Lucene search
+L

1982 matches found

BDU FSTEC
BDU FSTEC
added 2026/09/20 11:41 a.m.83 views

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS7.2AI score0.00736EPSS
SaveExploits1References11Affected Software9
Kitploit
Kitploit
added 2026/09/20 5:10 a.m.6 views

CVE-2024-48887-Exploit

CVE-2024-48887-未经验证的密码更改 CWE-620 概述 Fortinet FortiSwitch GUI 中存在一个未经验证的密码更改漏洞,允许远程未认证攻击者通过特制请求更改管理员密码 漏洞利用: 在此下载 详细信息 CVE ID : CVE-2024-48887 发布 :2025年8月4日 影响 :严重 漏洞利用可用性 :未公开,仅限私有。 CVSS :9.8 补丁可用 :(尚无官方补丁) 影响 此严重漏洞允许外部攻击者完全破坏 Fortinet FortiSwitch 设备的管理访问权限,无需任何身份验证。攻击者可: 任意更改管理员密码 可能完全控制网络交换机...

9.8CVSS8.6AI score0.15651EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/19 11:43 p.m.9 views

CVE-2022-23131

CVE-2022-23131 Zabbix - SAML SSO 身份验证绕过 描述 在启用了 SAML SSO 身份验证(非默认配置)的情况下,由于存储在会话中的用户登录信息未经验证,恶意行为者可以修改会话数据。 搜索语法: root@kitploit: shodan-query: http.favicon.hash:892542951 root@kitploit: fofa-query: app="ZABBIX-监控系统" && body="saml" 用法 root@kitploit: python3 zabbixsessionexp.py -t https:target.com ...

9.8CVSS8.5AI score0.95683EPSS
SaveExploits9References2
Kitploit
Kitploit
added 2026/09/19 5:40 p.m.10 views

nuclei-templates-ai

Plantillas de Nuclei Generadas por IA 👾 Este proyecto es una implementación de nuestra visión detallada en De CVE a Plantilla: El Futuro de la Automatización de Plantillas de Nuclei con IA Este repositorio demuestra el poder de la IA en la automatización de la generación de plantillas de segurida...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/19 11:54 a.m.17 views

sslnuke

sslnuke -- ¡SSL sin verificación no es seguro! Todos hemos oído una y otra vez que SSL sin verificación no es seguro. Si una conexión SSL no se verifica con un certificado en caché, cualquier atacante puede secuestrarla fácilmente. Así que en 2013, uno pensaría que ya habíamos eliminado este...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/19 10:54 a.m.9 views

CVE-2023-7028

CVE-2023-7028 Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones desde 16.1 hasta antes de 16.1.6, 16.2 hasta antes de 16.2.9, 16.3 hasta antes de 16.3.7, 16.4 hasta antes de 16.4.5, 16.5 hasta antes de 16.5.6, 16.6 hasta antes de 16.6.4 y 16.7 hasta antes de 16.7.2, e...

10CVSS8AI score0.94647EPSS
SaveExploits16References3
CVE
CVE
added 2026/09/19 6:00 a.m.16 views

CVE-2026-86814

The UsersWP WordPress plugin before 1.5.10 fails to verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account. This allows unauthenticated attackers to take over any user account—including administrators—by asserting a victim's ...

8.1CVSS0.00226EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/19 6:00 a.m.32 views

CVE-2026-86814 UsersWP - Social Login < 1.5.10 - Unauthenticated Account Takeover via Unverified Provider Email

The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account, allowing unauthenticated attackers to log in as any user, including administrators, whose email address they can asse...

0.00226EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 11:41 p.m.9 views

-CVE-2024-24450-

-CVE-2024-24450- test later for hypo poc for CVE-2024-24450...

5.3CVSS5.8AI score0.01472EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/17 4:45 p.m.6 views

EUVD-2026-82318

mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mportfetchbootstrapindex function in libmport/fetch.c could return success when bootstrap index hash verification encountered a missing or invalid hash because the failure path did not preserve a fatal result. A network attacker or...

8.3CVSS0.00209EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/17 3:16 p.m.7 views

CVE-2026-63472

Vendure is an open-source headless commerce platform. Prior to 3.7.0, ExternalAuthenticationService.createCustomerAndUser in packages/core/src/service/helpers/external-authentication/external-authentication.service.ts selects an existing customer user by emailAddress and attaches a newly presente...

9.1CVSS0.00411EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/09/17 2:50 p.m.10 views

Vendure affected by external-authentication account takeover: external login linked to a pre-existing account by email without verification

External-authentication account takeover: external login linked to a pre-existing account by email without requiring verification Package: @vendure/core vendure-ecommerce/vendure, latest master · !IMPORTANT This vulnerability only affects deployments that use external / social authentication an...

9.1CVSS0.00411EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2026/09/17 2:40 p.m.12 views

CVE-2026-63472

Vendure , an open-source headless commerce platform, is vulnerable to account takeover via its external authentication system. In ExternalAuthenticationService.createCustomerAndUser, an existing customer is matched by email address alone and a new external authentication method is attached withou...

9.1CVSS0.00411EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/17 2:40 p.m.4 views

CVE-2026-63472 Vendure: External-authentication account takeover: external login linked to a pre-existing account by email without verification

Vendure is an open-source headless commerce platform. Prior to 3.7.0, ExternalAuthenticationService.createCustomerAndUser in packages/core/src/service/helpers/external-authentication/external-authentication.service.ts selects an existing customer user by emailAddress and attaches a newly presente...

9.1CVSS
SaveExploits0References5
CVE
CVE
added 2026/09/17 1:09 p.m.14 views

CVE-2026-78223

AshAuthentication (team-alembic, Elixir) suffers from an improper cryptographic signature verification in its token revocation flow. The function RevokeTokenChange.change/3 decodes the incoming token via Joken.peek_claims/1 without verifying its signature, then writes the jti, exp, and sub claims...

6.9CVSS0.00319EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/17 1:09 p.m.4 views

CVE-2026-78223 Token revocation record built from unverified JWT claims in AshAuthentication

Improper Verification of Cryptographic Signature vulnerability in team-alembic AshAuthentication allows a caller of the token revocation action to neutralise a revocation or write arbitrary rows into the token resource. AshAuthentication.TokenResource.RevokeTokenChange.change/3 reads the :token...

6.9CVSS0.00319EPSS
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/17 11:32 a.m.8 views

CVE-2026-22004-Git-LFS-Pointer-Poisoning-Supply-Chain-

CVE-2026-22004 – Envenenamiento de punteros de Git LFS Cadena de suministro Código del programa Bash + Python root@kitploit: createmaliciousrepo.sh - Sets up a repo with poisoned LFS pointer git init git lfs track ".bin" echo "version https://git-lfs.github.com/spec/v1 oid...

4.9CVSS7.9AI score0.00323EPSS
SaveExploits0
NVD
NVD
added 2026/09/17 5:17 a.m.9 views

CVE-2026-25282

Transient DOS when processing unverified data from a neighboring system causes out of bound memory access...

7.9CVSS0.00099EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/17 5:05 a.m.16 views

CVE-2026-18718

Advisory: GHSA-pcfh-853f-q3gh · Severity: High CVSS 7.5 · Affected: Ghidra ≤ 12.1.2 · Fixed: c03a70d Ghidra 12.1.3 Opening someone else's Ghidra project was enough to execute their code. Ghidra 12.1.2 stores analyzer options inside the program database , and one of those options is a filesystem...

7.1CVSS6.5AI score0.00206EPSS
SaveExploits1References2
CVE
CVE
added 2026/09/17 4:11 a.m.16 views

CVE-2026-25282

CVE-2026-25282 is an out-of-bounds read in the OOBM component of a Qualcomm product. The vulnerability is triggered when unverified data from a neighboring system is processed, causing an out-of-bound memory access that results in a transient denial of service . The CNA-assigned CVSS 3.1 score is...

7.9CVSS0.00099EPSS
SaveExploits0References1
Rows per page
Query Builder