Lucene search
+L

172644 matches found

Kitploit
Kitploit
added 2026/08/31 8:54 p.m.35 views

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 8:50 p.m.6 views

CVE-2022-40684

CVE-2022-40684 CVE-2022-40684 - Auth bypass extract admin users and LDAP config - This PoC do only read-only actions. Run exploit root@kitploit: USE: python3 exploit.py https://target.com Ex: python3 exploit.py https://target.com Run nuclei template root@kitploit: echo https://target.com | nuclei...

9.8CVSS7.3AI score0.99984EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/08/31 8:39 p.m.5 views

cve-2024-0012-gui-poc

CVE-2024-0012 and CVE-2024-9474 Authentication Bypass in the Management Web Interface PAN-SA-2024-0015 and Authenticated Command Injection in Palo Alto PAN-OS. See the blog post for technical details. Exploit authors Original exploit written by Sonny of watchTowr @watchtowrcyber. Code and GUI...

9.8CVSS7.3AI score0.99718EPSS
SaveExploits18
RedHat Linux
RedHat Linux
added 2026/08/31 8:38 p.m.9 views

librenswan: IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload

A flaw was found in Libreswan's implementation of IKEv2 authentication when processing signatures utilizing the RSASSA-PKCS1-v15 scheme. The RSAauthenticatehashsignaturepkcs115rsa function does not correctly validate the DER encoding of the ASN.1 digest. A remote, unauthenticated attacker could...

8.1CVSS5.8AI score0.00346EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/08/31 8:35 p.m.2 views

PoC-CVE-2018-15473

PoC-CVE-2018-15473 OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. CVE: CVE-2018-1547...

5.9CVSS6.7AI score0.98631EPSS
SaveExploits26
CVE
CVE
added 2026/08/31 8:30 p.m.22 views

CVE-2026-82228

SiteGround Security WordPress plugin versions ≤ 1.6.6 are affected by an unauthenticated 2FA Bypass vulnerability, discovered by Ananda Dhakal via Patchstack. The flaw allows a network-based attacker (with high attack complexity, no prior privileges or user interaction) to bypass two-factor authe...

8.1CVSS5.9AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/31 8:30 p.m.7 views

EUVD-2026-68795

Unauthenticated Broken Authentication in RegistrationMagic = 6.0.9.8 versions...

7.4CVSS5.9AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/31 8:30 p.m.30 views

CVE-2026-82225 WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in RegistrationMagic = 6.0.9.8 versions...

7.4CVSS
SaveExploits0References1
CVE
CVE
added 2026/08/31 8:30 p.m.13 views

CVE-2026-82225

RegistrationMagic (Custom Registration Form Builder with Submission Manager) WordPress plugin versions ≤ 6.0.9.8 are affected by an unauthenticated Broken Authentication vulnerability, discovered by Emiliano Carrizo. The CVSS v3.1 score is 7.4 (HIGH) with a network attack vector, high complexity,...

7.4CVSS5.9AI score
SaveExploits0References1
CVE
CVE
added 2026/08/31 8:30 p.m.12 views

CVE-2026-54599

Wallos , an open-source self-hostable personal subscription tracker, is vulnerable to login CSRF / account takeover prior to version 4.9.4 . The root cause is that login.php generates an OIDC state nonce stored in $_SESSION['oidc_state'], but checksession.php dispatches the OIDC callback without ...

7.5CVSS5.9AI score
SaveExploits0References2
CVE
CVE
added 2026/08/31 8:28 p.m.13 views

CVE-2026-54598

Wallos , an open-source self-hostable personal subscription tracker, is affected by a missing authentication flaw in endpoints/db/migrate.php. Prior to version 4.9.4 , this endpoint executes database schema migrations over HTTP with zero authentication , allowing any unauthenticated attacker to t...

7.5CVSS5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 8:25 p.m.3 views

X-force

IBM X-Force Exchange library | IBM Security X-FORCE Exchange library in Python 3. Search: threatactivities, threatgroups, malwareanalysis, collector and industries. For others applications. See ---|--- Install root@kitploit: pip3 install XForce Use Using you APIKEY make a basic authentication. Se...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 8:11 p.m.2 views

pocketbase-CVE-2026-44166

CVE-2026-44166: PocketBase OAuth2 Account Pre-Hijacking A PocketBase auth collection with OAuth2 enabled lets the client pass a createData object when it signs up. The email inside createData is never checked against the email the OAuth2 provider verified. Anyone with an account on a configured...

7.6CVSS6AI score0.00247EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/08/31 8:02 p.m.108 views

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

5.5AI score
SaveExploits0
CVE
CVE
added 2026/08/31 8:00 p.m.5 views

CVE-2026-82906

A missing authentication flaw in sdcb chats versions up to 1.12.0 affects the Signed File Download Endpoint , specifically the DownloadPublic function in src/BE/web/Controllers/Chats/Files/FileController.cs. An unauthenticated remote attacker with high complexity can exploit this to achieve low c...

6.3CVSS5AI score
SaveExploits0References5
EUVD
EUVD
added 2026/08/31 8:00 p.m.8 views

EUVD-2026-68763

A flaw has been found in sdcb chats up to 1.12.0. This impacts the function DownloadPublic of the file src/BE/web/Controllers/Chats/Files/FileController.cs of the component Signed File Download Endpoint. This manipulation causes missing authentication. Remote exploitation of the attack is possibl...

6.3CVSS5AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/31 8:00 p.m.29 views

CVE-2026-82906 sdcb chats Signed File Download Endpoint FileController.cs DownloadPublic missing authentication

A flaw has been found in sdcb chats up to 1.12.0. This impacts the function DownloadPublic of the file src/BE/web/Controllers/Chats/Files/FileController.cs of the component Signed File Download Endpoint. This manipulation causes missing authentication. Remote exploitation of the attack is possibl...

6.3CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/31 7:59 p.m.7 views

raider

Quick links Website. OWASP page. Documentation. Installation. FAQ. Getting started. Architecture. Discussions. Issues. Twitter. Fediverse. What is Raider OWASP Raider was developed with the goal to improve web authentication testing. By now it has evolved and can be used for all kinds of stateful...

6AI score
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/08/31 7:50 p.m.8 views

GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input...

5.3CVSS6.2AI score0.00201EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/31 7:50 p.m.11 views

glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

A flaw was found in GLib. The D-Bus client-side implementation of the DBUSCOOKIESHA1 SASL authentication mechanism does not validate the cookiecontext parameter received from the server. A malicious D-Bus server can supply a cookiecontext containing path traversal sequences, causing the client to...

7.5CVSS5.9AI score0.00527EPSS
SaveExploits1References5
Rows per page
Query Builder