Lucene search
+L

136 matches found

Kitploit
Kitploit
•added 2026/10/04 3:42 a.m.•79 views

thewhitecircle.github.io

TWC Official Website Visit our website...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/04 3:23 a.m.•223 views

tko-subs

tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...

6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/04 2:02 a.m.•11 views

ps4-11.50.github.io

ps4-11.50.github.io ps4 cve-2008-3531...

6.9CVSS5.9AI score0.01032EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/10/04 1:36 a.m.•13 views

noinstagram

noinstagram I got rid of my IG account some time ago, but I'd still like to see photos from my wife and our dog. I was just visiting the IG website for each public user I wanted to view, but that was way too much work. So I built this one Sunday. Want your own noinstagram page? fork this repo set...

6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/01 1:54 a.m.•22 views

gahoole77.github.io

This repository does not have a README...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/30 5:12 p.m.•32 views

pedrocruz2202.github.io

This repository does not have a README...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/30 8:09 a.m.•94 views

gud425.github.io

This repository does not have a README...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 5:04 p.m.•13 views

CVE-2025-40536-Analysis

CVE-2025-40536-Analysis victoriaalicex.github.io linearregressiontaxi.ipynb linearregressiontaxi.ipynb...

9.8CVSS8.2AI score0.73562EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/28 11:47 p.m.•14 views

CVE-2024-4367_test

This project is used to test CVE-2024-4367, POC access address: https://j1nksc.github.io/CVE-2024-4367test/poc.pdf...

8.8CVSS7.6AI score0.7066EPSS
SaveExploits17References1
Kitploit
Kitploit
•added 2026/09/27 1:02 p.m.•95 views

sakthivel10q.github.io

This repository does not have a README...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/08/27 5:22 p.m.•20 views

pansyhebephrenic23.github.io

Questo repository non contiene un README...

5.3AI score
SaveExploits0
OSV
OSV
•added 2026/08/04 2:52 p.m.•13 views

CLSA-2026-1781830595 TuxCare security update for gh-pages (1 CVE)

TuxCare rebuilt gh-pages to address 1 CVE. Fixed in 0.12.0-tuxcare.1...

9.8CVSS8.1AI score0.01116EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/17 12:00 a.m.•2 views

CVE-2026-44644: Improper Neutralization of Input During Web Page Generation

LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. Versions 10.25.7 and below are vulnerable to XSS through a flaw in the striphtml filter logic. The striphtml filter is intended to remove HTML tags from a string before rendering, and is widely used as an XS...

6.1CVSS5.9AI score0.00355EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/17 12:00 a.m.•1 views

CVE-2026-45617: Inefficient Regular Expression Complexity

LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the built-in striphtml filter uses a regex containing four flawed lazy-quantified alternatives, leading to ReDoS via quadratic backtracking. When the input contains many...

7.5CVSS5.8AI score0.00655EPSS
SaveExploits0References2
OSV
OSV
•added 2026/05/29 4:16 p.m.•28 views

UBUNTU-CVE-2026-48501

GitHub CLI gh is GitHub’s official command line tool. Prior to 2.93.0, GitHub CLI incorrectly includes authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands. The CLI uses a shared HTTP client with an authenticati...

9.1CVSS5.8AI score0.00446EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/05/29 3:30 p.m.•36 views

GitHub CLI has an incorrect authorization header in API requests to TUF repository mirrors via `gh attestation`, `gh release verify`, and `gh release verify-asset` commands

Summary GitHub CLI incorrectly includes an authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands. Affected users: - Authenticated github.com users who previously ran gh attestation commands, gh release verify, or...

9.1CVSS8.1AI score0.00446EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2026/05/29 3:14 p.m.•92 views

CVE-2026-48501

GitHub CLI (gh) prior to 2.93.0 contains a token leakage vulnerability: a shared HTTP client with an authentication layer attaches user tokens to outgoing requests without proper host detection. The host normalization collapses any *.github.com subdomain to github.com, causing requests to tuf-rep...

9.1CVSS8AI score0.00446EPSS
SaveExploits0References1Affected Software1
Trend Micro Simply Security
Trend Micro Simply Security
•added 2026/03/05 12:00 a.m.•20 views

New BoryptGrab Stealer Targets Windows Users via Deceptive GitHub Pages

The BoryptGrab campaign uses fake SEO‑optimized GitHub repositories and deceptive download pages to distribute a data‑stealing malware family that delivers multiple payloads, including a reverse SSH backdoor, to Windows users...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/01/09 11:20 a.m.•19 views

CVE-2021-22867

A path traversal vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration options used by GitHub Pages were not sufficiently restricted and made it possible to read files on the GitHub Enterprise Server...

6.5CVSS6.4AI score0.01171EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:53 a.m.•17 views

CVE-2020-10518

A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration of the underlying parsers used by GitHub Pages were not sufficiently restricted and made it possible to execute commands on the...

8.8CVSS7.9AI score0.03699EPSS
SaveExploits0References1
Rows per page
Query Builder