Lucene search
+L

98 matches found

Kitploit
Kitploit
•added 2026/10/04 12:56 a.m.•10 views

cryptoquant-key-gen

CryptoQuant Breaker v1.6 — 2026 解锁 CryptoQuant 高级功能 | 高级分析与实时数据访问 描述 CryptoQuant Breaker 是一款功能强大的补丁工具,旨在绕过 CryptoQuant 的高级分析层级限制和实时数据限制。无限访问专业级链上分析、市场指标和实时加密货币数据流。 主要优势 ✅ 无限高级分析 — 访问 CryptoQuant 所有高级功能 ✅ 实时数据访问 — 实时市场数据无延迟、无限制 ✅ 专业层级解锁 — 完全访问机构级工具 ✅ 安装简便 — 基于 Python 的简单设置流程 ✅ 用户友好界面 — 简洁的 GUI,带进度...

6.2AI score
SaveExploits0References1
NVD
NVD
•added 2026/09/18 4:17 p.m.•18 views

CVE-2026-86689

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

8.2CVSS0.0023EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/18 3:51 p.m.•45 views

CVE-2026-77960 Use of Hard-coded Credentials in Bransys ELD

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

6.9CVSS0.00325EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/18 3:48 p.m.•30 views

CVE-2026-86689

Bransys ELD (Electronic Logging Device) is shipped with hardcoded MQTT credentials , which grant read access to real-time data for every active device across a subset of carriers connected to the affected MQTT broker. The vulnerability is assessed at CVSS 3.1: 5.9 (MEDIUM) and CVSS 4.0: 8.2 (HIGH...

8.2CVSS5.8AI score0.0023EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•5 views

CVE-2026-86520: Use of Hard-coded Credentials

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

8.7CVSS5.8AI score0.00409EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/20 12:04 p.m.•13 views

CVE-2026-63758

SurrealDB versions before 3.1.0 contain an authorization bypass vulnerability in the KILL statement that allows authenticated database users to terminate other users' LIVE SELECT subscriptions. Attackers can issue KILL statements with target live query UUIDs to disrupt real-time data subscription...

5.4CVSS5.8AI score0.00309EPSS
SaveExploits0References3
Qualys Blog
Qualys Blog
•added 2026/05/05 12:45 p.m.•16 views

Converge Connect: Unlock Lower Premiums with Proven Qualys Security

Key Takeaways Qualys, in collaboration with Converge, has launched an offering that ties your security posture to your cyber insurance costs. The Qualys Converge Connect Insurance Report CCIR supplements manual insurance questionnaires with objective, platform-generated, real-time security data...

5.7AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/05/04 4:29 p.m.•133 views

Exploit for CVE-2025-68930

🔍 Análisis del CVE-2025-68930: Vulnerabilidad de Secuestro de...

7.1CVSS5.8AI score0.0055EPSS
SaveExploits4
Packet Storm News
Packet Storm News
•added 2026/04/08 12:00 a.m.•51 views

VulGD: A LLM-Powered Dynamic Open-Access Vulnerability Graph Database

Software vulnerabilities continue to pose significant threats to modern information systems, requiring a timely and accurate risk assessment. Public repositories, such as the National Vulnerability Database and CVE details, are regularly updated, but predominantly utilize relational data models...

5.9AI score
SaveExploits0
EUVD
EUVD
•added 2026/03/30 5:35 p.m.•22 views

EUVD-2026-16719

AVideo's WebSocket Token Never Expires Due to Commented-Out Timeout Validation in verifyTokenSocket...

5.4CVSS5.9AI score0.00269EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2026/03/30 5:35 p.m.•20 views

AVideo's WebSocket Token Never Expires Due to Commented-Out Timeout Validation in verifyTokenSocket()

Summary The verifyTokenSocket function in plugin/YPTSocket/functions.php has its token timeout validation commented out, causing WebSocket tokens to never expire despite being generated with a 12-hour timeout. This allows captured or legitimately obtained tokens to provide permanent WebSocket...

5.4CVSS5.8AI score0.00269EPSS
SaveExploits1References4Affected Software1
RedhatCVE
RedhatCVE
•added 2026/03/28 4:59 p.m.•16 views

CVE-2026-34362

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the verifyTokenSocket function in plugin/YPTSocket/functions.php has its token timeout validation commented out, causing WebSocket tokens to never expire despite being generated with a 12-hour timeout. This allows...

5.4CVSS5.8AI score0.00269EPSS
SaveExploits1References1
Veracode
Veracode
•added 2026/03/28 5:29 a.m.•18 views

Session Hijacking

MCP Ruby SDK is vulnerable to Session Hijacking. The vulnerability is due to insufficient session binding, where an attacker who obtains a valid session ID can completely hijack the victim's Server-Sent Events SSE stream and intercept all real-time data...

8.2CVSS6AI score0.00541EPSS
SaveExploits1References8Affected Software1
NVD
NVD
•added 2026/03/27 5:16 p.m.•27 views

CVE-2026-34362

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the verifyTokenSocket function in plugin/YPTSocket/functions.php has its token timeout validation commented out, causing WebSocket tokens to never expire despite being generated with a 12-hour timeout. This allows...

5.4CVSS0.00269EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/03/27 4:42 p.m.•44 views

CVE-2026-34362 AVideo's WebSocket Token Never Expires Due to Commented-Out Timeout Validation in verifyTokenSocket()

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the verifyTokenSocket function in plugin/YPTSocket/functions.php has its token timeout validation commented out, causing WebSocket tokens to never expire despite being generated with a 12-hour timeout. This allows...

5.4CVSS0.00269EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/03/27 4:42 p.m.•7 views

CVE-2026-34362

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the verifyTokenSocket function in plugin/YPTSocket/functions.php has its token timeout validation commented out, causing WebSocket tokens to never expire despite being generated with a 12-hour timeout. This allows...

5.4CVSS5.8AI score0.00269EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/03/27 12:00 a.m.•35 views

PT-2026-28620

Name of the Vulnerable Software and Affected Versions AVideo versions up to and including 26.0 Description A flaw exists in AVideo where WebSocket tokens do not expire as intended due to a commented-out timeout validation within the verifyTokenSocket function located in...

5.4CVSS5.9AI score0.00269EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/03/26 2:58 p.m.•12 views

CVE-2026-31882

Dagu is a workflow engine with a built-in Web user interface. Prior to 2.2.4, when Dagu is configured with HTTP Basic authentication DAGUAUTHMODE=basic, all Server-Sent Events SSE endpoints are accessible without any credentials. This allows unauthenticated attackers to access real-time DAG...

7.5CVSS6AI score0.00742EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/13 7:28 p.m.•8 views

CVE-2026-31882

Dagu is a workflow engine with a built-in Web user interface. Prior to 2.2.4, when Dagu is configured with HTTP Basic authentication DAGUAUTHMODE=basic, all Server-Sent Events SSE endpoints are accessible without any credentials. This allows unauthenticated attackers to access real-time DAG...

7.5CVSS6AI score0.00742EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/13 7:28 p.m.•8 views

CVE-2026-31882 Dagu SSE Authentication Bypass in Basic Auth Mode

Dagu is a workflow engine with a built-in Web user interface. Prior to 2.2.4, when Dagu is configured with HTTP Basic authentication DAGUAUTHMODE=basic, all Server-Sent Events SSE endpoints are accessible without any credentials. This allows unauthenticated attackers to access real-time DAG...

7.5CVSS6.1AI score0.00742EPSS
SaveExploits1References4
Rows per page
Query Builder