Lucene search
+L

3652 matches found

Kitploit
Kitploit
added 2026/09/16 12:19 p.m.8 views

CVE-2026-XXXX-atlassian-email-enumeration

CVE-2026-XXXX : Atlassian Central GraphQL — Oracle d'énumération d'e-mails Produit Atlassian Central GraphQL Gateway api.atlassian.com/graphql Type de vulnérabilité CWE-204 : Divergence de réponse observable — Oracle d'énumération d'e-mails Sévérité MOYENNE — CVSS 5.3...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 12:04 p.m.12 views

CVE-2026-19478

CVE-2026-19478 Eliminación no autenticada de proyectos GitLab GraphQL ★ CVE-2026-19478 PoC de invocación arbitraria de métodos no autenticada mediante @glintroduced en GitLab GraphQL ★ https://github.com/user-attachments/assets/bb5d5f8a-a9bf-4148-854b-14c25c501d4b Resumen CVE-2026-19478 es una...

9.4CVSS8.4AI score0.05811EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/16 10:39 a.m.10 views

GitLab-Graphql-CVE-2020-26413

GitLab-Graphql-CVE-2020-26413 GitLab-Graphql-CVE-2020-26413 POC 单个验证: python3 GitlabCVE-2020-26413.py -u http://127.0.0.1 批量验证 python3 GitlabCVE-2020-26413.py -f target.txt 会在脚本当前路径生成漏洞结果...

5.3CVSS6.1AI score0.34931EPSS
SaveExploits1
NVD
NVD
added 2026/09/16 7:16 a.m.8 views

CVE-2026-1168

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL...

7.5CVSS0.00636EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/16 7:16 a.m.6 views

CVE-2025-14871

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL...

7.5CVSS0.00636EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/16 6:34 a.m.29 views

CVE-2025-14871

CVE-2025-14871 affects GitLab CE/EE versions 18.4.6 through 19.1.7, 19.2 through 19.2.5, and 19.3 through 19.3.1. The root cause is improper resource allocation limits in the GraphQL complexity calculation logic , which under certain conditions allows an unauthenticated attacker to trigger a deni...

7.5CVSS5.5AI score0.00636EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/16 6:34 a.m.10 views

EUVD-2025-210916

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL...

7.5CVSS5.5AI score0.00636EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/16 6:34 a.m.27 views

CVE-2025-14871 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL...

7.5CVSS0.00636EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/16 6:34 a.m.30 views

CVE-2026-1168 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL...

7.5CVSS0.00636EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/16 6:34 a.m.10 views

EUVD-2026-80122

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL...

7.5CVSS5.5AI score0.00636EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/16 6:34 a.m.28 views

CVE-2026-1168

GitLab CE/EE is affected by a denial of service vulnerability in the GraphQL complexity calculation logic , where improper resource allocation limits allow an unauthenticated attacker over the network to exhaust server resources. The issue affects all versions from 18.4.6 before 19.1.8 , 19.2 bef...

7.5CVSS5.5AI score0.00636EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/16 4:38 a.m.7 views

CVE-2026-22014-GraphQL-Persisted-Queries-Injection-via-ID-Manipulation

CVE-2026-22014 – Inyección de consultas persistidas de GraphQL mediante manipulación de ID Código del programa Node.js root@kitploit: // graphqlpersisted.js - Accepts persisted query IDs const express = require'express'; const graphqlHTTP = require'express-graphql'; const queries = "abc": "query...

3.8CVSS7.7AI score0.00193EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 4:01 a.m.7 views

CVE-2022-2466---Request-Context-not-terminated-with-GraphQL

CVE-2022-2466 Contexto de solicitud no terminado con GraphQL Cómo ejecutar 1. ejecutar mvn:quarkus:dev 2. ejecutar las siguientes solicitudes http EJECUTAR ESTO DOS VECES root@kitploit: POST http://localhost:8080/graphql Content-Type: application/graphql Authorization: Bearer...

9.8CVSS7.6AI score0.0187EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 12:03 a.m.14 views

CVE-2026-23745-via-graphql-DEMO

Este repositorio no tiene un README...

8.2CVSS6.3AI score0.00382EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2026/09/16 12:00 a.m.6 views

GitLab 18.4.6 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-1168)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an...

7.5CVSS0.00636EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/09/16 12:00 a.m.7 views

GitLab 18.3 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-87719)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue that, under certain conditions, could allow an authenticated user with Duo Chat access to obtain Advanced Search instance configurations and sensitive credentials using ...

9.9CVSS0.00612EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/15 8:17 p.m.6 views

CVE-2026-76821

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0, the JSON ingestion mapper's extractWithRegexp formula function compiled a user-supplied regular expression with the JavaScript RegExp engine in...

7.1CVSS0.00466EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/15 8:17 p.m.7 views

CVE-2026-76820

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny lis...

7.7CVSS0.00304EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/15 7:40 p.m.11 views

CVE-2026-76820

OpenCTI, an open-source cyber threat intelligence platform, is affected by a Server-Side Request Forgery (SSRF) in the synchronizerFetch GraphQL query prior to version 7.260701.0 . The backend's fetchRemoteStreams function validated only the HTTP/HTTPS scheme without applying the ingestion deny l...

7.7CVSS5.8AI score0.00304EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/15 7:40 p.m.6 views

EUVD-2026-79241

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny lis...

7.7CVSS5.8AI score0.00304EPSS
SaveExploits0References4
Rows per page
Query Builder