Lucene search
+L

6067 matches found

Kitploit
Kitploit
added 2026/09/03 4:22 a.m.790 views

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

7.7AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/03 2:10 a.m.115 views

Cockpit Web Console < 360 - Remote Code Execution

Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH...

9.8CVSS7AI score0.1548EPSS
SaveExploits4References3
Kitploit
Kitploit
added 2026/09/03 12:00 a.m.6 views

CVE-2018-19518

CVE-2018-19518 अंतिम रिपोर्ट यहाँ : https://gitlab.com/ensimag-security/CVE-2018-19518/-/jobs/artifacts/master/raw/rapport.pdf?job=PDF उपयोग ऐप चलाएँ root@kitploit: docker-compose up -d वेब ऐप के लिए सामान्य उपयोग का उदाहरण। imap : webmail.grenoble-inp.org user : [email protected] password :...

8.5CVSS6.7AI score0.9523EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/02 9:06 p.m.2 views

advisories

عني تويتر: @justinsteven المدونة: https://www.justinsteven.com/ النشرات الأمنية مُدرجة بترتيب زمني عكسي. انقر على أي عنوان لقراءة النشرة الأمنية الكاملة. ثغرة XSS في DOM عبر postMessage في أداة Gartner Peer Insights تاريخ الإفصاح: 2023-02-03 كانت أداة Gartner Peer Insights Widget تعاني من ثغرة XS...

7.2AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 7:01 p.m.80 views

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

5.5AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/02 5:05 p.m.23 views

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

5.7AI score
SaveExploits0References1
EUVD
EUVD
added 2026/09/02 3:42 p.m.9 views

EUVD-2026-64763

fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding...

7.5CVSS5.9AI score0.0022EPSS
SaveExploits0References9
OSV
OSV
added 2026/09/02 3:42 p.m.5 views

GHSA-FPH4-WMHF-6FWF fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding

Impact fast-uri decodes a hostname's percent escapes twice in a single normalize or resolve call: once during parsing and again during authority recomposition. A nested percent-encoded host therefore survives the first decode and is turned into a live destination by the second, so...

7.5CVSS5.9AI score0.0022EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
added 2026/09/02 9:09 a.m.5 views

resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames

A flaw was found in the resolv gem. This vulnerability arises from the incorrect handling of DNS label lengths during message encoding. A remote attacker could exploit this by providing a specially crafted hostname to an application utilizing the resolv gem. This could lead to the bypass of...

4CVSS5.9AI score0.0035EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/09/02 9:08 a.m.6 views

resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames

A flaw was found in the resolv gem. This vulnerability arises from the incorrect handling of DNS label lengths during message encoding. A remote attacker could exploit this by providing a specially crafted hostname to an application utilizing the resolv gem. This could lead to the bypass of...

4CVSS5.9AI score0.0035EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/02 4:17 a.m.6 views

cve-2026-59891-control-lab

CVE-2026-59891: مختبر الانحدار والتحكم مشروع تمرين عملي معزول وتدقيق للقراءة فقط read-only يقارن الإصدار الفعلي المُصاب والإصدار المُصحَّح من @sigstore/oci باستخدام المدخلات نفسها، ويفحص شروط التعرّض حسب البيئة. مُبلِّغ CVE الخاص بهذا المشروع هو gyubin02. ملخّص مخصص للتوظيف والمقابلات: حالة أتمتة...

9.6CVSS5.8AI score0.00473EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/02 1:39 a.m.4 views

poc-proxycommand-vulnerable

असुरक्षित /.ssh/config के माध्यम से RCE ProxyCommand में %h, %p जैसे टोकन का उपयोग सुरंगों और कनेक्शन प्रॉक्सीिंग के लिए SSH का उपयोग करके काफी लोकप्रिय है। असुरक्षित कॉन्फ़िगरेशन root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p नोट: अपने प्रारंभिक...

5.9AI score
SaveExploits0
EUVD
EUVD
added 2026/09/02 12:31 a.m.7 views

EUVD-2026-69711

The values of the mail.allowedattachmenthostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnames, this could allow certain unintended hostnames to also match and serve remote attachments. This vulnerability was fixed in Thunderbird 15...

5.9AI score0.00271EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/01 10:17 p.m.5 views

CVE-2026-84642

The values of the mail.allowedattachmenthostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnames, this could allow certain unintended hostnames to also match and serve remote attachments. This vulnerability was fixed in Thunderbird 15...

7.5CVSS0.00271EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/01 9:33 p.m.14 views

CVE-2026-84642

CVE-2026-84642 affects Mozilla Thunderbird , where the mail.allowed_attachment_hostnames advanced config setting values were inserted into a regular expression without escaping . For certain valid hostnames, this regex injection allowed unintended hostnames to match , enabling remote attachments ...

7.5CVSS5.9AI score0.00271EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/09/01 9:33 p.m.35 views

CVE-2026-84642 Allowed UNC hostnames for attachments interpreted as a regular expression

The values of the mail.allowedattachmenthostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnames, this could allow certain unintended hostnames to also match and serve remote attachments. This vulnerability was fixed in Thunderbird 15...

0.00271EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/01 8:45 p.m.5 views

CVE-2025-32462-

CVE-2025-32462 – Sudo होस्टनाम बायपास विशेषाधिकार वृद्धि विषय-सूची 1. अवलोकन 2. भेद्यता विवरण 3. प्रभाव 4. प्रयोगशाला वातावरण 5. भेद्य संस्करण की पुष्टि 6. उपयोगकर्ता और sudoers कॉन्फ़िगरेशन 7. शोषण चरण-दर-चरण 8. प्रूफ ऑफ कॉन्सेप्ट सारांश 9. उबंटू क्यों भेद्य नहीं है 10. शमन 11. MITRE ATT&CK मैपि...

8.8CVSS6.8AI score0.0428EPSS
SaveExploits12
OSV
OSV
added 2026/09/01 11:33 a.m.4 views

CVE-2026-84194 LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname

LibreNMS versions = 23.10.0 and getDevice-hostname is concatenated into shell commands ssh, virsh list/dumpxml/domstate in VminfoLibvirt.php and passed to exec without escapeshellarg or argument separation. An authenticated admin can set a crafted device hostname to inject arbitrary OS commands,...

8.6CVSS6.5AI score
SaveExploits0References4
EUVD
EUVD
added 2026/09/01 11:33 a.m.10 views

EUVD-2026-69031

LibreNMS versions = 23.10.0 and getDevice-hostname is concatenated into shell commands ssh, virsh list/dumpxml/domstate in VminfoLibvirt.php and passed to exec without escapeshellarg or argument separation. An authenticated admin can set a crafted device hostname to inject arbitrary OS commands,...

8.6CVSS6.5AI score0.01391EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/01 11:33 a.m.35 views

CVE-2026-84194 LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname

LibreNMS versions = 23.10.0 and getDevice-hostname is concatenated into shell commands ssh, virsh list/dumpxml/domstate in VminfoLibvirt.php and passed to exec without escapeshellarg or argument separation. An authenticated admin can set a crafted device hostname to inject arbitrary OS commands,...

8.6CVSS0.01391EPSS
SaveExploits0References2
Rows per page
Query Builder