Lucene search
+L

562598 matches found

BDU FSTEC
BDU FSTEC
added 2026/08/27 11:47 a.m.3 views

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management related to the lack of authentication for critical functions, allowing attackers to compromise the integrity and accessibility of protected information

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management is associated with the absence of authentication for a critical function. Exploitation of this vulnerability may allow an attacker to compromise the integrity and accessibility of...

8.5CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/27 11:45 a.m.30 views

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

7.5CVSS6AI score0.06835EPSS
SaveExploits9References3Affected Software1
RedhatCVE
RedhatCVE
added 2026/08/27 11:40 a.m.1 views

CVE-2026-80573

A flaw was found in the Linux kernel's iforce driver, which handles input devices such as joysticks and wheels. This vulnerability occurs because the iforceprocesspacket function processes incoming data packets without adequately validating their lengths. A local attacker could exploit this by...

5.5CVSS5.2AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/27 11:39 a.m.1 views

CVE-2026-46380

A flaw was found in compliance-trestle, a tooling platform for managing compliance as code. The HTTPSFetcher.dofetch method, responsible for remote fetching, passes a user-supplied URL directly to the requests.get function without proper validation. This vulnerability allows a remote attacker to...

6.7CVSS5.3AI score0.001EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/27 11:30 a.m.2 views

CVE-2026-81562 AlexGladkov claude-in-mobile client.ts execSync os command injection

A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in os command injection. The attack requires a local approach. The exploit has been released to the public and may be use...

5.3CVSS
SaveExploits0References8
CVE
CVE
added 2026/08/27 11:30 a.m.3 views

CVE-2026-81562 AlexGladkov claude-in-mobile client.ts execSync os command injection

A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in os command injection. The attack requires a local approach. The exploit has been released to the public and may be use...

5.3CVSS5.6AI score
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2026/08/27 11:15 a.m.1 views

CVE-2026-80578

A flaw was found in the Linux kernel's fbdev core. A local user could trigger an out-of-bounds read vulnerability in the fbioread function. This occurs due to a pointer desynchronization when handling partial copies from a faulty user buffer, allowing the system to read beyond intended memory...

7.3CVSS5.3AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/27 11:14 a.m.1 views

f_hid-4.14-backports

Linux 4.14.190(SM-A525F)向け fhid バックポート drivers/usb/gadget/function/fhid.c に対する3つの修正を、4.14.190 の Android ベンダーカーネルに手作業で移植し、実際に動作するデバイス上で検証しました。 4.14 はサポート終了(EOL)です。...

5.5CVSS4.1AI score0.00123EPSS
SaveExploits1References2
Krebs on Security
Krebs on Security
added 2026/08/27 11:04 a.m.1 views

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia

Authorities in Australia have arrested two men believed to be members of TeamPCP , a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian Federal Police AFP said two...

6.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2026/08/27 11:00 a.m.7 views

Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools

Individuals and organizations in Cambodia have emerged as the target of a new campaign that delivers an open-source remote access trojan RAT called Spark RAT. "The samples employ diverse lure themes, suggesting an effort to appeal to a broad range of potential victims. These include government...

6.5CVSS6.2AI score0.00394EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/08/27 10:59 a.m.1 views

CVE-2026-13586

A flaw was found in Bouncy Castle for Java. This vulnerability allows a remote attacker to cause a Denial of Service DoS by exploiting an iteration-count bound issue in the PKCS12 Message Authentication Code MAC and bag-decryption Key Derivation Function KDF. This could make the affected system...

6.5CVSS5.1AI score0.00306EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 2026/08/27 10:58 a.m.7 views

web-xss-scanner-and-patcher

Web Vulnerability Assessment & Automated Python Scanner A han...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 10:53 a.m.1 views

CVE-2026-40003

CVE-2026-40003, 일명 Joselito는 ZXIC/Sanechips ZX297520V3 SoC BootROM에서 발견된 임의 메모리 쓰기 취약점입니다. !CAUTION 이 PoC는 연구 목적으로만 공개되었습니다. 이 익스플로잇을 악의적인 목적으로 사용해서는 안 됩니다. 소유하지 않은 기기나 소유자의 명시적 동의 없이 익스플로잇을 사용하지 마십시오. 상태 이 취약점은 2026년 3월 이후 최신 SoC 개정판에서 수정되었습니다. 패치된 칩을 사용하는 알려진 제품은 아직 없습니다. 기존의 모든 기기는 취약합니다. 어떻게...

6.8CVSS5.2AI score0.00296EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/08/27 10:46 a.m.2 views

CVE-2022-22963-POC

CVE-2022-22963 익스플로잇 설명 Spring Cloud Function 버전 3.1.6, 3.2.2 및 지원이 종료된 이전 버전에서 라우팅 기능을 사용할 때 특별히 조작된 SpEL을 routing-expression으로 제공하면 원격 코드 실행 및 로컬 리소스 접근이 가능해집니다. 자세한 내용은 CVE-2022-22963 상세 정보에서 확인할 수 있습니다. AayushmanThapaMagar가 제공한 PoC를 기반으로, 취약한 서버에서 리버스 셸을 획득하기 위한 간단한 익스플로잇을 만들고 있습니다. 이 프로젝트의 목...

9.8CVSS7.6AI score0.99939EPSS
SaveExploits37References1
RedhatCVE
RedhatCVE
added 2026/08/27 10:43 a.m.1 views

CVE-2026-80572

A flaw was found in the Linux kernel's byd input driver. A race condition exists during device disconnection where the byddisconnect function frees private data before ensuring that a timer callback, bydcleartouch, has completed. This can lead to the callback attempting to access memory after it...

7.8CVSS5.2AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/27 10:43 a.m.1 views

CVE-2026-80520

A flaw was found in the ovpn module of the Linux kernel. The ovpncryptokillkey function incorrectly assumes that both crypto key slots are always populated. This can lead to a NULL dereference if a peer has only one installed key or if the function attempts to remove a key that is not present. A...

7.5CVSS5.2AI score
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/27 10:42 a.m.2 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in click (CVE-2026-7246)

Summary A command injection vulnerability in the click CLI creation library CVE-2026-7246 used by IBM InfoSphere Optim Archive Viewer on Windows and Linux platforms has been addressed by upgrading the component to version 8.3.3. Vulnerability Details CVEID:CVE-2026-7246 DESCRIPTION: This CVE reco...

7.2CVSS5.5AI score0.009EPSS
SaveExploits1Affected Software1
Kitploit
Kitploit
added 2026/08/27 10:41 a.m.3 views

CVE-2024-51179

CVE-2024-51179 : 攻撃者からの細工されたパケットのフラッディングにより、Open5gs の UPF/SMF がクラッシュする可能性がある 脆弱性の説明 説明: Open 5GS v.2.7.1 には、リモートの攻撃者が User Plane Function(UPF)や Session Management Function(SMF)などの Network Function Virtualizations(NFV)を介してサービス拒否を引き起こすことを可能にする問題があります。NFV 内で発生するクラッシュにより、Packet Data...

7.5CVSS5.4AI score0.01071EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 10:31 a.m.1 views

CVE-2024-0044

CVE-2024-0044- CVE-2024-0044: Android 12 および 13 に影響する、任意のアプリとして実行可能な高深刻度の脆弱性 CVE-2024-0044 エクスプロイトスクリプト この Bash スクリプトは、CVE-2024-0044 の悪用方法を示しています。教育およびテスト目的のみに使用してください。 前提条件 ADB(Android Debug Bridge)がインストールされ、設定されていること USB デバッグが有効な Android デバイスが接続されていること スクリプトコード root@kitploit: !/bin/bash Functio...

7.8CVSS7.8AI score0.0146EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/27 10:29 a.m.4 views

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 체커 - Golang 참고: 이 버전은 dpkg, rpm, pacman 및 MacOS를 지원합니다. 설치 root@kitploit: ▶ go install github.com/gustavorobertux/CVE-2024-2093@latest 기본 사용법 root@kitploit: ./CVE-2024-2093 Checking system for CVE-2024-3094 Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-3094...

10CVSS9AI score0.85974EPSS
SaveExploits41
Rows per page
Query Builder