Lucene search
+L

759 matches found

Kitploit
Kitploit
added 2026/09/17 12:01 p.m.130 views

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 7:13 a.m.8 views

CVE-2021-22214

CVE-2021-22214 GitLab CI Lint API Unauthorized SSRF Vulnerability CVE-2021-22214 This article and the tool are for technical sharing only. Strictly prohibited for illegal use, otherwise all consequences shall be borne by the user. Usage help root@kitploit: $ python3 gitlabssrf.py...

8.6CVSS8.2AI score0.27806EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/17 6:05 a.m.8 views

sshconfig-lint

sshconfig-lint One engine for every place your SSH config changes. sshconfig-lint finds semantic mistakes in OpenSSH client configs: duplicate hosts, broken identity paths, unsafe options, weak algorithms, wildcard ordering, and tangled Include chains. Use the same rule codes locally, in Git hook...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/17 1:30 a.m.10 views

GitLab-SSRF-CVE-2021-22214

CVE-2021-22214 POC for CVE-2021-22214: Gitlab SSRF Description The remote GitLab install contains a Server-side request forgery SSRF vulnerability as a result of the internal network for webhooks being enabled. A remote, unauthenticated attacker can exploit a registration-limited GitLab instance...

8.6CVSS8.4AI score0.27806EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 9:27 p.m.10 views

CVE-2021-22214

CVE-2021-22214 Description - POC for CVE-2021-22214: Gitlab CI Lint API未授权 SSRF漏洞 - create by antx at 2021-11-01. Detail - When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was...

8.6CVSS7.8AI score0.27806EPSS
SaveExploits1
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.10 views

Astra Linux – Vulnerability in Ruby-Rack

A sequence injection vulnerability exists in Rack versions 2.0.9.1, 2.1.4.1, and 2.2.3.1. This vulnerability could allow for shell escapes in the Lint and CommonLogger components of Rack...

10CVSS6.7AI score0.01884EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/04 2:32 p.m.31 views

CVE-2026-85674 aider 0.86.2 Remote Code Execution via .aider.conf.yml

aider aider-chat automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd executed at startup or lint-cmd executed on the first file edit, which aider runs through a shell subprocess with shell=True witho...

8.5CVSS0.00164EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/04 2:32 p.m.9 views

EUVD-2026-71130

aider aider-chat automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd executed at startup or lint-cmd executed on the first file edit, which aider runs through a shell subprocess with shell=True witho...

8.5CVSS5.6AI score0.00164EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/04 2:32 p.m.13 views

CVE-2026-85674

aider (aider-chat) is a CLI-based AI coding assistant that automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd (executed at startup) or lint-cmd (executed on the first file edit), both of which are e...

8.5CVSS5.6AI score0.00164EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/03 5:29 p.m.11 views

sshconfig-lint v0.5.0

sshconfig-lint One engine for every place your SSH config changes. sshconfig-lint finds semantic mistakes in OpenSSH client configs: duplicate hosts, broken identity paths, unsafe options, weak algorithms, wildcard ordering, and tangled Include chains. Use the same rule codes locally, in Git hook...

5.8AI score
SaveExploits0References10
Cvelist
Cvelist
added 2026/08/24 12:30 a.m.58 views

CVE-2026-78204 Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

5.4CVSS0.00223EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/24 12:30 a.m.22 views

CVE-2026-78204

Ghostwriter through version 7.2.6 is missing per-object authorization on its report template lint endpoints . The underlying cause is that RoleBasedAccessControlMixin.test_func only checks request.user.is_active unless a view explicitly overrides it, and neither the lint endpoint nor the stored-l...

5.4CVSS5.6AI score0.00223EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/24 12:30 a.m.12 views

EUVD-2026-64679

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

5.4CVSS5.7AI score0.00223EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/24 12:30 a.m.15 views

CVE-2026-78204 Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

5.3CVSS5.8AI score
SaveExploits0References6
Wolfi
Wolfi
added 2026/08/14 8:23 a.m.54 views

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, kaniko, hubble, src-fingerprint, rancher-agent, bento, crossplane-provider-azure-authorization, sops, gke-gcloud-auth-plugin, spicedb-operator, temporal, newrelic-nri-kube-events, pinact, rancher-helm, vault-k8s, traefik,...

5.7AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:23 a.m.26 views

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, hubble, scorecard, sops, bento, src-fingerprint, nerdctl, timescaledb-parallel-copy, gke-gcloud-auth-plugin, kustomize, vault-k8s, rancher-helm, whereabouts, kor, traefik, hydra, mongodb-kubernetes-operator, kubeflow, kubo, runc, src,...

5.7AI score
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2026/08/14 12:00 a.m.9 views

ansible-lint-26.8.0-1.1 on GA media (moderate)

ansible-lint-26.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11503-1 Rating: moderate Cross-References: CVE-2026-11332 CVSS scores: CVE-2026-11332 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can no...

7.8CVSS5.3AI score0.00222EPSS
SaveExploits0
OSV
OSV
added 2026/08/13 12:00 a.m.5 views

OPENSUSE-SU-2026:11503-1 ansible-lint-26.8.0-1.1 on GA media

These are all security issues fixed in the ansible-lint-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

7.8CVSS5.4AI score0.00222EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.12 views

PT-2026-76429

These are all security issues fixed in the ansible-lint-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

7.8CVSS5.2AI score0.00222EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/05 1:51 p.m.14 views

Malicious code in devplatform-cli-plugin-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8460a9cc2fce88e69d25156ea88612a5a67ffba26709ce88900d573e2f4b3ea On require of the package, index.js loads bootstrap.js which selects a platform-specific asset path linuxx64, linuxarm64, darwin, win32, downloads an...

6.6AI score
SaveExploits0References2
Rows per page
Query Builder