Lucene search
+L

352436 matches found

Kitploit
Kitploit
•added 2026/09/28 11:54 a.m.•15 views

Spring_cve-2022-22980

Springcve-2022-22980 spring data mongodb ejecución remota de código | cve-2022-22980 PoC Descripción Una aplicación Spring Data MongoDB es vulnerable a inyección SpEL cuando se utilizan métodos de consulta anotados con @Query o @Aggregation con expresiones SpEL que contienen marcadores de posició...

9.8CVSS8AI score0.17836EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/28 11:47 a.m.•15 views

CVE-2025-22785

CVE-2025-22785 Course Booking System = 6.0.5 - Inyección SQL No Autenticada Descripción El plugin Course Booking System para WordPress es vulnerable a Inyección SQL en versiones hasta la 6.0.5 inclusive, debido a un escape insuficiente en el parámetro proporcionado por el usuario y a la falta de...

9.3CVSS8.5AI score0.02929EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/28 11:35 a.m.•5 views

CyberCodex

🌐 CyberCodex v3.2 - 22-Source Full-Spectrum Edition -00FF41?style=for-the-badge&logo=python&logoColor=white CyberCodex is an autonomous, self-updating, 22-Source Zero-Cost OSINT, Data Breach/Leak & Threat Intelligence Engine, Unbiased Cyber Warfare Encyclopedia Incident Codex , MITRE ATT &CK...

10CVSS8.5AI score0.85974EPSS
SaveExploits42References1
OSV
OSV
•added 2026/09/28 11:34 a.m.•38 views

ROOT-APP-NPM-CVE-2026-12143 CVE-2026-12143 in form-data - Patched by Root

Root has patched CVE-2026-12143 in the form-data package for Root:npm. Multiple fixed versions available...

8.7CVSS7.3AI score0.00669EPSS
SaveExploits0
OSV
OSV
•added 2026/09/28 11:34 a.m.•18 views

ROOT-APP-NPM-CVE-2025-7783 CVE-2025-7783 in form-data - Patched by Root

Root has patched CVE-2025-7783 in the form-data package for Root:npm. Multiple fixed versions available...

5.4CVSS6.2AI score0.01769EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/28 11:28 a.m.•10 views

steghide

This repository is read-only. A GitHub org,StegHigh has been set up to maintain steghide. Please submit all PRs, discussions, and issues there. Additionally,StegHigh/steghide is looking for maintainters. Please contribute! Introduction : Steghide is a steganography program that is able to hide da...

5.8AI score
SaveExploits0References3
NVD
NVD
•added 2026/09/28 11:16 a.m.•11 views

CVE-2026-101040

A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. T...

7.1CVSS0.0042EPSS
SaveExploits0References9
EUVD
EUVD
•added 2026/09/28 11:00 a.m.•6 views

EUVD-2026-88216

A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. T...

7.1CVSS6AI score0.0042EPSS
SaveExploits0References9
CVE
CVE
•added 2026/09/28 11:00 a.m.•11 views

CVE-2026-101040

A security flaw exists in the HTTP Multipart Form-Data Parser of Ricoh SP 330DN , SP 221 , SP C252SF , and Aficio SP 3500SF (up to 20260813). A remote attacker can perform a manipulation resulting in a denial of service . While the exact component part is unknown, the exploit has been released to...

7.1CVSS6.1AI score0.0042EPSS
SaveExploits0References9
Kitploit
Kitploit
•added 2026/09/28 10:58 a.m.•12 views

ESFang

ESFang This is a tool devised for modular consumption of EndpointSecurity Framework ESF events from the MacOs environment. This is my attempt to overcome a number of issues encountered with existing tools including things such as silent data dropping, strict event type consumption, lack of suppor...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 10:57 a.m.•15 views

macOSTriageCollectionScript

macOSTriageCollectionScript A triage data collection script for macOS that utilises sysdiagnose with a few additions to gather useful triage data for investigations. What does the script collect? Data collected includes: sysdiagnose , a utility on a vareity of macOS/iOS operating systems that...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 10:57 a.m.•18 views

detectree

Detectree Detectree is a data visualisation tool for blue teams. It provides a graphical representation of detection data, which allows an analyst generate almost instant opinions about the nature of the underlying activity and to understand complex relationships between the data points...

6AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/09/28 10:49 a.m.•8 views

EUVD-2026-88212

A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration versions prior to 2026-06-28 on Google Cloud Platform allows an authenticated user with standard permissions to run arbitrary code on the shared production servers using a specially...

9.4CVSS6AI score0.00355EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/28 10:49 a.m.•20 views

CVE-2026-81867

A Deserialization of Untrusted Data vulnerability exists in the JavaScript Task of Google Cloud Application Integration (versions prior to 2026-06-28). An authenticated user with standard permissions can execute arbitrary code on shared production servers by using a specially crafted script that ...

9.4CVSS6AI score0.00355EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/28 10:42 a.m.•51 views

kodex

Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/28 10:25 a.m.•9 views

phonepe-sensitive-data-exposure-cve-2025-5154

-Insecure-Local-Storage-of-Sensitive-User-Data-in-PhonePe-Android-App-Unpatched- Discovered byhc4 Date Reported: April 2025 CVE Status: CVE Requested Pending CVE Request 1862785 for CVE ID Reques 📌 Overview A critical local vulnerability was discovered in the PhonePe Android app tested on...

4.6CVSS5.7AI score0.002EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/28 10:24 a.m.•7 views

CVE-2023-22515-Scan.

CVE-2023-22515-Scan About This is simple scanner for CVE-2023-22515, a critical vulnerability in Atlassian Confluence Data Center and Server that is actively being exploited in the wild by threat actors in order "to create unauthorized Confluence administrator accounts and access Confluence...

10CVSS8.5AI score0.99156EPSS
SaveExploits40
Kitploit
Kitploit
•added 2026/09/28 10:08 a.m.•11 views

Pre-render-data-spoofing-on-React-Router-framework-mode-CVE-2025-43865

¡Bienvenido a React Router! Una plantilla moderna y lista para producción para construir aplicaciones React completas usando React Router. Características 🚀 Renderizado del lado del servidor ⚡️ Reemplazo de Módulos en Caliente HMR 📦 Empaquetado y optimización de recursos 🔄 Carga y mutaciones de...

8.2CVSS7AI score0.00801EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/09/28 9:48 a.m.•5 views

CVE-2026-90176

A flaw was found in ksmbd, a server message block SMB protocol implementation within the Linux kernel. A logic error in the checklockrange function, which is responsible for enforcing file locks, causes it to bypass mandatory byte-range lock checks for single-byte operations. This allows an...

8.1CVSS5.8AI score0.00522EPSS
SaveExploits0References4
Malwarebytes
Malwarebytes
•added 2026/09/28 9:28 a.m.•6 views

FBI agents’ blood tests and doctors’ notes surface after breach

BBC News reports it has seen samples of stolen FBI agents’ medical examinations. The “fitness-for-work” reports identify FBI agents by name and address, and reveal even more personal details. They include blood and urine test results and doctors’ notes mentioning high cholesterol, blood in the...

5.7AI score
SaveExploits0
Rows per page
Query Builder