Lucene search
+L

6596 matches found

Kitploit
Kitploit
•added 2026/10/01 7:11 a.m.•6 views

nginx-cve-2026-42945-check

NGINX CVE-2026-42945 Local Checker Language: 中文 | English This repository provides two standalone local scripts for checking whether a Linux or Windows server has Nginx, OpenResty, or Tengine instances that may be exposed to CVE-2026-42945 related risk. The scripts are read-only. They do not run ...

9.2CVSS8.1AI score0.03396EPSS
SaveExploits42References2
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•0 views

CentOS Linux 6 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / nginx-mod-http-geoip / etc (CENTOS6:CLSA-2026:1779217566)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1779217566 advisory. - NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when the rewrite directive ...

9.2CVSS6.3AI score0.03396EPSS
SaveExploits42References3
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•2 views

AlmaLinux 9.2 [TuxCare] Security Update: python3.11 / python3.11-debug / python3.11-devel / python3.11-idle / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1790238098)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1790238098 advisory. - The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and...

8.4CVSS5.8AI score0.03196EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•3 views

AlmaLinux 9.2 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel (ALMALINUX9.2:CLSA-2026:1786718192)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786718192 advisory. - RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture...

6.5CVSS5.6AI score0.00485EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•5 views

AlmaLinux 9.2 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778128255)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778128255 advisory. - Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet...

6.5CVSS6.2AI score0.02391EPSS
SaveExploits7References10
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•1 views

AlmaLinux 9.2 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1777306004)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777306004 advisory. - Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via pack...

9.8CVSS5.9AI score0.02003EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•1 views

AlmaLinux 9.6 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel (ALMALINUX9.6:CLSA-2026:1777369264)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777369264 advisory. - Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or...

7.8CVSS5.9AI score0.02003EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/09/30 7:16 p.m.•12 views

EUVD-2026-90252

OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents to perform screen snapshots, camera snaps, and location captures without consent prompts. Attackers can invoke screen.snapshot,...

7.1CVSS5.9AI score0.0028EPSS
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/30 7:14 a.m.•9 views

Exfiltrated-Machine-Walkthrough---Subrion-CMS-CVE-2021-2220-

Procédure pas à pas de la machine Exfiltrated - Subrion CMS-CVE-2021-2220- Voir Exfiltrated.pdf Lab : https://portal.offsec.com/machine/exfiltrated-17398/overview/details Nom du lab : Exfiltrated Drapeaux : 2...

5.5CVSS6.9AI score0.00596EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/30 3:15 a.m.•13 views

CVE-2024-21413

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 🚀 Usage Ensure you have appropriate permissions and authorization from the target system owner before using this script. Prerequisites Python 3.x impacket-smbserver Usage Example sudo python3 CVE-2024-21413.py 🛠️ Features...

9.8CVSS8.4AI score0.9466EPSS
SaveExploits24
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•2 views

Rocky Linux 9.6 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1775032927)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775032927 advisory. - NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file...

7.8CVSS5.9AI score0.03456EPSS
SaveExploits7References13
NVD
NVD
•added 2026/09/29 8:17 p.m.•7 views

CVE-2026-102878

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

8.6CVSS0.00235EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/29 8:01 p.m.•16 views

CVE-2026-102878

The mcp-chrome-bridge software, in versions through 1.0.31 , contains an origin validation error within its native-server HTTP API. This vulnerability allows an attacker to bypass CORS restrictions by crafting malicious web pages. Successful exploitation enables the execution of browser automatio...

8.6CVSS5.9AI score0.00235EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/29 8:01 p.m.•41 views

CVE-2026-102878 mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

8.6CVSS0.00235EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/29 8:01 p.m.•10 views

CVE-2026-102878 mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

8.6CVSS5.9AI score0.00235EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/29 8:01 p.m.•9 views

EUVD-2026-89413

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

8.6CVSS5.9AI score0.00235EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/29 5:07 p.m.•8 views

monikerlinktest

monikerlinktest cve-2024-21413 1. configurer tun0 ou un autre tun sur le routeur via openvpn avec n'importe quel fichier ovpn 2. installer remmina si ce n'est pas déjà fait 3. se connecter en RDP au bureau cible en utilisant remmina sur le port auquel votre ovpn est connecté supprimer le lien ip ...

9.8CVSS8.2AI score0.9466EPSS
SaveExploits24
Kitploit
Kitploit
•added 2026/09/29 5:04 p.m.•12 views

SSHintel

SSHintel — Легковесный SSH-хоніпот SSHintel — это легковесный SSH-хоніпот, созданный с использованием Python и Paramiko. Он имитирует фейковую Linux-оболочку для регистрации несанкционированных попыток доступа, перехвата учетных данных и анализа поведения атакующих в контролируемой среде. 🔧...

6.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/09/29 11:02 a.m.•7 views

CVE-2026-96422

A flaw was found in Wireshark. This vulnerability allows an attacker to cause a Denial of Service DoS by injecting crafted network packets or convincing a user to open a malicious packet capture file. An assertion failure within the Frame protocol metadissector triggers an unexpected application...

5.5CVSS5.8AI score0.00134EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/29 11:02 a.m.•10 views

CVE-2026-96416

A flaw was found in Wireshark. An attacker could exploit this vulnerability by convincing a user to open a specially crafted packet capture file or by injecting malformed IEEE 802.11 wireless network traffic. Processing these invalid packets causes an application crash in the protocol dissector,...

5.5CVSS5.9AI score0.0014EPSS
SaveExploits0References5
Rows per page
Query Builder