Lucene search
+L

133142 matches found

Kitploit
Kitploit
added 2026/08/29 2:51 a.m.2 views

CTF_WRITEUPS-TryHackMe-CVE-2021-41773-

CTFWRITEUPS-TryHackMe-CVE-2021-41773- CTFWRITEUPS/TryHackMe /CVE-2021-41773/ CVE-2021-41773/42013 Una piccola spiegazione di un bug di path traversal di Apache e di una correzione incompleta Task 1: Un po' di contesto... Una breve storia Il 5 ottobre 2021 è stato rilasciato un CVE che descrive un...

9.8CVSS7.2AI score0.99992EPSS
SaveExploits164
Kitploit
Kitploit
added 2026/08/29 2:16 a.m.5 views

CVE-2023-43208

Vulnerabilità RCE in Mirth Connect CVE-2023-37679 e CVE-2023-43208 Questo script exploit e PoC sono scritti per un'analisi approfondita delle CVE su vsociety. CVE-2023-43208 è un grave bug di sicurezza in NextGen Mirth Connect, uno strumento utilizzato da ospedali e cliniche per condividere i dat...

9.8CVSS7.4AI score0.99434EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/08/29 1:59 a.m.289 views

bn-uefi-helper

bn-uefi-helper ATTENTION: This plugin has been deprecated. See EFI Resolver Description Helper plugin for analyzing UEFI firmware. This plugin contains the following features: Apply the correct prototype to the entry point function Fix segments so all segments are RWX and have the correct semanti...

5.6AI score
SaveExploits0References3
EUVD
EUVD
added 2026/08/29 12:31 a.m.5 views

EUVD-2026-67960

IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limitation of resources...

6.2CVSS5.9AI score0.0012EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/28 11:00 p.m.188 views

pacbot

Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...

6AI score
SaveExploits0References7
EUVD
EUVD
added 2026/08/28 8:28 p.m.19 views

EUVD-2026-42297

Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances...

7.1CVSS5.9AI score0.00493EPSS
SaveExploits1References7
Kitploit
Kitploit
added 2026/08/28 7:51 p.m.4 views

informer

Informer – Telegram-Massenüberwachung Update 10-20-2025 Sicherheit : Behobene kritische Sicherheitslücke CVE-2022-1941 in mysql-connector-python Sicherheit : Migration von veraltetem oauth2client zu google-auth Alle Abhängigkeiten auf die neuesten sicheren Versionen aktualisiert Fehler im...

7.5CVSS6.8AI score0.01213EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/28 7:04 p.m.13 views

EUVD-2026-42698

Pimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypass...

8.8CVSS5.9AI score0.00666EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/28 6:58 p.m.3 views

CVE-2026-72585-PoC

CVE-2026-72585 — Grafana: Correzione incompleta di CVE-2026-21724 consente al ruolo Editor di eliminare i contact point protetti Prodotto: Grafana Grafana Labs — fino alla 13.2.0 File: pkg/services/ngalert/provisioning/contactpoints.go CWE: CWE-284 — Controllo degli accessi improprio CVSS 3.1:...

6.5CVSS6.6AI score0.00263EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/08/28 6:32 p.m.14 views

EUVD-2026-42931

9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass...

8.6CVSS5.9AI score0.00611EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/28 6:11 p.m.2 views

Zapscape-Fix

Zapscape-Fix — CVE-2026-64561 KVM 内核热补丁 English | 简体中文 给 CentOS Stream 8 / RHEL 8 (4.18.0 全系列内核)的 KVM 宿主机修复 CVE-2026-64561(Zapscape) 漏洞的内核热补丁 : 不打补丁的风险 :租户虚拟机(guest)可以仅凭自身操作逃逸到宿主机,以宿主 内核 root 权限执行代码——击穿整台物理机及其上所有虚拟机。 本项目的补丁 :基于 Linux 上游官方修复(2abd5287f083)backport 而来, 通过内核 livepatch 机制在线生效 : ✅ 不重启宿...

8.8CVSS5.1AI score0.00347EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/08/28 4:39 p.m.2 views

MAL-001

MAL-001: Server-Side Template Injection di FreeMarker in Liferay Portal È stato scoperto un problema in Liferay - Portal =7.4.3.12-ga12. Inserendo contenuti dannosi nei modelli FTL, un attaccante può effettuare attacchi SSTI Server-Side Template Injection, che possono sfruttare gli oggetti espost...

8.8CVSS7.3AI score0.03656EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2026/08/28 4:39 p.m.8 views

Vikunja has an incomplete fix for CVE-2026-35595: Write-only user can detach shared project from parent hierarchy via parent_project_id=0

Summary The fix for CVE-2026-35595 project re-parenting privilege escalation only gates reparent operations when parentprojectid 0. A user with Write but not Admin permission on a shared child project can detach it from its parent by sending parentprojectid: 0, bypassing the Admin requirement. Th...

8.3CVSS7.3AI score0.0029EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2026/08/28 4:39 p.m.6 views

GHSA-44V6-7FXQ-VGF4 Vikunja has an incomplete fix for CVE-2026-35595: Write-only user can detach shared project from parent hierarchy via parent_project_id=0

Summary The fix for CVE-2026-35595 project re-parenting privilege escalation only gates reparent operations when parentprojectid 0. A user with Write but not Admin permission on a shared child project can detach it from its parent by sending parentprojectid: 0, bypassing the Admin requirement. Th...

4.3CVSS5.9AI score0.00268EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/28 4:38 p.m.16 views

CVE-2026-55064

Vikunja (open-source self-hosted task management platform) versions 2.3.0 through 2.4.0 contain an incomplete fix for CVE-2026-35595. The authorization checks in pkg/models/project_permissions.go and pkg/models/project.go only gate reparent operations when parent_project_id > 0, but UpdateProj...

4.3CVSS5.9AI score0.00268EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/28 4:38 p.m.28 views

CVE-2026-55064 Vikunja incomplete fix for CVE-2026-35595: Write-only user can detach shared project from parent hierarchy via parent_project_id=0

Vikunja is an open-source self-hosted task management platform. From 2.3.0 until 2.4.0, a user with Write but not Admin permission on a shared child project can detach it from its parent hierarchy by submitting parentprojectid equal to 0 to POST /api/v1/projects/project. The Project.CanUpdate...

4.3CVSS0.00268EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/28 4:38 p.m.4 views

EUVD-2026-67831

Vikunja is an open-source self-hosted task management platform. From 2.3.0 until 2.4.0, a user with Write but not Admin permission on a shared child project can detach it from its parent hierarchy by submitting parentprojectid equal to 0 to POST /api/v1/projects/project. The Project.CanUpdate...

4.3CVSS5.9AI score0.00268EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/28 4:29 p.m.2 views

pv2-victim

pv2-victim authz-Forschung - CVE-2026-3306 Fix-Abdeckung...

5.3CVSS5.2AI score0.00353EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/28 4:06 p.m.15 views

EUVD-2026-43098

Phalcon: Catastrophic backtracking ReDoS in the default Phalcon Router route lead to remote unauthenticated DoS...

8.7CVSS5.9AI score0.00524EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/28 3:26 p.m.3 views

ZigRaceExploit

CVE-2021-25741 — Exploit di race condition TOCTOU sui symlink in Zig Exploit didattico della race condition TOCTOU Time Of Check, Time Of Use all'origine di CVE-2021-25741, una vulnerabilità nel kubelet di Kubernetes. Il progetto dimostra localmente senza cluster K8s come uno swap concorrente di...

8.8CVSS6.8AI score0.07964EPSS
SaveExploits1References1
Rows per page
Query Builder