Lucene search
+L

56 matches found

Kitploit
Kitploit
•added 2026/10/05 5:28 p.m.•15 views

dnsenum

README - dnsenum.pl VERSIÓN: 1.2.4 script perl multihilo para enumerar información DNS de un dominio y para descubrir bloques de IP no contiguos. OPERACIONES: 1 Obtener la dirección del host registro A. 2 Obtener los servidores de nombres multihilo. 3 Obtener el registro MX multihilo. 4 Realizar...

6AI score
SaveExploits0
EUVD
EUVD
•added 2026/09/03 5:17 p.m.•23 views

EUVD-2026-44774

Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match...

5.4CVSS5.9AI score0.00248EPSS
SaveExploits0References7
OSV
OSV
•added 2026/07/19 11:41 p.m.•18 views

BIT-HUBBLE-RELAY-2026-56743 Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match

Cilium is a networking, observability, and security solution. From 1.19.0 to 1.19.4, standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or namespace selectors erroneously generate a wildcard namespace allow rule when Cilium is configured with a custom...

5.4CVSS6AI score0.00248EPSS
SaveExploits0References7
OSV
OSV
•added 2026/07/19 11:37 p.m.•18 views

BIT-CILIUM-2026-56743 Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match

Cilium is a networking, observability, and security solution. From 1.19.0 to 1.19.4, standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or namespace selectors erroneously generate a wildcard namespace allow rule when Cilium is configured with a custom...

5.4CVSS6AI score0.00248EPSS
SaveExploits0References7
CVE
CVE
•added 2026/07/15 7:15 p.m.•51 views

CVE-2026-56743

Cilium (versions 1.19.0–1.19.4) is affected where standard Kubernetes NetworkPolicy ipBlock rules without pod/namespace selectors, when configured with a non-default clusterName, can generate a wildcard namespace allow rule. The parser incorrectly creates a pod selector for selectorless peers, en...

5.4CVSS6AI score0.00248EPSS
SaveExploits0References6Affected Software1
attackerkb
attackerkb
•added 2026/07/15 7:15 p.m.•20 views

CVE-2026-56743

Cilium is a networking, observability, and security solution. From 1.19.0 to 1.19.4, standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or namespace selectors erroneously generate a wildcard namespace allow rule when Cilium is configured with a custom...

5.4CVSS6AI score0.00248EPSS
SaveExploits0References7Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/15 7:15 p.m.•15 views

CVE-2026-56743 Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match

Cilium is a networking, observability, and security solution. From 1.19.0 to 1.19.4, standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or namespace selectors erroneously generate a wildcard namespace allow rule when Cilium is configured with a custom...

5.4CVSS6AI score0.00248EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•13 views

PT-2026-59396

Server-Side Request Forgery SSRF Bypass via HTTP Redirect Following in Web-Fetch, Image-Load, and Chat-Completion Endpoints Summary The validate url function in backend/open webui/retrieval/web/utils.py only validates the initial URL submitted by the caller. The HTTP clients used downstream sync...

8.5CVSS7AI score0.00326EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/29 12:00 a.m.•1 views

CVE-2026-26206: Improper Restriction of Excessive Authentication Attempts

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, Wazuh's server API brute-force protection for POST /security/user/authenticate can be bypassed by sending concurrent authentication requests. Although the...

6.5CVSS6.5AI score0.00284EPSS
SaveExploits1References6
OSV
OSV
•added 2026/04/24 3:16 p.m.•12 views

DEBIAN-CVE-2026-31597

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix use-after-free in ocfs2fault when VMFAULTRETRY filemapfault may drop the mmaplock before returning VMFAULTRETRY, as documented in mm/filemap.c: "If our return value has VMFAULTRETRY set, it's because the mmaplock may b...

7.8CVSS6.8AI score0.00174EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/24 3:16 p.m.•14 views

CVE-2026-31597

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix use-after-free in ocfs2fault when VMFAULTRETRY filemapfault may drop the mmaplock before returning VMFAULTRETRY, as documented in mm/filemap.c: "If our return value has VMFAULTRETRY set, it's because the mmaplock may b...

7.8CVSS0.00174EPSS
SaveExploits0References9
OSV
OSV
•added 2026/04/24 2:42 p.m.•19 views

CVE-2026-31597 ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix use-after-free in ocfs2fault when VMFAULTRETRY filemapfault may drop the mmaplock before returning VMFAULTRETRY, as documented in mm/filemap.c: "If our return value has VMFAULTRETRY set, it's because the mmaplock may b...

7.8CVSS5.7AI score
SaveExploits0References12
Debian CVE
Debian CVE
•added 2026/04/24 2:42 p.m.•23 views

CVE-2026-31597

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix use-after-free in ocfs2fault when VMFAULTRETRY filemapfault may drop the mmaplock before returning VMFAULTRETRY, as documented in mm/filemap.c: "If our return value has VMFAULTRETRY set, it's because the mmaplock may b...

7.8CVSS6.8AI score0.00174EPSS
SaveExploits0
EUVD
EUVD
•added 2026/04/24 2:42 p.m.•21 views

EUVD-2026-25490

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix use-after-free in ocfs2fault when VMFAULTRETRY filemapfault may drop the mmaplock before returning VMFAULTRETRY, as documented in mm/filemap.c: "If our return value has VMFAULTRETRY set, it's because the mmaplock may b...

5.5AI score0.00174EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/15 12:00 a.m.•40 views

PT-2026-34949

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ocfs2 fault function. This occurs because filemap fault may drop the mmap lock before returning VM FAULT RETRY. In such cases, a concurrent munmap ca...

7.8CVSS7.2AI score0.00174EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•1 views

CVE-2025-48508: Improper Finite State Machines (FSMs) in Hardware Logic

Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged attacker in a guest virtual machine to control reset operation potentially causing host or GPU crash or reset resulting in denial of service...

6CVSS5.8AI score0.00158EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/13 6:30 p.m.•52 views

EUVD-2025-203209

The Login Lockdown & Protection plugin for WordPress is vulnerable to IP Block Bypass in all versions up to, and including, 2.14. This is due to $unblockkey key being insufficiently random allowing unauthenticated users, with access to an administrative user email, to generate valid unblock keys...

5.3CVSS5.5AI score0.00451EPSS
SaveExploits0References4
NVD
NVD
•added 2025/12/13 4:16 p.m.•15 views

CVE-2025-11707

The Login Lockdown & Protection plugin for WordPress is vulnerable to IP Block Bypass in all versions up to, and including, 2.14. This is due to $unblockkey key being insufficiently random allowing unauthenticated users, with access to an administrative user email, to generate valid unblock keys...

5.3CVSS0.00451EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/12/13 4:31 a.m.•47 views

CVE-2025-11707 Login Lockdown & Protection <= 2.14 - IP Block Bypass

The Login Lockdown & Protection plugin for WordPress is vulnerable to IP Block Bypass in all versions up to, and including, 2.14. This is due to $unblockkey key being insufficiently random allowing unauthenticated users, with access to an administrative user email, to generate valid unblock keys...

5.3CVSS0.00451EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/13 12:00 a.m.•24 views

PT-2025-51054

The Login Lockdown & Protection plugin for WordPress is vulnerable to IP Block Bypass in all versions up to, and including, 2.14. This is due to $unblock key key being insufficiently random allowing unauthenticated users, with access to an administrative user email, to generate valid unblock keys...

5.3CVSS6AI score0.00451EPSS
SaveExploits0References3
Rows per page
Query Builder