Lucene search
+L

1976 matches found

Kitploit
Kitploit
added 2026/08/25 5:36 p.m.1 views

Gitlab-CVE-2021-22205

Unauthenticated RCE on Gitlab version 13.10.3 Unauthenticated RCE exploit for gitlab version 13.10.3 For educational/research purpose only. Use at your own risk Root cause: When uploading image files, Gitlab Workhorse passes any files with the extensions jpg|jpeg|tiff through to ExifTool to remov...

10CVSS7AI score0.99981EPSS
SaveExploits56References1
EUVD
EUVD
added 2026/08/25 5:33 p.m.24 views

EUVD-2026-39477

Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts...

7.5CVSS6AI score0.00442EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/25 4:17 p.m.2 views

ingressnightmare-detection-poc

IngressNightmare Detection Tool Overview This tool provides a non-intrusive detection capability for the IngressNightmare vulnerability chain CVE-2025-1974 affecting Ingress NGINX Controller. It specifically leverages the auth-url annotation injection vector CVE-2025-24514 to verify the presence ...

9.8CVSS6.5AI score0.99525EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/08/25 4:14 a.m.1 views

CVE-2025-1974

🚨 Log Injection Test via Ingress-NGINX Admission Controller 🧠 Overview This script tests for annotation injection vulnerabilities in Kubernetes clusters using the NGINX Ingress Controller. It is meant for detection purposes only in relation to CVE-2025-1974, which allows malicious annotations to...

9.8CVSS7.8AI score0.99525EPSS
SaveExploits20References1
Kitploit
Kitploit
added 2026/08/25 4:13 a.m.91 views

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/25 4:13 a.m.201 views

threatspec

threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...

6.3AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/24 5:55 p.m.7 views

EUVD-2026-65060

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in labelstudio/tasks/api.py declares queryset = Annotation.objects.all and provides no getqueryset override, so the default lookup retrieves any annotation by primary key. The view's...

8.7CVSS5.5AI score
SaveExploits0References4
CVE
CVE
added 2026/08/24 5:55 p.m.15 views

CVE-2026-76073

Label Studio (through 1.23.0 ) has a broken access control flaw in its annotation detail endpoint. The AnnotationAPI in label_studio/tasks/api.py declares queryset = Annotation.objects.all() without a get_queryset override, so any annotation is retrievable by primary key. Because permissions are ...

8.8CVSS5.4AI score
SaveExploits0References4
NVD
NVD
added 2026/08/21 9:16 a.m.8 views

CVE-2026-66797

Improper access control in CloudStack's annotation functionality allows unauthorized comment creation and disclosure. The addAnnotation and listAnnotation APIs perform an ownership check when an entity's UUID is specified, but fail to honor its result correctly. This lets any authenticated user...

5.4CVSS0.00138EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 8:21 a.m.37 views

CVE-2026-66797

Apache CloudStack versions 4.15.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are affected by an improper access control flaw in the annotation functionality. The addAnnotation and listAnnotation APIs perform an ownership check when an entity's UUID is specified but fail to honor its result,...

5.4CVSS5.4AI score0.00138EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/21 8:21 a.m.33 views

CVE-2026-66797 Apache CloudStack: Unauthorised comment creation and disclosure

Improper access control in CloudStack's annotation functionality allows unauthorized comment creation and disclosure. The addAnnotation and listAnnotation APIs perform an ownership check when an entity's UUID is specified, but fail to honor its result correctly. This lets any authenticated user...

0.00138EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 8:21 a.m.11 views

EUVD-2026-63831

Improper access control in CloudStack's annotation functionality allows unauthorized comment creation and disclosure. The addAnnotation and listAnnotation APIs perform an ownership check when an entity's UUID is specified, but fail to honor its result correctly. This lets any authenticated user...

5.4CVSS5.4AI score0.00138EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/21 12:00 a.m.14 views

PT-2026-79332

Improper access control in CloudStack's annotation functionality allows unauthorized comment creation and disclosure. The addAnnotation and listAnnotation APIs perform an ownership check when an entity's UUID is specified, but fail to honor its result correctly. This lets any authenticated user...

5.4AI score0.00138EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/20 2:32 p.m.29 views

CVE-2026-73220 CVAT: Stored XSS via annotation guides in audio tasks

CVAT is an open source interactive video and image annotation tool for computer vision. From 2.68.0 until 2.70.0, the audio-task annotation guide renderer in cvat-ui/src/audio/components/annotation-page/audio-workspace/top-bar/audio-right-group.tsx passes attacker-controlled guide Markdown to...

8.5CVSS0.00278EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/20 2:32 p.m.9 views

EUVD-2026-63378

CVAT is an open source interactive video and image annotation tool for computer vision. From 2.68.0 until 2.70.0, the audio-task annotation guide renderer in cvat-ui/src/audio/components/annotation-page/audio-workspace/top-bar/audio-right-group.tsx passes attacker-controlled guide Markdown to...

8.5CVSS5.5AI score0.00278EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/20 2:32 p.m.10 views

CVE-2026-73220 CVAT: Stored XSS via annotation guides in audio tasks

CVAT is an open source interactive video and image annotation tool for computer vision. From 2.68.0 until 2.70.0, the audio-task annotation guide renderer in cvat-ui/src/audio/components/annotation-page/audio-workspace/top-bar/audio-right-group.tsx passes attacker-controlled guide Markdown to...

8.5CVSS5.6AI score
SaveExploits0References6
CVE
CVE
added 2026/08/20 2:32 p.m.26 views

CVE-2026-73220

CVAT (open-source video and image annotation tool) is affected by a stored cross-site scripting (XSS) vulnerability in versions 2.68.0 through 2.70.0. The audio-task annotation guide renderer in cvat-ui/src/audio/components/annotation-page/audio-workspace/top-bar/audio-right-group.tsx passes atta...

8.5CVSS5.5AI score0.00278EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/19 6:16 p.m.7 views

CVE-2026-18874

A flaw was found in volsync-addon-controller. This vulnerability allows an attacker to inject malicious YAML Yet Another Markup Language code into the OpenShift Lifecycle Manager OLM Subscription resource. This is due to improper escaping of annotation values when they are rendered into YAML...

6.2CVSS0.00303EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/19 5:52 p.m.15 views

EUVD-2026-62669

A flaw was found in volsync-addon-controller. This vulnerability allows an attacker to inject malicious YAML Yet Another Markup Language code into the OpenShift Lifecycle Manager OLM Subscription resource. This is due to improper escaping of annotation values when they are rendered into YAML...

6.2CVSS5.4AI score0.00303EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/19 5:52 p.m.11 views

CVE-2026-18874 Volsync-addon-controller: volsync-addon-controller: annotation values rendered into yaml via text/template without escaping allows yaml injection into subscription

A flaw was found in volsync-addon-controller. This vulnerability allows an attacker to inject malicious YAML Yet Another Markup Language code into the OpenShift Lifecycle Manager OLM Subscription resource. This is due to improper escaping of annotation values when they are rendered into YAML...

6.2CVSS5.4AI score0.00303EPSS
SaveExploits0References2
Rows per page
Query Builder