Lucene search
+L

5867 matches found

Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

CVE-2021-35042

CVE-2021-35042 Injeção de SQL via entrada não confiável em QuerySet.orderby Configuração: Inicie as instâncias usando: docker-compose up Agora abra a seguinte URL para carregar os dados de exemplo: http://localhost:8000/vulapp/setup Em seguida, acesse a página vulnerável em:...

9.8CVSS7.9AI score0.44369EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

CVE-2018-25031

CVE-2018-25031 Testes de exploração do CVE-2018-25031 O Swagger UI anterior à versão 4.1.3 poderia permitir que um atacante remoto realizasse ataques de falsificação spoofing. Ao convencer uma vítima a abrir uma URL manipulada, um atacante poderia explorar essa vulnerabilidade para exibir...

4.3CVSS5.6AI score0.42326EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

avscript

Interpretador JavaScript do Avast Antivirus NOTA: Em 03/11/2020 a Avast anunciou que havia decidido desabilitar este interpretador globalmente! O processo principal do antivírus Avast é chamado AvastSvc.exe, que é executado como SYSTEM. Esse serviço carrega o mecanismo de antivírus de baixo nível...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.1 views

CVE-2023-32571

🐞 CVE-2023-32571 - Execução Remota de Código no System.Linq.Dynamic.Core Prova de Conceito para CVE-2023-32571, uma vulnerabilidade de execução remota de código no System.Linq.Dynamic.Core 1.0.7.10 a 1.2.25. Esta vulnerabilidade permite que atacantes executem código e comandos arbitrários quando...

9.8CVSS10AI score0.34904EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.4 views

tetsuo-pulse

Socket Library Aviso de Maturidade : Esta biblioteca é funcional e bem testada, mas recém-lançada. É apropriada para desenvolvimento, ferramentas internas e ambientes controlados. A implantação em produção com entrada de rede não confiável deve aguardar até que a base de código tenha acumulado...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 6:11 a.m.1 views

VUL4J-60

antisamy अविश्वसनीय स्रोतों से आने वाले HTML का तेज़, कॉन्फ़िगरेबल सफाई करने के लिए एक लाइब्रेरी। इसे दूसरे शब्दों में कहा जा सकता है: यह एक API है जो आपको यह सुनिश्चित करने में मदद करता है कि क्लाइंट अपने प्रोफ़ाइल, टिप्पणियों आदि के लिए दिए गए HTML में दुर्भावनापूर्ण कार्गो कोड न डालें, जो सर्व...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 5:06 a.m.2 views

CVE-2024-22641

CVE-2024-22641 Tipo de Vulnerabilidade Negação de Serviço por Expressão Regular ReDoS Produto e Versão Afetados TCPDF root@kitploit: AddPage; $pdf-ImageSVG$file='poc.svg'; ?...

7.5CVSS7.3AI score0.01113EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 10:17 p.m.2 views

CVE-2022-42889-POC

CVE-2022-42889-POC Preuve de concept pour la vulnérabilité Apache commons-text CVE-2022-42889. Quel est le problème : Apache Commons Text effectue une interpolation de variables, permettant d'évaluer et d'étendre dynamiquement des propriétés. Le format standard pour l'interpolation est...

9.8CVSS7.5AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/08/25 9:55 p.m.3 views

CVE-2026-14382

CVE-2026-14382 Gatilho do binário Bug fix root@kitploit: $250000492218546 High CVE-2026-14382: Insufficient validation of untrusted input in ANGLE. Reported by anonymous on 2026-03-13 A causa raiz desta vulnerabilidade parece ser semelhante à do CVE-2025-6558. Com base na minha análise atual,...

9.6CVSS8.2AI score0.09585EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/25 6:09 p.m.17 views

EUVD-2026-37015

gRPC Erlang package vulnerable to Remote Code Execution with attacker-controlled gRPC payloads...

9.2CVSS8.9AI score0.00573EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/25 4:32 a.m.1 views

CVE-2026-21012-Rust-serde-Deserialization-of-Untrusted-Enum-Variant-Injection-

CVE-2026-21012 – Rust serde द्वारा अविश्वसनीय Enum का Deserialization Variant Injection प्रोग्राम कोड Rust root@kitploit: // serdevuln.rs - Deserializes an enum from user JSON without validation use serde::Deserialize, Serialize; use serdejson; deriveDeserialize, Debug enum AdminAction ReadLogs,...

6.8CVSS5.3AI score0.00093EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 4:25 a.m.1 views

nahsra__antisamy_CVE-2017-14735_1-5-6

AntiSamy Uma biblioteca para realizar limpeza rápida e configurável de HTML proveniente de fontes não confiáveis. Suporta Java 8+. Outra forma de dizer isso poderia ser: é uma API que ajuda você a garantir que os clientes não forneçam código malicioso no HTML que eles fornecem para seus perfis,...

6.1CVSS6.6AI score0.01664EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 4:25 a.m.1 views

nahsra__antisamy_CVE-2016-10006_1-5-3

antisamy مكتبة لإجراء تعقيم سريع وقابل للتكوين لـ HTML القادم من مصادر غير موثوقة. هناك طريقة أخرى لقول ذلك وهي: إنها واجهة برمجة تطبيقات API تساعدك على التأكد من أن العملاء لا يقدمون كود حمولة خبيث في HTML الذي يقدمونه لملفاتهم الشخصية أو تعليقاتهم، وما إلى ذلك، والتي يتم حفظها على الخادم. مصطلح...

6.1CVSS0.02039EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/24 8:18 p.m.1 views

commons-text-goat

Commons-Text Goat यह एक वेब ऐप है जो जानबूझकर CVE-2022-42889 के प्रति संवेदनशील है। यह एक एम्बेडेड Jetty सर्वर और Maven का उपयोग करके एक सर्वलेट प्रारंभ करता है जो पोर्ट 8080 पर URL \api पर सुनता है। यह एंडपॉइंट एक URL पैरामीटर cmd स्वीकार करता है। इसे $ और के बीच एम्बेड किया जाता है और...

9.8CVSS0.99931EPSS
SaveExploits42
RedHat Linux
RedHat Linux
added 2026/08/24 4:39 p.m.6 views

aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the CookieJar.load function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicio...

7.3CVSS7.4AI score0.00179EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/24 4:36 p.m.7 views

aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the CookieJar.load function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicio...

7.3CVSS7.4AI score0.00179EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/24 2:56 a.m.1 views

seans-surf-and-skate

Sean's Surf & Skate Co. — Demonstração do Seal Security Maven / Java Uma pequena loja virtual de e-commerce com aparência real "Sean's Surf & Skate Co." construída com Spring Boot. Ela vem com dependências de código aberto conhecidamente vulneráveis para demonstrar como o Seal Security corrige CV...

9.8CVSS0.99569EPSS
SaveExploits10References1
Positive Technologies
Positive Technologies
added 2026/08/23 12:00 a.m.12 views

PT-2026-79768

justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkification. Applications that evaluate attacker-controlled selector strings via query, matches, or selector-based transforms, run selector matching over very large untrusted documents,...

8.7CVSS5.3AI score0.00372EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/21 5:50 p.m.12 views

EUVD-2026-64019

Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD. Prior to 0.10.45, internal/hcl/remotevariablesloader.go and related Terraform Cloud, remote-plan, and Terragrunt registry request paths can attach a configured Terraform Cloud or registry token to a destination...

5.9CVSS5.5AI score0.00367EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/21 5:50 p.m.12 views

CVE-2026-71494

Infracost prior to 0.10.45 contains a token disclosure vulnerability in internal/hcl/remote_variables_loader.go and related Terraform Cloud, remote-plan, and Terragrunt registry request paths. The root cause is that a configured Terraform Cloud or registry token can be attached to a destination h...

5.9CVSS5.5AI score0.00367EPSS
SaveExploits0References4
Rows per page
Query Builder