Lucene search
+L

744 matches found

Kitploit
Kitploit
•added 2026/10/07 6:32 a.m.•196 views

tcpreplay

Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like tcpdump and Wireshark. It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the...

6AI score
SaveExploits0References9
Kitploit
Kitploit
•added 2026/10/06 2:32 p.m.•10 views

CVE-2024-38063

CVE-2024-38063 通过禁用所有接口的 IPv6 进行缓解的脚本 使用方法 在提升的 PowerShell(以管理员身份运行)中将脚本作为模块导入 . .\CVE-2024-38063 使用函数 Show-IPV6EnabledAdapters 显示所有已启用 IPv6 的适配器! PS C:\users\public Show-IPV6enabledAdapters Disable-IPV6Adapter 禁用指定适配器上的 IPv6! 注意:当引用适配器名称时,如果名称包含空格,请留意!!! PS C:\users\public Disable-IPV6Adapter...

9.8CVSS8.5AI score0.70564EPSS
SaveExploits27
Packet Storm News
Packet Storm News
•added 2026/10/04 12:00 a.m.•2 views

Reflections and Fragments: Securing LLMs against Sequential Mosaic Attacks

Self-play red-teaming improves language-model safety by pitting attacker and defender roles against each other in a zero-sum game. However, real adversaries increasingly use mosaic attacks: multi-turn sequences whose individual fragments are innocuous in isolation yet assemble into a harmful...

SaveExploits0
Kitploit
Kitploit
•added 2026/10/02 1:35 p.m.•6 views

aegis-audio-defense

AEGIS: Audio Endogenous Guarding via Internal Signals Against Large Audio-Language Model Jailbreaks Submitted to ICASSP 2027. AEGIS keeps the target audio-language model frozen and adds a mid-layer risk gate that conditionally drives late-layer safety adapters, with closed-loop scaling at...

6.4AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/10/01 5:17 p.m.•16 views

CVE-2026-30863-Exploit

CVE-2026-30863 – Validación de audiencia JWT en Parse Server Versiones afectadas Parse Server 8.6.10 y 9.5.0-alpha.11 Componentes vulnerables Adaptador de autenticación de Google GoogleAuthAdapter Adaptador de autenticación de Apple AppleAuthAdapter Adaptador de autenticación de Facebook...

9.8CVSS6.1AI score0.00715EPSS
SaveExploits0
EUVD
EUVD
•added 2026/09/30 3:32 p.m.•11 views

EUVD-2026-88382

Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection...

7.6CVSS5.8AI score0.00289EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-101905

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adapters/http.js supplies request optio...

7.6CVSS5.9AI score0.00289EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/09/29 11:39 p.m.•12 views

SUSE CVE-2026-101905

Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adapters/http.js supplies request options without an own createConnection value. A separate same-process prototype-pollution flaw places a function on...

7.6CVSS5.9AI score0.00289EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/09/28 6:32 p.m.•8 views

Improper Validation of Specified Quantity in Input

Overview org.webjars.npm:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via unsafe runtime option handling in the fetch and HTTP adapters, where user-supplied fetchOptions are...

8.2CVSS5.8AI score0.00384EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/28 6:32 p.m.•7 views

Improper Validation of Specified Quantity in Input

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via unsafe runtime option handling in the fetch and HTTP adapters, where user-supplied fetchOptions are merged into the...

8.2CVSS5.8AI score0.00384EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/28 6:32 p.m.•6 views

Improper Validation of Specified Quantity in Input

Overview org.webjars.npm:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via unsafe runtime option handling in the fetch and HTTP adapters, where user-supplied fetchOptions are...

8.2CVSS5.8AI score0.00384EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/28 6:32 p.m.•6 views

Server-side Request Forgery (SSRF)

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via unsafe merging of user-supplied fetchOptions into the resolved request options object in lib/adapters/fetch.js. An attacker who...

8.7CVSS5.8AI score0.00527EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/28 6:32 p.m.•7 views

Server-side Request Forgery (SSRF)

Overview org.webjars.npm:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via unsafe merging of user-supplied fetchOptions into the resolved request options object in lib/adapters/fetch.js. An...

8.7CVSS5.8AI score0.00527EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/28 6:32 p.m.•7 views

Improper Input Validation

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Improper Input Validation via insufficient hardening of runtime option handling in the fetch and HTTP adapters, where user-supplied fetchOptions are merged into the...

7.5CVSS5.8AI score0.00546EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/28 6:32 p.m.•5 views

Allocation of Resources Without Limits or Throttling

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via unsafe runtime option handling in the fetch and HTTP adapters, where user-supplied fetchOptions are merged into t...

8.2CVSS5.8AI score0.00402EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/28 6:32 p.m.•5 views

Allocation of Resources Without Limits or Throttling

Overview org.webjars.npm:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via unsafe runtime option handling in the fetch and HTTP adapters, where user-supplied fetchOptions a...

8.2CVSS5.8AI score0.00402EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/28 6:32 p.m.•11 views

Prototype Pollution

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Prototype Pollution via unsafe merging of user-supplied fetchOptions in lib/adapters/fetch.js. When a caller passes a fetchOptions object, axios spreads it directly into...

7.5CVSS6.5AI score0.00428EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/28 6:32 p.m.•7 views

Prototype Pollution

Overview org.webjars.npm:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Prototype Pollution via unsafe merging of user-supplied fetchOptions in lib/adapters/fetch.js. When a caller passes a fetchOptions object, axios spreads i...

7.5CVSS6.5AI score0.00428EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/28 6:17 p.m.•8 views

DEBIAN-CVE-2026-101905

Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adapters/http.js supplies request options without an own createConnection value. A separate same-process prototype-pollution flaw places a function on...

7.6CVSS5.9AI score0.00289EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/28 6:17 p.m.•11 views

CVE-2026-101905

Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adapters/http.js supplies request options without an own createConnection value. A separate same-process prototype-pollution flaw places a function on...

7.6CVSS0.00289EPSS
SaveExploits0References4
Rows per page
Query Builder