Lucene search
+L

25715 matches found

CVE
CVE
added 2026/09/08 8:18 p.m.6 views

CVE-2026-84685

The react-native-auth0 SDK 's web platform implementation fails to scope its in-memory token cache to individual user sessions in server-side rendering (SSR) environments where module state persists across HTTP requests. As a result, tokens cached in module memory can be retrieved by subsequent r...

6.5CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 8:10 p.m.9 views

CVE-2026-1010-WebSocket-Connection-Smuggling-via-Malformed-Upgrade-Header

CVE-2026-1010 – Contrabando de conexiones WebSocket Descripción general Un proxy inverso y un backend no se ponen de acuerdo sobre cómo analizar una solicitud HTTP con un encabezado de actualización WebSocket malformado. El proxy la trata como una sola solicitud, mientras que el backend la...

8CVSS5.9AI score0.00315EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 8:07 p.m.6 views

spectre-attack-demo

Spectre Attack Example Example of using revealed "Spectre" exploit from 2 Jan 2018 CVE-2017-5753 and CVE-2017-5715 Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the...

7AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/09/08 8:05 p.m.2 views

firefox: thunderbird: Mitigation bypass in the Storage: Cache API component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Storage: Cache API component...

9.1CVSS0.00342EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/08 7:44 p.m.6 views

PoC-CVE-2020-9715

CVE-2020-9715 EDR Validation PoC Use-after-free in Adobe Acrobat Reader DC's EScript.api ESObject cache. For authorized red team EDR testing only. Vulnerability Adobe Acrobat Reader DC = 2020.009.20063. The EScript engine caches data ESObjects with keys that preserve the original encoding ANSI or...

9.3CVSS7.9AI score0.48441EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/08 7:20 p.m.6 views

Web-Cache-Vulnerability-Scanner

Web Cache Vulnerability Scanner WCVS is a fast and versatile CLI scanner for web cache poisoning and web cache deception developed by Hackmanit and Maximilian Hildebrand. The scanner supports many different web cache poisoning and web cache deception techniques, includes a crawler to identify...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/08 7:15 p.m.4 views

CurveBall-CVE-2020-0601-PoC

CurveBall CVE-2020-0601 - PoC This vulnerability, known as CurveBall, is due to invalid verification of certificates that using the ECC algorithm. Windows try to verify previously verified certificates from the certificate cache and while doing this, it only checks whether the public keys of the...

8.1CVSS7.5AI score0.89436EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/08 6:51 p.m.5 views

copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe

Copy Fail CVE-2026-31431 - Vulnerability Checker Conceptual validation script for CVE-2026-31431 "Copy Fail" — a Linux kernel local privilege escalation via algifaead page-cache write. Vulnerability CVE-2026-31431 is a logic bug in the Linux kernel's authencesn AEAD template. When combined with...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits242References1
Kitploit
Kitploit
added 2026/09/08 6:46 p.m.8 views

CVE-2022-22706-poc

CVE-2022-22706 - Page-Cache Write The Arm Mali GPU driver hands userspace a CPU-writable mapping of pages it pinned read-only, so an unprivileged process gets a writable alias of the page cache backing a file it can only open ORDONLY. exploit.c blanks root's password field in the /etc/passwd page...

7.8CVSS7.8AI score0.01095EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 6:41 p.m.4 views

CVE-2026-31431-C

copy-fail CVE-2026-31431 Copy Fail C language PoC, logically aligned with the original Python exploit theori-io/copy-fail-CVE-2026-31431. For authorized security research and experimental environments only. Do not use on unauthorized systems. Brief Principle In Linux AFALG,...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits242References1
Kitploit
Kitploit
added 2026/09/08 6:39 p.m.10 views

CVE-2026-27384

CVE-2026-27384 CVE-2026-27384 — W3 Total Cache mfunc/eval RCE Scanner Plugin: W3 Total Cache Plugin Slug: w3-total-cache CVE ID: CVE-2026-27384 CVSS Score: 9.8 Critical CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Vulnerability Type: Unauthenticated Arbitrary Code Execution Code...

9CVSS6AI score0.00304EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 6:39 p.m.5 views

Detection-Tool-Kit-for-CVE-2026-31431

copyfail-detect Detection toolkit for CVE-2026-31431 "Copy Fail", a Linux kernel local privilege escalation technique that corrupts page-cache data without changing the file on disk. Why This Exists Copy Fail can bypass traditional file integrity monitoring because the on-disk file is not modifie...

7.8CVSS6.6AI score0.99907EPSS
SaveExploits242References1
Kitploit
Kitploit
added 2026/09/08 6:32 p.m.8 views

nginx-CVE-2017-7529

Nginx out-of-bounds read cache vulnerability CVE-2017-7529 Vulnerability Principle References: https://cert.360.cn/detailnews.html?id=b879782fbad4a7f773b6c18490d67ac7 http://galaxylab.org/cve-2017-7529-nginx%E6%95%B4%E6%95%B0%E6%BA%A2%E5%87%BA%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/ When Nginx acts ...

7.5CVSS6.9AI score0.62597EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/08 6:28 p.m.6 views

CVE-2026-43284

🚨 CVE-2026-43284 - Dirty Frag 🚨 Universal Linux Kernel Local Privilege Escalation 📋 Overview Dirty Frag also known as Copy Fail 2 is a high-impact local privilege escalation vulnerability in the Linux kernel. It allows an unprivileged local user to obtain root privileges on affected systems...

8.8CVSS7.2AI score0.93235EPSS
SaveExploits32
Kitploit
Kitploit
added 2026/09/08 5:32 p.m.9 views

copy-fail-mcp

Copy Fail MCP 📖 Installation Guide — quick start, manual setup, and troubleshooting CVE-2026-31431 — The worst Linux vulnerability ever discovered. Now controllable via MCP. 732 bytes of Python. No compilation. No race condition. No per-distro offsets. One shot, universal root on every Linux kern...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits242References5
Kitploit
Kitploit
added 2026/09/08 5:21 p.m.6 views

dirtypipe

reF: https://access.redhat.com/security/vulnerabilities/RHSB-2022-002 Diagnose A vulnerability detection script has been developed to determine if your system is currently affected by this flaw. To verify the authenticity of the script, you can download the detached OpenPGP signature as well...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 5:03 p.m.5 views

Dirty-Frag-CVE-2026-43284

Dirty Frag CVE-2026-43284 and CVE-2026-43500 Exploit Reproduction and Detection Lab for a Linux kernel local privilege escalation chain. Status: VERIFIED. I completed the reproduction, the fileless verification, and the syscall-level detection in the lab kernel 6.18.9+kali-amd64. This document is...

8.8CVSS7.3AI score0.93235EPSS
SaveExploits34References5
Kitploit
Kitploit
added 2026/09/08 4:54 p.m.9 views

CVE-2025-53694

CVE-2025-53694: Information Disclosure in ItemService API with a restricted anonymous user, leading to exposure of cache keys using a brute-force approach The ItemService API, accessible at /sitecore/shell/api/sitecore/ItemService/GetChildren, allows unauthenticated users to query the Sitecore...

7.5CVSS6.1AI score0.05721EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/08 4:54 p.m.3 views

TID-The-Instant-Destroyer

TID — The Instant Destroyer Independent security research in the field of protection against cache-based side-channel attacks. Overview TID is a specialized protocol designed to eliminate sensitive data remnants such as cryptographic keys from CPU cache layers $L1, L2, \text and L3$ immediately...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 4:54 p.m.5 views

CVE-2022-45059-demo

CVE-2022-45059-demo Varnish Cache releases 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.1.0, 7.1.1 and 7.2.0 have a request smuggling vulnerability where an attacker can request that the content-length header is made hop-by-hop. This is a demo consisting of a Spring Boot web application running behind a...

7.5CVSS7.4AI score0.01438EPSS
SaveExploits0
Rows per page
Query Builder