Lucene search
+L

90842 matches found

Kitploit
Kitploit
•added 2026/10/08 6:09 a.m.•19 views

pythia-sql-clairvoyance

Production-ready SQL injection scanner with 6 detection methods, AI-powered remediation, SARIF output, and CI/CD integration. Quick Start · Documentation · Docker · AI Analysis · Star on GitHub In Action Live scan · PHP vulnerable shop · 11 findings detected · safe mode · 2265.56s !Pythia — HTML...

6.4AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/08 5:31 a.m.•18 views

CVE-2022-22536_SAP_Request_Smuggling_Scanner

CVE-2022-22536 SAP Rquest Smuggling Scanner This is a fast, socket-level batch scanner for CVE-2022-22536 , a critical request smuggling vulnerability in SAP Internet Communication Manager ICM and SAP Web Dispatcher. It tests multiple hosts in parallel for protocol desynchronization behavior...

10CVSS8.5AI score0.97945EPSS
SaveExploits8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•3 views

CVE-2026-69435: Server-Side Request Forgery (SSRF)

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...

9.6CVSS5.8AI score0.0039EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•3 views

CVE-2026-84057: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

8.1CVSS6.7AI score0.00359EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•1 views

CVE-2026-94440: Allocation of Resources Without Limits or Throttling

Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes...

7.5CVSS5.9AI score0.00404EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•2 views

CVE-2026-78660: Inconsistent Interpretation of HTTP Requests

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

7.5CVSS5.9AI score0.00303EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/10/07 11:54 a.m.•8 views

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by she11f in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.13.1...

7.3CVSS5.8AI score0.00219EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/10/07 11:53 a.m.•6 views

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by she11f in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.13.1...

8.5CVSS5.8AI score0.00278EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/10/07 11:29 a.m.•8 views

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by hhhai in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.13.1...

7.1CVSS5.8AI score0.0018EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2026/10/07 9:57 a.m.•7 views

nuclei — Updated!

English • 中文 • Korean • Indonesia • Spanish • 日本語 • Portuguese • Türkçe...

6.1AI score
SaveExploits0References16
EUVD
EUVD
•added 2026/10/07 3:30 a.m.•13 views

EUVD-2026-94126

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scanner...

8.8CVSS6.9AI score0.00548EPSS
SaveExploits0References2
OSV
OSV
•added 2026/10/07 1:16 a.m.•8 views

CVE-2026-97655

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scanner...

8.8CVSS6.8AI score
SaveExploits0References1
NVD
NVD
•added 2026/10/07 1:16 a.m.•19 views

CVE-2026-97655

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scanner...

8.8CVSS0.00548EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•14 views

CVE-2026-76464: Improper Restriction of Operations within the Bounds of a Memory Buffer

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

9.6CVSS8.2AI score0.00192EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•6 views

CVE-2026-97655: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scanner...

8.8CVSS6.9AI score0.00548EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•5 views

CVE-2026-107207: Missing Authentication for Critical Function

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

7.2CVSS6AI score0.00289EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/06 11:59 p.m.•52 views

CVE-2026-97655 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scanner...

8.8CVSS0.00548EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 11:59 p.m.•29 views

CVE-2026-97655

Langflow OSS versions 1.0.0 through 1.12.2 are affected by CVE-2026-97655 , which allows a remote attacker to execute arbitrary code. The root cause is an incomplete blocklist within the code security scanner, classified as CWE-94: Improper Control of Generation of Code ('Code Injection') . This ...

8.8CVSS6.9AI score0.00548EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
•added 2026/10/06 4:16 p.m.•23 views

erl_mouse

erlmouse Version 1.1 Okay, ich habe einige Dinge verbessert, um die Chancen zu erhöhen, ein anfälliges Gerät oder Netzwerk zu finden. Die meisten sind nicht öffentlich erreichbar, wurden gepatcht oder sind so obskur, dass es schwierig sein kann, ein Ziel zu finden. Trotzdem bleiben wir dran. Sie...

10CVSS8AI score0.98786EPSS
SaveExploits39
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•3 views

CVE-2026-39745: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Contact Form to DB by BestWebSoft = 1.7.6 versions...

7.1CVSS5.8AI score0.00237EPSS
SaveExploits0References2
Rows per page
Query Builder