Lucene search
+L

1217 matches found

Kitploit
Kitploit
•added 2026/11/14 11:16 a.m.•30 views

Grafana-Final-Scanner

Grafana Final Scanner A command-line vulnerability scanner for Grafana. It fingerprints the installed Grafana version, runs a set of version-aware CVE checks, audits common configuration weaknesses, stores results in a local database, and can serve them through a small web dashboard. Legal This...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/11/13 10:53 a.m.•13 views

cs50-cybersecurity

cs50-cybersecurity CS50's Introduction to Cybersecurity final project on React2Shell CVE-2025-55182...

10CVSS7.9AI score0.99731EPSS
SaveExploits405
Kitploit
Kitploit
•added 2026/11/13 5:15 a.m.•22 views

fyp

A desktop-based vulnerability assessment tool that enables security teams to scan, identify, exploit, and report vulnerabilities across web applications and networks. Overview A vulnerability assessment platform built for security administrators and analysts. It automates target scanning,...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/11/12 4:57 p.m.•34 views

wildfly__wildfly_CVE-2018-1047_11-0-0-Final

WildFly Application Server http://wildfly.org Fast Startup Small Footprint Modular Design Unified Configuration and Management And of course Java EE7! Building Prerequisites: JDK 8 or newer - check java -version Maven 3.3.1 or newer - check mvn -v On nix systems, make sure that the maximum number...

5.5CVSS7AI score0.00509EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/11/12 4:39 a.m.•21 views

Final-Proj

This repository does not have a README...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/11/12 12:37 a.m.•73 views

CVE-2026-22012-Diameter-Protocol-Credit-Control-Bypass-in-5G

CVE-2026-22012 – Diameter Protocol Credit‑Control Bypass in 5G Program Code Python Diameter sim diametercreditcontrolsim.py - Simulated OCS with missing final-unit indication class OCS: def processCCRself, request: Vulnerability: always returns SUCCESS with same quota, never sends final-unit retu...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/11/10 2:11 p.m.•25 views

keycloak__keycloak_CVE-2014-3656_1-0-5-Final

Open Source Identity and Access Management Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more. Help...

6.1CVSS6.4AI score0.00768EPSS
SaveExploits0References11
Github Security Blog
Github Security Blog
•added 2026/11/05 6:34 a.m.•18 views

Malicious code in dependent-final (npm)

Part of a self-republishing campaign: the package ships test.js, which in a loop gives the package a new random name, bumps its version, rewrites package.json and runs npm publish to publish the package again under the new name. Self-replicating publication is the propagation step of a registry...

6AI score
SaveExploits0References2Affected Software1
osv_mal
osv_mal
•added 2026/11/02 4:58 p.m.•33 views

MAL-2026-18479 Malicious code in tailwind-animate-final (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7961570b88f7d462fa4b80912aacfa2cd239ecb3e00700d1431f2fcb7d8ceb26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/11/02 4:58 p.m.•27 views

Malicious code in tailwind-animate-final (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7961570b88f7d462fa4b80912aacfa2cd239ecb3e00700d1431f2fcb7d8ceb26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/11/02 4:58 p.m.•10 views

Malware in tailwind-animate-final

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.9AI score
SaveExploits0References1Affected Software1
Kitploit
Kitploit
•added 2026/10/28 10:06 p.m.•29 views

CVE-2025-12543-Fix-for-Wildfly

WildFly 11.0.0.Final Base Image — CVE-2025-12543 Patch Overview This repository provides a Docker base image built on WildFly 11.0.0.Final with a backported fix for CVE-2025-12543 , a critical Host header validation vulnerability in Undertow. The image is intended to be provided to colleagues as ...

9.6CVSS7.1AI score0.01333EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2026/10/22 4:03 p.m.•2 views

11x-wagtail-blog (>=0.0.0, <=0.2.0), 170051277-trab-final-gces (>=0.3.0, <=0.5.0) +11257 more potentially affected by CVE-2026-96644 via pillow (>=2.0.0, <=12.3.0)

pillow PYPI version =2.0.0, =0.0.0, =0.3.0, =0.1.0, =0.2.2, =0.5.0a0, =2.3.84, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.7 and more Source cves: CVE-2026-96644 Source advisory: GHSA-9V9V-9QVF-H2HJ...

8.1CVSS6.9AI score0.00384EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2026/10/19 1:41 p.m.•30 views

V17-WordPress-Security-Scanner-FINAL

V17-WordPress-Security-Scann...

6AI score
SaveExploits0
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•8 views

Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: serial: core: fix transmit-buffer reset and memleak Commit 761ed4a94582 “tty: serialcore: convert uartclose to use ttyportclose” changed the serial core to utilize ttyportclose, but failed to recognize that the transmit buffer...

5.5CVSS5.8AI score0.00251EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/14 7:17 a.m.•16 views

CVE-2026-107178

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.16 does not escape gallery lightbox configuration values before printing them into an inline script on every page that embeds the gallery, allowing users with contributor-level access and above to store JavaScript that executes ...

6.8CVSS0.00383EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/14 7:17 a.m.•16 views

CVE-2026-104644

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.15 does not sanitize or escape gallery configuration values before echoing them into an inline script on every page that embeds the gallery, allowing users with contributor-level access and above to store JavaScript that execute...

6.8CVSS0.00311EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/14 6:00 a.m.•22 views

CVE-2026-107178

The Image Photo Gallery Final Tiles Grid WordPress plugin versions prior to 3.6.16 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to escape gallery lightbox configuration values (specifically via the 'lightboxOptions' parameter) before they are printed in...

6.8CVSS5.8AI score0.00383EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/14 6:00 a.m.•16 views

EUVD-2026-100889

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.16 does not escape gallery lightbox configuration values before printing them into an inline script on every page that embeds the gallery, allowing users with contributor-level access and above to store JavaScript that executes ...

6.8CVSS5.8AI score0.00383EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/14 6:00 a.m.•20 views

WordPress Image Photo Gallery Final Tiles Grid plugin < 3.6.16 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Ala Bouali in WordPress Plugin Image Photo Gallery Final Tiles Grid versions 3.6.16...

6.8CVSS5.7AI score0.00383EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder