Lucene search
+L

70037 matches found

Kitploit
Kitploit
added 2026/09/16 5:30 p.m.11 views

copy-fail-check

copy-fail-check CVE-2026-31431 Helper based on https://copy.fail/ Copy Fail Quick Check Interactive bash helper to review basic exposure related to CVE-2026-31431 Copy Fail and apply a temporary mitigation based on algifaead. Target compatibility Mainly intended for: Debian / Ubuntu AlmaLinux /...

7.8CVSS6.3AI score0.99907EPSS
SaveExploits243
NVD
NVD
added 2026/09/16 5:18 p.m.9 views

CVE-2026-85732

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in registry/remote/utils.go accepts an absolute URL from a registry-controlled Link response header without validating its scheme, host, or port. Tags, Referrers, and Repositories pagination operations then...

4.7CVSS0.00379EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/16 5:18 p.m.9 views

SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156

SOC L1 威胁调查:MikroTik RouterOS 多个暴露服务 分析师: Jonatan Alexander Guerrero Gomez | 目标角色: SOC L1 / 初级网络安全分析师 状态: 调查已结束 | 严重性: 高 执行摘要 主动威胁狩猎演练,识别出具有多个暴露服务的公网 MikroTik RouterOS 设备。调查将暴露在 2000/TCP 上的 Bandwidth-Test 服务与 CVE-2018-1156(一个高严重性 RCE 漏洞)关联起来。1701/UDP 上的 L2TP VPN 额外暴露增加了攻击面。此案例展示了 L1...

9CVSS8.6AI score0.07431EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/09/16 5:13 p.m.11 views

CVE-2026-54167

A flaw was found in Pipelines-as-Code. The GitHub App provider incorrectly processes webhook events by accepting an untrusted X-GitHub-Enterprise-Host header as the API host before validating the webhook signature. An unauthenticated attacker can exploit this by sending a specially crafted webhoo...

8.2CVSS0.00184EPSS
SaveExploits0References12
Kitploit
Kitploit
added 2026/09/16 4:26 p.m.10 views

CVE-2026-53959

CVE-2026-53959 - 4gaBoards 3.3.9 - Divulgación de información de usuarios Este repositorio contiene un exploit de Prueba de Concepto PoC para CVE-2026-53959 Descargo de responsabilidad Este proyecto se proporciona únicamente con fines educativos y para pruebas de seguridad autorizadas. No lo...

6.5CVSS6AI score0.00407EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2026/09/16 4:17 p.m.8 views

dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...

7CVSS0.01821EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/16 3:45 p.m.7 views

keycloak-services: keycloak-services: Authenticator config endpoint exposes raw reCAPTCHA secrets to view-only admins

A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys,...

6.5CVSS0.00258EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/16 3:37 p.m.11 views

CVE-2025-67223

CVE-2025-67223:Aranda Service Desk 中的不正确的访问控制与信息泄露 CVE ID: CVE-2025-67223 受影响产品: Aranda Service Desk Aranda File Server - AFS module 受影响版本: 8.3.12 作者: Brandon Perez Lara 🚨 概述 在 Aranda Service Desk 的文件管理模块(Aranda File Server)中发现了一个严重漏洞。系统将每日活动日志存储在公共目录 /AFS/logs/ 中,日志文件名可预测(例如...

7.5CVSS6AI score0.00631EPSS
SaveExploits0
NVD
NVD
added 2026/09/16 3:19 p.m.6 views

CVE-2026-92570

reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endpoint that allows any authenticated user to read bundled recon tool configuration files. Attackers with low-privilege Auditor roles can access files containing third-party API keys for services like...

7.1CVSS0.00341EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/16 3:17 p.m.4 views

AZL-103194 CVE-2026-77407 affecting package keda 2.14.1-18

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainAuth values defined in auth.go retain passwords as exported plaintext fields in Connection.Config.SASL after a successful PLAIN authentication handshake. The Connection.openComplete method in connection.go does not clear those...

7CVSS0.00127EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/16 3:17 p.m.3 views

AZL-103278 CVE-2026-77407 affecting package telegraf 1.31.0-31

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainAuth values defined in auth.go retain passwords as exported plaintext fields in Connection.Config.SASL after a successful PLAIN authentication handshake. The Connection.openComplete method in connection.go does not clear those...

7CVSS0.00127EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/16 3:17 p.m.6 views

DEBIAN-CVE-2026-77407

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainAuth values defined in auth.go retain passwords as exported plaintext fields in Connection.Config.SASL after a successful PLAIN authentication handshake. The Connection.openComplete method in connection.go does not clear those...

7CVSS0.00127EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/16 3:17 p.m.9 views

CVE-2026-77407

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainAuth values defined in auth.go retain passwords as exported plaintext fields in Connection.Config.SASL after a successful PLAIN authentication handshake. The Connection.openComplete method in connection.go does not clear those...

7CVSS0.00127EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/16 3:17 p.m.7 views

CVE-2025-36591

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

4.4CVSS0.00111EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/16 3:00 p.m.35 views

CVE-2025-36591

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

4.4CVSS0.00111EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/16 3:00 p.m.8 views

EUVD-2025-210917

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

4.4CVSS0.00111EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 3:00 p.m.24 views

CVE-2025-36591

Dell ECS (versions 3.8.1.0 through 3.8.1.7) and Dell ObjectScale (versions prior to 4.4.0.0) contain a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high-privileged attacker with local access could potentially exploit this flaw, leading to information exposure . The assigned C...

4.4CVSS5.8AI score0.00111EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/16 2:40 p.m.33 views

CVE-2026-92570 reNgine through 2.2.0 Unauthorized Configuration File Read

reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endpoint that allows any authenticated user to read bundled recon tool configuration files. Attackers with low-privilege Auditor roles can access files containing third-party API keys for services like...

7.1CVSS0.00341EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/16 2:40 p.m.9 views

CVE-2025-66698

CVE-2025-66698 Software objetivo: Veda Semantic Machines v5.4.8 probablemente todas las versiones anteriores. Tipo de vulnerabilidad: Omisión de autenticación. ID de CVE: CVE-2025-66698. Resumen: El sistema valida incorrectamente el parámetro ticket, tratando una cadena vacía como una sesión...

8.6CVSS6AI score0.00491EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/09/16 2:34 p.m.35 views

CVE-2026-77407 RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainAuth values defined in auth.go retain passwords as exported plaintext fields in Connection.Config.SASL after a successful PLAIN authentication handshake. The Connection.openComplete method in connection.go does not clear those...

7CVSS0.00127EPSS
SaveExploits0References4
Rows per page
Query Builder