Lucene search
+L

271 matches found

Kitploit
Kitploit
•added 2026/09/29 3:41 a.m.•12 views

sniffly

Sniffly2 Sniffly2 es una variante de Sniffly que abusa de las cabeceras HTTP Strict Transport Security y de la API de Performance Timing para olfatear tu historial de navegación en navegadores basados en Chromium. Demo Visita http://diracdeltas.github.io/sniffly en Chrome/Chromium/Brave/etc. con...

5.9AI score
SaveExploits0References2
Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•33 views

Piwigo < 16.3.0 - Unauthenticated Information Disclosure via History API

Piwigo = 16.3.0 contains an information disclosure vulnerability caused by the pwg.history.search API method lacking adminonly restriction, letting unauthenticated users access full browsing history, exploit requires no authentication id: CVE-2026-27833 info: name: Piwigo 16.3.0 - Unauthenticated...

7.5CVSS5.8AI score0.017EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/09/16 12:31 a.m.•9 views

EUVD-2026-80058

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the audit endpoints handled by l7webauthlogdumpcgi.c, auditgetcgi.c, and moddispatchauth/plan.json. Attackers can query these audit components to obtain other users' session and browsing history data...

7.1CVSS5.7AI score0.00392EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•25 views

PT-2026-93189

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the audit endpoints handled by l7 web auth log dump cgi.c, audit get cgi.c, and mod dispatch auth/plan.json. Attackers can query these audit components to obtain other users' session and browsing histo...

7.1CVSS5.7AI score0.00392EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•2 views

CVE-2026-76855: Exposure of Private Personal Information to an Unauthorized Actor

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the audit endpoints handled by l7webauthlogdumpcgi.c, auditgetcgi.c, and moddispatchauth/plan.json. Attackers can query these audit components to obtain other users' session and browsing history data...

7.1CVSS5.9AI score0.00392EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•15 views

Astra Linux – Vulnerability in WebKit2GTK

The issue was resolved by adding additional restrictions on CSS compositing. This issue has been fixed in tvOS 15, watchOS 8, iOS 15, and iPadOS 15. Visiting a maliciously crafted website may reveal a user’s browsing history...

4.7CVSS5.8AI score0.0116EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/04/03 9:34 p.m.•6 views

CVE-2026-27833

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the pwg.history.search API method in Piwigo is registered without the adminonly option, allowing unauthenticated users to access the full browsing history of all gallery visitors. This issue has been patched ...

7.5CVSS5.8AI score0.017EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2026/04/03 9:34 p.m.•28 views

CVE-2026-27833 Piwigo: Unauthenticated Information Disclosure via pwg.history.search API

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the pwg.history.search API method in Piwigo is registered without the adminonly option, allowing unauthenticated users to access the full browsing history of all gallery visitors. This issue has been patched ...

7.5CVSS0.017EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/03 12:00 a.m.•4 views

CVE-2026-27833: Missing Authorization

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the pwg.history.search API method in Piwigo is registered without the adminonly option, allowing unauthenticated users to access the full browsing history of all gallery visitors. This issue has been patched ...

7.5CVSS5.7AI score0.017EPSS
SaveExploits1References4
Malwarebytes
Malwarebytes
•added 2025/11/13 12:51 p.m.•16 views

Are you paying more than other people? NY cracks down on surveillance pricing

When you search for a product online, you might think you're getting the same price as everyone else. Think again. Your price might be different based on everything from your location to what you've looked at online. Companies often use algorithms to set their prices that rely heavily on customer...

6.2AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2015-1255

Malware in sbrugna...

5CVSS6.1AI score0.01485EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2019-18217

Malware in sbrugna...

4.3CVSS4.5AI score0.01052EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2021-17801

Malware in sbrugna...

4.7CVSS6.3AI score0.0116EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2017-6871

Malware in sbrugna...

6.5CVSS7.9AI score0.01287EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2015-1271

Malware in sbrugna...

5CVSS6.2AI score0.01423EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2015-6982

Malware in sbrugna...

4.3CVSS7.5AI score0.01638EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2016-2944

Malware in sbrugna...

3.3CVSS6.5AI score0.00321EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2019-18158

Malware in sbrugna...

5.3CVSS6.5AI score0.01581EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2019-18159

Malware in sbrugna...

4.3CVSS6.3AI score0.01241EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-17916

Malware in sbrugna...

4.3CVSS5.3AI score0.00543EPSS
SaveExploits0References2
Rows per page
Query Builder