Lucene search
+L

625111 matches found

Kitploit
Kitploit
added 2026/08/27 2:52 p.m.3 views

CVE-2023-46604

CVE-2023-46604 Exploit für CVE-2023-46604 Dieses Tool hilft, diese Schwachstelle auszunutzen. Shodan-Abfrage zum Finden von Zielen: root@kitploit: product:"ActiveMQ" port:"61616" Verwendung des Tools: root@kitploit: zum Lesen von Zielen aus der Datei: python3 exploit.py -f targets -c...

10CVSS7.6AI score0.99723EPSS
SaveExploits32
Kitploit
Kitploit
added 2026/08/27 2:51 p.m.4 views

CVE-2024-38077

CVE-2024-38077 Ecco una possibile descrizione GitHub per CVE-2024-38077: CVE-2024-38077: Vulnerabilità di esecuzione di codice remoto nel servizio di licenza Desktop remoto di Windows Panoramica: CVE-2024-38077 è una vulnerabilità critica nel servizio di licenza Desktop remoto di Windows, che...

9.8CVSS8.7AI score0.84232EPSS
SaveExploits5
OSV
OSV
added 2026/08/27 2:51 p.m.10 views

CVE-2026-81735 UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

10CVSS6AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/27 2:51 p.m.42 views

CVE-2026-81735 UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

10CVSS0.00534EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/27 2:51 p.m.31 views

CVE-2026-81735

UI-TARS-desktop (ByteDance) — the mcp-http-server package defaulted its listen address to :: when no host was supplied, binding Streamable HTTP and SSE MCP transports to every network interface. Authentication middleware was optional, and the @agent-infra/mcp-server-commands and @agent-infra/mcp-...

10CVSS5.7AI score0.00534EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/27 2:51 p.m.5 views

EUVD-2026-67069

opensslencrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy defaulted to WARN, so an unsigned/unverifiable non-built-in plugin was compiled and executed in the host process at import time, before the runtime sandbox is installed. The...

9.3CVSS6.2AI score0.00316EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/27 2:51 p.m.5 views

CVE-2026-81719 openssl_encrypt before 1.4.9 Remote Code Execution via Plugin

opensslencrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy defaulted to WARN, so an unsigned/unverifiable non-built-in plugin was compiled and executed in the host process at import time, before the runtime sandbox is installed. The...

9.3CVSS6.5AI score
SaveExploits0References4
CVE
CVE
added 2026/08/27 2:51 p.m.14 views

CVE-2026-81719

openssl_encrypt versions before 1.4.9 are vulnerable to arbitrary code execution via third-party plugins. The plugin signature policy defaulted to WARN , allowing unsigned or unverifiable non-built-in plugins to be compiled and executed in the host process at import time—before the runtime sandbo...

9.3CVSS6.2AI score0.00316EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/27 2:51 p.m.30 views

CVE-2026-81719 openssl_encrypt before 1.4.9 Remote Code Execution via Plugin

opensslencrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy defaulted to WARN, so an unsigned/unverifiable non-built-in plugin was compiled and executed in the host process at import time, before the runtime sandbox is installed. The...

9.3CVSS0.00316EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/27 2:51 p.m.7 views

CVE-2026-68515

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing specially crafted EXR image files to the exrmultiview utility. When processing these files, the utility can write beyond its allocated memory on the heap, leading to a heap out-of-bounds write. This could...

7.1CVSS6.5AI score0.00127EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/27 2:51 p.m.13 views

CVE-2026-81701

openssl_encrypt versions before 1.4.9 contain an arbitrary code execution vulnerability in its plugin signature verification mechanism. The root cause is a denylist approach used to identify trusted built-in plugins: unsigned plugins placed in top-level plugins/ directories or unknown subdirector...

9.8CVSS6.1AI score0.00308EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/27 2:51 p.m.5 views

CVE-2026-81700 openssl_encrypt before 1.4.9 GPG Signature Verification Bypass

opensslencrypt versions before 1.4.9 contain a signature verification vulnerability in gpgrunner.verifydetached that accepts revoked and expired keys by only checking VALIDSIG status without inspecting REVKEYSIG, EXPKEYSIG, or gpg exit codes. Attackers holding compromised-then-revoked signing key...

9.3CVSS6AI score
SaveExploits0References4
EUVD
EUVD
added 2026/08/27 2:51 p.m.5 views

EUVD-2026-67056

opensslencrypt versions before 1.4.9 contain a signature verification vulnerability in gpgrunner.verifydetached that accepts revoked and expired keys by only checking VALIDSIG status without inspecting REVKEYSIG, EXPKEYSIG, or gpg exit codes. Attackers holding compromised-then-revoked signing key...

9.8CVSS5.4AI score0.00254EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/27 2:51 p.m.30 views

CVE-2026-81701 openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin

opensslencrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature verification. Attackers can place malicious unsigned plugins following documented installation paths...

9.8CVSS0.00308EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/27 2:51 p.m.4 views

CVE-2026-81701 openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin

opensslencrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature verification. Attackers can place malicious unsigned plugins following documented installation paths...

9.3CVSS6.3AI score
SaveExploits0References4
EUVD
EUVD
added 2026/08/27 2:51 p.m.5 views

EUVD-2026-67057

opensslencrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature verification. Attackers can place malicious unsigned plugins following documented installation paths...

9.8CVSS6.1AI score0.00308EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/27 2:51 p.m.30 views

CVE-2026-81700 openssl_encrypt before 1.4.9 GPG Signature Verification Bypass

opensslencrypt versions before 1.4.9 contain a signature verification vulnerability in gpgrunner.verifydetached that accepts revoked and expired keys by only checking VALIDSIG status without inspecting REVKEYSIG, EXPKEYSIG, or gpg exit codes. Attackers holding compromised-then-revoked signing key...

9.8CVSS0.00254EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/27 2:51 p.m.15 views

CVE-2026-81700

openssl_encrypt versions before 1.4.9 contain a signature verification bypass in the gpg_runner.verify_detached function. The root cause is that the function only checks the VALIDSIG status without inspecting REVKEYSIG , EXPKEYSIG , or GPG exit codes, causing it to accept revoked and expired sign...

9.8CVSS5.4AI score0.00254EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/27 2:50 p.m.6 views

CVE-2026-81690 verify-usb before 1.4.9 Symlink Directory Traversal Code Execution

openssl-encrypt pip package before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob, which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while ONOFOLLOW on the...

8.7CVSS6.3AI score
SaveExploits0References4
EUVD
EUVD
added 2026/08/27 2:50 p.m.5 views

EUVD-2026-67046

openssl-encrypt pip package before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob, which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while ONOFOLLOW on the...

8.7CVSS5.8AI score0.00487EPSS
SaveExploits0References2
Rows per page
Query Builder