Lucene search
+L

44707 matches found

Packet Storm News
Packet Storm News
added 2026/09/10 12:00 a.m.259 views

IServ Schoolserver User Enumeration

IServ Schoolserver suffers from a user enumeration vulnerability. The vendor does not feel this is an issue...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 3:59 a.m.5 views

nextpnr

nextpnr -- una herramienta portátil de colocación y enrutamiento para FPGA nextpnr pretende ser una herramienta FOSS de colocación y enrutamiento para FPGA, independiente del fabricante y guiada por la temporización. Actualmente, nextpnr soporta: Dispositivos Lattice iCE40 compatibles con Project...

5.3AI score
SaveExploits0References22
Kitploit
Kitploit
added 2026/09/01 2:11 a.m.6 views

CVE-2020-13457

CVE-2020-13457 CVE-2020-13457 Línea de tiempo ================ 2020-05-04: Descubierto 2020-05-11: Revisar problemas en el ecosistema del investigador 2020-05-20: Exploit PoC probado en Windows 2012 x64 2020-05-25: Notificación al proveedor 2020-05-27: Exploit PoC probado en Windows 10 x64...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 12:35 a.m.77 views

should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 12:35 a.m.6 views

should-i-trust

should-i-trust 摘要 should-i-trust 是一个用于评估域名的 OSINT 信号的工具。 要求 should-i-trust 需要以下来源的 API 密钥: Censys.io - 注册后前250次查询/月免费 VirusTotal - 免费 GrayHatWarFare - 免费,结果有限 使用场景 您是负责评估新供应商的审查委员会成员。您的具体职责是确保新供应商满足合规性和安全要求。 标准操作流程是要求提供以下一项或全部:SOC...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 12:01 a.m.3 views

CVE-2018-12598

CVE-2018-12598 CVE-2018-12598 Cronología ================ 2018-06-08: Descubierto 2018-06-11: Re-prueba del entorno de staging 2018-06-12: Re-prueba del entorno en vivo 2018-06-19: Comunicación interna 2018-06-21: Notificación al proveedor 2018-06-XX: Retroalimentación del proveedor 2018-06-XX: E...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 9:05 p.m.36 views

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/31 7:57 p.m.24 views

umap

umap - the USB host security assessment tool Based on Facedancer by Travis Goodspeed: http://goodfet.sourceforge.net/hardware/facedancer21/ Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com...

5.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 7:06 p.m.47 views

viproy-voipkit

Discontinued Viproy was a PoC VoIP security assessment tool which had several modules and exploits to maintain. However, it was developed as a modules set to Metasploit Framework. As Metasploit Framework had significant updates, Viproy's current modules won't be able to work unless you use legacy...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 3:47 p.m.2 views

cisco-security-research

Investigación de Seguridad de Cisco Investigador: 0xReadingSteiner Contacto: [email protected] Proveedor: Cisco Systems, Inc. Proveedor notificado: 2026-08-04 Cisco PSIRT, ZDI, SSD Respuesta del proveedor: Ninguna Por qué existe esto La investigación de seguridad independiente sobre producto...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 1:13 p.m.5 views

CVE-2018-12597

CVE-2018-12597 CVE-2018-12597 Timeline ================ 2018-06-08: Discovered 2018-06-11: Retest staging environment 2018-06-12: Retest live environment 2018-06-19: Internal communication 2018-06-21: Vendor notification 2018-06-XX: Vendor feedback 2018-06-XX: Vendor feedback product will be...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 12:52 p.m.47 views

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 10:06 a.m.4 views

vamp-forticheck

vamp-forticheck Multi-Vendor Edge Device CVE Scanner — VampSecure Labs Overview vamp-forticheck is an asynchronous, non-destructive security scanner that detects CVE vulnerabilities across seven major network security vendors. It performs a structured three-phase analysis: 1. Passive detection —...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 5:42 a.m.4 views

Php-unit-CVE-2017-9841

Vulnerabilidad de ejecución remota de código en phpunit CVE-2017-9841 Composer es una herramienta de gestión de paquetes de PHP. Al usar Composer para instalar un paquete de extensión, se creará una carpeta 'vendor' en el directorio actual y todos los archivos se colocarán allí. Normalmente, este...

9.8CVSS7AI score0.99999EPSS
SaveExploits20
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.67 views

Emlog Pro v2.1.14 - Cross-Site Scripting

Cross Site Scripting XSS vulnerability in Emlog Pro v2.1.14 via /admin/store.php. id: CVE-2023-41621 info: name: Emlog Pro v2.1.14 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross Site Scripting XSS vulnerability in Emlog Pro v2.1.14 via /admin/store.php. impact: ...

6.1CVSS6.4AI score0.01146EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.39 views

WordPress Integrator 1.32 - Cross-Site Scripting

A cross-site scripting vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php. id: CVE-2012-5913 info: name: WordPress Integrator 1.32 - Cross-Site Scripti...

4.3CVSS5.9AI score0.08693EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.79 views

Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection

SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request. id: CVE-2018-6605 info: name: Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection author: DhiyaneshDk severity...

9.8CVSS7.3AI score0.57702EPSS
SaveExploits5References3
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.47 views

74cms - ajax_officebuilding.php SQL Injection

A SQL injection vulnerability exists in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php. id: CVE-2020-22210 info: name: 74cms - ajaxofficebuilding.php SQL Injection author: ritikchaddha severity: critical description: | A SQL injection vulnerability exists in 74cms 3.2.0 via the x...

9.8CVSS6.8AI score0.08579EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.77 views

74cms - ajax_street.php 'x' SQL Injection

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php. id: CVE-2020-22208 info: name: 74cms - ajaxstreet.php 'x' SQL Injection author: ritikchaddha severity: critical description: | SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php. impact: | Successful...

9.8CVSS6.9AI score0.10017EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/31 5:18 a.m.93 views

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

5.4CVSS6AI score0.01331EPSS
SaveExploits1References2
Rows per page
Query Builder