Lucene search
+L

6433 matches found

EUVD
EUVD
•added 2026/09/24 7:28 p.m.•9 views

EUVD-2026-86383

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the lead title field. Attackers can craft a lead title containing...

5.4CVSS6.3AI score0.00169EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/24 7:28 p.m.•6 views

CVE-2026-48540 Krayin CRM 2.2.6 Stored Template Injection XSS via Lead Title

Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the lead title field. Attackers can craft a lead title containing...

5.1CVSS6.3AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/09/24 6:57 p.m.•7 views

CVE-2026-96747

A flaw was found in pymongo. When client-side field-level encryption is configured, the driver misinterprets Key Management Service KMS endpoint addresses ending in '.sock' as local Unix domain socket files rather than remote network hosts. An authenticated database user with permission to modify...

5.3CVSS5.7AI score0.00131EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/24 6:18 p.m.•12 views

CVE-2026-96747 Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

5.3CVSS5.8AI score0.00131EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/24 6:18 p.m.•34 views

CVE-2026-96747 Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

5.3CVSS0.00131EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/24 6:18 p.m.•16 views

CVE-2026-96747

The MongoDB Python Driver client-side field level encryption support contains a vulnerability where a key management endpoint ending in .sock is incorrectly treated as a local Unix domain socket path instead of a remote host. An attacker with write access to encryption key metadata in the databas...

5.3CVSS5.8AI score0.00131EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/24 6:18 p.m.•6 views

CVE-2026-96747 Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

5.3CVSS5.9AI score
SaveExploits0References5
MongoDB
MongoDB
•added 2026/09/24 6:18 p.m.•9 views

Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

5.3CVSS5.8AI score0.00131EPSS
SaveExploits0References3Affected Software1
Kitploit
Kitploit
•added 2026/09/24 6:07 p.m.•24 views

CVE-2025-56800

CVE-2025-56800 Local Authentication Bypass Vulnerability in Reolink Desktop Application 1. Overview Name : Reolink Desktop Application Version : 8.18.12 Vendor : Reolink CWE : CWE-290: Authentication Bypass by Spoofing CVSS : 5.1 MEDIUM Vector String : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N...

6AI score0.00254EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/24 3:10 p.m.•11 views

JS-Secret-Hunter

JS Secret Hunter V2 🕵️‍♂️ JS Secret Hunter は、クライアントサイドJavaScriptにハードコードされた秘密情報の検出を自動化するために、セキュリティ研究者向けに設計された高度なPythonツールです。 単純なスキャナとは異なり、V2 には動的クローラが搭載されており、対象WebサイトのHTMLを解析して読み込まれたすべてのJavaScriptファイルを自動的に抽出するため、包括的なカバレッジを確保します。 機能 🕷️ 動的クローリング: HTMLを解析して、すべてのタグを自動的に検出します。 🔍 正規表現ベースの検出:...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 3:05 p.m.•8 views

cve-2024-26229

cve-2024-26229 A nim version of the now outdated Windows LPE vulnerability abusing CSC. This is for educational purposes only, and refer to the patch list to determine whether or not your system/your target is vulnerable. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26229 Usage...

7.8CVSS7.9AI score0.09375EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/24 11:54 a.m.•22 views

CVE-2020-28488

CVE-2020-28488 Denial of Service DoS - jQuery UI 1.12.1 - Exploit Payload root@kitploit: for var i = 0; i DoS - jQuery UI 1.12.1 DoS - jQuery UI 1.12.1 Exploit PoC by Rafael Cintra Lopes function exploit for var i = 0; i...

6AI score
SaveExploits4
Kitploit
Kitploit
•added 2026/09/24 2:30 a.m.•5 views

OmniSec-Hex

🛡️ OmniSec-Hex OmniSec-Hex is an advanced, high-impact cybersecurity monorepo consolidating six powerhouse client-side security and sovereign intelligence workbanks. Operating entirely within browser-local memory environments with absolute data lockdown, this ecosystem delivers cross-vertical...

6AI score
SaveExploits0
UbuntuCve
UbuntuCve
•added 2026/09/24 12:00 a.m.•11 views

CVE-2026-96747

The client-side field level encryption support in the MongoDB Python D...

5.3CVSS5.8AI score0.00131EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/24 12:00 a.m.•6 views

UBUNTU-CVE-2026-96747

The client-side field level encryption support in the MongoDB Python D...

5.3CVSS5.8AI score0.00131EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/23 2:42 p.m.•10 views

CVE-2021-28378

CVE-2021-28378 Details about this CVE here. This CVE targets a missing string escaping on the client-side from content fetched from the server. It enables an attacker to inject arbitrary code easily, by creating a comment on an issue or a pull request. This was introduced in commit...

5.4CVSS7.1AI score0.08762EPSS
SaveExploits2References2
Kitploit
Kitploit
•added 2026/09/23 4:19 a.m.•11 views

webvm

WebVM Este repositorio aloja el código fuente de https://webvm.io, una máquina virtual Linux que se ejecuta en tu navegador. Prueba el nuevo entorno gráfico Alpine / Xorg / i3: https://webvm.io/alpine.html WebVM es un entorno virtual sin servidor que se ejecuta completamente del lado del cliente ...

6.2AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/23 2:52 a.m.•16 views

PublicSafe

PublicSafe Tu Navegador, Tu Espacio Seguro PublicSafe es una extensión de navegador gratuita y de código abierto centrada en la privacidad, el cifrado y el control del usuario. Proporciona herramientas de cifrado del lado del cliente diseñadas para ayudar a los usuarios a proteger información...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/22 5:20 p.m.•9 views

CVE-2024-48910-POC

CVE-2024-48910 Prueba de Concepto Esta es una prueba de concepto para CVE-2024-48910. Esta es una vulnerabilidad que estaba presente en DOMPurify, un sanitizador XSS para HTML, SVG y MathML. Esta versión de DOMPurify es vulnerable a la contaminación de prototipos, donde un atacante puede inyectar...

9.8CVSS7.6AI score0.01151EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/22 9:40 a.m.•17 views

CVE-2021-24891-Simulation

A hands-on, containerized lab environment to simulate and exploit a DOM-based Cross-Site Scripting XSS vulnerability in the Elementor Website Builder WordPress plugin, identified as CVE-2021-24891. 📖 About The Vulnerability This lab demonstrates a DOM-based Cross-Site Scripting XSS vulnerability ...

6.1CVSS6.1AI score0.25136EPSS
SaveExploits1References1
Rows per page
Query Builder