Lucene search
+L

597871 matches found

Kitploit
Kitploit
added 2026/09/14 12:31 p.m.7 views

IronFox

IronFox F-Droid QR Code: IronFox is a fork of Divested Computing Group's Mull Browser, based on Mozilla Firefox. Our goal is to continue the legacy of Mull by providing a free and open source, privacy and security-oriented web browser for daily use. !TIP Find a bug? Encounter an annoying problem?...

6AI score
SaveExploits0References10
Cvelist
Cvelist
added 2026/09/14 12:30 p.m.4 views

CVE-2026-77883 Apache Syncope: Information disclosure via one-hop JEXL navigation past the JexlContextBuilder name denylist

Exposure of sensitive information through data queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficient entitlements for User read to access LinkedAccount's if...

SaveExploits0References1
EUVD
EUVD
added 2026/09/14 12:30 p.m.2 views

EUVD-2026-77441

Exposure of sensitive information through data queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficient entitlements for User read to access LinkedAccount's if...

SaveExploits0References1
CVE
CVE
added 2026/09/14 12:30 p.m.2 views

CVE-2026-77883

Apache Syncope is vulnerable to information disclosure via a one-hop JEXL navigation that bypasses the JexlContextBuilder name denylist . An administrator with Derived Schema entitlements can craft a malicious JEXL expression, enabling any administrator with User read entitlements to access Linke...

SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 12:29 p.m.9 views

CVE-2025-70962

CVE-2025-70962 Use of Hard-coded Credentials in ZOSI C519M IP camera RTSP service Field| Value ---|--- CVE ID| CVE-2025-70962 Vendor| ZOSI Technology Product| ZOSI C519M smart IP camera also listed as model 1NC-519M Affected versions| Firmware V4.2.8.832C01450BA tested build; earlier versions not...

7.5CVSS5.9AI score0.00382EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/09/14 12:29 p.m.1 views

EUVD-2026-77439

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Syncope. The notification message, as optionally shown by Console's and Enduser's login pages can be instructed to display HTML tags with unsafe JS inline, via malicious HTTP link generation...

SaveExploits0References1
CVE
CVE
added 2026/09/14 12:29 p.m.2 views

CVE-2026-78318

Apache Syncope is affected by an unauthenticated reflected XSS in its Console and Enduser login pages. The vulnerability stems from improper neutralization of input during web page generation: the optional notification message displayed on those pages can be manipulated via a malicious HTTP link ...

SaveExploits0References1
Cvelist
Cvelist
added 2026/09/14 12:29 p.m.4 views

CVE-2026-78318 Apache Syncope: Unauthenticated reflected XSS in Console and Enduser

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Syncope. The notification message, as optionally shown by Console's and Enduser's login pages can be instructed to display HTML tags with unsafe JS inline, via malicious HTTP link generation...

SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 12:25 p.m.8 views

proxmox-lxc-docker-fix

Proxmox LXC AppArmor Fix for Docker/Containers Workaround for CVE-2025-52881 : Fixes Docker, Podman, and container runtime breakage in Proxmox LXC containers caused by AppArmor incompatibility with runc 1.2.7+/1.3.2+ 🚨 The Problem Recent security updates to runc versions 1.2.7+ and 1.3.2+ and...

7.5CVSS7.8AI score0.00564EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/09/14 12:24 p.m.3 views

EUVD-2026-77438

Incorrect privilege assignment vulnerability in Apache Syncope. When the configured JWKS settings for internal JWT authentication are disclosed at least protocol and key, an attacker can obtain admin privileges after completing a successful authentication and obtaining a valid low-privileges JWT...

SaveExploits0References1
CVE
CVE
added 2026/09/14 12:24 p.m.2 views

CVE-2026-78330

Apache Syncope is affected by an incorrect privilege assignment vulnerability in its internal JWT authentication mechanism. When the configured JWKS settings (at least protocol and key) are disclosed, an attacker who completes a successful authentication and obtains a valid low-privilege JWT can ...

SaveExploits0References1
Cvelist
Cvelist
added 2026/09/14 12:24 p.m.4 views

CVE-2026-78330 Apache Syncope: Privilege escalation for admin user via JWT authentication

Incorrect privilege assignment vulnerability in Apache Syncope. When the configured JWKS settings for internal JWT authentication are disclosed at least protocol and key, an attacker can obtain admin privileges after completing a successful authentication and obtaining a valid low-privileges JWT...

SaveExploits0References1
EUVD
EUVD
added 2026/09/14 12:23 p.m.2 views

EUVD-2026-77437

Insertion of sensitive information into sent data vulnerability in Apache Syncope. Any authenticated user can query for the list of available OIDC providers configured for SSO with Console and Enduser. The returned payload contains all configuration settings, including client secrets, regardless ...

SaveExploits0References1
Cvelist
Cvelist
added 2026/09/14 12:23 p.m.3 views

CVE-2026-78336 Apache Syncope: OIDCC4UI provider list discloses client secrets to any authenticated user

Insertion of sensitive information into sent data vulnerability in Apache Syncope. Any authenticated user can query for the list of available OIDC providers configured for SSO with Console and Enduser. The returned payload contains all configuration settings, including client secrets, regardless ...

SaveExploits0References1
CVE
CVE
added 2026/09/14 12:23 p.m.2 views

CVE-2026-78336

Apache Syncope is an identity and access management (IAM) framework. The vulnerability resides in the OIDC provider list endpoint used for SSO configuration in Console and Enduser. Any authenticated user , regardless of their entitlements, can query this endpoint and receive a payload containing ...

SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 12:23 p.m.10 views

isslfix

iOS : iSSLFix: Certificate in chain starting at has isCA=0 = possible MITM attempt, making valida...

7.5CVSS6AI score0.06335EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/14 12:21 p.m.9 views

magic-extractor

Magic Extractor Description Magic Extractor is a universal extraction tool for Windows that identifies a file with several detectors and routes it to the right bundled extractor. It aims to cover mainstream compression formats, the installers you actually see today, and a range of less common...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/14 12:21 p.m.6 views

dtrace-memaccess_cve-2020-27949

Reading and writing memory of other processes using fasttrap The /dev/fasttrap device for creating trap nodes in user-space processes for the pid and objc providers has the permissions 666. In contrast to /dev/dtrace, which is also 666, fasttrap lacks a permission check. This allows any process t...

5.5CVSS6.8AI score0.00977EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/14 12:19 p.m.13 views

Project-Pwnag0dchi

Project Pwnag0dchi Created this since a lot of people were asking about the customized plugins & configurations I use. Following this guide, your Pwnagotchi will look exactly as seen on my socials & YouTube videos in 5mins tops. You'll also find a complete Pwnagotchi noob build guide + some commo...

5.9AI score
SaveExploits0References29
Kitploit
Kitploit
added 2026/09/14 12:18 p.m.5 views

CVE-2025-60719-AFD.SYS

!IMPORTANT This proof of concept is for demonstration and learning purposes only. Use it with care. CVE-2025-60719-AFD.SYS Akamai researchers have created a new AI capability for instant root-cause analysis. The tool is a supervised multi-agent system, dubbed Patchdiff-AI. In this article we are...

7CVSS7AI score0.01797EPSS
SaveExploits0
Rows per page
Query Builder