Lucene search
+L

15416 matches found

Cvelist
Cvelist
added 2026/09/08 9:55 p.m.17 views

CVE-2026-81904 Concrete CMS before 9.5.3 is vulnerable to Missing Authorization in Stack/Container Sub-Block Asset Registration

Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout area without checking whether the requesting user could view that sub-block. An unauthenticated visitor could recover configuration values emitted by a restricted sub-block's asset registration —...

6.3CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 9:55 p.m.12 views

CVE-2026-81904

Concrete CMS below 9.5.3 is affected by a missing authorization flaw in the asset registration for sub-blocks within a Stack , Container , or layout area. The system registered view assets for every sub-block without verifying whether the requesting user had permission to view that sub-block, all...

6.3CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 9:15 p.m.8 views

fbchecker

ABANDONADO Facebook bloquea el acceso múltiple con su API COMPROBADOR MASIVO DE CUENTAS DE FACEBOOK Comprobador Masivo de Cuentas de Facebook Sin Cuenta Bloqueada Instalación simple : root@kitploit: apt install git php -y git clone https://github.com/fdciabdul/fbchecker cd fbchecker php fbcheck.p...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 9:14 p.m.9 views

crypto_identifier

crypto-identifier Herramienta criptográfica para pentest y ctf: intenta descifrar datos usando múltiples algoritmos y modos de encadenamiento de bloques. Útil para una verificación rápida de texto cifrado desconocido y diccionario de claves. Algoritmos soportados: AES ARC2 ARC4 Blowfish CAST DES...

6AI score
SaveExploits0
NVD
NVD
added 2026/09/08 8:18 p.m.3 views

CVE-2026-78552

The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field. The field is interpolated directly into the nginx server block without inspection, resulting in execution of injected directives...

6CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 8:08 p.m.4 views

EUVD-2026-74168

The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field. The field is interpolated directly into the nginx server block without inspection, resulting in execution of injected directives...

6CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 8:05 p.m.5 views

CVE-2026-78545

Okta Access Gateway is vulnerable to improper input sanitization in the application label field. The unsanitized value is interpolated directly into an nginx server block directive within the generated configuration file, allowing an attacker to inject arbitrary directives. This requires high pri...

6.6CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 6:46 p.m.10 views

VMProtect-devirtualization

VMProtect Devirtualization An experimental dynamic approach to devirtualize pure functions protected by VMProtect 3.x TL;DR Introduction The approach Example 1: A simple bitwise operation protected Example 2: A MBA operation protected Example 3: More than one basic block Conclusion and limitation...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 4:32 p.m.3 views

dnsenum

README - dnsenum.pl VERSIÓN: 1.2.4 script perl multihilo para enumerar información DNS de un dominio y para descubrir bloques de IP no contiguos. OPERACIONES: root@kitploit: 1 Obtener la dirección del host registro A. 2 Obtener los servidores de nombres multihilo. 3 Obtener el registro MX...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 4:20 p.m.5 views

CVE-2024-4439

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2024-4439...

7.2CVSS7.2AI score0.71024EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/08 11:13 a.m.5 views

CVE-2025-45809-PoC

CVE-2025-45809 — LiteLLM SQL Injection via /key/block Time-Based Blind SQLi LiteLLM v1.65.4 versions before v1.81.0 /key/block and /key/unblock endpoints have a SQL injection vulnerability in the key parameter. Attackers can use time-based blind injection techniques to steal database content and...

5.4CVSS5.9AI score0.00253EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/08 9:56 a.m.28 views

firecall

firecall Automate SSH communication with firewalls, switches, etc. Description These scripts are designed to automate sending commands to a Cisco ASA firewall. The intended purpose here is to eliminate the need to manually log in to a firewall to make changes. This code can be run directly via...

5.9AI score
SaveExploits0
NVD
NVD
added 2026/09/07 1:20 p.m.2 views

CVE-2026-86430

league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter processing that perform super-linear work on crafted input. Attackers can submit specially crafted Markdown with long...

8.7CVSS0.00285EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/07 12:53 p.m.6 views

CVE-2026-86430

league/commonmark (a PHP Markdown parsing library) versions before 2.9.1 are affected by multiple denial-of-service vulnerabilities in three components: fenced code block detection , reference link label lookup , and emphasis delimiter processing . The root cause is super-linear work performed on...

8.7CVSS0.00285EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/07 11:46 a.m.5 views

cve-2026-42945-scan

cve-2026-42945-scan Static scanner for NGINX configuration files that detects the rewrite/set pattern associated with CVE-2026-42945. The scanner parses NGINX configs with crossplane, walks location blocks, and prints every location that looks affected in this format: root@kitploit: //xxx.conf: -...

9.2CVSS7.8AI score0.68047EPSS
SaveExploits42References2
Kitploit
Kitploit
added 2026/09/07 7:36 a.m.37 views

python-paddingoracle

python-paddingoracle: A portable, padding oracle exploit API UPDATED FOR PYTHON 3 python-paddingoracle is an API that provides pentesters a customizable alternative to PadBuster and other padding oracle exploit tools that can't easily without a heavy rewrite be used in unique, per-app scenarios...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/07 1:55 a.m.5 views

CVE-2026-7465-Lab

CVE-2026-7465 - Spectra Gutenberg Blocks Local Lab Local Docker lab for analyzing and reproducing CVE-2026-7465 in the WordPress plugin Spectra Gutenberg Blocks ultimate-addons-for-gutenberg. This lab compares: vuln: Spectra 2.19.25 patched: Spectra 2.19.26 The proof is intentionally least-harm. ...

8.8CVSS5.9AI score0.01174EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/06 8:26 p.m.5 views

CVE-2025-66849

CVE-2025-66849 Ghost CMS Privilege Escalation PoC Summary In Ghost Foundation Ghost CMS up to 6.4.0, the HTML block within the post draft editor fails to properly sanitize or encode user-supplied content, resulting in a stored cross-site scripting XSS vulnerability. A user with Contributor...

5.8AI score
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/09/06 12:00 a.m.2 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053340 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: make sure the first directory block is not a hole The syzbot constructs a directory that ha...

7.8CVSS6.1AI score0.00234EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/05 2:05 p.m.7 views

CVE-2021-40101

Encuesta XSS combinada con CSRF conduce a la toma de control de cuenta de administrador en Concrete5 8.5.4 Un administrador de Concrete CMS en versiones anteriores a la 9 no tenía que proporcionar su contraseña al cambiar la contraseña de otro usuario. En combinación con CVE-2021-28145 "Concrete...

7.2CVSS6.7AI score0.02555EPSS
SaveExploits0References1
Rows per page
Query Builder