Lucene search
+L

862 matches found

Kitploit
Kitploit
•added 2026/10/31 4:06 p.m.•28 views

snmp-shell

SNMP Shell Shell Simulation over Net-SNMP with extend functionality Here is a preview : Description If your target has a Net-SNMP instance with the "extend" functionality, and you got a SNMP community string which gives you write access , you can use this tool to automate the process of sending...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/31 12:35 p.m.•22 views

CVE-2019-11358

CVE-2019-11358 Prototype Pollution A simple poc of prototype pollution that occurs in the jQuery's 3.4.0 extension method. The first argumentdeep in the extend method must be true...

6.1CVSS6.9AI score0.8682EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/10/30 4:07 p.m.•18 views

CVE-2018-16492

extend for Node.js node-extend is a port of the classic extend method from jQuery. It behaves as you expect. It is simple, tried and true. Notes: Since Node.js = 4, Object.assign now offers the same functionality natively but without the "deep copy" option. See ECMAScript 2015 ES6 in Node.js. Som...

9.8CVSS8.6AI score0.0305EPSS
SaveExploits1References3
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•16 views

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Fixed data corruption caused by fallocate. When fallocate creates holes in the inode size, if the original size is located in the middle of the last cluster, then the portion of the block from the original size to the end ...

5.5CVSS6.6AI score0.00226EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•10 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Treating $Extend records as regular files. Since the commit af153bb63a33 "vfs: catching invalid modes in mayopen" requires that any inode be of one of the types SIFDIR/SIFLNK/SIFREG/SIFCHR/SIFBLK/SIFIFO/SIFSOCK, use SIFREG...

6.3AI score0.00191EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•19 views

Astra Linux - уязвимость в linux-5.15

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix missing iop in ntfsreadmft There is null pointer dereference because iop == NULL. The bug happens because we don't initialize iop for records in $Extend...

5.5CVSS6AI score0.00191EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/10 12:00 a.m.•12 views

PT-2026-109645

ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av extend av, len-1 . On an empty list, this undeflows, and av extend will allocate an array with 2^32 slots, leading to memory exhaustion. Note that a similar issue was...

6AI score0.00361EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/10 12:00 a.m.•34 views

PT-2026-109646

ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av extend av, len-1 . On an empty list, this undeflows, and av extend will allocate an array with 2^32 slots, leading to memory exhaustion...

5.8AI score0.0038EPSS
SaveExploits0References4
NVD
NVD
•added 2026/10/09 10:16 a.m.•14 views

CVE-2026-94167

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Extend Themes Kubio AI Page Builder kubio allows Reflected XSS.This issue affects Kubio AI Page Builder: from n/a through 2.9.3...

7.1CVSS0.00175EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/09 10:00 a.m.•16 views

EUVD-2026-95630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Extend Themes Kubio AI Page Builder kubio allows Reflected XSS.This issue affects Kubio AI Page Builder: from n/a through 2.9.3...

7.1CVSS5.7AI score0.00175EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•12 views

PT-2026-108824

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Extend Themes Kubio AI Page Builder kubio allows Reflected XSS.This issue affects Kubio AI Page Builder: from n/a through 2.9.3...

7.1CVSS5.7AI score0.00175EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/09 12:00 a.m.•8 views

CVE-2026-94167: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Extend Themes Kubio AI Page Builder kubio allows Reflected XSS.This issue affects Kubio AI Page Builder: from n/a through 2.9.3...

7.1CVSS5.7AI score0.00175EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/09/30 12:00 a.m.•51 views

JavaScript extend() Function Heap Buffer Overflow DoS

The vulnerability of the extend function in the shared/utils.mjs JavaScript library used for creating Swiper sliders is related to uncontrolled changes to object prototypes. Exploiting this vulnerability could allow an attacker to trigger a service failure and execute arbitrary code...

7.8CVSS7.3AI score0.00486EPSS
SaveExploits2References4Affected Software1
Debian CVE
Debian CVE
•added 2026/09/25 10:23 a.m.•20 views

CVE-2026-98049

In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the result of an arena 32-bit cmpxchg bpfconvertctxaccesses rewrites an atomic on an arena pointer from BPFSTX | BPFATOMIC to BPFSTX | BPFPROBEATOMIC, and it runs before bpfoptsubregzextlo32rndhi32. That pass emi...

5.5CVSS6.1AI score0.00155EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/09/17 4:35 p.m.•19 views

SUSE CVE-2026-89914

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Sign-extend VA for range-based TLBI invalidation When the decoderangetlbi helper was moved to be used for S1 TLBIs, the required sign extension was omitted. Add it. As a result, special care must be taken to not...

6.3CVSS5.9AI score0.00194EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2026/09/17 2:59 p.m.•6 views

python-signal-cli-rest-api (22.6.2), sanic-redis-extend (0.0.1) +1 more potentially affected by CVE-2026-85078 via sanic (22.6.0)

sanic PYPI version 22.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - python-signal-cli-rest-api 22.6.2 - sanic-redis-extend 0.0.1 - systembridgebackend =3.3.0.dev5, =3.4.3 Source cves: CVE-2026-85078 Source advisory:...

6.5CVSS5.8AI score0.00511EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•6 views

PT-2026-93391

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the NTFS3 file system. The functions ntfs reparse init and ntfs objid init parse the index root of the $Extend/$Reparse and $Extend/$ObjId metafiles. Thes...

5.8AI score0.00211EPSS
SaveExploits0
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•16 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ntfs3: init run lock for extend inode After setting the inode mode of $Extend to a regular file, executing the truncate system call will invoke the dotruncate routine, resulting in an uninitialized runlock error reported by syzbo...

7.5CVSS6.2AI score0.00455EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•17 views

Astra Linux – Vulnerability in libstb

Buffer overflow vulnerability in the function stbiextendreceive in stbimage.h in stb 2.26, caused by a crafted JPEG file...

7.8CVSS7.4AI score0.0143EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2026/09/10 10:46 a.m.•3 views

Malicious code in express-uatraits-extend (npm)

The package express-uatraits-extend was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder