Lucene search
+L

7604 matches found

Kitploit
Kitploit
added 2026/09/14 5:49 p.m.167 views

androguard

Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...

5.6AI score
SaveExploits0References18
Kitploit
Kitploit
added 2026/09/14 11:25 a.m.7 views

CVE-2026-11107-Insecure-Direct-Object-Reference-with-Predictable-UUIDv1

CVE-2026-11107 – Insecure Direct Object Reference with Predictable UUIDv1 Program Code Python Flask root@kitploit: idorserver.py - API with UUIDv1 user IDs import uuid, time from flask import Flask, request, jsonify app = Flaskname Generate predictable UUIDv1 based on timestamp + MAC users =...

4.3CVSS5.8AI score0.00227EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 6:43 a.m.11 views

phantom-frida

phantom-frida phantom-frida builds Android Frida Server and Gadget from source while changing a targeted set of observable runtime identifiers. It is a builder and verification harness, not a promise that every application-specific detection method is defeated. The current compatibility target is...

6.2AI score
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.19 views

OpenProject < 12.5.4 - Project Identifiers Exposure

OpenProject versions before 12.5.6 generate a publicly accessible robots.txt file revealing project identifiers, even if the instance is set to 'Login required', letting attackers gather project info, exploit requires no authentication. id: CVE-2023-33960 info: name: OpenProject 12.5.4 - Project...

7.5CVSS7.1AI score0.01257EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 5:25 p.m.7 views

socid-extractor

socidextractor Convierte cualquier página de perfil público en un registro estructurado de cuenta: nombres de usuario, nombres mostrados, biografías, avatares, ubicaciones, fechas de registro, recuentos de seguidores, enlaces externos y los identificadores internos estables que identifican de for...

5.8AI score
SaveExploits0References17
OSV
OSV
added 2026/09/11 10:39 p.m.7 views

MAL-2026-16140 Malicious code in tracker-cloudflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b5bacf5779f1a1fa161ee38acbf61fda0dc18b3d0fe35213e2b0dc230c06e4 The package's preinstall hook runs node index.js, which collects host identifiers os.hostname, os.userInfo, homedir, DNS servers, cwd along with the...

5.9AI score
SaveExploits0References1
Patchstack
Patchstack
added 2026/09/10 9:05 p.m.8 views

NPM: n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers

NPM: n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers vulnerability discovered by ? in WordPress Npm n8n versions 1.123.76...

6.5CVSS0.00334EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/09/10 9:05 p.m.8 views

EUVD-2026-74277

n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers...

6.3CVSS0.00334EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/09 5:21 p.m.6 views

DRUPAL-CONTRIB-2026-144

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module uses cryptographic constructions that do not align with current security best practices. The module performs certain signature...

5.6AI score
SaveExploits0References1
NVD
NVD
added 2026/09/09 9:17 a.m.4 views

CVE-2026-16272

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

9.1CVSS0.00144EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/09 8:17 a.m.34 views

CVE-2026-16272 Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

9.1CVSS0.00144EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/09 8:17 a.m.21 views

CVE-2026-16272

PayTR Virtual Pos iFrame API (v9x) WHMCS Module (versions v9.0.0 through before v9.0.3) is affected by a client IP spoofing vulnerability caused by use of less trusted source —specifically, untrusted HTTP headers are relied upon for identifying the client IP, allowing exploitation of trusted iden...

9.1CVSS0.00144EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 9:27 p.m.12 views

EUVD-2026-67209

mongodb: Reject "." and NUL bytes in database and collection names...

8.6CVSS5.4AI score0.00273EPSS
SaveExploits0References12
CVE
CVE
added 2026/09/08 9:26 p.m.16 views

CVE-2026-86079

CVE-2026-86079 affects n8n , an open-source workflow automation platform. The Elasticsearch and ElasticSecurity nodes interpolated workflow-controlled index and document identifiers directly into REST request paths without the required toPathSegment encoding (missing in GenericFunctions.ts). An i...

6.5CVSS0.00334EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/09/08 9:26 p.m.8 views

CVE-2026-86079 n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Elasticsearch and ElasticSecurity nodes interpolated workflow-controlled index and document identifiers directly into REST request paths. An identifier containing path separators or dot segments could...

6.3CVSS5.8AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/09/08 9:26 p.m.7 views

CVE-2026-86079 n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Elasticsearch and ElasticSecurity nodes interpolated workflow-controlled index and document identifiers directly into REST request paths. An identifier containing path separators or dot segments could...

6.3CVSS0.00334EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/08 8:11 a.m.26 views

CVE-2026-62647

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A random number generator is used to generate security-relevant values such as session identifiers used for authentication purposes that is not initialized with a True Random Number Generator TRNG, resulting in a predictable...

9.3CVSS0.00337EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/07 7:10 p.m.6 views

CVE-2021-42694

CVE-2021-42694 Generate malicious files using recently published homoglyph-attack vulnerability, which was discovered at least in C, C++, C, Go, Python, Rust, JS, ... Cite from cve.mitre.org An issue was discovered in the character definitions of the Unicode Specification through 14.0. The...

8.3CVSS8AI score0.0491EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/07 11:59 a.m.5 views

CVE-2025-69727

CVE-2025-69727 Proveedor del producto INDEX-EDUCATION Código base del producto afectado PRONOTE - 202X.X.X 2025.2.8 Descripción Existe una vulnerabilidad de control de acceso incorrecto en INDEX-EDUCATION PRONOTE anterior a la versión 2025.2.8. Los componentes afectados composeUrlImgPhotoIndividu...

5.3CVSS6AI score0.00243EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/04 12:17 p.m.7 views

CVE-2026-85581

SiYuan before v3.8.2 contains a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint that accepts and retains attacker-controlled process identifiers without size limits or authentication. Attackers can send repeated requests with unique identifiers to exhaust proces...

8.7CVSS0.00318EPSS
SaveExploits0References2
Rows per page
Query Builder