Lucene search
+L

410445 matches found

Kitploit
Kitploit
added 2026/08/24 6:25 p.m.2 views

TPASLog4ShellPoC

TPAS Log4Shell PoC Questa repository contiene una Prova di Concetto PoC per la vulnerabilità Log4Shell CVE-2021-44228, sviluppata come parte del lavoro per l'unità curriculare TPAS del Master in Sicurezza Informatica presso FCUP. Include: Un frontend React SPA che simula un sito e-commerce generi...

10CVSS7.5AI score0.99999EPSS
SaveExploits364
RedHat Linux
RedHat Linux
added 2026/08/24 6:24 p.m.7 views

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-687_10_1 security update

An update for kpatch-patch-5140-687101 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.8CVSS7.1AI score0.00768EPSS
SaveExploits76References6
SUSE Linux
SUSE Linux
added 2026/08/24 6:24 p.m.8 views

Security update for python-sqlparse

This update for python-sqlparse fixes the following issues: CVE-2026-54284: TokenList.init materializes Osubtree value per group, causing CPU DoS before depth/token caps trigger bsc1275459. CVE-2026-59893: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS bsc1275461...

8.7CVSS5.8AI score0.00279EPSS
SaveExploits0References16
Kitploit
Kitploit
added 2026/08/24 6:23 p.m.2 views

CVE-2023-4568

बैज लाइसेंस MIT स्थापना 1. Python3 और pip स्थापित करें निर्देश यहाँ यदि आप यह नहीं समझ पाते हैं, तो आपको वास्तव में इसका उपयोग नहीं करना चाहिए pip के माध्यम से स्थापित करें root@kitploit: pip install CVE-2023-4568 जाँच करने के लिए नीचे दिए गए कमांड को चलाएँ CVE-2023-4568 -h कॉन्फ़िगरेशन 2. हमने...

6.5CVSS6.3AI score0.03568EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/08/24 6:20 p.m.2 views

ghostdebug

GhostDebug GhostDebug ist ein Windows-x64-Debugger-Prototyp, der aus einer nativen Debugging-DLL und einem .NET-Framework-Befehlszeilenclient besteht. Er ist für das Debugging von Zielen gedacht, die Debugger-Erkennungsprüfungen verwenden. Hintergrundinformationen zum Design finden Sie unter...

5.2AI score
SaveExploits0References1
NVD
NVD
added 2026/08/24 6:17 p.m.8 views

CVE-2026-9254

An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can inject arbitrary commands and execute th...

8.7CVSS0.02346EPSS
SaveExploits0References8
NVD
NVD
added 2026/08/24 6:17 p.m.8 views

CVE-2026-76072

The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow permission, and permissionChecker.ts...

8.3CVSS0.0032EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/24 6:17 p.m.6 views

CVE-2026-71943

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

8.6CVSS0.03054EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 6:17 p.m.6 views

CVE-2026-71931

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftpupgrade function. The vulnerability is caused by insufficient filtering before the filename field is concatenated into a command. A remote attacker can trigger this vulnerability via crafted input to execute...

8.6CVSS0.02405EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 6:17 p.m.10 views

CVE-2026-71927

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

8.6CVSS0.01666EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 6:17 p.m.6 views

CVE-2026-71928

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the fdftDevice function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execu...

8.6CVSS0.01666EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 6:17 p.m.7 views

CVE-2026-71929

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to...

8.6CVSS0.03054EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 6:17 p.m.8 views

CVE-2026-71930

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

8.6CVSS0.03054EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 6:17 p.m.8 views

CVE-2026-71921

Multiple DrayTek VigorSwitch models contain a pre-authentication command injection vulnerability in the setget.cgi interface. The vulnerability is caused by insufficient filtering of the pass field before command execution. A remote attacker can trigger this vulnerability via crafted input to...

9.8CVSS0.03248EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 6:17 p.m.8 views

CVE-2026-71924

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getVid function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

8.6CVSS0.03054EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 6:17 p.m.6 views

CVE-2026-71925

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getDetail function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

8.6CVSS0.03054EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 6:17 p.m.8 views

CVE-2026-71923

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the authset function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

8.6CVSS0.01666EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 6:17 p.m.9 views

CVE-2026-71926

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The vulnerability is caused by insufficient sanitization of the username, password, and location fields before command execution. A remote attacker can trigger this vulnerability via crafted...

8.6CVSS0.01666EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 6:17 p.m.5 views

CVE-2026-71918

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the webBackupAction function. The vulnerability is caused by insufficient filtering of the option, key, pwencode, pathN, and valueN fields before command execution. A remote attacker can trigger this vulnerability vi...

8.6CVSS0.03054EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 6:17 p.m.6 views

CVE-2026-71917

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the pingtrace function. The vulnerability is caused by insufficient validation of the host field before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary...

8.6CVSS0.03054EPSS
SaveExploits0References2
Rows per page
Query Builder