Lucene search
+L

516949 matches found

Kitploit
Kitploit
added 2026/09/02 2:35 p.m.4 views

CVE-2026-0596-Reproduction

Below is a structured, markdown-formatted vulnerability research report tailored for a GitHub repository layout such as a README.md or a security-labs write-up. It outlines the context, architecture, reproduction steps, and remediation strategies based on your lab findings. CVE-2026-0596: Arbitra...

9.6CVSS7.2AI score0.01328EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2026/09/02 2:33 p.m.6 views

CVE-2026-76595

A flaw was found in advisor-backend. Multiple code paths within the application deserialize YAML YAML Ain't Markup Language with an unsafe full Loader, which can instantiate arbitrary Python objects via YAML tags. An unauthenticated remote attacker can exploit this by submitting specially crafted...

6.4AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/09/02 2:33 p.m.7 views

CVE-2026-76594

A flaw was found in advisor-backend. A network-adjacent unauthenticated attacker could exploit a vulnerability in the /private/importcontent/ endpoint, which lacks proper authentication and permission checks. This allows the attacker to overwrite the global Advisor rule, resolution, and playbook...

8.1CVSS6.2AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/02 2:27 p.m.3 views

CVE-2026-20131

🚨 CVE-2026-20131 | ثغرة RCE حرجة في Cisco FMC تنفيذ تعليمات برمجية عن بُعد بدون مصادقة في Cisco Secure Firewall Management Center 📌 نظرة عامة ثغرة حرجة قبل المصادقة في إلغاء تسلسل Java تسمح للمهاجمين عن بُعد بتحقيق تنفيذ تعليمات برمجية بصلاحيات الجذر Root على أجهزة Cisco FMC. المعلومات الأساسية ✨...

10CVSS7.4AI score0.31231EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/02 2:27 p.m.8 views

CVE-2026-0770

CVE-2026-0770: Langflow execglobals Unauthenticated Remote Code Execution PoC CVE-2026-0770 an unauthenticated Remote Code Execution RCE vulnerability affecting Langflow. The flaw stems from improper input validation within the handling of the execglobals parameter provided to the /validate...

9.8CVSS7.2AI score0.63417EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/02 2:27 p.m.5 views

Rasa-cve-exp

Rasa-cve-exp CVE-2021-42556 server-1.py Just run it directly root@kitploit: python server-1.py Arbitrary File Upload root@kitploit: PUT /model "modelserver":"url":"http://192.168.244.128:5000/stage1","waittimebetweenpulls":0 Effect as follows: CVE-2021-41127 server-1.py Default model name:...

7.3CVSS6.7AI score0.0096EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/09/02 2:26 p.m.7 views

kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

A flaw was found in the Linux kernel's networking scheduler. A race condition, which is a problem that occurs when multiple operations try to access the same resource at the same time, exists when network filter operations are run concurrently. This can lead to a Use-After-Free UAF vulnerability,...

7.8CVSS6.2AI score0.00241EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/02 2:24 p.m.4 views

-Limesurvey-RCE-CVE-2021-44967

🚀 LimeSurvey RCE CVE-2021-44967 - Ejecución Remota de Código Autenticada Este repositorio contiene un exploit funcional para CVE-2021-44967 , una vulnerabilidad de Ejecución Remota de Código autenticada en LimeSurvey. 🎯 Compatibilidad Probado y confirmado funcionando en: LimeSurvey 5.2.x LimeSurv...

9CVSS7.2AI score0.13502EPSS
SaveExploits3
OSV
OSV
added 2026/09/02 2:20 p.m.5 views

GHSA-QXC2-J82W-R537 Faker: helpers.fake exploitable into arbritary code execution

Summary faker.helpers.fake can be tricked into arbritary code execution. Details fakeEval.resolveProperty resolves properties on functions itself instead of resolving the nested function first. This can be addressed by recursively calling resolveProperty instead of accessing the property after on...

7.8CVSS5.9AI score0.00154EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/02 2:20 p.m.11 views

EUVD-2026-56923

Faker: helpers.fake exploitable into arbritary code execution...

7.8CVSS6.2AI score0.00154EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/09/02 2:20 p.m.10 views

Faker: helpers.fake exploitable into arbritary code execution

Summary faker.helpers.fake can be tricked into arbritary code execution. Details fakeEval.resolveProperty resolves properties on functions itself instead of resolving the nested function first. This can be addressed by recursively calling resolveProperty instead of accessing the property after on...

7.8CVSS5.9AI score0.00154EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/09/02 2:16 p.m.30 views

CVE-2026-77009 WatchMan-Site7 3.1.1 - 4.2.0 - Subscriber+ RCE via Debug Console

The WatchMan-Site7 WordPress plugin through 4.2.0 does not restrict access to its debugging console, which executes user-supplied PHP code, allowing any authenticated user, such as a subscriber, to run arbitrary code on the server...

9.9CVSS0.00288EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/02 2:16 p.m.5 views

CVE-2026-77009 WatchMan-Site7 3.1.1 - 4.2.0 - Subscriber+ RCE via Debug Console

The WatchMan-Site7 WordPress plugin through 4.2.0 does not restrict access to its debugging console, which executes user-supplied PHP code, allowing any authenticated user, such as a subscriber, to run arbitrary code on the server...

9.9CVSS6.1AI score0.00288EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 2:16 p.m.14 views

CVE-2026-77009

CVE-2026-77009 affects the WatchMan-Site7 WordPress plugin through version 4.2.0 . The plugin fails to restrict access to its debugging console , which executes user-supplied PHP code . Any authenticated user with a low privilege level (e.g., a subscriber ) can leverage this to achieve remote cod...

9.9CVSS6.1AI score0.00288EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/02 2:16 p.m.7 views

EUVD-2026-70039

The WatchMan-Site7 WordPress plugin through 4.2.0 does not restrict access to its debugging console, which executes user-supplied PHP code, allowing any authenticated user, such as a subscriber, to run arbitrary code on the server...

9.9CVSS6.1AI score0.00288EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/02 2:16 p.m.6 views

CVE-2026-10821 Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCE

The Yoast SEO Premium WordPress plugin before 27.6.1 does not sanitize control characters from redirect origins before writing them to the site's Apache configuration file when the file-based redirect mode is enabled, and the redirect-creation endpoint is reachable by users with only Author-level...

6.6CVSS6AI score0.00512EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/02 2:16 p.m.9 views

EUVD-2026-70033

The Yoast SEO Premium WordPress plugin before 27.6.1 does not sanitize control characters from redirect origins before writing them to the site's Apache configuration file when the file-based redirect mode is enabled, and the redirect-creation endpoint is reachable by users with only Author-level...

6.6CVSS6AI score0.00512EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/02 2:16 p.m.7 views

CVE-2026-10821

Yoast SEO Premium WordPress plugin before 27.6.1 fails to sanitize control characters from redirect origins before writing them to the site's Apache .htaccess file when file-based redirect mode is enabled. Because the redirect-creation endpoint is accessible to users with Author-level access, an ...

6.6CVSS6AI score0.00512EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/02 2:16 p.m.30 views

CVE-2026-10821 Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCE

The Yoast SEO Premium WordPress plugin before 27.6.1 does not sanitize control characters from redirect origins before writing them to the site's Apache configuration file when the file-based redirect mode is enabled, and the redirect-creation endpoint is reachable by users with only Author-level...

6.6CVSS0.00512EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/09/02 2:15 p.m.6 views

kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

A flaw was found in the Linux kernel's networking scheduler. A race condition, which is a problem that occurs when multiple operations try to access the same resource at the same time, exists when network filter operations are run concurrently. This can lead to a Use-After-Free UAF vulnerability,...

7.8CVSS6.2AI score0.00241EPSS
SaveExploits1References5
Rows per page
Query Builder