Lucene search
+L

227578 matches found

Nuclei
Nuclei
added 2026/08/24 5:53 a.m.221 views

Oracle WebLogic Server - Remote Command Execution

Oracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0 is susceptible to remote code execution. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised machine without entering necessary credentials. See...

10CVSS9.4AI score0.99997EPSS
SaveExploits43References5
Kitploit
Kitploit
added 2026/08/24 5:48 a.m.2 views

CVE-2023-37599

CVE-2023-37599 — issabel-pbx 4.0.0-6: Verzeichnisauflistung Broken Access Control Übersicht issabel-pbx Version 4.0.0-6 enthält eine Schwachstelle durch fehlerhafte Zugriffskontrolle Broken Access Control, die sich als Verzeichnisauflistung Directory Listing ohne Authentifizierung in der...

7.5CVSS7.4AI score0.03632EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/24 5:43 a.m.2 views

http2-bomb-detector

http2-bomb-detector Strumento di rilevamento non distruttivo della vulnerabilità HTTP/2 Bomb CVE-2026-49975 — per Nginx / Apache httpd Contesto della vulnerabilità CVE-2026-49975 è una vulnerabilità diffusa di denial of service remoto a livello di protocollo HTTP/2, scoperta dal ricercatore di...

7.5CVSS7.3AI score0.31042EPSS
SaveExploits9References2
RedHat Linux
RedHat Linux
added 2026/08/24 5:38 a.m.8 views

FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can exploit this vulnerability to inject arbitrary headers or requests into an HTTP proxy CONNECT request. This occurs because FreeRDP does not properly validate control characters in the server-controlled...

9.8CVSS8.6AI score0.00397EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/24 4:12 a.m.3 views

CVE-2026-36670

CVE-2026-36670 A time-based blind SQL injection exploit for the OpenSIPS Control Panel. This exploit abuses an authenticated sql injection vulnerability within the aliasmanagement.php module of opensips. The table GET parameter is improperly sanitized, allowing an attacker to inject a crafted...

8.8CVSS5.9AI score0.00361EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/24 3:48 a.m.4 views

CVE-2026-71204-PoC

CVE-2026-71204 — changedetection.io: Ausgelassenes Kontrollkästchen beim Speichern in /settings deaktiviert stillschweigend die Durchsetzung der API-Schlüssel-Anforderung Produkt: dgtlmoon/changedetection.io — v0.55.7 Dateien: changedetectionio/blueprint/settings/init.py, changedetectionio/forms....

6.2CVSS5.2AI score0.00254EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/24 3:45 a.m.2 views

cfgrip

cfgrip PE/ELF x86/x64 CFG-Extraktor. Nimmt eine Binärdatei entgegen, zerlegt sie, löst jeden Sprung und Aufruf auf GOT, Sprungtabellen, Registerverfolgung und exportiert den vollständigen Kontrollflussgraphen als strukturiertes JSON. warum Du musst genau wissen, wohin jeder Zweig führt. Nicht zum...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/24 3:44 a.m.1 views

CVE-2026-46331-pedit-cow

CVE-2026-46331-pedit-cow Ausarbeitung und Exploitationsschritte für die pedit-COW-Schwachstelle CVE-2026-46331. Übersicht Diese Herausforderung demonstriert pedit COW, einen Linux-Kernel-Fehler in der Paketbearbeitungsaktion actpedit des Traffic-Control-Subsystems. Die Schwachstelle ermöglicht es...

7.8CVSS5.7AI score0.00583EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/08/24 3:40 a.m.3 views

PoC-CVE-2026-46331

Questo repository contiene un exploit proof-of-concept PoC per CVE-2026-46331, una vulnerabilità di escalation locale dei privilegi nel kernel Linux nel sottosistema di controllo del traffico. Riassunto della vulnerabilità Il difetto risiede nell'azione di modifica dei pacchetti actpedit, dove il...

7.8CVSS5.7AI score0.00583EPSS
SaveExploits13
CVE
CVE
added 2026/08/24 3:22 a.m.17 views

CVE-2026-19200

Velociraptor 's verify() VQL function suffers from an implementation fault that causes it to use the global artifact repository instead of a scoped one. This allows a user with only the NOTEBOOK_EDIT permission (e.g., an analyst role) to overwrite existing live built-in artifacts without the perm...

8.9CVSS5.3AI score0.00228EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/24 2:56 a.m.2 views

thm-cybersec-portfolio

TryHackMe Notizen — Cybersicherheits-Portfolio Persönliche Notizen und Zusammenfassungen abgeschlossener TryHackMe-Räume. Erstellt als Studienreferenz und Portfolio für IT-Sicherheitsrollen. Abgeschlossene Räume | Raum| Thema ---|---|--- 01| Linux Privilege Escalation|...

7.8CVSS7.4AI score0.19426EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/08/24 2:55 a.m.2 views

awesome-industrial-control-system-security

awesome-industrial-control-system-security Una lista curata di risorse relative alla sicurezza dei Sistemi di Controllo Industriale ICS. Sentiti libero di contribuire. Strumenti...

5.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/24 2:31 a.m.3 views

ICS-Security-Tools

Strumenti, Suggerimenti e Trucchi del Mestiere per la Sicurezza ICS Sviluppato come risorsa comunitaria Questo progetto intende riunire strumenti, suggerimenti e trucchi del mestiere per lavorare sulla cybersicurezza nell'ambiente ICS. Il repository di codice ospiterà script, strumenti,...

5.3AI score
SaveExploits0References12
Kitploit
Kitploit
added 2026/08/24 2:03 a.m.2 views

Vision-MSI-Thermal-Control

Vision MSI Controllo Termico Gestione termica Linux per MSI Modern 15H AI C1MG-096IT - Controllo EC con reverse engineering, profili ventola e soglia di carica batteria 🎯 Scopo del Progetto Questa applicazione è nata dalla necessità degli utenti di laptop MSI su Linux. Il percorso è iniziato quan...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/24 1:32 a.m.2 views

hinge-command-control-c2

हिंज को कमांड एंड कंट्रोल सर्वर के रूप में उपयोग करना कृपया देखें https://mattwie.se/hinge-command-control-c2...

5.3AI score
SaveExploits0
NVD
NVD
added 2026/08/24 1:16 a.m.10 views

CVE-2026-78204

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

5.4CVSS0.00223EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/24 1:11 a.m.1 views

lua-resty-limit-traffic

Nome lua-resty-limit-traffic - Libreria Lua per limitare e controllare il traffico in OpenResty/ngxlua Indice Nome Stato Sinossi Descrizione Installazione Comunità Mailing list in inglese Mailing list in cinese Bug e patch Autore Copyright e licenza Vedi anche Stato Questa libreria è già...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/24 1:06 a.m.2 views

minicps

MiniCPS MiniCPS è un framework per la simulazione in tempo reale di sistemi cyber-fisici. Include supporto per la simulazione di processi fisici e dispositivi di controllo, e per l'emulazione di rete. È costruito sopra mininet. MiniCPS è sviluppato dal gruppo SCy-Phy della SUTD Singapore Universi...

5.4AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/24 12:53 a.m.1 views

pwnage24mtk

pwnage24mtk Exploit de certificado para dispositivos MTK. Há uma falha lógica no processo de verificação de certificados da MTK. Semelhante à CVE-2023-20696. Pode ser corrigido em junho. Aviso Este projeto é usado apenas para pesquisa. Certifique-se de obter autorização antes de usá-lo. Não é...

6.7CVSS6.5AI score0.00104EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/24 12:34 a.m.2 views

oathkeeper

Chat · Discussioni · Newsletter · Documentazione · Prova Ory Network · Lavora con noi Ory Oathkeeper è un Identity & Access Proxy IAP e un'API per le decisioni di controllo degli accessi che autorizza le richieste HTTP sulla base di insiemi di regole di accesso. Segue il modello BeyondCorp...

5.5AI score
SaveExploits0References9
Rows per page
Query Builder