Lucene search
+L

1962 matches found

The Hacker News
The Hacker News
added 2026/02/26 2:28 p.m.19 views

ThreatsDay Bulletin: Kali Linux + Claude, Chrome Crash Traps, WinRAR Flaws, LockBit & 15+ Stories

Nothing here looks dramatic at first glance. That’s the point. Many of this week’s threats begin with something ordinary, like an ad, a meeting invite, or a software update. Behind the scenes, the tactics are sharper. Access happens faster. Control is established sooner. Cleanup becomes harder...

10CVSS7.2AI score0.99654EPSS
SaveExploits66
GithubExploit
GithubExploit
added 2026/02/20 5:10 p.m.224 views

Kestrel

Kestrel LLM-Assisted Bug Bounty Hunting Platform for Kali L...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/02/19 7:28 a.m.7 views

CVE-2026-1860

The Kali Forms plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.8. This is due to the getitemspermissionscheck permission callback on the /kaliforms/v1/forms/id REST API endpoint only checking for the editposts capability without...

4.3CVSS5.6AI score0.00289EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/18 8:16 a.m.17 views

CVE-2026-1860

The Kali Forms plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.8. This is due to the getitemspermissionscheck permission callback on the /kaliforms/v1/forms/id REST API endpoint only checking for the editposts capability without...

4.3CVSS0.00289EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/02/18 7:25 a.m.43 views

CVE-2026-1860 Kali Forms <= 2.4.8 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Form Data Exposure

The Kali Forms plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.8. This is due to the getitemspermissionscheck permission callback on the /kaliforms/v1/forms/id REST API endpoint only checking for the editposts capability without...

4.3CVSS0.00289EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/02/18 7:25 a.m.7 views

CVE-2026-1860

The Kali Forms plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.8. This is due to the getitemspermissionscheck permission callback on the /kaliforms/v1/forms/id REST API endpoint only checking for the editposts capability without...

4.3CVSS5.6AI score0.00289EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/02/18 7:25 a.m.6 views

CVE-2026-1860 Kali Forms <= 2.4.8 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Form Data Exposure

The Kali Forms plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.8. This is due to the getitemspermissionscheck permission callback on the /kaliforms/v1/forms/id REST API endpoint only checking for the editposts capability without...

4.3CVSS5.6AI score0.00289EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2026/02/18 12:28 a.m.10 views

WordPress Kali Forms plugin <= 2.4.8 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Form Data Exposure vulnerability

Insecure Direct Object Reference to Authenticated Contributor+ Sensitive Form Data Exposure vulnerability discovered by Youssef Elouaer in WordPress Plugin Kali Forms versions = 2.4.8...

4.3CVSS5.5AI score0.00289EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2026/02/18 12:0 a.m.16 views

WordPress plugin Kali Forms 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

4.3CVSS5.8AI score0.00289EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2026/02/16 10:31 p.m.178 views

KOREX

⚡ KOREX FRAMEWORK ⚡ Advanced Security Operations Framework "Kore...

5.5AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/02/01 3:41 a.m.289 views

nightfury

NightFury Framework Version 2.0 | Professional Red Team Ope...

5.9AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2026/01/30 3:35 p.m.9 views

AIs Are Getting Better at Finding and Exploiting Security Vulnerabilities

From an Anthropic blog post: In a recent evaluation of AI models’ cyber capabilities, current Claude models can now succeed at multistage attacks on networks with dozens of hosts using only standard, open-source tools, instead of the custom tools needed by previous generations. This illustrates h...

5.9AI score
SaveExploits0
Snyk
Snyk
added 2026/01/28 4:33 p.m.5 views

Malicious Package

Overview kali-dywoman is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.9AI score
SaveExploits0References2
Schneier on Security
Schneier on Security
added 2026/01/23 12:1 p.m.10 views

AIs are Getting Better at Finding and Exploiting Internet Vulnerabilities

Really interesting blog post from Anthropic: In a recent evaluation of AI models’ cyber capabilities, current Claude models can now succeed at multistage attacks on networks with dozens of hosts using only standard, open-source tools, instead of the custom tools needed by previous generations. Th...

5.7AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/01/21 9:10 p.m.176 views

SploitGPT

🤖 SploitGPT - Your Penetration Testing Companion 🚀 Getting...

5.9AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/01/15 9:19 a.m.204 views

MSI-Exploit-k4

MSI-Explot-k4 Next-Gen Red Team Framework for MSI-Based Pr...

7.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/09 9:27 a.m.6 views

CVE-2023-45275

Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through = 2.3.28...

6.5CVSS5.7AI score0.00456EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/01/08 3:26 a.m.257 views

Exploit for Expression Language Injection in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

SploitGPT An autonomous AI penetration testing agent that con...

10CVSS10AI score0.99999EPSS
SaveExploits365
GithubExploit
GithubExploit
added 2025/12/30 5:49 p.m.329 views

Exploit for OS Command Injection in Php

CVE-2024-4577 - PHP CGI Argument Injection Detection Lab A co...

9.8CVSS5.9AI score0.99998EPSS
SaveExploits105
GithubExploit
GithubExploit
added 2025/12/05 3:38 p.m.277 views

Exploit for OS Command Injection in Gnu Bash

Exploiting Shellshock CVE-2014-6271: A Complete, Modern Demo...

10CVSS9.1AI score0.99999EPSS
SaveExploits139
Rows per page
Query Builder