Lucene search
+L

1132416 matches found

Nuclei
Nuclei
added 2026/08/30 5:46 a.m.113 views

D-Link - Unauthenticated Remote Code Execution

OS command injection vulnerability in soap.cgi soapcgimain in cgibin in D-Link DIR-880L DIR-880LREVAFIRMWAREPATCH1.08B04 and previous versions, DIR-868L DIR868LA1FW112b04 and previous versions, DIR-65L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and...

10CVSS7.7AI score0.96682EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.358 views

ElasticSearch - Remote Code Execution

ElasticSearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script to the Groovy scripting engine. id: CVE-2015-1427 info: name: ElasticSearch - Remote Code Execution author: pikpikcu...

9.8CVSS7.6AI score0.99906EPSS
SaveExploits19References5
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.31 views

Microsoft SharePoint Server - Authentication Bypass (ToolShell)

Microsoft Office SharePoint Server contains an improper authentication vulnerability that allows unauthorized attackers to perform spoofing over a network. By crafting a POST request to /layouts/15/ToolPane.aspx with a forged Referer header /layouts/SignOut.aspx, attackers can bypass authenticati...

9.8CVSS7.4AI score0.99998EPSS
SaveExploits42References5
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.111 views

ForgeRock OpenAM <7.0 - Remote Code Execution

ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/ request to the server. The vulnerabilit...

10CVSS7.8AI score0.99999EPSS
SaveExploits8References5
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.222 views

PaperCut - Unauthenticated Remote Code Execution

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. ...

9.8CVSS7.7AI score0.99999EPSS
SaveExploits24References5
Kitploit
Kitploit
added 2026/08/30 5:37 a.m.4 views

yolo-cage

yolo-cage: autonomous coding agents that do no harm You're a responsible engineer. You'd never just let an AI run roughshod through your most sensitive systems and codebases. That's why you'd never just shut off the safeguards for a tool like Claude Code. It asks permission for every dangerous...

5.9AI score
SaveExploits0References13
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/30 5:03 a.m.17 views

Malicious code in opiumbest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d3c33077e46f79b1a53edad20c8cb8c7fc67c5cbedd8406257cb5ce9581097 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/30 5:03 a.m.10 views

Malicious code in quesoeducation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c428c1658948c78d2e7323de16bf1f37dced0bcd770cd73fd2b3c0855f6aa7b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References3
OSV
OSV
added 2026/08/30 5:03 a.m.12 views

MAL-2026-15576 Malicious code in quesoeducation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c428c1658948c78d2e7323de16bf1f37dced0bcd770cd73fd2b3c0855f6aa7b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References3
OSV
OSV
added 2026/08/30 5:03 a.m.9 views

MAL-2026-15575 Malicious code in opiumbest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d3c33077e46f79b1a53edad20c8cb8c7fc67c5cbedd8406257cb5ce9581097 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/30 4:42 a.m.4 views

gf

gf Un envoltorio alrededor de grep para evitar escribir patrones comunes. ¿Qué? ¿Por qué? Uso grep un montón. Cuando audito bases de código, reviso la salida de meg, o simplemente trato con grandes cantidades de datos. A menudo termino usando patrones bastante complejos como este: root@kitploit: ...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/30 4:41 a.m.3 views

cfn_nag

Antecedentes La herramienta cfn-nag busca patrones en las plantillas de CloudFormation que puedan indicar infraestructura insegura. En términos generales, buscará: Reglas de IAM demasiado permisivas comodines Reglas de grupos de seguridad demasiado permisivas comodines Registros de acceso que no...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/30 3:52 a.m.9 views

red-clippy

Red Clippy Tus pruebas de agente. Red Clippy lleva el registro. Gestión de pentesting de código abierto diseñada para ser operada por un agente de IA. Conéctalo a Claude Code mediante MCP y ejecutará el compromiso junto a ti: alcance y activos, observaciones de reconocimiento, cobertura de...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/30 3:22 a.m.5 views

langflow-exploit

CVE-2025-3248 - Langflow कोड सत्यापन एंडपॉइंट RCE Langflow के कोड सत्यापन एंडपॉइंट में रिमोट कोड निष्पादन भेद्यता को प्रदर्शित करने वाला एक प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट। यह भेद्यता Langflow के 1.3.0 से पहले के संस्करणों को प्रभावित करती है, जिससे बिना प्रमाणीकरण के हमलावर क्राफ्टेड HTTP अनुरोधों...

9.8CVSS7.4AI score0.99996EPSS
SaveExploits36
Kitploit
Kitploit
added 2026/08/30 3:12 a.m.8 views

EXPLOIT-CVE-2026-9198

CVE-2026-9198 — IBM Langflow OSS RCE Não Autenticado Prova de conceito de exploit e um laboratório Docker autocontido para CVE-2026-9198 , uma vulnerabilidade de execução remota de código não autenticada em IBM Langflow OSS. O exploit encadeia dois endpoints — autologin que entrega um token...

9.8CVSS7.4AI score0.34734EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/08/30 3:11 a.m.7 views

CVE-2026-1357

CVE-2026-1357 — WPvivid Backup & Migration ≤ 0.9.123 Upload Arbitrário de Arquivo Não Autenticado → RCE PoC para CVE-2026-1357 CVSS 9.8 Crítico, CWE-434: um upload arbitrário de arquivo não autenticado no plugin WPvivid Backup & Migration para WordPress que leva à execução remota de código...

9.8CVSS7.4AI score0.32714EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/08/30 3:11 a.m.8 views

POC-CVE-2026-18729

Beschreibung Proof-of-Concept-Exploit-Code für CVE-2026-18729 Verwendung python3 poc.py -url -uname -pword -c Ohne Bash-Befehl Nachweis der Code-Ausführung über Divide-By-Zero-Fehler Mit Bash-Befehl HINWEIS: Die Bash-Ausgabe wird nicht zurückgegeben, da der Endpunkt nur die Komponentenvorlage und...

8.8CVSS5.9AI score0.00464EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/30 3:08 a.m.6 views

semgrep-rules

semgrep-rules di elttam Benvenuti nel repository pubblico di regole semgrep...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/30 2:11 a.m.4 views

poc-CVE-2026-64638-

XSS2Shell — CVE-2026-64638 PoC Cadeia de exploração WordPress Pre-Auth XSS → RCE, baseada em pesquisa de pwn.ai publicada em ionsec.io. ⚠️ AVISO LEGAL : Apenas para FINS EDUCACIONAIS e TESTES AUTORIZADOS. Use somente contra sistemas que você possui ou para os quais tenha permissão explícita por...

8.9CVSS7.4AI score0.31204EPSS
SaveExploits33References1
OSV
OSV
added 2026/08/30 2:04 a.m.4 views

MAL-2026-15590 Malicious code in com.db.autobahn.notification-center-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae376efc666d8e07f356f9f3cbafe2dfc99e221a150ff96548db4a2b91bb452 package.json declares preinstall and postinstall lifecycle scripts that automatically run curl on npm install to send installer identity whoami,...

5.9AI score
SaveExploits0References2
Rows per page
Query Builder