rather than proper boundary validation, allowing an authenticated admin to read .log, .jsonl, and .json...

4.9CVSS5.8AI score0.00316EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/24 2:18 p.m.•10 views

CVE-2026-97059

DCMTK through 3.7.0 contains a heap over-read vulnerability in ConcatenationLoader that copies pixel data frames without validating the PixelData buffer length against the declared NumberOfFrames. Attackers can craft malicious DICOM instances declaring more frames than the buffer contains to...

8.8CVSS0.00347EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/09/24 2:17 p.m.•7 views

EUVD-2026-86007

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing...

3.2CVSS6AI score0.00115EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 2:15 p.m.•15 views

CVE-2026-18870

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

4.3CVSS5.9AI score0.00185EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 2:15 p.m.•6 views

EUVD-2026-86006

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

4.3CVSS5.9AI score0.00185EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/24 2:15 p.m.•34 views

CVE-2026-18870 This Power System update is being released to address

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

4.3CVSS0.00185EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 2:13 p.m.•17 views

CVE-2026-18857

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to...

3.4CVSS5.9AI score0.00107EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 2:13 p.m.•8 views

EUVD-2026-85893

IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the BMC firmware management interface. The host system can cause the BMC firmware management service to crash or allow a limited amount of BMC internal memory to...

3.4CVSS5.9AI score0.00107EPSS
SaveExploits0References1
Rows per page
Query Builder