Lucene search
+L

58664 matches found

Cvelist
Cvelist
added 2026/09/11 7:43 p.m.26 views

CVE-2026-89450 iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Reject a vSID wider than the SIDMATCH field tegra241vintfinitvsid programs the guest-provided vSID into SIDMATCH, whose VIRTSID field spans bits 20:1 with bit 0 as the match-enable flag. The HW therefore...

8.8CVSS0.00127EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/11 7:43 p.m.24 views

CVE-2026-89438 platform/x86: ISST: Validate logical CPU id and clos id

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core power feature. Reject any clos level or logical CPU number greater than the supported maximum. These are used to calculate...

0.002EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/11 7:43 p.m.5 views

CVE-2026-89438 platform/x86: ISST: Validate logical CPU id and clos id

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core power feature. Reject any clos level or logical CPU number greater than the supported maximum. These are used to calculate...

5.9AI score
SaveExploits0References7
EUVD
EUVD
added 2026/09/11 7:43 p.m.8 views

EUVD-2026-76344

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core power feature. Reject any clos level or logical CPU number greater than the supported maximum. These are used to calculate...

0.002EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/11 7:42 p.m.6 views

CVE-2026-80990 net: thunderbolt: Release the Rx HopID that was handed out on mismatch

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tbxdomainallocinhopid passes the wanted HopID to idaallocrange as the lower bound, so a taken id is not an error there: the allocator returns the next free on...

5.9AI score
SaveExploits0References7
CVE
CVE
added 2026/09/11 7:42 p.m.14 views

CVE-2026-80966

This Linux kernel vulnerability affects the ALSA portman2x4 audio driver. The driver fails to validate that the card index (devptr->id) is non-negative at probe time. A negative index—commonly supplied when the driver is bound via sysfs with a value such as "none"—can cause an out-of-bounds ac...

0.002EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/11 5:55 p.m.19 views

CVE-2026-65643

cve-id Donar...

8.8CVSS6.1AI score0.00904EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 1:25 p.m.8 views

Azure

Kit de Seguridad Ofensiva de Azure Una colección de scripts de Bash y PowerShell para evaluaciones de seguridad de Azure, que cubren escalada de privilegios de IAM, seguridad de contenedores, exposición de Key Vault, configuración de Entra ID y más. Diseñada para ejecutarse en Azure Cloud Shell o...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 12:13 p.m.11 views

the-token-was-a-row-number-cve-2026-67602-phpipam-rest-api-authentication-bypass

CVE-2026-67602 — phpIPAM 1.8.2 Bypass de Autenticación en la API REST Bypass de autenticación no autenticado en la API REST de phpIPAM, causado por una colisión de claves en la caché de objetos: la fila de la base de datos almacenada en caché al resolver el appid de una aplicación de API satisfac...

9.3CVSS5.9AI score0.00353EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 12:06 p.m.6 views

Event-ID-268-Rule-Name-SOC292-Possible-PHP-Injection-Detected-CVE-2024-4577-

Este repositorio no tiene un README...

9.8CVSS7.2AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/11 8:11 a.m.12 views

CVE-2026-23003-Cross-Chain-Bridge-Message-Forging-via-Missing-Origin-Chain-ID

CVE-2026-23003 – Falsificación de mensajes de puente entre cadenas por ID de cadena de origen ausente Código del programa Solidity + exploit de Python root@kitploit: // Bridge.sol - Vulnerable bridge contract contract Bridge mappingbytes32 = bool public processed; event Depositedaddress from,...

7.5CVSS6.9AI score0.00486EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 6:50 a.m.9 views

panos-captive-portal-rce

CVE-2026-0300 — Escáner de RCE por Desbordamiento de Búfer en el Portal C cautivo de User-ID de PAN-OS...

9.8CVSS7.7AI score0.31725EPSS
SaveExploits7References6
Kitploit
Kitploit
added 2026/09/11 4:50 a.m.31 views

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

5.9AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/11 2:55 a.m.6 views

CVE-2023-6329

CVE-2023-6329 — Control iD iDSecure Authentication Bypass A Python proof-of-concept exploit for CVE-2023-6329 , an improper access control vulnerability in Control iD iDSecure versions 4.7.43.0 and below. The flaw allows an unauthenticated remote attacker to reconstruct valid login credentials by...

9.8CVSS8.2AI score0.64996EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/11 1:20 a.m.6 views

CVE-2025-6783

Inyecta una condición siempre verdadera en la cláusula WHERE para que todas las filas coincidan: root@kitploit: curl -i -X POST \ -H "Content-Type: application/json" \ -H "forms-id: poc-001' OR '1'='1' -- " \ -H "domain-id: example.com" \ -d ' "emabedtype":"iframe", "shortcodetitle":"INJECTED",...

7.5CVSS5.8AI score0.00361EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.12 views

PT-2026-90166

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Reject a vSID wider than the SID MATCH field tegra241 vintf init vsid programs the guest-provided vSID into SID MATCH, whose VIRT SID field spans bits 20:1 with bit 0 as the match-enable flag. The HW therefo...

0.00127EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.16 views

PT-2026-90247

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject connection when transport allocation fails handle connect req returns without action when svc rdma create xprt fails to allocate the new transport. The CM core returns 0 for CONNECT REQUEST events, so it does not...

0.00168EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.12 views

PT-2026-90372

In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crush decode stores bucket data by array slot, and the mapper later derives the per-bucket workspace index from the decoded bucket id. A malformed map can therefore make one bucke...

0.00463EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.7 views

PT-2026-90251

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reorder rpcrdma rn unregister before rdma destroy id svc rdma free caches rdma-sc cm id-device before teardown, then calls rdma destroy idsc cm id which frees the cm id. rpcrdma rn unregister follows, but between those t...

0.00512EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.12 views

PT-2026-90154

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core power feature. Reject any clos level or logical CPU number greater than the supported maximum. These are used to calculate...

0.002EPSS
SaveExploits0References5
Rows per page
Query Builder