Lucene search
+L

1982 matches found

Kitploit
Kitploit
added 2026/09/20 2:00 p.m.12 views

CVE-2026-15964-PoC

CVE-2026-15964 - Single Sign On For TNG = 2.0.0 Unauthenticated privilege escalation via unverified password change in the WordPress plugin Single Sign On For TNG. | ---|--- Severity| Critical 9.8 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-620 Unverified Password Change Affected|...

9.8CVSS6AI score0.00625EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 1:47 p.m.17 views

sslnuke

sslnuke -- SSL without verification isn't secure! We have all heard over and over that SSL without verification is not secure. If an SSL connection is not verified with a cached certificate, it can easily be hijacked by any attacker. So in 2013, one would think we had totally done away with this...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/20 11:49 a.m.9 views

CVE-2023-7028

CVE-2023-7028 An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be...

10CVSS8AI score0.94647EPSS
SaveExploits16References3
BDU FSTEC
BDU FSTEC
added 2026/09/20 11:41 a.m.84 views

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS7.2AI score0.00736EPSS
SaveExploits1References11Affected Software9
Kitploit
Kitploit
added 2026/09/20 8:32 a.m.17 views

CVE-2026-18718

Advisory: GHSA-pcfh-853f-q3gh · Severity: High CVSS 7.5 · Affected: Ghidra ≤ 12.1.2 · Fixed: c03a70d Ghidra 12.1.3 Opening someone else's Ghidra project was enough to execute their code. Ghidra 12.1.2 stores analyzer options inside the program database , and one of those options is a filesystem...

7.1CVSS6.5AI score0.00206EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/20 5:10 a.m.6 views

CVE-2024-48887-Exploit

CVE-2024-48887-Unverified Password Change CWE-620 Overview An unverified password change vulnerability in Fortinet FortiSwitch GUI that allows a remote unauthenticated attacker to change admin passwords via a specially crafted request Exploit: Download here Details CVE ID : CVE-2024-48887 Publish...

9.8CVSS8.6AI score0.15651EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 4:35 a.m.9 views

-CVE-2024-24450-

-CVE-2024-24450- test later for hypo poc for CVE-2024-24450...

5.3CVSS5.8AI score0.01472EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/19 11:43 p.m.9 views

CVE-2022-23131

CVE-2022-23131 Zabbix - SAML SSO Authentication Bypass Description In the case of instances where the SAML SSO authentication is enabled non-default, session data can be modified by a malicious actor, because a user login stored in the session was not verified. Dork: root@kitploit: shodan-query:...

9.8CVSS8.5AI score0.95683EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/19 5:40 p.m.10 views

nuclei-templates-ai

AI-Generated Nuclei Templates 👾 This project is an implementation of our vision detailed in From CVE to Template: The Future of Automating Nuclei Templates with AI This repository demonstrates the power of AI in automating security template generation for vulnerability detection. Using...

6AI score
SaveExploits0
CVE
CVE
added 2026/09/19 6:00 a.m.18 views

CVE-2026-86814

The UsersWP WordPress plugin before 1.5.10 fails to verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account. This allows unauthenticated attackers to take over any user account—including administrators—by asserting a victim's ...

8.1CVSS0.00226EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/19 6:00 a.m.34 views

CVE-2026-86814 UsersWP - Social Login < 1.5.10 - Unauthenticated Account Takeover via Unverified Provider Email

The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account, allowing unauthenticated attackers to log in as any user, including administrators, whose email address they can asse...

0.00226EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/17 4:45 p.m.6 views

EUVD-2026-82318

mport is the MidnightBSD Package Manager. Prior to 2.7.8, the mportfetchbootstrapindex function in libmport/fetch.c could return success when bootstrap index hash verification encountered a missing or invalid hash because the failure path did not preserve a fatal result. A network attacker or...

8.3CVSS0.00209EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/17 3:16 p.m.7 views

CVE-2026-63472

Vendure is an open-source headless commerce platform. Prior to 3.7.0, ExternalAuthenticationService.createCustomerAndUser in packages/core/src/service/helpers/external-authentication/external-authentication.service.ts selects an existing customer user by emailAddress and attaches a newly presente...

9.1CVSS0.00411EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/09/17 2:50 p.m.10 views

Vendure affected by external-authentication account takeover: external login linked to a pre-existing account by email without verification

External-authentication account takeover: external login linked to a pre-existing account by email without requiring verification Package: @vendure/core vendure-ecommerce/vendure, latest master · !IMPORTANT This vulnerability only affects deployments that use external / social authentication an...

9.1CVSS0.00411EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/09/17 2:40 p.m.4 views

CVE-2026-63472 Vendure: External-authentication account takeover: external login linked to a pre-existing account by email without verification

Vendure is an open-source headless commerce platform. Prior to 3.7.0, ExternalAuthenticationService.createCustomerAndUser in packages/core/src/service/helpers/external-authentication/external-authentication.service.ts selects an existing customer user by emailAddress and attaches a newly presente...

9.1CVSS
SaveExploits0References5
CVE
CVE
added 2026/09/17 2:40 p.m.13 views

CVE-2026-63472

Vendure , an open-source headless commerce platform, is vulnerable to account takeover via its external authentication system. In ExternalAuthenticationService.createCustomerAndUser, an existing customer is matched by email address alone and a new external authentication method is attached withou...

9.1CVSS0.00411EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/17 1:09 p.m.15 views

CVE-2026-78223

AshAuthentication (team-alembic, Elixir) suffers from an improper cryptographic signature verification in its token revocation flow. The function RevokeTokenChange.change/3 decodes the incoming token via Joken.peek_claims/1 without verifying its signature, then writes the jti, exp, and sub claims...

6.9CVSS0.00319EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/17 1:09 p.m.5 views

CVE-2026-78223 Token revocation record built from unverified JWT claims in AshAuthentication

Improper Verification of Cryptographic Signature vulnerability in team-alembic AshAuthentication allows a caller of the token revocation action to neutralise a revocation or write arbitrary rows into the token resource. AshAuthentication.TokenResource.RevokeTokenChange.change/3 reads the :token...

6.9CVSS0.00319EPSS
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/17 11:32 a.m.9 views

CVE-2026-22004-Git-LFS-Pointer-Poisoning-Supply-Chain-

CVE-2026-22004 – Git LFS Pointer Poisoning Supply Chain Program Code Bash + Python root@kitploit: createmaliciousrepo.sh - Sets up a repo with poisoned LFS pointer git init git lfs track ".bin" echo "version https://git-lfs.github.com/spec/v1 oid...

4.9CVSS7.9AI score0.00323EPSS
SaveExploits0
NVD
NVD
added 2026/09/17 5:17 a.m.9 views

CVE-2026-25282

Transient DOS when processing unverified data from a neighboring system causes out of bound memory access...

7.9CVSS0.00099EPSS
SaveExploits0References1
Rows per page
Query Builder