Lucene search
+L

25 matches found

Kitploit
Kitploit
added 2026/09/10 9:55 a.m.5 views

CVE-2025-66478-kinda-waf

kinda-waf Simple, temporary WAF protection tester targeting a specific payload sequence. Let's help websites stay safe until they are properly patched! Purpose Protect from CVE-2025-66478 by detecting and blocking requests containing specific payload signatures. This shouldn't break legitimate...

7.5AI score
SaveExploits112
Kitploit
Kitploit
added 2026/09/10 1:36 a.m.6 views

CVE-2026-31431-patch

CVE-2026-31431-patch A temporary mitigation for CVE-2026-31431 vulneribility git clone https://github.com/rshosting/CVE-2026-31431-patch.git cd CVE-2026-31431-patch sh checkaead.sh Once server is back from reboot execute below script: sh completeaead.sh...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits242References1
Kitploit
Kitploit
added 2026/09/09 4:06 a.m.4 views

wordpress-skelersecurity-core-security-CVE-2026-63030

SkelerSecurity Core Security Plugin A focused, temporary mitigation for unauthenticated access to WordPress Core’s REST Batch API endpoint. Overview SkelerSecurity Core Security Plugin requires authentication before WordPress processes requests to the Core REST Batch API route: /wp-json/batch/v1...

9.8CVSS8.5AI score0.97271EPSS
SaveExploits77
GithubExploit
GithubExploit
added 2026/07/19 1:51 p.m.75 views

Exploit for CVE-2017-0144

LegacyShield — EternalBlue Module A Windows desktop security...

9.3CVSS8AI score0.9923EPSS
SaveExploits67
Positive Technologies
Positive Technologies
added 2026/05/01 12:00 a.m.21 views

PT-2026-36292

Name of the Vulnerable Software and Affected Versions SourceCodester Advanced School Management System version 1.0 Description A SQL injection flaw exists in the 'checkEmail' endpoint within the commonController.php file. This issue allows remote attackers to manipulate database queries through a...

7.5CVSS7.2AI score0.00259EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2025/12/17 11:10 p.m.6 views

CVE-2025-68435 Zerobyte has Authentication Bypass by Primary Weakness

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...

9.1CVSS6.7AI score0.00412EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/12/17 12:25 a.m.7 views

SUSE CVE-2025-68216

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Disable trampoline for kernel module function trace The current LoongArch BPF trampoline implementation is incompatible with tracing functions in kernel modules. This causes several severe and user-visible problem...

6.4AI score0.00185EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/16 2:15 p.m.12 views

UBUNTU-CVE-2025-68216

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Disable trampoline for kernel module function trace The current LoongArch BPF trampoline implementation is incompatible with tracing functions in kernel modules. This causes several severe and user-visible problem...

5.8AI score0.00185EPSS
SaveExploits0References5
CVE
CVE
added 2025/12/16 1:57 p.m.25 views

CVE-2025-68216

Summary (CVE-2025-68216): In the Linux kernel, LoongArch-architecture BPF trampoline attachments to kernel module functions have been disabled due to incompatibilities with tracing in modules. This prevents attaching BPF fentry/trampoline probes to module functions, addressing severe user-visible...

6AI score0.00185EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/16 1:57 p.m.13 views

CVE-2025-68216 LoongArch: BPF: Disable trampoline for kernel module function trace

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Disable trampoline for kernel module function trace The current LoongArch BPF trampoline implementation is incompatible with tracing functions in kernel modules. This causes several severe and user-visible problem...

6.3AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/16 12:00 a.m.12 views

PT-2025-51629

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Disable trampoline for kernel module function trace The current LoongArch BPF trampoline implementation is incompatible with tracing functions in kernel modules. This causes several severe and user-visible problem...

6.3AI score0.00185EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2022-36952

Malicious code in bioql PyPI...

7CVSS6.3AI score0.00186EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/06/23 12:00 a.m.11 views

PT-2025-26576 · Htacg +1 · Tidy-Html5 +1

Name of the Vulnerable Software and Affected Versions: HTACG tidy-html5 version 5.8.0 Description: A memory leak issue has been discovered, affecting the defaultAlloc function in the src/alloc.c file. This issue can be exploited locally, potentially leading to memory leak. The exploit details hav...

4.8CVSS7.3AI score0.00217EPSS
SaveExploits1References18
Positive Technologies
Positive Technologies
added 2024/09/10 12:00 a.m.15 views

PT-2024-12602 · Loftware · Loftware Spectrum

Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions through 4.6 Description: The issue concerns an unprotected JMX Registry in Loftware Spectrum. Recommendations: For versions through 4.6, consider restricting access to the JMX Registry as a temporary mitigation...

9.8CVSS7.2AI score0.00399EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/06/17 12:00 a.m.8 views

PT-2024-27077 · Unknown · Akbr Update

Name of the Vulnerable Software and Affected Versions: akbr update version 1.0.0 Description: The issue is related to Prototype Pollution, which occurs via the update/index.js file. Recommendations: For akbr update version 1.0.0, consider restricting access to the update/index.js file as a...

5.9CVSS6.8AI score0.002EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/04/03 12:00 a.m.12 views

PT-2024-14508 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM DB2 for Linux, UNIX and Windows includes Db2 Connect Server version 11.5 Description: The issue is related to a denial of service condition that can occur when querying a specific UDF built-in function concurrently. Recommendations: For I...

5.3CVSS9.4AI score0.00625EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/04/04 12:00 a.m.15 views

PT-2023-21328 · Wondershare · Wondershare Uniconverter

Name of the Vulnerable Software and Affected Versions: Wondershare UniConverter version 14.0.0 Description: An issue in Wondershare UniConverter allows a remote attacker to execute arbitrary commands via the uniconverter14 64bit setup full14204.exe file. Recommendations: For Wondershare...

7.8CVSS8AI score0.00433EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/12/30 12:00 a.m.19 views

PT-2022-27909 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered, related to the cameo.nslookup target parameter in the tools nslookup function. Recommendations: For TRENDnet TEW755AP version 1.13B01, avoid using the...

9.8CVSS9.5AI score0.00873EPSS
SaveExploits1References2
NVD
NVD
added 2022/06/17 1:15 p.m.49 views

CVE-2022-33915

Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead to a local privilege escalation. This Hotpatch package is not a replacement for updating to a log4j version that mitigates CVE-2021-44228 or...

7CVSS0.00186EPSS
SaveExploits0References2
Amazon
Amazon
added 2022/06/15 12:00 a.m.830 views

Important: log4j-cve-2021-44228-hotpatch

Issue Overview: Versions of the Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3-5 are affected by a race condition that could lead to a local privilege escalation. The Apache Log4j Hotpatch is not a replacement for updating to a log4j version that mitigates CVE-2021-44228 o...

10CVSS8.9AI score0.99999EPSS
SaveExploits372
Rows per page
Query Builder