Lucene search
+L

5124 matches found

Kitploit
Kitploit
added 2026/08/25 3:50 p.m.60 views

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

7.3AI score
SaveExploits0
EUVD
EUVD
added 2026/08/25 1:15 p.m.5 views

EUVD-2026-65490

A weakness has been identified in dekdee adobe-xd-mcp 1.0.0. Impacted is an unknown function of the file src/parsers/xd-parser.ts of the component file-access-from-request Endpoint. Executing a manipulation of the argument outputFile/outputDir can lead to path traversal. It is possible to launch...

7.5CVSS
SaveExploits0References6
CVE
CVE
added 2026/08/25 1:15 p.m.9 views

CVE-2026-79622

A path traversal vulnerability was identified in dekdee/adobe-xd-mcp version 1.0.0 , specifically in the file src/parsers/xd-parser.ts within the file-access-from-request Endpoint component. A remote attacker can manipulate the outputFile/outputDir argument to traverse the file system, leading to...

7.5CVSS7.3AI score
SaveExploits0References6
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.64 views

EspoCRM <= 9.3.3 - Server-Side Request Forgery

EspoCRM = 9.3.3 contains an authenticated server-side request forgery caused by improper internal-host validation using alternative IPv4 formats in HostCheck::isNotInternalHost, letting authenticated users access internal resources via /api/v1/Attachment/fromImageUrl endpoint. id: CVE-2026-33534...

4.3CVSS5.1AI score0.01978EPSS
SaveExploits5References2
Kitploit
Kitploit
added 2026/08/25 4:12 a.m.381 views

gowitness

gowitness A golang, web screenshot utility using Chrome Headless. introduction gowitness is a website screenshot utility written in Golang, that uses Chrome Headless to generate screenshots of web interfaces using the command line, with a handy report viewer to process results. Both Linux and mac...

6.7AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/08/25 1:15 a.m.27 views

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares:...

7.2AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 1:10 a.m.32 views

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

7.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/24 7:10 a.m.40 views

git-dumper

git-dumper A tool to dump a git repository from a website. Install This can be installed easily with pip: root@kitploit: pip install git-dumper Usage root@kitploit: usage: git-dumper options URL DIR Dump a git repository from a website. positional arguments: URL url DIR output directory optional...

8.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/24 6:08 a.m.182 views

gdb-frontend

GDBFrontend is an easy, flexible and extensionable gui debugger. Installing Requirements GDB = 8.2 with python3 python3 = 3.6 tmux PIP Package Python Wheel Recommended You can install GDBFrontend with pip. root@kitploit: sudo python3 -m pip install gdbfrontend if it is already installed and you a...

7.4AI score
SaveExploits0References11
Ubuntu
Ubuntu
added 2026/08/20 11:42 a.m.7 views

USN-8653-1: PostgreSQL vulnerabilities

It was discovered that PostgreSQL incorrectly handled COPY FROM STDIN when an early failure occurred. An authenticated user could possibly use this issue to execute arbitrary SQL commands. CVE-2026-6464 It was discovered that PostgreSQL incorrectly reset extended statistics ownership during ALTER...

8.8CVSS7.6AI score0.01006EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2026/08/20 9:48 a.m.9 views

CVE-2026-70461

A flaw was found in rsync. Remote unauthenticated attackers can exploit a heap out-of-bounds write vulnerability by supplying a crafted files-from entry. This entry, containing both an interior and trailing backslash, causes the addimpliedinclude function to under-count the trailing backslash whe...

8.8CVSS5.3AI score0.00509EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/19 2:02 p.m.26 views

CVE-2026-76217 GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file

GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to the process, with full file contents...

7.1CVSS0.00281EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/19 2:02 p.m.11 views

EUVD-2026-62458

GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to the process, with full file contents...

7.1CVSS5.5AI score0.00281EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/19 2:02 p.m.14 views

CVE-2026-76217 GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file

GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to the process, with full file contents...

7.1CVSS5.6AI score
SaveExploits0References4
OSV
OSV
added 2026/08/19 8:53 a.m.10 views

BIT-POSTGRESQL-2026-6464 PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands

Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN" or "\copy FROM STDIN" command fails before the server indicates that it awaits input rows, psql processes the in-line...

8.1CVSS5.6AI score0.00358EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/17 6:11 a.m.8 views

bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards

It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes named to produce a wildcard name for a zone that is shorter than the attacker's zone, which can result in cache poisoning. For...

7.5CVSS5.5AI score0.00395EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/08/15 12:00 a.m.9 views

SUSE CVE-2026-6464

Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN" or "\copy FROM STDIN" command fails before the server indicates that it awaits input rows, psql processes the in-line...

7.5CVSS5.6AI score0.00358EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/15 12:00 a.m.14 views

PT-2026-72279

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Use caller client for debug BO sync amdxdna drm sync bo ioctl looks up args-handle in the ioctl caller's drm file. For SYNC DIRECT FROM DEVICE, it then calls amdxdna hwctx sync debug bo, but passes abo-client...

5.2AI score0.00154EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/14 7:56 p.m.27 views

CVE-2026-73680 Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...

8.8CVSS0.01476EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/14 4:16 p.m.11 views

CVE-2026-53970

ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can...

7.5CVSS0.0017EPSS
SaveExploits0References3
Rows per page
Query Builder