Lucene search
+L

1203 matches found

Kitploit
Kitploit
•added 2026/10/10 3:19 a.m.•19 views

ssl-certificate-expiry-date-checker

sslcertificateexpirydatechecker 어떤 인증서가 만료될 예정이며 갱신이 필요한지 확인합니다. 스캔 결과에서 다양한 정보만료일, 발급자, 서명, 일련 번호 등를 찾습니다. 조직의 SSL 인증서 관리자라면 동료, 팀에서 목록을 수집하고 인증서의 만료일을 확인하세요. SSL 인증서가 만료되기 전에 상세 결과로 사용자 알림을 보냅니다 WEBHOOK, Telegram-Bot, Slack.... 다른 유사 도구와의 차이점: 도메인별로 프록시 사용을 선택적으로 설정할 수 있습니다. 예를 들어, 제한된 사설 환경...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/09 6:00 p.m.•16 views

ictf-framework

iCTF 프레임워크 3.0 이것은 Shellphish가 iCTF를 호스팅하는 데 사용하는 프레임워크입니다. iCTF 프레임워크는 2014년 Usenix 3GSE 워크숍에서 발표된 논문에 설명되어 있습니다. 우리는 교육자와 트레이너가 자신만의 A/D CTF를 호스팅할 수 있기를 바라며 이 프레임워크를 공개했습니다. 이 프레임워크는 상업적 사용이 무료이지만, 우리가 제공할 수 있는 지원은 제한적입니다. 향후 각 구성 요소에 대한 더 많은 기술 문서를 공개할 계획입니다; 현재로서는 게임을 만드는 방법에 대한 지침을 여기에서 찾을 수...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/09 2:11 p.m.•19 views

mx-takeover

mx-takeover 작동 방식 • 기능 • 설치 • 사용법 • mx-takeover 실행 mx-takeover 는 DNS MX 레코드를 분석하고 잘못 구성된 MX 레코드를 탐지합니다. 현재 세 가지 기법을 지원합니다. 다음과 같습니다. 곧 만료될 MX 도메인 등록되지 않은 MX 도메인 현재 Mailgun에서 사용 중이지 않은 도메인을 가리키는 도메인 작동 방식 Mailgun 공격 시나리오 1. 회사가 이메일을 위해 새로운 서비스를 사용하기 시작합니다. 2. 회사의 MX 레코드가 Mailgun을 가리킵니다. 예:...

6.4AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/09 12:48 p.m.•21 views

NcStatusCheck

NcStatusCheck 여러 Nextcloud 인스턴스를 위한 중앙 집중식 모니터링 NcStatusCheck는 단일 웹 인터페이스에서 여러 Nextcloud 서버의 상태를 추적할 수 있게 해주는 모니터링 도구입니다: Nextcloud 및 PHP 버전의 보안 기준선 대비 상태, 브랜치 지원 종료, 연결 가능성, 구성 경고, 설치된 앱, Docker 컨테이너 및 알려진 취약점을 확인할 수 있습니다. 🎯 기능 모니터링 서버당 세 가지 데이터 수집 모드 : Basic NC 버전만, Extended serverinfo API를 통한 ...

5.9AI score
SaveExploits0
OSV
OSV
•added 2026/10/06 9:18 a.m.•5 views

AZL-106185 CVE-2026-98198 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: hwmon: pwm-fan Stop RPM timer before freeing tach data sampletimer rearms the RPM timer and accesses the devm-managed ctx-tachs and ctx-pulsesperrevolution arrays. The cleanup action which stops the timer is registered before tho...

5.9AI score0.00175EPSS
SaveExploits1References1
OSV
OSV
•added 2026/10/06 8:45 a.m.•3 views

CVE-2026-98258 posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Kijo analyzed another race in the POSIX CPU timer code: Commit bf635681c906 converted cputimer::firing from a tristate value to a boolean. This lost the...

7.8CVSS5.9AI score
SaveExploits0References6
Debian CVE
Debian CVE
•added 2026/10/06 8:45 a.m.•7 views

CVE-2026-98258

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Kijo analyzed another race in the POSIX CPU timer code: Commit bf635681c906 converted cputimer::firing from a tristate value to a boolean. This lost the...

7.8CVSS6.2AI score0.00136EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/06 3:43 a.m.•10 views

CVE-2026-73312

CVE-2026-73312: Refresh token replay after access-token expiry XenForo before 2.3.13 can leave an OAuth2 refresh token reusable when its parent access token has expired. What happens XenForo intentionally lets a refresh token outlive its short-lived access token. During rotation it creates the...

9.1CVSS6.2AI score0.00474EPSS
SaveExploits2
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•3 views

PT-2026-106527

In the Linux kernel, the following vulnerability has been resolved: hwmon: pwm-fan Stop RPM timer before freeing tach data sample timer rearms the RPM timer and accesses the devm-managed ctx-tachs and ctx-pulses per revolution arrays. The cleanup action which stops the timer is registered before...

5.9AI score0.00175EPSS
SaveExploits1References5
OSV
OSV
•added 2026/10/01 9:33 a.m.•8 views

BIT-RABBITMQ-2026-67242 RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, OAuth2 isintegerExp guard skips token-expiry checks for float exp. validatetokenexpiry/1 lines 208-214 and expirytimestamp/1 138-144 both guard with 'when isintegerExp' and fall through to ok/never for float values...

6.3CVSS5.8AI score0.00462EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•10 views

AlmaLinux 9.6 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal (ALMALINUX9.6:CLSA-2026:1767628458)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1767628458 advisory. - When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or late...

6.5CVSS6.8AI score0.01987EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•7 views

PT-2026-105190

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, OAuth2 isintegerExp guard skips token-expiry checks for float exp. validatetokenexpiry/1 lines 208-214 and expirytimestamp/1 138-144 both guard with 'when isintegerExp' and fall through to ok/never for float values...

6.3CVSS5.8AI score0.00462EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•6 views

Rocky Linux 9.6 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal (ALMALINUX9.6:CLSA-2026:1767628458)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1767628458 advisory. - When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or...

6.5CVSS6.8AI score0.01987EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•6 views

AlmaLinux 9.2 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal (ALMALINUX9.2:CLSA-2025:1764773365)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764773365 advisory. - When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or late...

6.5CVSS6.8AI score0.01987EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/09/28 11:50 p.m.•10 views

SUSE CVE-2026-67242

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, OAuth2 isintegerExp guard skips token-expiry checks for float exp. validatetokenexpiry/1 lines 208-214 and expirytimestamp/1 138-144 both guard with 'when isintegerExp' and fall through to ok/never for float values...

6.3CVSS5.8AI score0.00462EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/26 1:23 p.m.•11 views

EUVD-2026-87719

Capgo.app before 12.264.5 does not enforce upload expiry or build lifecycle state in the /build/upload/:jobId TUS proxy endpoint. When a native build request is created, an uploadexpiresat timestamp one hour and a 'pending' status are stored in buildrequests, but the upload proxy loads only appid...

5.4CVSS5.9AI score0.00217EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/26 1:23 p.m.•40 views

CVE-2026-100624 Capgo.app before 12.264.5 Upload Expiry Bypass via build upload

Capgo.app before 12.264.5 does not enforce upload expiry or build lifecycle state in the /build/upload/:jobId TUS proxy endpoint. When a native build request is created, an uploadexpiresat timestamp one hour and a 'pending' status are stored in buildrequests, but the upload proxy loads only appid...

5.4CVSS0.00217EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/26 1:23 p.m.•16 views

CVE-2026-100624

Capgo.app versions prior to 12.264.5 are vulnerable to an upload expiry bypass in the /build/upload/:jobId TUS proxy endpoint. The root cause is that the upload proxy fails to enforce the upload_expires_at timestamp or the pending status from the build_requests table; it only verifies the app.bui...

5.4CVSS5.9AI score0.00217EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/26 1:23 p.m.•11 views

CVE-2026-100624 Capgo.app before 12.264.5 Upload Expiry Bypass via build upload

Capgo.app before 12.264.5 does not enforce upload expiry or build lifecycle state in the /build/upload/:jobId TUS proxy endpoint. When a native build request is created, an uploadexpiresat timestamp one hour and a 'pending' status are stored in buildrequests, but the upload proxy loads only appid...

5.3CVSS5.9AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/26 1:23 p.m.•7 views

CVE-2026-100624 Capgo.app before 12.264.5 Upload Expiry Bypass via build upload

Capgo.app before 12.264.5 does not enforce upload expiry or build lifecycle state in the /build/upload/:jobId TUS proxy endpoint. When a native build request is created, an uploadexpiresat timestamp one hour and a 'pending' status are stored in buildrequests, but the upload proxy loads only appid...

5.4CVSS5.9AI score0.00217EPSS
SaveExploits0References2
Rows per page
Query Builder