Lucene search
+L

3652 matches found

Kitploit
Kitploit
added 2026/09/16 6:01 p.m.11 views

CVE-2026-19478

-b91c1c?style=flat-square CVE-2026-19478 — Nuclei Template Non-destructive Nuclei detection template for CVE-2026-19478 , a critical CVSS 9.4 unauthenticated arbitrary method invocation flaw in the GitLab GraphQL API, patched by GitLab on August 17, 2026. TL;DR GitLab's GraphQL schema supports a...

9.4CVSS8.4AI score0.05811EPSS
SaveExploits6References2
Kitploit
Kitploit
added 2026/09/16 1:27 p.m.11 views

stylesmuggler-ioc-toolkit

StyleSmuggler IOC Toolkit — CVE-2026-75650 Magento zero-day · Adobe Commerce zero-day · CVE-2026-75650 · APSB26-146 · VULN-39341 · unauthenticated RCE · Magento malware · Magento backdoor removal · Magento 2.4.9 vulnerability · Rust implant · GraphQL styles injection · PHP web shell Community...

10CVSS8.4AI score0.02148EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/16 12:19 p.m.8 views

CVE-2026-XXXX-atlassian-email-enumeration

CVE-2026-XXXX: Atlassian Central GraphQL — Email Enumeration Oracle Product Atlassian Central GraphQL Gateway api.atlassian.com/graphql Vulnerability Type CWE-204: Observable Response Discrepancy — Email Enumeration Oracle Severity MEDIUM — CVSS 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Description...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 12:04 p.m.12 views

CVE-2026-19478

CVE-2026-19478 GitLab GraphQL unauthenticated project deletion ★ CVE-2026-19478 GitLab GraphQL @glintroduced unauthenticated arbitrary-method-invocation PoC ★ https://github.com/user-attachments/assets/bb5d5f8a-a9bf-4148-854b-14c25c501d4b Overview CVE-2026-19478 is an unauthenticated...

9.4CVSS8.4AI score0.05811EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/16 10:39 a.m.10 views

GitLab-Graphql-CVE-2020-26413

GitLab-Graphql-CVE-2020-26413 GitLab-Graphql-CVE-2020-26413 POC Verificación individual: python3 GitlabCVE-2020-26413.py -u http://127.0.0.1 Verificación por lotes python3 GitlabCVE-2020-26413.py -f target.txt Los resultados de vulnerabilidades se generarán en la ruta actual del script...

5.3CVSS6.1AI score0.34931EPSS
SaveExploits1
NVD
NVD
added 2026/09/16 7:16 a.m.8 views

CVE-2026-1168

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL...

7.5CVSS0.00636EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/16 7:16 a.m.6 views

CVE-2025-14871

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL...

7.5CVSS0.00636EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/16 6:34 a.m.30 views

CVE-2025-14871

CVE-2025-14871 affects GitLab CE/EE versions 18.4.6 through 19.1.7, 19.2 through 19.2.5, and 19.3 through 19.3.1. The root cause is improper resource allocation limits in the GraphQL complexity calculation logic , which under certain conditions allows an unauthenticated attacker to trigger a deni...

7.5CVSS5.5AI score0.00636EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/16 6:34 a.m.10 views

EUVD-2025-210916

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL...

7.5CVSS5.5AI score0.00636EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/16 6:34 a.m.27 views

CVE-2025-14871 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL...

7.5CVSS0.00636EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/16 6:34 a.m.30 views

CVE-2026-1168 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL...

7.5CVSS0.00636EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/16 6:34 a.m.10 views

EUVD-2026-80122

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL...

7.5CVSS5.5AI score0.00636EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/16 6:34 a.m.29 views

CVE-2026-1168

GitLab CE/EE is affected by a denial of service vulnerability in the GraphQL complexity calculation logic , where improper resource allocation limits allow an unauthenticated attacker over the network to exhaust server resources. The issue affects all versions from 18.4.6 before 19.1.8 , 19.2 bef...

7.5CVSS5.5AI score0.00636EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/16 4:38 a.m.7 views

CVE-2026-22014-GraphQL-Persisted-Queries-Injection-via-ID-Manipulation

CVE-2026-22014 – GraphQL Persisted Queries Injection via ID Manipulation Program Code Node.js root@kitploit: // graphqlpersisted.js - Accepts persisted query IDs const express = require'express'; const graphqlHTTP = require'express-graphql'; const queries = "abc": "query user name " ;...

3.8CVSS7.7AI score0.00193EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 4:01 a.m.7 views

CVE-2022-2466---Request-Context-not-terminated-with-GraphQL

CVE-2022-2466 Contexto de solicitud no terminado con GraphQL Cómo ejecutar 1. ejecutar mvn:quarkus:dev 2. ejecutar las siguientes solicitudes http EJECUTAR ESTO DOS VECES root@kitploit: POST http://localhost:8080/graphql Content-Type: application/graphql Authorization: Bearer...

9.8CVSS7.6AI score0.0187EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 12:03 a.m.14 views

CVE-2026-23745-via-graphql-DEMO

Este repositorio no tiene un README...

8.2CVSS6.3AI score0.00382EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2026/09/16 12:00 a.m.7 views

GitLab 18.3 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-87719)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue that, under certain conditions, could allow an authenticated user with Duo Chat access to obtain Advanced Search instance configurations and sensitive credentials using ...

9.9CVSS0.00612EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/16 12:00 a.m.6 views

GitLab 18.4.6 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-1168)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an...

7.5CVSS0.00636EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/15 8:17 p.m.6 views

CVE-2026-76821

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0, the JSON ingestion mapper's extractWithRegexp formula function compiled a user-supplied regular expression with the JavaScript RegExp engine in...

7.1CVSS0.00466EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/15 8:17 p.m.7 views

CVE-2026-76820

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny lis...

7.7CVSS0.00304EPSS
SaveExploits0References4
Rows per page
Query Builder