Lucene search
+L

18733 matches found

Positive Technologies
Positive Technologies
added 2026/09/09 12:00 a.m.7 views

PT-2026-88726

Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

0.00246EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/08 7:29 p.m.1434 views

hassh

"HASSH" - a Profiling Method for SSH Clients and Servers. NOTE: This Corelight repository was created so that it can be actively maintained, as per a request from Salesforce whose original repository is not being maintained. "HASSH" is a network fingerprinting standard which can be used to identi...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 3:37 a.m.6 views

CVE-2023-1281

CVE-2023-1281 Vulnerabilidad de Use After Free en el filtro de índice de control de tráfico del kernel de Linux tcindex...

7.8CVSS7AI score0.00304EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 1:40 a.m.7 views

CVE-2021-34767

CVE-2021-34767 Description Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an...

7.4CVSS7.4AI score0.00783EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 9:42 p.m.8 views

CVE-2026-30784-rustdesk-poc

CVE-2026-30784-rustdesk-poc CVE-2026-30784: RustDesk hbbs Traffic Amplification PoC & PCAP Analysis Key Findings Key Finding: Enforcing key-based authentication -k does not prevent this amplification attack, because the amplification response is triggered during the unauthenticated initial...

5.9AI score0.00648EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 3:33 p.m.8 views

CVE-2026-9997-VPN-Split-Tunneling-Bypass-via-DHCP-Option-Injection

CVE-2026-9997 – Evasión del túnel dividido de VPN mediante inyección de opciones DHCP Código del programa servidor DHCP simulado en Python + cliente root@kitploit: !/usr/bin/env python3 roguedhcpserver.py - Injects a static route to bypass VPN split tunnel import socket, struct, threading def...

8.3CVSS7.5AI score0.00178EPSS
SaveExploits0
NVD
NVD
added 2026/09/07 11:17 a.m.5 views

CVE-2026-86294

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument sitename/sitedesc leads to cross site scripting. Remot...

5.3CVSS0.00443EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/07 10:16 a.m.4 views

CVE-2026-86292

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

7.5CVSS0.00507EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/07 10:16 a.m.4 views

CVE-2026-86293

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missing authentication. The attack may be...

6.9CVSS0.00726EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/07 10:00 a.m.37 views

CVE-2026-86294 SourceCodester Simple Traffic Offense System Settings Update Endpoint save-settings.php cross site scripting

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument sitename/sitedesc leads to cross site scripting. Remot...

5.3CVSS0.00443EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/07 10:00 a.m.6 views

EUVD-2026-72342

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument sitename/sitedesc leads to cross site scripting. Remot...

5.3CVSS0.00443EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/07 10:00 a.m.8 views

CVE-2026-86294

SourceCodester Simple Traffic Offense System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Settings Update Endpoint (file save-settings.php). The root cause is improper handling of the site_name/site_desc arguments, which can be manipulated by a remote, unauthenticated atta...

5.3CVSS0.00443EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/07 9:45 a.m.9 views

CVE-2026-86293

A missing authentication flaw exists in the Deletion Endpoint (file delete-user.php) of SourceCodester Simple Traffic Offense System 1.0 . By manipulating the ID argument remotely without authentication, an attacker can perform unauthorized deletion operations, resulting in low integrity and low ...

6.9CVSS0.00726EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/07 9:45 a.m.41 views

CVE-2026-86293 SourceCodester Simple Traffic Offense System Deletion Endpoint delete-user.php missing authentication

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missing authentication. The attack may be...

6.9CVSS0.00726EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/07 9:30 a.m.6 views

EUVD-2026-72321

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

7.5CVSS0.00507EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/07 9:30 a.m.35 views

CVE-2026-86292 SourceCodester Simple Traffic Offense System User Creation saveuser.php missing authentication

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

7.5CVSS0.00507EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/07 9:30 a.m.11 views

CVE-2026-86292

SourceCodester Simple Traffic Offense System 1.0 is vulnerable to missing authentication in the User Creation component, specifically the file saveuser.php . Manipulating the position argument allows an unauthenticated remote attacker to bypass access controls, leading to low impacts on confident...

7.5CVSS0.00507EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/09/07 12:00 a.m.8 views

PT-2026-86668

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missing authentication. The attack may be...

6.9CVSS0.00726EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/09/07 12:00 a.m.9 views

PT-2026-86678

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument site name/site desc leads to cross site scripting...

5.3CVSS0.00443EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/09/07 12:00 a.m.8 views

PT-2026-86667

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

7.5CVSS0.00507EPSS
SaveExploits0References7
Rows per page
Query Builder