Lucene search
+L

11987 matches found

Kitploit
Kitploit
โ€ขadded 2026/09/15 1:19 a.m.โ€ข12 views

onedrive_user_enum

onedriveuserenum v2.10 ๆœ‰ๅŠนใชOneDriveใƒฆใƒผใ‚ถใƒผใ‚’ๅˆ—ๆŒ™ใ™ใ‚‹ ๅˆ—ๆŒ™ใƒ†ใ‚ฏใƒ‹ใƒƒใ‚ฏใจOneDrive enumใฎ่ฉณ็ดฐใซใคใ„ใฆใฏใ€ใ“ใกใ‚‰ใฎใƒ–ใƒญใ‚ฐใ‚’ๅ‚็…งใ—ใฆใใ ใ•ใ„: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ ใƒ‡ใƒผใ‚ฟใƒ™ใƒผใ‚นใ‚’ไฝฟ็”จใ—ใชใ„ๆ—งใƒใƒผใ‚ธใƒงใƒณใฎOneDrive Enumใ‚’ใŠๆŽขใ—ใชใ‚‰ใ€ใ“ใกใ‚‰ใซใ‚ใ‚Šใพใ™: https://github.com/nyxgeek/simplescanners 2.10ใฎๆ–ฐๆฉŸ่ƒฝ: ใƒชใƒขใƒผใƒˆMySQL DBใƒญใ‚ฐใ‚ชใƒ—ใ‚ทใƒงใƒณ -- ใƒชใƒขใƒผใƒˆใƒ‡ใƒผใ‚ฟใƒ™ใƒผใ‚นใซใƒญใ‚ฐใ‚’่จ˜้Œฒ...

6AI score
SaveExploits0References4
Kitploit
Kitploit
โ€ขadded 2026/09/15 1:19 a.m.โ€ข52 views

onedrive_user_enum

onedriveuserenum v2.10 enumerate valid onedrive users For a full rundown of the enumeration technique and OneDrive enum, check out the blog here: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ If you are looking for the old, non-database vesion of OneDrive Enum, you can find it here:...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
โ€ขadded 2026/09/14 9:52 p.m.โ€ข8 views

ChaosKobra

ChaosKobra ๐Ÿ Python3ใงๆ›ธใ‹ใ‚ŒใŸใ€ไธ€่ˆฌ็š„ใชใƒฆใƒผใ‚ถใƒผๅ‘ใ‘ใฎใ‚‚ใ†ไธ€ใคใฎใ‚ตใƒ–ใƒ‰ใƒกใ‚คใƒณๅˆ—ๆŒ™ใƒ„ใƒผใƒซใงใ™ใ€‚ ๐Ÿ”ง ๆŠ€่ก“ใจใƒ„ใƒผใƒซ ๐Ÿ“š ๅฟ…่ฆๆกไปถ Python 3.9+ pip3 ใ‚คใƒณใ‚นใƒˆใƒผใƒซ ใƒ‘ใƒƒใ‚ฑใƒผใ‚ธใƒžใƒใƒผใ‚ธใƒฃใƒผใฎpipใ‚’ไฝฟ็”จใ—ใฆใ€ๅฟ…่ฆใชใƒ‘ใƒƒใ‚ฑใƒผใ‚ธใ‚’ใ‚คใƒณใ‚นใƒˆใƒผใƒซใ—ใพใ™ใ€‚ ใ‚คใƒณใ‚นใƒˆใƒผใƒซใ•ใ‚Œใฆใ„ใชใ„ๅ ดๅˆใฏใ€ไปฅไธ‹ใฎใ‚ณใƒžใƒณใƒ‰ใงใ‚คใƒณใ‚นใƒˆใƒผใƒซใ—ใฆใใ ใ•ใ„ใ€‚ root@kitploit: sudo apt-get install python3-pip Pythonใฎไพๅญ˜้–ขไฟ‚ใฏไปฎๆƒณ็’ฐๅขƒใซใ‚คใƒณใ‚นใƒˆใƒผใƒซใ™ใ‚‹ใ“ใจใ‚’ๆŽจๅฅจใ—ใพใ™ใ€‚ใใฎใŸใ‚ใซใฏใ€venvใƒ‘ใƒƒใ‚ฑใƒผใ‚ธใ‚’ใ‚คใƒณใ‚นใƒˆใƒผใƒซใ—ใฆใใ ใ•ใ„ใ€‚...

5.9AI score
SaveExploits0
NVD
NVD
โ€ขadded 2026/09/14 9:17 p.m.โ€ข5 views

CVE-2026-64761

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to identify what other apps a user has installed...

7.5CVSS0.00317EPSS
SaveExploits0References1
NVD
NVD
โ€ขadded 2026/09/14 9:17 p.m.โ€ข6 views

CVE-2026-12766

IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

5.4CVSS0.00181EPSS
SaveExploits0References1
NVD
NVD
โ€ขadded 2026/09/14 9:17 p.m.โ€ข5 views

CVE-2026-12765

IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

6.5CVSS0.00216EPSS
SaveExploits0References1
NVD
NVD
โ€ขadded 2026/09/14 9:17 p.m.โ€ข5 views

CVE-2026-12767

IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

6.5CVSS0.00216EPSS
SaveExploits0References1
EUVD
EUVD
โ€ขadded 2026/09/14 8:51 p.m.โ€ข15 views

EUVD-2026-78129

This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a user has installed...

4.3CVSS5.6AI score0.00258EPSS
SaveExploits0References3
CVE
CVE
โ€ขadded 2026/09/14 8:51 p.m.โ€ข8 views

CVE-2026-84518

CVE-2026-84518 is an information disclosure vulnerability in Apple products affecting Safari, iOS, iPadOS, and macOS . The root cause is a flaw in state management , which allowed a malicious website to determine which apps a user has installed. The issue was addressed through improved state mana...

4.3CVSS5.6AI score0.00258EPSS
SaveExploits0References3Affected Software4
CVE
CVE
โ€ขadded 2026/09/14 8:50 p.m.โ€ข10 views

CVE-2026-64761

CVE-2026-64761 affects the Accessibility component of iOS and iPadOS , specifically devices from iPhone 11 and later through various iPad models. The root cause is a privacy issue in the handling of user preferences , which allows an app to identify what other apps a user has installed. The vulne...

7.5CVSS5.6AI score0.00317EPSS
SaveExploits0References1Affected Software2
CVE
CVE
โ€ขadded 2026/09/14 8:31 p.m.โ€ข31 views

CVE-2026-12765

IBM Langflow OSS versions 1.0.0 through 1.10.2 are vulnerable to server-side request forgery (SSRF) in several flow components, including LM Studio, Home Assistant, DeepSeek, xAI, Glean, HuggingFace Inference API, Ollama, LiteLLM, and Docling Serve. These components accept user-supplied URL value...

6.5CVSS5.7AI score0.00216EPSS
SaveExploits0References1
Cvelist
Cvelist
โ€ขadded 2026/09/14 8:31 p.m.โ€ข27 views

CVE-2026-12765 Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components

IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

6.5CVSS0.00216EPSS
SaveExploits0References1
EUVD
EUVD
โ€ขadded 2026/09/14 8:31 p.m.โ€ข7 views

EUVD-2026-78086

IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

6.5CVSS5.7AI score0.00216EPSS
SaveExploits0References1
EUVD
EUVD
โ€ขadded 2026/09/14 8:29 p.m.โ€ข11 views

EUVD-2026-78084

IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

5.4CVSS5.7AI score0.00181EPSS
SaveExploits0References1
CVE
CVE
โ€ขadded 2026/09/14 8:29 p.m.โ€ข23 views

CVE-2026-12766

IBM Langflow OSS (versions 1.0.0โ€“1.11.2) is vulnerable to Server-Side Request Forgery (SSRF) across multiple components. The root cause involves missing or bypassable URL validation: the LMStudio and embeddings components pass a user-controlled base_url to httpx.AsyncClient without invoking the S...

5.4CVSS5.7AI score0.00181EPSS
SaveExploits0References1
Cvelist
Cvelist
โ€ขadded 2026/09/14 8:29 p.m.โ€ข27 views

CVE-2026-12766 Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components

IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

5.4CVSS0.00181EPSS
SaveExploits0References1
Cvelist
Cvelist
โ€ขadded 2026/09/14 8:21 p.m.โ€ข27 views

CVE-2026-12767 Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches

IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

6.5CVSS0.00216EPSS
SaveExploits0References1
EUVD
EUVD
โ€ขadded 2026/09/14 8:21 p.m.โ€ข10 views

EUVD-2026-78083

IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

6.5CVSS5.7AI score0.00216EPSS
SaveExploits0References1
CVE
CVE
โ€ขadded 2026/09/14 8:21 p.m.โ€ข12 views

CVE-2026-12767

IBM Langflow OSS (versions 1.0.0 through 1.11.5) is affected by server-side request forgery (SSRF) due to missing egress validation on server-side URL fetches. The root cause involves specific connectors that bypass the platform's shared SSRF guard: the IBM Db2 Vector Store connector fetches a us...

6.5CVSS5.7AI score0.00216EPSS
SaveExploits0References1
OSV
OSV
โ€ขadded 2026/09/14 7:33 p.m.โ€ข5 views

CVE-2026-16148 Kernel panic in the it82xx2 USB device controller driver via re-initialization of a busy delayable work item

The ITE it82xx2 USB device-controller driver initialized its bus-suspend detection work with kworkinitdelayable&priv-suspendedwork, suspendedhandler inside it82xx2enable the driver's .enable op in drivers/usb/udc/udcit82xx2.c. This work item is scheduled essentially continuously while the USB bus...

4.6CVSS5.7AI score
SaveExploits0References5
Rows per page
Query Builder