Lucene search
+L

9480 matches found

Kitploit
Kitploit
added 2026/09/04 9:58 a.m.2 views

Vulnerability-Disclosures

Mandiant 漏洞披露 本仓库详细列出了 Mandiant 披露的漏洞。这些漏洞通过内部研究、红队评估或在野利用被发现。可能提供也可能不提供概念验证(PoC)。 以下 许可证/许可 适用于本 Mandiant 仓库: 1. CC BY-SA 4.0 - 适用于与 CVE 相关的信息(不包括源代码,如 PoC) 2. MIT - 适用于所提供的 CVE 信息中包含的源代码 Mandiant 根据 Google 漏洞披露政策 协调和处理漏洞披露。 Mandiant CNA Mandiant 的 CVE 编号授权机构(CNA)范围:Mandiant 代码中的漏洞,以及由 Mandiant...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 2:56 p.m.5 views

Aggressor-Aggregator

Aggressor 聚合器 描述 这是一个辅助脚本,用于将 Aggressor Script 和 Beacon 对象文件(BOF)仓库整合为单个 CNA 文件,供 Cobalt Strike 使用。专为红队 CTF 环境中频繁搭建/销毁操作员客户端的自动化而设计。该脚本本质上是 @am0nsec 所著 Cobalt Strike Aggressor Scripts-Ception 博客文章的一个封装。已在 Windows 10、Linux 和 macOS 上测试通过。 使用方法 1. 克隆此仓库 2. 创建一个文本文件,写入你常用的 BOF/Aggressor 仓库 URL(或单个 .c...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/29 3:31 p.m.5 views

cobaltstrike-headless

Headless Strike Script Aggressor che trasforma il client aggressor headless in un client Cobalt Strike per lo più funzionante. Utilizzo connettiti al tuo teamserver tramite l'utility headless aggressor integrata ./agscript root@kitploit: ./agscript host port user password carica il file .cna...

5.9AI score
SaveExploits0
OSV
OSV
added 2026/08/21 8:36 p.m.7 views

MINI-H7RG-WV6V-MJFP

Bulletin has no description...

5.9CVSS5AI score0.00131EPSS
SaveExploits0
NVD
NVD
added 2026/08/18 9:18 p.m.6 views

CVE-2026-71164

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

9.8CVSS0.00473EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/18 9:18 p.m.7 views

CVE-2026-71111

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Installer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity Manager...

7.8CVSS0.0015EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/18 9:17 p.m.5 views

CVE-2026-70814

Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Call...

8.1CVSS0.00392EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/08/18 4:54 p.m.8 views

SUSE CVE-2026-72585

Red Hat CNA-LR concluded that this CVE is not valid...

6.5CVSS5.2AI score0.00235EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2026/08/17 12:00 a.m.11 views

The vulnerability of the ath12k_ce_free_pipes() function in the drivers/net/wireless/ath/ath12k/ce.c driver for Atheros/Qualcomm wireless communication adapters in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath12kcefreepipes function in the drivers/net/wireless/ath/ath12k/ce.c driver for Atheros/Qualcomm wireless communication adapters in the Linux operating system is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability...

6.6CVSS5.6AI score0.00122EPSS
SaveExploits0References12Affected Software4
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.43 views

GO-2024-2718 vulnerabilities

Vulnerabilities for packages: zot, goreleaser, slsa-verifier, tekton-chains-fips, falcoctl, spire-server-fips, skaffold, falcoctl-fips, ko, flux-source-controller, neuvector-sigstore-interface, ko-fips, gitsign, zarf, tkn, tkn-fips, tekton-chains, apko, vexctl, kubescape, policy-controller-fips,...

5.9AI score
SaveExploits0
OSV
OSV
added 2026/08/13 12:00 a.m.7 views

UBUNTU-CVE-2026-72745

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it's a duplicate of CVE-2026-73242...

5.2AI score0.0036EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/12 3:18 p.m.14 views

CVE-2026-73374

A stored cross-site scripting XSS vulnerability existed in Vulnerability-Lookup in the rendertagbadges Jinja filter used to display reference tags associated with vulnerability records. Values from containers.cna.references.tags were directly interpolated into HTML badge elements and the resultin...

6.1CVSS0.00359EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/12 2:05 p.m.11 views

EUVD-2026-57219

A stored cross-site scripting XSS vulnerability existed in Vulnerability-Lookup in the rendertagbadges Jinja filter used to display reference tags associated with vulnerability records. Values from containers.cna.references.tags were directly interpolated into HTML badge elements and the resultin...

6.1CVSS5.4AI score0.00359EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/12 2:05 p.m.32 views

CVE-2026-73374 Stored Cross-Site Scripting (XSS) via Unescaped CNA Reference Tags in vulnerability-lookup

A stored cross-site scripting XSS vulnerability existed in Vulnerability-Lookup in the rendertagbadges Jinja filter used to display reference tags associated with vulnerability records. Values from containers.cna.references.tags were directly interpolated into HTML badge elements and the resultin...

6.1CVSS0.00359EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/12 2:05 p.m.54 views

CVE-2026-73374

CVE-2026-73374 describes a stored XSS in Vulnerability-Lookup’s render_tag_badges Jinja filter. Values from containers.cna.references[].tags[] were interpolated into HTML badge markup and wrapped with MarkupSafe.Markup, bypassing Jinja escaping. An authenticated user with vulnerability:create/mod...

6.1CVSS5.4AI score0.00359EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/12 2:05 p.m.13 views

CVE-2026-73374 Stored Cross-Site Scripting (XSS) via Unescaped CNA Reference Tags in vulnerability-lookup

A stored cross-site scripting XSS vulnerability existed in Vulnerability-Lookup in the rendertagbadges Jinja filter used to display reference tags associated with vulnerability records. Values from containers.cna.references.tags were directly interpolated into HTML badge elements and the resultin...

6.1CVSS5.5AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/08/12 2:05 p.m.9 views

CVE-2026-73374

A stored cross-site scripting XSS vulnerability existed in Vulnerability-Lookup in the rendertagbadges Jinja filter used to display reference tags associated with vulnerability records. Values from containers.cna.references.tags were directly interpolated into HTML badge elements and the resultin...

6.1CVSS5.4AI score0.00359EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/12 12:00 a.m.7 views

PT-2026-71082

A stored cross-site scripting XSS vulnerability existed in Vulnerability-Lookup in the render tag badges Jinja filter used to display reference tags associated with vulnerability records. Values from containers.cna.references.tags were directly interpolated into HTML badge elements and the...

6.1CVSS5.4AI score0.00359EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/11 5:06 p.m.12 views

EUVD-2026-56682

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...

6.7CVSS5.1AI score0.00325EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/11 5:06 p.m.8 views

CVE-2026-62776 Windows DHCP Server Elevation of Privilege Vulnerability

...

7.8CVSS5.2AI score0.00271EPSS
SaveExploits0References1
Rows per page
Query Builder