Lucene search
+L

7852 matches found

Kitploit
Kitploit
added 2026/09/12 12:55 p.m.6 views

CVE-2025-4602

eMagicOne Store Manager para WooCommerce = 1.2.5 - Lectura Arbitraria de Archivos No Autenticada El plugin Administrador de Tienda eMagicOne para WooCommerce expone un punto final de protocolo de gestión remota ?connector=bridge que permite operaciones de eliminación de archivos en el servidor. E...

7.5CVSS6AI score0.00676EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/12 11:25 a.m.8 views

sqlmap-tamper-api

SQLmap Tamper-API Es una API para scripts tamper de SQLmap que te permite usar tu lenguaje de programación favorito para escribir tus scripts tamper. Esta API soluciona la limitación de SQLmap de aceptar solo Python para escribir scripts tamper. Cómo funciona El script tamper-api.py envía el...

6AI score
SaveExploits0
OSV
OSV
added 2026/09/11 8:18 p.m.4 views

DEBIAN-CVE-2026-80931

In the Linux kernel, the following vulnerability has been resolved: w1: ds28e17: reject an oversize length on an I2C block read w1f19i2cmastertransfer is the masterxfer for the DS28E17 1-Wire to I2C bridge. On an I2CMRECVLEN read, it takes the length from the device. The downstream slave puts a...

7.8CVSS0.00168EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/11 8:18 p.m.4 views

AZL-100286 CVE-2026-80931 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: w1: ds28e17: reject an oversize length on an I2C block read w1f19i2cmastertransfer is the masterxfer for the DS28E17 1-Wire to I2C bridge. On an I2CMRECVLEN read, it takes the length from the device. The downstream slave puts a...

7.8CVSS0.00168EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/11 7:42 p.m.4 views

CVE-2026-80931 w1: ds28e17: reject an oversize length on an I2C block read

In the Linux kernel, the following vulnerability has been resolved: w1: ds28e17: reject an oversize length on an I2C block read w1f19i2cmastertransfer is the masterxfer for the DS28E17 1-Wire to I2C bridge. On an I2CMRECVLEN read, it takes the length from the device. The downstream slave puts a...

6AI score
SaveExploits0References7
EUVD
EUVD
added 2026/09/11 7:42 p.m.5 views

EUVD-2026-76254

In the Linux kernel, the following vulnerability has been resolved: w1: ds28e17: reject an oversize length on an I2C block read w1f19i2cmastertransfer is the masterxfer for the DS28E17 1-Wire to I2C bridge. On an I2CMRECVLEN read, it takes the length from the device. The downstream slave puts a...

0.00168EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/11 7:42 p.m.23 views

CVE-2026-80931 w1: ds28e17: reject an oversize length on an I2C block read

In the Linux kernel, the following vulnerability has been resolved: w1: ds28e17: reject an oversize length on an I2C block read w1f19i2cmastertransfer is the masterxfer for the DS28E17 1-Wire to I2C bridge. On an I2CMRECVLEN read, it takes the length from the device. The downstream slave puts a...

7.8CVSS0.00168EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/11 7:42 p.m.9 views

CVE-2026-80931

CVE-2026-80931 is an out-of-bounds read in the Linux kernel's DS28E17 1-Wire to I2C bridge driver (w1: ds28e17). During an I2C_M_RECV_LEN read, the device-controlled length byte (buf[0]) is not validated against the caller buffer size (34 bytes), allowing a read up to ~222 bytes out of bounds . P...

7.8CVSS0.00168EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/11 3:18 p.m.4 views

the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xss

CVE-2026-78997 — UC Browser for Android Universal XSS UXSS PoC material for CVE-2026-78997 — Universal Cross-Site Scripting in UC Browser for Android com.UCMobile.intl, version 13.7.8.1314, disclosed by Omri Inbar Novee. A reflected XSS on the bridge-whitelisted domain mtmsg.uc.cn grants access t...

9.3CVSS0.00278EPSS
SaveExploits1References2
Rockylinux
Rockylinux
added 2026/09/11 12:09 p.m.6 views

kernel security update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

9.8CVSS0.0056EPSS
SaveExploits0
OSV
OSV
added 2026/09/11 12:09 p.m.5 views

RLSA-2026:66355 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

7.8CVSS0.0056EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/11 8:11 a.m.12 views

CVE-2026-23003-Cross-Chain-Bridge-Message-Forging-via-Missing-Origin-Chain-ID

CVE-2026-23003 – Cross‑Chain Bridge Message Forging via Missing Origin Chain ID Program Code Solidity + Python exploit root@kitploit: // Bridge.sol - Vulnerable bridge contract contract Bridge mappingbytes32 = bool public processed; event Depositedaddress from, address to, uint256 amount, uint256...

7.5CVSS6.9AI score0.00476EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 6:24 a.m.4 views

DroidSniper

DroidSniper - Escáner de Android Debug Bridge mal configurado 🎯 Esta herramienta, DroidSniper, está diseñada para detectar protocolos Android Debug Bridge ADB mal configurados en dispositivos Android. Estos dispositivos son vulnerables a accesos no autorizados a través de ADB debido a una mala...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 5:51 a.m.15 views

CTT-Enhanced-CVE-2026-46339-Exploit-Engine

CTT-Enhanced-CVE-2026-46339-Exploit-Engine A specialized Python framework that executes unauthenticated remote code execution via the 9Router Model Context Protocol MCP bridge by deploying a 33-layer temporal phase cascade, Riemann-Hadamard dispersion, and an 11 ns wedge filter to bypass...

10CVSS5.8AI score0.03352EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 2:55 a.m.5 views

CVE-2026-34197

🚨 CVE-2026-34197 — RCE crítica de Jolokia en Apache ActiveMQ RCE autenticada vía MBeans de Jolokia → Spring XML remoto → Ejecución de código en la JVM 📖 Resumen CVE-2026-34197 es una vulnerabilidad de ejecución remota de código autenticada y de alta gravedad que afecta a Apache ActiveMQ Classic. ...

8.8CVSS7.1AI score0.98256EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/11 2:28 a.m.8 views

sleep_python_bridge

Cobalt Strike Sleep Python Bridge This project is 'bridge' between the sleep and python language. It allows the control of a Cobalt Strike teamserver through python without the need for the standard GUI client. NOTE: This project is very much in BETA. The goal is to provide a playground for testi...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 1:20 a.m.9 views

android_demystification_toolbox

Android Demystification Toolbox Propósito ADT es un conjunto de herramientas de ejecución simbólica basado en Miasm diseñado para ayudar a modelar el comportamiento de las aplicaciones, investigar y probar vulnerabilidades de seguridad, y facilitar la ingeniería inversa de código hostil...

6AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/09/10 11:22 p.m.7 views

org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: org.apache.activemq/apache-activemq: Apache ActiveMQ: Arbitrary code execution via improper input validation in Jolokia JMX-HTTP bridge

A flaw was found in Apache ActiveMQ. An authenticated attacker can exploit an improper input validation vulnerability in the Jolokia JMX-HTTP bridge. By crafting a malicious discovery URI, the attacker can trigger the VM transport's brokerConfig parameter to load a Spring XML application context...

8.1CVSS0.0074EPSS
SaveExploits2References6
RedHat Linux
RedHat Linux
added 2026/09/10 4:34 p.m.8 views

org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: org.apache.activemq/apache-activemq: Apache ActiveMQ: Arbitrary code execution via improper input validation in Jolokia JMX-HTTP bridge

A flaw was found in Apache ActiveMQ. An authenticated attacker can exploit an improper input validation vulnerability in the Jolokia JMX-HTTP bridge. By crafting a malicious discovery URI, the attacker can trigger the VM transport's brokerConfig parameter to load a Spring XML application context...

8.1CVSS0.0074EPSS
SaveExploits2References6
RedHat Linux
RedHat Linux
added 2026/09/10 11:08 a.m.5 views

kernel: net: bridge: stop fast-leave after deleting a port group

A flaw was found in the Linux kernel's network bridge module. When handling multicast fast-leave, a vulnerability exists where the system may attempt to access a port group after it has been deleted. This can occur if multicast-to-unicast was previously enabled and then disabled, leading to a sta...

9.8CVSS0.0056EPSS
SaveExploits0References5
Rows per page
Query Builder