Lucene search
+L

307617 matches found

Kitploit
Kitploit
added 2026/09/16 11:18 a.m.12 views

CVE-2026-48909

CVE-2026-48909 — SP LMS PHP对象注入 → RCE 未认证远程代码执行 —— 通过JoomShaper SP LMS comsplms ≤ 4.1.3 for Joomla CMS中的PHP对象注入实现。 作者: Amin İsayev / Proxima Cyber Security 概述 SP LMS 是JoomShaper开发的一款流行的Joomla学习管理系统扩展,拥有超过10万次安装。版本≤ 4.1.3将 lmsOrders cookie 直接传递给 unserialize...

9.5CVSS6AI score0.04941EPSS
SaveExploits5References2
Kitploit
Kitploit
added 2026/09/16 11:18 a.m.263 views

netlas-cookbook

Netlas CookBook The goal of this guide is to teach anyone interested in cybersecurity, regardless of their knowledge level, how to make the most of Netlas Search Tools. This is a long read. We have collected as many simple use cases as possible and demonstrated how to automate them. ⭐️ Give us a...

9.4AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/09/16 11:18 a.m.13 views

netlas-cookbook

Netlas CookBook 本指南的目标 是帮助任何对网络安全感兴趣的人,无论其知识水平如何,都能充分利用 Netlas 搜索工具。这是一篇长文。我们收集了尽可能多的简单用例,并演示了如何实现自动化。 ⭐️ 给我们一个 Star 以表达感谢 👁️ 订阅以获取更新 Netlas 是一个搜索引擎,用于查找和分析互联网上所有 IP 地址和域名的信息。Netlas 具备一些攻击面管理功能,但本指南主要侧重于 Netlas 搜索工具及其在自动化中的使用方法。 目录 简单使用示例 获取 IP 或域名的信息 搜索非拉丁域名 查找标题中包含特定词语的网站 搜索查询语法 筛选器(字段) 逻辑运算符 范围...

6AI score
SaveExploits0References26
Kitploit
Kitploit
added 2026/09/16 11:18 a.m.11 views

MCP-Inspector-CVE-2025-49596

MCP Inspector CVE-2025-49596 Vulnerability Checker This script checks if an MCP Inspector server is vulnerable to CVE-2025-49596, a security issue where the /sse endpoint responds to unauthenticated requests missing auth token. How It Works The script sends a GET request to the /sse endpoint of t...

9.4CVSS8.8AI score0.44453EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 11:18 a.m.79 views

mapcidr

A utility program to perform multiple operations for a given subnet/CIDR range. Features • Install • Usage • Library • Join Discord mapCIDR is developed to ease load distribution for mass scanning operations; it can be used both as a library and as an independent CLI tool. Features CIDR expansion...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/16 11:17 a.m.17 views

Seth

Seth Seth は Python と Bash で書かれたツールで、RDP 接続を MitM し、接続のダウングレードを試みることで平文の認証情報を抽出します。ペンテスト、ワークショップ、講演などにおいて、適切に設定された RDP 接続の重要性について認識を高め、教育するために開発されました。作者は Adrian Vollmer SySS GmbH です。 使い方 以下のように実行します: root@kitploit: $ ./seth.sh RDP ホストが被害マシンと同じサブネット上にない限り、最後の IP アドレスはゲートウェイの IP アドレスでなければなりません。...

6.3AI score
SaveExploits0
NVD
NVD
added 2026/09/16 11:17 a.m.4 views

CVE-2026-90039

In the Linux kernel, the following vulnerability has been resolved: NFSD: Guard admin state-revocation walks with NFSDNETUP Writing to /proc/fs/nfsd/unlockfilesystem, or sending the NFSDCMDUNLOCKFILESYSTEM or NFSDCMDUNLOCKEXPORT netlink command, walks the NFSv4 client hash tables to revoke open...

SaveExploits0References3
NVD
NVD
added 2026/09/16 11:17 a.m.4 views

CVE-2026-90031

In the Linux kernel, the following vulnerability has been resolved: usb-storage: eneub6250: fix race between scan work and probe eneub6250probe calls usbstorprobe2, which starts the usb-storage infrastructure and schedules the delayed scan work. The driver then calls enegetcardtype, which sends a...

SaveExploits0References8
NVD
NVD
added 2026/09/16 11:17 a.m.4 views

CVE-2026-90030

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: clear forceRM when issuing EndTransfer The forceRM bit of the DEPCMD register controls the behavior of the EndTransfer command used to stop an active transfer. Older DWC3 programming guide revisions recommended setting...

7.8CVSS
SaveExploits0References3
NVD
NVD
added 2026/09/16 11:17 a.m.3 views

CVE-2026-90005

In the Linux kernel, the following vulnerability has been resolved: samples/damon/wsse: handle damonstart failure Patch series "samples/damon: handle damonstart,stop failures". All DAMON sample modules are not correctly handling failures from damonstart. Among those, mtier also has an additional...

SaveExploits0References3
NVD
NVD
added 2026/09/16 11:17 a.m.4 views

CVE-2026-90009

In the Linux kernel, the following vulnerability has been resolved: scsi: bsg: Fix TOCTOU in iouring passthrough command setup scsibsguringcmd reads bsguringcmd from the shared mmap'd SQE. Userspace can change a field after we check it and before we use it. requestlen is the sharp case: it can gr...

7.8CVSS
SaveExploits0References2
NVD
NVD
added 2026/09/16 11:17 a.m.2 views

CVE-2026-89981

In the Linux kernel, the following vulnerability has been resolved: arm64: Don't read GMIDEL1 when MTE is disabled cpuinfostorecpu gates the GMIDEL1 read on the raw IDAA64PFR1EL1, so it reads the register even when the kernel has disabled MTE CONFIGARM64MTE=n or arm64.nomte. KVM sets HCREL2.TID5 ...

SaveExploits0References2
NVD
NVD
added 2026/09/16 11:17 a.m.3 views

CVE-2026-89984

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix kernel address leakages in LBR stack Before Arch LBR gained CPL filtering support, a user-only branch stack could still contain kernel addresses. As a result, kernel branch records may be exposed to user space...

SaveExploits0References8
NVD
NVD
added 2026/09/16 11:17 a.m.3 views

CVE-2026-89973

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: check the data direction of a C2HData PDU nvmetcphandlec2hdata finds the request by command id and checks that it has a payload, but it does not check that the command asked for data to be read. A controller that answer...

8.2CVSS
SaveExploits0References8
NVD
NVD
added 2026/09/16 11:17 a.m.4 views

CVE-2026-89968

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: reject unsolicited H2CData PDUs nvmettcphandleh2cdatapdu accepts an H2CData PDU after only checking that its TTAG is a valid in-range command index and that the command's data buffers are mapped. It never checks that t...

7.5CVSS
SaveExploits0References8
NVD
NVD
added 2026/09/16 11:17 a.m.3 views

CVE-2026-89971

In the Linux kernel, the following vulnerability has been resolved: nvme: skip the zoned limits update if the zone info query failed nvmequeryzoneinfo returns either a negative errno or a positive NVMe status code, but nvmeupdatensinfoblock only tests for the negative case: ret =...

7.5CVSS
SaveExploits0References3
NVD
NVD
added 2026/09/16 11:17 a.m.3 views

CVE-2026-89964

In the Linux kernel, the following vulnerability has been resolved: parisc: eisa: Fix infinite loop when parsing invalid IRQ value When an invalid value is passed via the "eisairqedge=" kernel command line parameter e.g. "eisairqedge=16,5", eisairqsetup prints an error message and continues witho...

SaveExploits0References8
NVD
NVD
added 2026/09/16 11:16 a.m.3 views

CVE-2026-89863

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check qlachkedifrxsadeletepending obtains the SCSI command via GETCMDSPsp and immediately dereferences cmd-scdatadirection. That command pointer can be NULL: the firmwar...

7.5CVSS
SaveExploits0References7
NVD
NVD
added 2026/09/16 11:16 a.m.2 views

CVE-2026-89866

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Resume device before setting EOS flag Setting the EOS flag talks to the firmware via sendfirmwarecommand, which accesses VPU registers. Both the STREAMOFF path wave5vpudecjobabort and the V4L2DECCMDSTOP...

SaveExploits0References2
NVD
NVD
added 2026/09/16 11:16 a.m.2 views

CVE-2026-89860

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Initialize NVMe abortwork once at submission qlanvmefcpabort and qlanvmelsabort ran INITWORK on priv-abortwork immediately before schedulework. INITWORK reinitializes the workstruct, resetting its list head and...

8.8CVSS
SaveExploits0References5
Rows per page
Query Builder