Lucene search
+L

1923784 matches found

Kitploit
Kitploit
added 2026/09/01 3:45 a.m.6 views

Sandboxie v1.18.3

Sandboxie Plus / Classic EN | 中文 System requirements| Release notes| Contribution guidelines| Security policy| Code of Conduct ---|---|---|---|--- Windows 7 or higher 64-bit| CHANGELOG.md| CONTRIBUTING.md| SECURITY.md| CODEOFCONDUCT.md Sandboxie is a sandbox-based isolation software for Windows...

5.9AI score
SaveExploits0References27
Kitploit
Kitploit
added 2026/09/01 3:45 a.m.5 views

53R3N17Y

53R3N17Y Python based script for Information Gathering. To get the details hackertarget.com is used. There is a limit of 100 API calls per day from a single IP address. Update root@kitploit: ----- | | |--o--| ╒ 53R3N17Y ════════════════════════════════════╕ ---------´ │Python based script for...

5.9AI score
SaveExploits0References6
OSV
OSV
added 2026/09/01 3:37 a.m.6 views

EEF-CVE-2026-82743 Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads

Summary Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow asynchronous read spin a scheduler thread at full CPU while the framework waits for it. Ash.Actions.Read.AsyncLimiter.await\at\least\one/1 lib/ash/actions/read/async\limiter.ex waited for concurrent async read...

2.1CVSS5.8AI score0.00126EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/09/01 3:37 a.m.6 views

CVE-2026-82743 Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads

Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow asynchronous read spin a scheduler thread at full CPU while the framework waits for it. Ash.Actions.Read.AsyncLimiter.awaitatleastone/1 lib/ash/actions/read/asynclimiter.ex waited for concurrent async read tasks by...

2.1CVSS5.8AI score0.00126EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/01 3:37 a.m.8 views

CVE-2026-82743

ash-project ash (Elixir framework) contains an uncontrolled resource consumption vulnerability in Ash.Actions.Read.AsyncLimiter.await_at_least_one/1. The function polled outstanding async read tasks with Task.yield(task, 0) in a tight loop rather than blocking, causing a BEAM scheduler to spin at...

2.1CVSS5.8AI score0.00126EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/01 3:37 a.m.6 views

EUVD-2026-68948

Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow asynchronous read spin a scheduler thread at full CPU while the framework waits for it. Ash.Actions.Read.AsyncLimiter.awaitatleastone/1 lib/ash/actions/read/asynclimiter.ex waited for concurrent async read tasks by...

2.1CVSS5.8AI score0.00126EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/01 3:37 a.m.36 views

CVE-2026-82743 Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads

Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow asynchronous read spin a scheduler thread at full CPU while the framework waits for it. Ash.Actions.Read.AsyncLimiter.awaitatleastone/1 lib/ash/actions/read/asynclimiter.ex waited for concurrent async read tasks by...

2.1CVSS0.00126EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/01 3:37 a.m.3 views

CVE-2026-82743 Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads

Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow asynchronous read spin a scheduler thread at full CPU while the framework waits for it. Ash.Actions.Read.AsyncLimiter.awaitatleastone/1 lib/ash/actions/read/asynclimiter.ex waited for concurrent async read tasks by...

2.1CVSS5.8AI score0.00126EPSS
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/01 3:35 a.m.2597 views

ysoserial.net

A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and property-oriented programming "gadget chains" discovered in common .NET libraries that can, under the right conditions, exploit .NET...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 3:34 a.m.4 views

CVE-2025-68613-n8n-rce-analysis

GIF الماتريكس...

9.9CVSS7.4AI score0.99105EPSS
SaveExploits31
Cvelist
Cvelist
added 2026/09/01 3:21 a.m.37 views

CVE-2026-82736 Ash.Type.CiString validates length and match constraints before case folding, allowing constraint bypass

Incorrect Behavior Order: Validate Before Canonicalize vulnerability in ash-project ash lets an attacker store a case-insensitive string value that violates its length or match constraints. Ash.Type.CiString.applyconstraints/2 lib/ash/type/cistring.ex validated the maxlength, minlength, and match...

2.1CVSS0.00138EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/01 3:21 a.m.13 views

CVE-2026-82736

ash-project ash (Elixir web framework) contains an Incorrect Behavior Order: Validate Before Canonicalize vulnerability in Ash.Type.CiString.apply_constraints/2 (lib/ash/type/ci_string.ex). The max_length , min_length , and match constraints were validated against the value as submitted , while t...

2.1CVSS5.9AI score0.00138EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/01 3:21 a.m.6 views

EUVD-2026-68963

Incorrect Behavior Order: Validate Before Canonicalize vulnerability in ash-project ash lets an attacker store a case-insensitive string value that violates its length or match constraints. Ash.Type.CiString.applyconstraints/2 lib/ash/type/cistring.ex validated the maxlength, minlength, and match...

2.1CVSS5.9AI score0.00138EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/09/01 3:21 a.m.8 views

CVE-2026-82736 Ash.Type.CiString validates length and match constraints before case folding, allowing constraint bypass

Incorrect Behavior Order: Validate Before Canonicalize vulnerability in ash-project ash lets an attacker store a case-insensitive string value that violates its length or match constraints. Ash.Type.CiString.applyconstraints/2 lib/ash/type/cistring.ex validated the maxlength, minlength, and match...

2.1CVSS5.9AI score0.00138EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/01 3:21 a.m.5 views

EEF-CVE-2026-82736 Ash.Type.CiString validates length and match constraints before case folding, allowing constraint bypass

Summary Incorrect Behavior Order: Validate Before Canonicalize vulnerability in ash-project ash lets an attacker store a case-insensitive string value that violates its length or match constraints. Ash.Type.CiString.apply\constraints/2 lib/ash/type/ci\string.ex validated the max\length, min\lengt...

2.1CVSS5.9AI score0.00138EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/01 3:21 a.m.2 views

CVE-2026-82736 Ash.Type.CiString validates length and match constraints before case folding, allowing constraint bypass

Incorrect Behavior Order: Validate Before Canonicalize vulnerability in ash-project ash lets an attacker store a case-insensitive string value that violates its length or match constraints. Ash.Type.CiString.applyconstraints/2 lib/ash/type/cistring.ex validated the maxlength, minlength, and match...

2.1CVSS5.9AI score0.00138EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2026/09/01 3:18 a.m.7 views

CVE-2026-19032 jackson-databind resolves attacker-controlled URI schemes when deserializing java.nio.file.Path

jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In JDKFromStringDeserializer.NioPathHelper.deserialize, a string bound from untrusted JSON is passed to new URIvalue and then to Path.ofuri. When that throws...

5.3CVSS6AI score0.00463EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/01 3:18 a.m.78 views

CVE-2026-19032

CVE-2026-19032 affects jackson-databind , where the java.nio.file.Path deserializer (JDKFromStringDeserializer.NioPathHelper.deserialize) resolves an attacker-supplied URI without restricting its scheme. When Path.of(uri) throws FileSystemNotFoundException, the code enumerates ServiceLoader and c...

5.3CVSS6AI score0.00463EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/01 3:18 a.m.9 views

EUVD-2026-68961

jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In JDKFromStringDeserializer.NioPathHelper.deserialize, a string bound from untrusted JSON is passed to new URIvalue and then to Path.ofuri. When that throws...

5.3CVSS6AI score0.00463EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/01 3:18 a.m.36 views

CVE-2026-19032 jackson-databind resolves attacker-controlled URI schemes when deserializing java.nio.file.Path

jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In JDKFromStringDeserializer.NioPathHelper.deserialize, a string bound from untrusted JSON is passed to new URIvalue and then to Path.ofuri. When that throws...

5.3CVSS0.00463EPSS
SaveExploits0References5
Rows per page
Query Builder