Lucene search
+L

840 matches found

Kitploit
Kitploit
•added 2026/10/02 3:19 p.m.•10 views

CVE-2026-41089-Netlogon-RCE-PoC

🛡️ CVE-2026-41089 Netlogon Security Research & AI Security Tool Module Security Research • Defensive Validation • AI Security Tool Integration 🌐 Демо-версия • 📚 Сайт проекта • 💬 Чат сообщества Website navigation: Home • Updates • Downloads • Modules Official AI Security Tool module page 🧠...

9.8CVSS8.1AI score0.07203EPSS
SaveExploits54References18
Kitploit
Kitploit
•added 2026/10/02 12:14 p.m.•160 views

sysmon-modular

sysmon-modular | A Sysmon configuration repository for everybody to customise Sysmon Modular is a configuration repository for Microsoft Sysinternals Sysmon. Small XML modules make it easier to select, review and maintain the telemetry that is useful to your organisation. The sysmon-modular Go to...

6.3AI score
SaveExploits0References14
Kitploit
Kitploit
•added 2026/10/02 4:47 a.m.•162 views

anteater

Anteater - CI/CD Gate Check Framework Description Anteater is an open framework to prevent the unwanted merging of nominated strings, filenames, binaries, depreciated functions, staging enviroment code / credentials etc. Anything that can be specified with regular expression syntax, can be sniffe...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/02 4:22 a.m.•12 views

arachni

Avis Arachni est devenu obsolète, essayez son successeur de nouvelle génération Ecsypno Spectre Scan! Arachni - Framework de Scanner de Sécurité d'Applications Web Version | 1.6.1.3 ---|--- Page d'accueil | http://arachni-scanner.com Blog | http://arachni-scanner.com/blog Github |...

5.9AI score
SaveExploits0References5
Nuclei
Nuclei
•added 2026/10/02 2:11 a.m.•121 views

XStream <1.4.15 - Server-Side Request Forgery

XStream before 1.4.15 is susceptible to server-side request forgery. An attacker can request data from internal resources that are not publicly available by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorize...

7.7CVSS7.5AI score0.81817EPSS
SaveExploits4References5
Kitploit
Kitploit
•added 2026/10/01 3:16 p.m.•14 views

PSCF

OWASP Product Security Capability Framework PSCF https://prods.ec/ Le cadre de compétences en sécurité des produits OWASP PSCF est un guide complet conçu pour encadrer et améliorer la sécurité des produits logiciels. En utilisant une approche structurée pour identifier, mettre en œuvre et gérer l...

5.7AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/01 11:51 a.m.•12 views

raptor

Raptor Raptor est un framework pour auditer l'écosystème blockchain contrats, protocoles, etc.. Aperçu Raptor fournit des approches et outils structurés pour identifier les vulnérabilités de sécurité dans les smart contracts et les protocoles blockchain. Le framework aide les auditeurs à document...

6.2AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/09/16 12:00 a.m.•10 views

The vulnerability of the Security Framework component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.

The vulnerability of the Security Framework component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP network protocol...

9.9CVSS6.6AI score0.00432EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2026/09/15 8:18 p.m.•11 views

CVE-2026-83423

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle JDevelope...

8.8CVSS0.00417EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/15 8:18 p.m.•14 views

CVE-2026-83049

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

8.5CVSS0.003EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/15 8:05 p.m.•21 views

CVE-2026-83423

Oracle JDeveloper (Oracle Fusion Middleware, component: Security Framework ) is vulnerable in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover o...

8.8CVSS5.6AI score0.00417EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/15 8:05 p.m.•9 views

EUVD-2026-79723

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle JDevelope...

8.8CVSS5.6AI score0.00417EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/15 8:03 p.m.•27 views

CVE-2026-83049

CVE-2026-83049 affects the Security Framework component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction, leading to a scope change where addit...

8.5CVSS5.6AI score0.003EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/09/15 8:03 p.m.•14 views

EUVD-2026-79377

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

8.5CVSS5.6AI score0.003EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•14 views

PT-2026-92892

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle JDevelope...

8.8CVSS5.6AI score0.00417EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•1 views

CVE-2026-83423: Improper Privilege Management

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle JDevelope...

8.8CVSS5.7AI score0.00417EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•5 views

CVE-2026-83049: Improper Access Control

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

8.5CVSS5.7AI score0.003EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•42 views

PT-2026-92573

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description A flaw in the Security Framework component allows a low privileged attacker with network access via HTTP to compromise the system. This issue can...

8.5CVSS5.8AI score0.003EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•8 views

Astra Linux – Vulnerability in libxstream-java

XStream is a simple library for serializing objects to XML and back again. In affected versions, this vulnerability may allow a remote attacker with sufficient rights to execute commands on the host by manipulating the input stream being processed. No users are affected as long as they follow...

8.5CVSS7.9AI score0.98124EPSS
SaveExploits6References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•9 views

Astra Linux – Vulnerability in libxstream-java

XStream is a Java library for serializing objects to XML and back again. Before version 1.4.16, XStream had a vulnerability that could allow a remote attacker to execute arbitrary code by manipulating the processed input stream. However, users who followed the recommendations to set up XStream’s...

9.8CVSS7.8AI score0.15234EPSS
SaveExploits1References1
Rows per page
Query Builder