Lucene search
+L

72624 matches found

Kitploit
Kitploit
added 2026/09/08 2:03 p.m.10 views

cvelistV5

Note 2026-2-17 Adding Additional day of processing for date normalization to addreess potential inconsistencies New Date Normalization schedule: 2/16/26 - 2/28/26 Note 2026-2-10 Record Date NormalizationdeltaLog.json file change The deltaLog.json file normally retains a rolling 30 days worth of C...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/08 12:01 p.m.312 views

hash-identifier

hash-identifier Software to identify the different types of hashes used to encrypt data and especially passwords. Encryption formats supported: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 11:50 a.m.15 views

gdid-reversal

Full writeup of the Windows GDID Global Device Identifier fully reverse engineered -8a2be2 -0078d6 How Microsoft's "Global Device Identifier", the persistent Windows fingerprint named in the July 2026 Scattered Spider complaint, is actually generated, stored, and transmitted. TL;DR !NOTE Listed...

6AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/08 9:11 a.m.49 views

JS Help Desk <= 2.8.1 - SQL Injection

The JS Help Desk – Best Help Desk & Support Plugin plugin for WordPress is vulnerable to SQL Injection via the 'email' and 'trackingid' parameters in all versions up to 2.8.2 exclusive due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...

9.8CVSS7.7AI score0.02041EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/08 8:11 a.m.8 views

CVE-2026-62646

CVE-2026-62646 affects Reyrolle 7SR5 (all versions prior to V2.70 ), a Siemens industrial communication gateway. The vulnerability resides in the session identifier generation mechanism: an algorithm with insufficient randomness produces low-entropy tokens that can be predicted or brute-forced. A...

9.1CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 7:00 a.m.9 views

haiti

HAITI HA sh I denT ifI er What is it? A CLI tool and library to identify hash types hash type identifier. CLI library Features 675+ hash types detected Modern algorithms supported SHA3, Keccak, Blake2, etc. Hashcat and John the Ripper references CLI tool & library Hackable Installation...

6AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/08 6:02 a.m.66 views

tinfoleak

tinfoleak The most complete open-source tool for Twitter intelligence analysis Introduction tinfoleak is an open-source tool within the OSINT Open Source Intelligence and SOCMINT Social Media Intelligence disciplines, that automates the extraction of information on Twitter and facilitates...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 12:56 a.m.8 views

Intensio-Obfuscator

Intensio-Obfuscator Project not maintained anymore Thanks to all contributors What is this ? Intensio-Obfsucator tool takes a python source code and transform it into an obfuscated python code Replace all names of variables/classes/functions/files-name to random strings with length defined then a...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 12:43 a.m.6 views

config-demo

CVE-2020-5410...

7.5CVSS6.5AI score0.95586EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/07 5:28 p.m.5 views

CVE-2021-42694

CVE-2021-42694 This script implements a Homoglyph detection tool, primarily used to detect potential CVE-2021-42694 vulnerabilities in code. Let me explain its main functions in detail: Core Features: Detect homoglyph substitution attacks in code Scan identifiers such as variable names and functi...

8.3CVSS7.9AI score0.0491EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 1:30 p.m.23 views

boringssl

BoringSSL BoringSSL is a fork of OpenSSL that is designed to meet Google's needs. Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no...

5.8AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/07 9:25 a.m.4 views

hash-identifier

hash-identifier データの暗号化、特にパスワードの暗号化に使用されるさまざまな種類のハッシュを識別するソフトウェア。 対応している暗号化形式: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256 Lineage II C4 Domain Cached Credentials XOR-32 MD5Half MD5Middle...

5.9AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.98 views

Issabel Authenticated - Remote Code Execution

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...

9.8CVSS5.8AI score0.58153EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.387 views

Hikvision IP ping.php - Command Execution

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondataip with the input netstat -ano leads to os command injection...

9.8CVSS6.6AI score0.89138EPSS
SaveExploits2References5
Kitploit
Kitploit
added 2026/09/06 6:46 p.m.5 views

CVE-2025-22870

PoC – CVE-2025-22870 – 通过 Go 中的 IPv6 区域 ID 绕过 HTTP 代理 摘要 此概念验证展示了 CVE-2025-22870 的利用方式,该漏洞存在于 golang.org/x/net/http/httpproxy 包中(版本低于 v0.36.0),可通过滥用 IPv6 区域标识符与 NOPROXY 模式匹配的方式绕过 HTTP 代理限制。 受影响组件 包名 :golang.org/x/net/http/httpproxy 受影响版本 : 0.36.0 修复版本 :0.36.0 发现者 :Juho Forsén Mattermost Go 问题...

4.4CVSS6.6AI score0.00401EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2026/09/06 2:26 a.m.35 views

CVE-2026-75816 Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifier

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, 3.29.12. This is due to the preupdatevalue function lacking any capability or ownership check, and ActionPost::conditionslogic short-circuiting it...

9.8CVSS0.005EPSS
SaveExploits0References7
OSV
OSV
added 2026/09/05 9:25 p.m.4 views

MINI-QFRM-G6X5-3RCF

Bulletin has no description...

7.5CVSS5.6AI score0.00378EPSS
SaveExploits0
OSV
OSV
added 2026/09/05 9:25 p.m.4 views

MINI-V4XJ-6FMG-QP3M

Bulletin has no description...

7.5CVSS5.6AI score0.00315EPSS
SaveExploits0
OSV
OSV
added 2026/09/05 9:25 p.m.5 views

MINI-R4Q5-9RX9-FFMG

Bulletin has no description...

7.5CVSS5.6AI score0.00378EPSS
SaveExploits0
OSV
OSV
added 2026/09/05 9:24 p.m.5 views

MINI-343Q-V7PW-R7GH

Bulletin has no description...

7.5CVSS5.6AI score0.00315EPSS
SaveExploits0
Rows per page
Query Builder