Lucene search
+L

7094 matches found

NVD
NVD
added 2026/09/18 8:17 a.m.4 views

CVE-2026-93493

A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...

5.9CVSS0.0015EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/18 8:01 a.m.7 views

CVE-2026-93493 Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a response omits the optional nextupdate field

A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...

5.9CVSS0.0015EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/18 8:01 a.m.3 views

EUVD-2026-82770

A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...

5.9CVSS0.0015EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/18 8:01 a.m.3 views

CVE-2026-93493

A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...

5.9CVSS0.0015EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/18 4:10 a.m.7 views

LiberationPlay-CVE-2025-24132-AirBourne-POC

LiberationPlay! CVE-2025-24132 AirBourne POC CVE-2025-24132 AirBourne 的 POC。目前仅触发溢出并导致崩溃。 为了尝试获得我的汽车车机系统的 root 访问权限,我研究并整理了关于由 Oligo Security 发现的 AirPlay 漏洞 CVE-2025-24132(命名为 Airbourne)的所有信息。 https://www.oligo.security/blog/airborne 这是我第一个逆向工程项目。我是在从未使用过调试器、Linux 和编程经验很少、并且直到项目中途才接触过 MacOS...

6.5CVSS7.7AI score0.03151EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/17 11:45 p.m.14 views

AFD

AFD CVE-2022-24494 La vulnerabilidad es una lectura arbitraria de memoria. La causa raíz es la falta de validación en una dirección de memoria suministrada desde el espacio de usuario user-land que se utiliza en una operación memcpy para copiar datos desde esta dirección de memoria a la memoria d...

7.8CVSS7.3AI score0.01905EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 11:42 p.m.9 views

CVE-2021-21551

CVE-2021-21551 通过启动系统命令来利用CVE-2021-21551进行本地权限提升(LPE)的简单PoC。 https://vulners.com/cve/CVE-2021-21551 在签名的戴尔Windows驱动程序(dbutil23.sys)中发现了一个问题,可能导致整个本地系统被攻陷。该驱动程序的ioctl调度例程缺乏对用户提供的缓冲区的验证。 IOCTL 任何人都可以创建句柄并向这些ioctl代码发出ioctl请求,从而破坏Windows安全模型: 0x9b0c1f40 - 任意物理内存读取 0x9b0c1f44 - 任意物理内存写入 0x9b0c1ec4 -...

8.8CVSS8.1AI score0.79249EPSS
SaveExploits18References1
Kitploit
Kitploit
added 2026/09/17 11:32 p.m.12 views

CVE-2025-51471-POC

CVE-2025-51471 - Exposición de Token entre Dominios de Ollama - PoC Autor: ajtazer 🔥 Resumen Este repositorio contiene una Prueba de Concepto PoC para CVE-2025-51471 , una vulnerabilidad de Exposición de Token de Autenticación entre Dominios que afecta a todas las versiones de Ollama incluyendo l...

6.9CVSS6.7AI score0.1423EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/17 10:22 p.m.11 views

CVE-2025-65817

CVE-2025-65817 字段| 值 ---|--- 标题| 漏洞报告:LSC Smart Connect 摄像头 日期| 2024-02-15 描述| 滥用 SD 卡更新钩子,在 LSC Smart Connect 摄像头上生成远程 shell。 标签| iot, vulnerability, cve 固件版本| 1.14.13 LSC Smart Connect 摄像头漏洞报告 发现的漏洞在于利用 startapp.sh 中的更新系统,更具体地说是通过 SD 卡挂载和 update.nor.sh 文件。 配置变量 root@kitploit: routines of sd-car...

8.8CVSS6.2AI score0.00339EPSS
SaveExploits1
NVD
NVD
added 2026/09/17 9:17 p.m.8 views

CVE-2026-54510

Speakr is a personal, self-hosted web application designed for transcribing audio recordings. Prior to 0.8.21-alpha, the csrfexemptforapitokens beforerequest hook in src/app.py calls csrf.exemptviewfunc, permanently adding the selected view to Flask-WTF's process-global exemption set. The...

7.1CVSS0.00141EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/17 6:31 p.m.10 views

CVE-2024-36837

CVE-2024-36837 / \tCNVD-2024-30128 POC escribe la URL en url.txt y ejecuta CVE-2024-36837.py CVE-2024-36837 En mi primer año de universidad, descubrí que una institución educativa usaba CRMEB Mall como tienda en línea en una acción de protección de Internet. Después de las pruebas, se encontró un...

7.5CVSS5.9AI score0.08306EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/17 5:22 p.m.11 views

CVE-2019-12744

CVE-2019-12744 Information Exploit Title: Remote Command Execution through Unvalidated File Upload in SeedDMS versions 5.1.11 CVE: CVE-2019-12744 Vendor Homepage: https://www.seeddms.org/index.php?id=2 Exploit Author: NobodyAtall Tested version: Seeddms 5.1.10, 5.0.11 Tested OS: Windows 7 x64...

7.5CVSS7.8AI score0.11696EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/17 4:58 p.m.12 views

CVE-2022-36231

CVE-2022-36231 La gema de ruby pdfinfo = 0.5.3 es vulnerable a la Inyección de Comandos del Sistema Operativo al ejecutar un método en un objeto PDF::Info. Un atacante que utilice un payload especialmente diseñado puede ejecutar comandos del sistema operativo mediante el encadenamiento de comando...

9.8CVSS8.5AI score0.03014EPSS
SaveExploits2
CVE
CVE
added 2026/09/17 4:08 p.m.5 views

CVE-2026-90350

CVE-2026-90350 affects the mt76 WiFi driver in the Linux kernel (mt7996 variant). The function mt76_vif_link() indexes the mvif->link[] array without validating link_id. Callers pass deflink_id, which holds IEEE80211_LINK_UNSPECIFIED (0xf) until the first link is added. Since IEEE80211_MLD_MAX...

0.00198EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/17 4:07 p.m.9 views

CVE-2026-90251

CVE-2026-90251 affects the Linux kernel's Bluetooth MSFT driver . In read_supported_features(), the evt_prefix_len field (an unvalidated u8) is used to call kmemdup without checking it against the actual response length. A malicious or buggy Bluetooth controller can declare evt_prefix_len = 255 i...

0.0021EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/09/17 4:07 p.m.3 views

EUVD-2026-81784

In the Linux kernel, the following vulnerability has been resolved: mailbox: riscv-sbi-mpxy: validate RPMI notification lengths The SBI return value controls how many bytes are copied from shared memory into the RPMI notification buffer. It is not validated against the negotiated shared-memory si...

0.00198EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/17 9:43 a.m.12 views

HFS_EXPLOIT_PROJECT

HFSEXPLOITPROJECT Metasploit RCE en HFS 2.3 - CVE-2014-62 🔖 Título del Proyecto root@kitploit: Ejecución Remota de Código a través de HTTP File Server HFS 2.3 ⚙ Herramientas Utilizadas • Kali Linux • Nmap • Metasploit • Objetivo: HFS 2.3 en Windows 7 🔐 Detalles de la Vulnerabilidad • Nombre:...

10CVSS8.4AI score0.99323EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/17 9:29 a.m.9 views

Metabase_CVE-2021-41277

MetabaseCVE-2021-41277 描述 Metabase 是一个开源的数据分析平台。在受影响的版本中,自定义 GeoJSON 地图(admin-settings-maps-custom maps-add a map)支持功能中发现了一个安全问题,可能导致本地文件包含(包括环境变量)。URL 在加载前未经过验证。此问题已在新的维护版本(0.40.5 和 1.40.5)以及后续版本中修复。如果您无法立即升级,可以通过在反向代理、负载均衡器或 WAF 中配置规则,在应用程序之前提供验证过滤器来缓解此问题。 关注我们 Vulnmachines YouTube Twitter...

10CVSS7.1AI score0.97178EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/17 6:52 a.m.6 views

CVE-2025-53652-Jenkins-Git-Parameter-Analysis

CVE-2025-53652: Jenkins Git参数插件未验证输入漏洞。 摘要 此漏洞的产生是因为用户控制的输入被不安全地注入到Git检出命令中。 用户输入作为构建参数提供(例如gitParameters),其中可能包含恶意shell命令。 该参数被包装到GitParameterValue(继承StringParameterValue)中,其buildEnvironment方法在不进行清理的情况下将其暴露为构建上下文中的环境变量。 在SCM检出过程中,Jenkins通过build.getEnvironment加载构建环境变量。...

8.2CVSS8.3AI score0.0064EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/09/17 6:00 a.m.21 views

CVE-2026-91010 Invisible Anti-Spam & CAPTCHA < 5.1.1 - Subscriber+ Arbitrary Form Submission Deletion

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the user's capabilities in its message deletion AJAX action, and only tests that a nonce parameter is present rather than validating it, allowing any authenticated user, such as a...

0.00152EPSS
SaveExploits0References1
Rows per page
Query Builder