Lucene search
+L

1047542 matches found

GithubExploit
GithubExploit
added 2026/09/21 1:35 a.m.4 views

Exploit for Authentication Bypass by Primary Weakness in Haxx Curl

CVE-2026-8932 PoC Proof-of-concept reproduction of CVE-2026...

7.5CVSS0.00396EPSS
SaveExploits2
Talos
Talos
added 2026/09/21 12:00 a.m.25 views

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...

7CVSS6.7AI score0.00341EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2026/09/20 7:18 p.m.10 views

Exploit for Use After Free in Linux Linux_Kernel

GhostLock for Humane AI Pin GhostLock for Humane AI Pin is an...

7.8CVSS0.00789EPSS
SaveExploits103
GithubExploit
GithubExploit
added 2026/09/20 6:59 p.m.11 views

Exploit for CVE-2026-88854

CVE-2026-88854 — OrdaSoft Joomla Gallery SQL Injection Python...

9.3CVSS
SaveExploits1
NVD
NVD
added 2026/09/20 6:16 p.m.6 views

CVE-2026-88856

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions updateOSGallery, reached via task=updateosgallery, read a JSON request body and called the value of a method field as a live PHP function, passi...

9.4CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/20 6:16 p.m.6 views

CVE-2026-88854

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

9.3CVSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/09/20 5:53 p.m.12 views

CVE-2026-88854 Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

9.3CVSS
SaveExploits1References1
CVE
CVE
added 2026/09/20 5:53 p.m.16 views

CVE-2026-88854

CVE-2026-88854 is an unauthenticated SQL injection in the OrdaSoft Joomla Gallery extension (mod_osgallery_search) affecting Joomla getVar()—not a real Joomla filter method—so only HTML tags are stripped while quotes and SQL syntax pass through. The value is concatenated directly into a LIKE clau...

9.3CVSS
SaveExploits1References1
EUVD
EUVD
added 2026/09/20 5:53 p.m.6 views

EUVD-2026-83767

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

9.3CVSS
SaveExploits1References1
EUVD
EUVD
added 2026/09/20 5:50 p.m.6 views

EUVD-2026-83765

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions updateOSGallery, reached via task=updateosgallery, read a JSON request body and called the value of a method field as a live PHP function, passi...

9.4CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/20 5:50 p.m.11 views

CVE-2026-88856

OrdaSoft Joomla Gallery extension for Joomla versions

9.4CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/20 5:50 p.m.11 views

CVE-2026-88856 Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions updateOSGallery, reached via task=updateosgallery, read a JSON request body and called the value of a method field as a live PHP function, passi...

9.4CVSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/09/20 5:19 p.m.6 views

unruly

unruly Security scanner for backend-as-a-service databases...

SaveExploits0
Kitploit
Kitploit
added 2026/09/20 4:55 p.m.8 views

AutoRecon

ボウリングでバンパーを使うようなものです。 - @ippsec AutoRecon AutoReconは、サービスの自動列挙を行うマルチスレッドのネットワーク偵察ツールです。CTFやその他のペネトレーションテスト環境(OSCPなど)で時間を節約するためのツールとして設計されています。実際の業務でも役立つ可能性があります。 このツールは、まずポートスキャン/サービス検出スキャンを実行します。その初期結果に基づいて、さまざまなツールを使用してそれらのサービスのさらなる列挙スキャンを起動します。たとえば、HTTPが見つかった場合、feroxbusterが起動されます(その他多数)。...

6.2AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/20 4:55 p.m.22 views

katana

下一代爬取与爬虫框架 特性 • 安装 • 用法 • 范围 • 配置 • 过滤器 • 加入Discord 特性 快速且完全可配置的网页爬取 标准 和无头 模式 JavaScript 解析/爬取 可自定义的自动表单填写 范围控制 - 预配置字段/正则 知识库 - 机器学习页面类型/表单分类(自动下载模型) 可自定义的输出 - 预配置字段 输入 - STDIN 、URL 和LIST 输出 - STDOUT 、FILE 和JSON 安装 katana需要Go...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/20 4:54 p.m.11 views

CVE-2022-47132

CVE-2022-47132 Academy LMS history.pushState'', '', '/'...

8.8CVSS7.8AI score0.00857EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/20 4:53 p.m.188 views

scour

Scour - AWS Detection Framework This tool is used to emulate attack patterns inside of the AWS Controlplane. Each attack is tagged with a specific UA for the blue team to signal off of. Status This is still an active work in progress. Lots of Bugs Not ready for production Where to file issues :...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/20 4:53 p.m.12 views

scour

Scour - AWS 検出フレームワーク このツールは、AWS Controlplane 内部で攻撃パターンをエミュレートするために使用されます。各攻撃には、ブルーチームが検知するための特定の UA がタグ付けされています。 ステータス これはまだ進行中の作業です。バグが多数あります プロダクション準備はできていません 問題を報告する場所 : https://github.com/grines/scour/issues メンテナー : grines Scour とは? Scour は、golang で書かれたモダンなモジュールベースの AWS...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/20 4:52 p.m.16 views

IOSSecuritySuite

⭐️ 認定iOSアプリケーションセキュリティエンジニアになりたいですか? ⭐️ 実践的で完全オンラインのコースをチェックしてください: https://courses.securing.pl/courses/iase ISS 説明 作者: @r3ggi 🌏 iOS Security Suiteは、純粋なSwiftで書かれた、高度で使いやすいプラットフォームセキュリティ&改ざん防止ライブラリです!iOS向けの開発を行っていて、OWASP MASVS 標準(第8章)に従ってアプリを保護したい場合、このライブラリは多くの時間を節約できるでしょう。🚀 ISSが検出するもの: ジェイルブレイク 🧨...

6AI score
SaveExploits0References25
Kitploit
Kitploit
added 2026/09/20 4:52 p.m.12 views

CVE-2023-6538

CVE-2023-6538 CVE-2023-6538 是 Hitachi NAS(HNAS)的 系统管理单元 (SMU)配置备份与恢复 功能中发现的一个 不安全的直接对象引用 (IDOR )漏洞。此漏洞影响 SMU 版本 14.8.7825.01 之前的版本。 利用 此漏洞利用要求攻击者掌握一个既非 只读 也非 全局管理员 的用户账户凭证,即: 存储管理员 服务器管理员 服务器 + 存储管理员 按设计,拥有 全局管理员 角色的用户应能访问 SMU 的 配置备份与恢复 功能,该功能位于...

7.6CVSS6.6AI score0.01583EPSS
SaveExploits5
Rows per page
Query Builder