Lucene search
+L

340 matches found

Kitploit
Kitploit
added 2026/09/12 1:39 a.m.7 views

IIS-Backdoor

IIS-Backdoor In this article I will explain how I designed a rootkit for Microsoft Internet Information Services IIS.The question is: why a backdoor in a web server? First obvious but useless answer: because we can. Ok, let us give a more clever answer. The purpose of backdooring a web sever is...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 10:49 p.m.9 views

xz-utils-vuln-checker

root@kitploit: / / / / | |/// / / / / / / / / / / / / / / //// // / / / / / / / //|| // ,/ / // // // Hare Krishna Rai 0xblurr3d / / / / / / | | / / / / / / / / / \ / / / \ / \ / / / /// / \ / / | |/ / / // / / / / / / //// / / / / // // / / , / / / / |/ ,/ // // // / // // / / //|| / //...

10CVSS8.3AI score0.85974EPSS
SaveExploits41
Kitploit
Kitploit
added 2026/09/10 7:44 p.m.5 views

CVE-2024-3094

CVE-2024-3094 Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specifi...

10CVSS8.4AI score0.85974EPSS
SaveExploits41References1
Kitploit
Kitploit
added 2026/09/10 12:54 p.m.4 views

-CVE-2024-3094-Vulnerability-Checker-Fixer-Public

表达支持 如果您觉得这个脚本有用,并且它帮助您保护了系统免受 CVE-2024-3094 的影响,请考虑给它点一个星 ⭐ 。给这个仓库点星不仅是对我们的支持,还能帮助更多人发现并受益于我们为提高网络安全所做的集体努力。 要为仓库点星,只需点击本页顶部的“Star”按钮。非常感谢您的支持! 感谢您帮助让数字世界变得更加安全! CVE-2024-3094 是什么 CVE-2024-3094 是一个在 xz 工具的上游 tarball 中发现的关键安全漏洞,从 5.6.0 版本开始存在。该漏洞涉及恶意代码,通过复杂的混淆手段操纵 liblzma 的构建过程。 XZ Utils “几乎存在于每个...

10CVSS8.3AI score0.85974EPSS
SaveExploits41References1
Kitploit
Kitploit
added 2026/09/08 5:32 a.m.3 views

Sicurezza-Informatica-Presentazione

What does this repository contain? This repository contains a brief research and presentation of the security flaw regarding XZ Utils for the UNIPR cybersecurity course CVE-2024-3094 Description of the flaw by Ubuntu: Malicious code was discovered in the upstream tarballs of xz, starting with...

10CVSS8.4AI score0.85974EPSS
SaveExploits41
Kitploit
Kitploit
added 2026/09/08 3:04 a.m.7 views

CVE-2024-3094

CVE-2024-3094 Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specifi...

10CVSS8.4AI score0.85974EPSS
SaveExploits41References1
RedhatCVE
RedhatCVE
added 2026/09/04 9:05 a.m.7 views

CVE-2026-85525

A flaw was found in Snowflake drivers, including Python, Go, JDBC, and Node.js. This flaw involves improper Online Certificate Status Protocol OCSP response validation, which allows a revoked Transport Layer Security TLS certificate to be accepted as valid. A man-in-the-middle attacker, possessin...

7.4CVSS5.3AI score0.00105EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/08/24 3:37 p.m.10 views

EUVD-2025-210763

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

7.5CVSS5.3AI score0.00232EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/19 10:17 p.m.4 views

CVE-2026-76403

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...

7.4CVSS5.5AI score
SaveExploits0References1
NVD
NVD
added 2026/08/10 9:17 a.m.16 views

CVE-2026-21079

Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data...

7CVSS0.00069EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/10 8:08 a.m.43 views

CVE-2026-66410

Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered...

4.8CVSS0.00103EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/10 8:08 a.m.71 views

CVE-2026-66410

CVE-2026-66410 affects the Android and iOS ECOVACS PRO App, with improper server certificate validation in the smartphone app. The vulnerability can allow a man-in-the-middle to retrieve and/or alter communications between the app and servers. Connected documents confirm the issue and reference r...

4.8CVSS7.3AI score0.00103EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/10 7:43 a.m.19 views

EUVD-2026-55104

Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data...

7CVSS5.2AI score0.00069EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/10 7:43 a.m.46 views

CVE-2026-21079

Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data...

7CVSS0.00069EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/10 7:43 a.m.67 views

CVE-2026-21079

CVE-2026-21079 concerns Samsung Smart Switch prior to version 3.7.72.6, where missing encryption of sensitive data allows adjacent attackers to intercept transmitted data. The affected component is the Smart Switch data transmission flow; the root cause is lack of encryption for sensitive data in...

7CVSS5.2AI score0.00069EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/08/03 5:48 p.m.12 views

CVE-2025-9291 Improper Certificate Validation in TP-Link Omada Cloud Communications

A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity verification does not adequately validate that a presented certificate corresponds to the expected cloud controller hostname, which may allow certificate validati...

7.7CVSS5.5AI score0.00131EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/21 2:48 p.m.12 views

EUVD-2026-46279

HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data...

3.1CVSS5.3AI score0.00122EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/16 5:31 a.m.68 views

CVE-2026-15925 Improper TLS Hostname Verification in Snowflake Connector for Python

Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. An attacker with on-path network access could exploit this b...

9.2CVSS0.00288EPSS
SaveExploits0References2
CERT
CERT
added 2026/07/09 12:00 a.m.15 views

PayRange Android app version 7.0.7 contains multiple vulnerabilities

Overview PayRange is a mobile payment app that allows users to pay for vending machines, laundromats, and other unattended machines using a smartphone with Bluetooth. Two vulnerabilities were discovered in version 7.0.7 of the PayRange app that is available in the Google Play store. Description A...

9.6CVSS6AI score0.00495EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/07/06 3:07 p.m.22 views

nodejs: Node.js: Certification validation bypass in TLS host verification

A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security TLS host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integri...

4.3CVSS6.2AI score0.00258EPSS
SaveExploits0References5
Rows per page
Query Builder