Lucene search
+L

11302 matches found

Kitploit
Kitploit
added 2026/09/13 6:08 a.m.8 views

CVE-2025-4664

🔒 Vulnerabilidad CVE-2025-4664 La vulnerabilidad CVE-2025-4664 es un fallo de seguridad de alta gravedad identificado en el componente Loader de Google Chrome, presente en versiones anteriores a la 136.0.7103.113. Este problema permite a un atacante remoto filtrar datos de origen cruzado mediante...

4.3CVSS6.6AI score0.05625EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 3:49 a.m.4 views

CVE-2026-43700

CVE-2026-43700 WebKit WebGPU importExternalTexture cross-origin information leak. Safari Red/Green/Blue/White Fixed version = 26.5.2: PATCHED importExternalTexture blocked: SecurityError Principle GPUDevice.importExternalTexturesource: HTMLVideoElement imports a video into a GPU-samplable . Befor...

6.5CVSS6.7AI score0.00269EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 1:21 a.m.4 views

CVE-2015-5119

CVE-2015-5119 Un exploit tipo COOP...

10CVSS6.2AI score0.99344EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/12 6:51 p.m.5 views

theftfuzzer

┌┬┐┬ ┬┌─┐┌─┐┌┬┐┌─┐┬ ┬┌─┐┌─┐┌─┐┬─┐ │ ├─┤├┤ ├┤ │ ├┤ │ │┌─┘┌─┘├┤ ├┬┘ ┴ ┴ ┴└─┘└ ┴ └ └─┘└─┘└─┘└─┘┴└─ Introducción: TheftFuzzer es una herramienta que fuzzea implementaciones de Intercambio de Recursos de Origen Cruzado en busca de configuraciones incorrectas comunes. Uso: python theftfuzzer.py -d...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 5:35 p.m.7 views

CVE-2023-45857-Demo

Demostración para verificar el comportamiento de la vulnerabilidad CVE-2023-45857 de axios 1. Iniciar con dev container 2. Ejecutar npm run dev en el contenedor app 3. Acceder a http://app.localhost 4. Verificar que la Cookie XSRF-TOKEN esté configurada en las herramientas de desarrollador del...

6.5CVSS7AI score0.00556EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 2:48 p.m.50 views

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/12 9:07 a.m.6 views

cve-2020-16012

Este repositorio contiene PoCs para CVE-2020-16012, una vulnerabilidad de canal lateral en la implementación de CanvasRenderingContext2D.drawImage en Firefox y Chromium. Lee un informe de esta vulnerabilidad en el blog de Mozilla Attack & Defense. Dentro de benchmark hay código para medir el tiem...

4.3CVSS6.9AI score0.02571EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 8:00 p.m.6 views

dns-rebind-toolkit

DNS Rebind Toolkit 데모 | 보안 권고 | 포함된 페이로드 | FAQ 면책 조항: 이 소프트웨어는 교육 목적으로만 제공됩니다. 이 소프트웨어는 불법 활동에 사용되어서는 안 됩니다. 저자는 그 사용에 대해 책임을 지지 않습니다. 나쁜 짓 하지 마세요. DNS Rebind Toolkit은 로컬 영역 네트워크LAN의 취약한 호스트와 서비스를 대상으로 하는 DNS 리바인딩 익스플로잇을 개발하기 위한 프론트엔드 자바스크립트 프레임워크입니다. Google Home, Roku, Sonos WiFi 스피커, WiFi 라우터,...

6AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/11 11:18 a.m.6 views

CVE-2026-43735

CVE-2026-43735 Fuga de información entre orígenes en WebKit. Safari = 26.5.2: PATCHED NavigateEvent.sourceElement is null Cómo funciona Cuando la página padre usa para provocar una navegación por fragmento del iframe entre orígenes, el NavigateEvent.sourceElement que recibe el iframe es ese...

8.1CVSS5.9AI score0.00332EPSS
SaveExploits1
EUVD
EUVD
added 2026/09/10 9:18 p.m.7 views

EUVD-2026-73930

n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content...

5.9CVSS0.00277EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/10 7:08 p.m.5 views

CVE-2026-88061 career-ops: Local dashboard API accepted cross-origin and non-loopback requests, allowing unauthenticated command execution

career-ops is an open-source AI-assisted job search and application management tool. Prior to 0.8.0, the career-ops local web dashboard web/ exposed command-spawning and user-file-writing /api routes without validating request origin or restricting clients to loopback addresses. A malicious page ...

5.8CVSS5.9AI score
SaveExploits0References5
CVE
CVE
added 2026/09/10 7:08 p.m.14 views

CVE-2026-88061

career-ops (an open-source AI-assisted job search tool) prior to 0.8.0 exposed its local web dashboard (web/) /api routes for command-spawning and user-file-writing without validating request origin or restricting clients to loopback addresses. A malicious page in another browser tab could issue ...

5.8CVSS0.00243EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/10 2:17 p.m.7 views

CVE-2026-88887

Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches the registry credentials to the follow-up request without verifying that the pagination URL has...

9.2CVSS0.00304EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/10 2:17 p.m.7 views

CVE-2026-88882

Renovate is a dependency update automation tool. In versions before 44.11.2 and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm chart before 10.4.0, when listing new package versions from a NuGet registry Renovate follows pagination URLs supplied by...

9.2CVSS0.00304EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/10 1:05 p.m.35 views

CVE-2026-88887 Renovate before 44.11.2 Credential Exfiltration via Link Header

Renovate is a dependency update automation tool. When listing tags/digests for a container image, Renovate follows pagination links supplied by the remote registry in the HTTP Link header and attaches the registry credentials to the follow-up request without verifying that the pagination URL has...

9.2CVSS0.00304EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/10 1:05 p.m.33 views

CVE-2026-88882 Renovate before 44.11.2 Credential Exfiltration via Link Header

Renovate is a dependency update automation tool. In versions before 44.11.2 and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm chart before 10.4.0, when listing new package versions from a NuGet registry Renovate follows pagination URLs supplied by...

9.2CVSS0.00304EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/10 1:05 p.m.7 views

CVE-2026-88882 Renovate before 44.11.2 Credential Exfiltration via Link Header

Renovate is a dependency update automation tool. In versions before 44.11.2 and Mend Renovate CE/EE images and charts before 15.4.0, and mend-renovate-enterprise-edition helm chart before 10.4.0, when listing new package versions from a NuGet registry Renovate follows pagination URLs supplied by...

9.2CVSS5.8AI score
SaveExploits0References4
CVE
CVE
added 2026/09/10 1:05 p.m.11 views

CVE-2026-88882

Renovate is a dependency update automation tool. In versions before 44.11.2 (and Mend Renovate CE/EE images before 15.4.0, helm chart before 10.4.0), when fetching package versions from a NuGet registry , Renovate follows pagination URLs returned in the HTTP Link header without verifying the targ...

9.2CVSS0.00304EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/10 6:57 a.m.5 views

USN-8740-1 dotnet8, dotnet10 vulnerabilities

Weeraphat Srisutham discovered that the .NET watch BrowserRefreshServer did not properly validate cross-origin WebSocket connections. An attacker could possibly use this issue to expose sensitive information. CVE-2026-58649 Rajesh Chada discovered that the .NET watch AspireServerService improperl...

7CVSS0.01821EPSS
SaveExploits0References3
Ubuntu
Ubuntu
added 2026/09/10 6:57 a.m.5 views

USN-8740-1: .NET vulnerabilities

Weeraphat Srisutham discovered that the .NET watch BrowserRefreshServer did not properly validate cross-origin WebSocket connections. An attacker could possibly use this issue to expose sensitive information. CVE-2026-58649 Rajesh Chada discovered that the .NET watch AspireServerService improperl...

7CVSS0.01821EPSS
SaveExploits0
Rows per page
Query Builder