Lucene search
+L

138 matches found

Kitploit
Kitploit
•added 2026/09/25 2:34 p.m.•19 views

ffs

FFS - S Sistema de Archivos Esta es una herramienta CLI para buscar archivos como grep que no usa el kernel del sistema operativo para leer archivos, sino que lee tus discos directamente. Es prácticamente inútil, pero increíblemente genial. esto es solo 1.5k líneas de código C que: requiere sudo...

6AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/25 3:46 a.m.•12 views

SauronEye

SauronEye SauronEye es una herramienta de búsqueda diseñada para ayudar a equipos rojos a encontrar archivos que contengan palabras clave específicas. Características : Buscar en múltiples unidades de red Buscar contenido de archivos Buscar contenido de archivos de Microsoft Office .doc, .docx,...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 10:43 p.m.•268 views

forensicscanner

This repository does not have a README...

5.4AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 8:51 p.m.•9 views

WinShareEnum

WinShareEnum Windows Share Enumerator download https://github.com/nccgroup/WinShareEnum/raw/master/Info/WinShareEnum.exe running against a range on my local non-domain network, with a few dummy shares. Please remember this is primarily designed for domain-ed / large networks: options: A few thing...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/20 4:45 p.m.•10 views

log4j-scanner

log4j-scanner Escáner de vulnerabilidad Log4j 2 CVE-2021-44228 para el sistema operativo Windows. Ejemplo de uso Uso root@kitploit: .\log4j-scanner.exe La terminal se utiliza para mostrar los resultados. Despliegue esta herramienta en máquinas mediante RMM e inicie/reporte desde PowerShell o el...

10CVSS7.7AI score0.99999EPSS
SaveExploits375
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•11 views

PT-2026-70175

n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search search files tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the...

4.9CVSS5.4AI score0.00568EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•0 views

CVE-2026-72773: Improper Limitation of a Pathname to a Restricted Directory

n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search searchfiles tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the nam...

7.7CVSS5.9AI score0.00568EPSS
SaveExploits0References4
PyPA
PyPA
•added 2026/07/13 3:46 p.m.•25 views

LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

SummarySeveral LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search agent middleware that validates a starting directory but not the search pattern or th...

5.5CVSS6.1AI score0.0021EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2026/07/13 3:46 p.m.•17 views

PYSEC-2026-2556 LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

Summary Several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search agent middleware that validates a starting directory but not the search pattern or t...

5.1CVSS6.1AI score0.0021EPSS
SaveExploits0References6
PyPA
PyPA
•added 2026/06/22 7:17 p.m.•15 views

PYSEC-2026-2192

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.3.9, several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search...

5.5CVSS6.1AI score0.0021EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/06/22 5:21 p.m.•73 views

CVE-2026-55443 LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.3.9, several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search...

5.1CVSS0.0021EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/22 5:21 p.m.•99 views

CVE-2026-55443

CVE-2026-55443 describes a path traversal / sandbox-escape flaw in LangChain prior to 1.3.9. The vulnerability arises when components that resolve filesystem paths or expand search patterns fail to confine results to a trusted root, allowing untrusted inputs (paths, globs, symlinks, or LLM-influe...

5.5CVSS5.9AI score0.0021EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/06/22 5:21 p.m.•14 views

CVE-2026-55443 LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.3.9, several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search...

5.1CVSS5.9AI score0.0021EPSS
SaveExploits0References2
OSV
OSV
•added 2026/06/22 5:21 p.m.•14 views

CVE-2026-55443 LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.3.9, several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search...

5.1CVSS5.9AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/22 12:00 a.m.•0 views

CVE-2026-55443: Improper Limitation of a Pathname to a Restricted Directory

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.3.9, several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search...

5.5CVSS5.9AI score0.0021EPSS
SaveExploits0References5
OSV
OSV
•added 2026/06/17 2:31 p.m.•21 views

GHSA-CX9V-4QJ2-JRW6 Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File Enumeration

Summary Open WebUI has a Broken Object Level Authorization BOLA vulnerability in the builtin searchknowledgefiles tool. When native function calling is enabled and the selected model has no attached knowledge bases, an authenticated user can call searchknowledgefiles with an arbitrary knowledgeid...

4.3CVSS5.6AI score0.00304EPSS
SaveExploits1References6
OSV
OSV
•added 2026/06/16 3:03 p.m.•50 views

GHSA-GR75-JV2W-4656 LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

Summary Several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search agent middleware that validates a starting directory but not the search pattern or t...

5.1CVSS5.4AI score0.0021EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/06/16 3:03 p.m.•37 views

Symlink Attack

Overview langchain is a Building applications with LLMs through composability Affected versions of this package are vulnerable to Symlink Attack via the file-search middleware and loaders that resolve filesystem paths and search patterns without confining the resolved path to the intended root...

6.9CVSS5.9AI score0.0021EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/06/16 3:03 p.m.•67 views

LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

Summary Several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search agent middleware that validates a starting directory but not the search pattern or t...

5.5CVSS5.4AI score0.0021EPSS
SaveExploits0References4Affected Software2
CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•39 views

Bugsink 安全漏洞

Bugsink is an open-source, self-hosted bug tracking software developed by Bugsink. Versions of Bugsink prior to 2.2.0 contained security vulnerabilities. These vulnerabilities stemmed from the source mapping and debugging file searching mechanisms, which did not limit the scope of the projects. A...

4.3CVSS5.8AI score0.00281EPSS
SaveExploits0References2
Rows per page
Query Builder