CVE-2024-38063

CVE-2024-38063 - Explotando el kernel de forma remota mediante IPv6 Desde que cayó el último parche de Windows el 13 de agosto, he estado metido de lleno en tcpip.sys el controlador del kernel responsable de manejar los paquetes TCP/IP. Una vulnerabilidad con una puntuación CVSS de 9.8 en la part...

cve-scores

CVE 分数 EPSS 与 VEDAS 分数聚合器（针对 CVE） 数据提供者 分数| 维护者| 目的| 覆盖范围| 归属| 更新频率 ---|---|---|---|---|--- 利用预测评分系统 EPSS| Empirical Security| 预测未来被利用的可能性| 1 个标识符 CVE| 来自数据合作伙伴的专有数据| 24 小时 漏洞与利用数据聚合系统 VEDAS| A.R.P. Syndicate| 估计漏洞普遍性与利用成熟度| 150+ 个标识符（CVE、EUVD、CNNVD、BDU 等）| 来自Exploit Observer的开源情报 OSINT| 12-16 小时...

criticality_score

Puntuación de criticidad de proyectos de código abierto Beta Este proyecto es mantenido por miembros del Securing Critical Projects WG. Objetivos 1. Generar una puntuación de criticidad para cada proyecto de código abierto. 2. Crear una lista de proyectos críticos de los que depende la comunidad ...

kube-score

kube-score kube-score 是一个对您的 Kubernetes 对象定义进行静态代码分析的工具。 输出是一系列建议，帮助您提高应用程序的安全性和弹性。 您可以通过在线演示（源代码）在浏览器中尝试 kube-score。 安装 kube-score 安装简单，可通过以下途径获取： 赞助商 您的公司在这里？ 检查项 完整检查项列表请参见 READMECHECKS.md。 容器限制（应设置） Pod 被 NetworkPolicy 覆盖，建议同时配置 egress 和 ingress 规则 Deployment 和 StatefulSet 应设置...

metahub

MetaHub is an automated contextual security findings enrichment and impact evaluation tool for vulnerability management. You can use it with AWS Security Hub or any ASFF-compatible security scanner. Stop relying on useless severities and switch to impact scoring definitions based on YOUR context...

cve-collector

CVE-Collector Simple Latest CVE Collector Written in Python There are various methods for collecting the latest CVE Common Vulnerabilities and Exposures information. This code was created to provide guidance on how to collect, what information to include, and how to code when creating a CVE...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

MailAccess

root@kitploit: ███╗ ███╗ █████╗ ██╗██╗ █████╗ ██████╗ ██████╗███████╗███████╗███████╗ ████╗ ████║██╔══██╗██║██║ ██╔══██╗██╔════╝██╔════╝██╔════╝██╔════╝██╔════╝ ██╔████╔██║███████║██║██║ ███████║██║ ██║ █████╗ ███████╗███████╗ ██║╚██╔╝██║██╔══██║██║██║ ██╔══██║██║ ██║ ██╔══╝ ╚════██║╚════██║ ██║...

Blink Router - Command Injection

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain a command injection vulnerability via the bsSetSSIDHide function. id: CVE-2025-45985 info: name: Blin...

Chamilo model.ajax.php - SQL Injection

main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter. id: CVE-2021-34187 info: name: Chamilo model.ajax.php - SQL Injection author: DhiyaneshDK severity: critical description: | main/inc/ajax/model.ajax.php in Chamilo...

Kyocera Net View Address Book Exposure

Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function. id: CVE-2022-1026 info: name: Kyocera Net View Address Book Exposure autho...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

Youzify < 1.2.0 - Unauthenticated SQLi

The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection id: CVE-2022-1950 info: name: Youzify 1.2.0 - Unauthenticated SQLi author:...

Jordy Meow AI Engine - Unrestricted File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine- ChatGPT Chatbot.This issue affects AI Engine- ChatGPT Chatbot- from n/a through 1.9.98. id: CVE-2023-51409 info: name: Jordy Meow AI Engine - Unrestricted File Upload author: pussycat0x severity: critical...

Oracle Business Intelligence - Path Traversal

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...

SEVulDet

SEVulDet SEVulDet 是一个语义增强的基于深度学习的框架，能够通过提取、保留和学习更多语义来精确识别漏洞模式。 联系邮箱 ：[email protected] SEVulDet 详情 近年来，基于深度学习的漏洞检测框架受到更多关注，这些框架利用神经网络来识别漏洞模式。尽管已付出大量努力，但现有方法在实际应用中仍不够精确。先前的工作未能从源代码中全面捕获语义，或者采用了不合适的神经网络设计。 本文提出 SEVulDet，一个语义增强的基于深度学习的框架，通过提取、保留和学习更多语义来精确识别漏洞模式。首先，SEVulDet...

pocindex

Just landed Trending in 2026 Trending in 2025 2024, 2023 Trending in 2024 Data Every file is plain JSON on the CDN. No key, no rate limit. root@kitploit: everything the index knows about one CVE curl -s https://pocindex.io/CVElist.json \ | jq '. | select.cve == "CVE-2021-44228" | cve, poc: .poc |...

OpenEMR < 7.0.1 - Cross-Site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1. id: CVE-2023-2948 info: name: OpenEMR 7.0.1 - Cross-Site Scripting author: ritikchaddha,princechaddha severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr...

CVE-2024-44313

Exploit 🛠️ Estudio de Caso: CVE-2024-44313 y el EPSS en la Priorización de Vulnerabilidades Este estudio de caso fue desarrollado para una charla sobre EPSS Exploit Prediction Scoring System, demostrando cómo la puntuación puede influir en la priorización de vulnerabilidades en la práctica. La...

cve-2020-29007

CVEID : CVE-2020-29007 Name of the affected products and versions : Mediawiki Score all versions up to 0.3.0 Problem type : CWE-96: Improper Neutralization of Directives in Statically Saved Code ‘Static Code Injection’ Summary Score is a Mediawiki extension which generates musical notation based ...