Lucene search
+L

2570 matches found

Kitploit
Kitploit
added 2026/09/01 6:35 p.m.6 views

MobSF_AI

MobSF AI Sidecar This project adds an AI-powered chat assistant to the Mobile Security Framework MobSF. It allows security analysts to ask questions about the analysis report generated by MobSF directly within the interface, leveraging OpenAI's model. Features Seamless Integration : Injects a...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 10:05 a.m.2 views

CVE-2025-55182-Metasploit-exploit-skeleton-real-flow-

🧪 STEP 1: Demo vulnerable web-app LAB We create logic similar to CVE-2025-55182 unsafe server-side execution. 📁 vulnapp/app.py root@kitploit: from flask import Flask, request import subprocess app = Flaskname @app.route"/render", methods="POST" def render: data = request.json.get"component" ❌...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/01 8:13 a.m.6 views

CVE-2024-3408-dtale

CVE-2024-3408 - D-Tale Authentication Bypass & RCE Reproducible lab environment for CVE-2024-3408, an authentication bypass and remote code execution vulnerability in D-Tale. Vulnerability D-Tale versions up to 3.15.1 are vulnerable due to: 1. Hardcoded SECRETKEY "Dtale" for Flask session signing...

9.8CVSS8.8AI score0.77951EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/01 6:00 a.m.2 views

log4j-honeypot-flask

log4j-honeypot-flask Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228 This can be installed on a workstation or server, either by running the Python app/app.py script directly you'll need python3, Flask, and Requests or as a Dock...

10CVSS7.4AI score0.99999EPSS
SaveExploits368
Kitploit
Kitploit
added 2026/09/01 5:47 a.m.4 views

CVE-2023-37941

Exploitation of Pickle RCE within Superset's Default Cache Information root@kitploit: Author Dinis Cruz Project Superset Description Apache's superset presents different options for caching, all of which based on Flask-Caching. A built-in cache is provided which serializes values for later...

6.6CVSS7.8AI score0.2944EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/01 4:59 a.m.5 views

cve-2021-21980-mock-server

Clippy of the Dead - CVE-2021-21980 testing environment and Nuclei template This repository contains a high-confidence Nuclei template to detect CVE-2021-21980 vSphere Web Client path traversal and a small mock environment that reproduces the vulnerable behavior for safe local testing. Files:...

7.5CVSS7.8AI score0.04601EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/01 12:55 a.m.4 views

not-slithering-anywhere

Overview Not Slithering Anywhere is the Python3 version of our Not Go-ing Anywhere vulnerable application. It is meant to demonstrate a number of security issues commonly found in Python applications, as well as serve as the basis for static & dynamic tool testing grounds. Getting started 1. Setu...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 2:47 p.m.5 views

CVE-2021-33026

CVE-2021-33026 Pickle Serialization Remote Code Execution - Memcached Poisoning PoC Exploit What's CVE-2021-3306? "The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains...

9.8CVSS8.6AI score0.07007EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/31 2:57 a.m.3 views

Python-Example

Seal Security — Exemple Python pip Une application Flask minimale et intentionnellement vulnérable utilisée pour démontrer, de bout en bout, comment Seal Security corrige une CVE connue en remplaçant une dépendance vulnérable par une version scellée rétroportée, prête à l'emploi — sans aucune...

5.9AI score
SaveExploits0
OSV
OSV
added 2026/08/29 11:29 a.m.15 views

MAL-2026-15566 Malicious code in flask-header-guard (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e0cbaefa0fcface340b03a236573ed70df9b4d7773715321df057a9862e3f8 The package is presented as Flask security-headers middleware but ships a hostile payload wired to fire at install time and again whenever the librar...

6.1AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/29 11:29 a.m.19 views

Malicious code in flask-header-guard (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e0cbaefa0fcface340b03a236573ed70df9b4d7773715321df057a9862e3f8 The package is presented as Flask security-headers middleware but ships a hostile payload wired to fire at install time and again whenever the librar...

6.1AI score
SaveExploits0References2
NVD
NVD
added 2026/08/24 8:17 p.m.11 views

CVE-2026-78553

RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secretkey file was created using the process's default permissions and umask, resulting in permissions such as 0644 under a common 022 umask. Consequently, other local users able to access th...

7CVSS0.00135EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 7:28 p.m.34 views

CVE-2026-78553 Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook

RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secretkey file was created using the process's default permissions and umask, resulting in permissions such as 0644 under a common 022 umask. Consequently, other local users able to access th...

7CVSS0.00135EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/24 7:28 p.m.19 views

CVE-2026-78553 Insecure Flask Secret-Key File Permissions Allow Local Administrator Session Forgery in RansomLook

RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secretkey file was created using the process's default permissions and umask, resulting in permissions such as 0644 under a common 022 umask. Consequently, other local users able to access th...

7CVSS5.5AI score
SaveExploits0References4
EUVD
EUVD
added 2026/08/24 7:28 p.m.11 views

EUVD-2026-65089

RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secretkey file was created using the process's default permissions and umask, resulting in permissions such as 0644 under a common 022 umask. Consequently, other local users able to access th...

7CVSS5.4AI score0.00135EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/21 7:17 p.m.10 views

CVE-2026-54134

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload handler and Flask with Werkzeug parse request parameters differently, allowing an attacker with FILEUPLOAD permission to inject reserved internal upload fields...

7CVSS0.00212EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/21 6:28 p.m.41 views

CVE-2026-54134

OctoPrint (web interface for 3D printers) versions prior to 1.11.8 and 2.0.0rc3 are vulnerable to file exfiltration via parser differentials between its custom Tornado upload handler and Flask/Werkzeug. An attacker with FILE_UPLOAD permission can inject reserved internal form fields through query...

7CVSS5.6AI score0.00212EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/21 6:28 p.m.25 views

CVE-2026-54134 OctoPrint: File exfiltration possible via query parameters on upload endpoints

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload handler and Flask with Werkzeug parse request parameters differently, allowing an attacker with FILEUPLOAD permission to inject reserved internal upload fields...

7CVSS5.8AI score
SaveExploits0References7
Circl
Circl
added 2026/08/18 10:35 p.m.12 views

CVE-2026-70667

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:16+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-f3qq-49m6-rw8f 2026-08-19 08:31:37+00:00| seen| https://gist.github.com/alon710/db3f4019c2372dbb6dfede560d6093f7...

6.3CVSS4.8AI score0.0014EPSS
SaveExploits0References2
Circl
Circl
added 2026/08/18 10:35 p.m.15 views

CVE-2026-71308

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:09+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-cfh6-pv5c-38jv 2026-08-19 01:22:20+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtfky2ijcb2v 2026-08-19 06:44:38+00:00...

8.1CVSS4.8AI score0.00179EPSS
SaveExploits0References3
Rows per page
Query Builder