Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

2236181 matches found

Vulnrichment
Vulnrichment•added 2026/09/15 5:03 p.m.•10 views

CVE-2026-12751 Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.

IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

5.4CVSS5.8AI score0.00269EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/15 5:03 p.m.•14 views

CVE-2026-12751

IBM Cloud Pak for Business Automation is vulnerable to HTML injection , allowing a remote attacker with low privileges to inject malicious HTML that executes in the victim's browser within the security context of the hosting site. The CVSS 3.1 score is 5.4 (Medium) with a changed scope and low im...

5.4CVSS5.8AI score0.00269EPSS
SaveExploits0References1
Kitploit
Kitploit•added 2026/09/15 5:03 p.m.•2 views

gowitness v3.2.0

gowitness A golang, web screenshot utility using Chrome Headless. introduction gowitness is a website screenshot utility written in Golang, that uses Chrome Headless to generate screenshots of web interfaces using the command line, with a handy report viewer to process results. Both Linux and mac...

6AI score
SaveExploits0References14
CVE
CVE•added 2026/09/15 5:00 p.m.•55 views

CVE-2026-44778

Inspektor Gadget (v0.28.0–0.53.1) is an eBPF-based toolset for system inspection on Kubernetes and Linux hosts. The USDT note parser in pkg/uprobetracer/usdt.go lets an unprivileged container crash or OOM-kill the privileged IG process via a crafted ELF. Three defects contribute: getUsdtInfo() do...

6.3CVSS8.2AI score0.00462EPSS
SaveExploits0References5
OSV
OSV•added 2026/09/15 5:00 p.m.•6 views

CVE-2026-44778 Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

6.3CVSS6AI score
SaveExploits0References7
Cvelist
Cvelist•added 2026/09/15 5:00 p.m.•24 views

CVE-2026-44778 Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

6.3CVSS0.00462EPSS
SaveExploits0References5
EUVD
EUVD•added 2026/09/15 5:00 p.m.•5 views

EUVD-2026-78938

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

6.3CVSS6AI score0.00462EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment•added 2026/09/15 5:00 p.m.•4 views

CVE-2026-44778 Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

6.3CVSS0.00462EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment•added 2026/09/15 5:00 p.m.•7 views

CVE-2026-21586

This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an...

7.1CVSS6.1AI score0.00324EPSS
SaveExploits0References2
EUVD
EUVD•added 2026/09/15 5:00 p.m.•11 views

EUVD-2026-78936

This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to gain unintended access and can lead to the exposure of resource...

7.1CVSS6.3AI score0.00324EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2026/09/15 5:00 p.m.•31 views

CVE-2026-21587

This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to gain unintended access and can lead to the exposure of resource...

7.1CVSS0.00324EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2026/09/15 5:00 p.m.•7 views

CVE-2026-21587

This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to gain unintended access and can lead to the exposure of resource...

7.1CVSS6.3AI score0.00324EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2026/09/15 5:00 p.m.•34 views

CVE-2026-21586

This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an...

7.1CVSS0.00324EPSS
SaveExploits0References2
EUVD
EUVD•added 2026/09/15 5:00 p.m.•7 views

EUVD-2026-78935

This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an...

7.1CVSS6.1AI score0.00324EPSS
SaveExploits0References2
CVE
CVE•added 2026/09/15 5:00 p.m.•14 views

CVE-2026-21587

CVE-2026-21587 is a High severity Improper Authorization vulnerability (CVSS 4.0 score 7.1 ) introduced in Jira Service Management Data Center 11.3.0 . An authenticated attacker can gain unintended access, potentially exposing sensitive information or enabling arbitrary code execution . The flaw ...

7.1CVSS6.3AI score0.00324EPSS
SaveExploits0References2
CVE
CVE•added 2026/09/15 5:00 p.m.•19 views

CVE-2026-21586

An Improper Authorization vulnerability in Confluence Data Center (Atlassian), rated CVSS 4.0: 7.1 HIGH , allows an authenticated attacker to gain unintended access to resources or functionality, potentially exposing sensitive information or enabling arbitrary code execution. The flaw was introdu...

7.1CVSS6.1AI score0.00324EPSS
SaveExploits0References2
Kitploit
Kitploit•added 2026/09/15 4:56 p.m.•10 views

lights-out

Lights Out このリポジトリには、ThinkPad X230のウェブカメラLEDをラップトップへの物理的なアクセスなしで ソフトウェア制御できるようにするツールが含まれています。 これらは、マルウェアがLED表示なしでウェブカメラ経由でビデオを録画できることを実証するために作成されました。 これは、USB経由でウェブカメラのファームウェアを書き換えることで実現されます（X230のウェブカメラは内部でUSB接続されています）。これにより、LEDを任意に制御する機能が追加されます。...

6.1AI score
SaveExploits0References7
Kitploit
Kitploit•added 2026/09/15 4:56 p.m.•11 views

windows-api-function-cheatsheets

Windows API 関数チートシート 連絡先 🌨️ Snowcrash: [email protected] 目次 Windows API 関数チートシート ファイル操作 プロセス管理 メモリ管理 スレッド管理 ダイナミックリンクライブラリ DLL 管理 同期 プロセス間通信 Windows フック 暗号化 デバッグ Winsock レジストリ操作 エラー処理 リソース管理 Unicode 文字列関数 文字列長 文字列コピー 文字列連結 文字列比較 文字列検索 文字分類と変換 Win32 構造体チートシート 一般的な構造体 Win32 ソケット構造体チートシート...

6AI score
SaveExploits0
Kitploit
Kitploit•added 2026/09/15 4:56 p.m.•10 views

AV-EDR-Lab-Environment-Setup

AV/EDRラボ環境セットアップ 当初はMaldev Academy Discordから取得し、さらにリソースを追加しました。 Notionノート : https://an0nud4y.notion.site/AV-EDR-Lab-Env-Setup-130bc870022d8071935cc682d3eb34b9?pvs=4 有料EDRが持つ特定の機能をエミュレートするために使用できるものの例: SACL - sysmon https://detect.fyi/sysmon-a-viable-alternative-to-edr-44d4fbe5735a?gi=eb4475ea6b3d...

5.9AI score
SaveExploits0References60
Kitploit
Kitploit•added 2026/09/15 4:53 p.m.•13 views

CVE-2018-17182

CVE-2018-17182 Linux 커널 VMA-UAF 권한 상승 취약점 CVE-2018-17182 소개 Google Project Zero의 사이버 보안 연구원들이 상세 정보를 발표했으며, 커널 버전 3.16부터 4.18.8까지의 Linux 커널에 존재하는 높은 심각도 취약점에 대한 개념 증명PoC 익스플로잇을 공개했습니다. 화이트 해커 Jann Horn이 발견한 이 커널 취약점CVE-2018-17182은 Linux 메모리 관리 하위 시스템의 캐시 무효화 오류로, 사용 후 해제Use-After-Free 취약점을 유발합니다...

7.8CVSS7.2AI score0.03206EPSS
SaveExploits5References1
Rows per page
Query Builder