Lucene search
+L

855 matches found

Kitploit
Kitploit
•added 2026/10/10 2:21 a.m.•15 views

screenpipe

English | 简体中文 | 日本語 | Français | Español | Português BR | Deutsch | Українська screenpipe la mémoire 24h/24 et 7j/7 de votre ordinateur rewind open source. 100% local. vos données restent à vous. c'est quoi ? screenpipe enregistre votre écran et votre audio 24h/24 et 7j/7, stocke tout en local, ...

6AI score
SaveExploits0References9
Kitploit
Kitploit
•added 2026/10/10 1:26 a.m.•86 views

wonitor

web monitor fast, zero config web endpoint change monitor. for comparing responses, a selected list of http headers and the full response body is stored on a local key/value store file. no configuration needed. to increase network throughput, a --worker flag allows to set the concurrency when...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/09 7:50 p.m.•18 views

phonepe-sensitive-data-exposure-cve-2025-5154

-تخزين محلي غير آمن لبيانات المستخدم الحساسة في تطبيق PhonePe لنظام أندرويد غير مصحح- اكتشف بواسطةhc4 تاريخ التقرير: أبريل 2025 حالة CVE: CVE مطلوب معلق طلب CVE 1862785 لمعرف CVE 📌 نظرة عامة تم اكتشاف ثغرة محلية حرجة في تطبيق PhonePe لنظام أندرويد تم اختباره على الإصدار v25.03.21.0، حيث يتم تخزين...

4.6CVSS6AI score0.00185EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/10/09 2:22 p.m.•20 views

Threat-Intelligence-Hunter

TIH هي أداة استخباراتية تساعدك في البحث عن مؤشرات الاختراق IOCs عبر العديد من خلاصات الأمان المتاحة للعموم وبعض واجهات برمجة التطبيقات المعروفة. الفكرة من وراء الأداة هي تسهيل البحث عن المؤشرات المضافة بشكل متكرر وتخزينها لإنشاء مجموعة المؤشرات الخاصة بك. Threat-Intelligence-Hunter ملخص TIH هي أد...

6AI score
SaveExploits0References1
OSV
OSV
•added 2026/10/09 10:45 a.m.•4 views

BIT-GHOST-2026-104411 Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads

Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading files served with extension-derived content types on the default local storage adapter. Attackers can upload script-bearing files to the site's domain to...

8.5CVSS5.8AI score0.00255EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/08 6:55 p.m.•15 views

passera

ملاحظة: لم يعد لدي وقت لمواصلة تطوير Passera، ولكن طلبات السحب Pull Requests مرحب بها أكثر من أي وقت مضى! العنصر الأكثر طلباً هو إضافة محدثة لمتصفح Firefox، حيث أن أحدث تغيير في واجهة API عطل الإصدار الحالي. Passera أداة بسيطة تسمح للمستخدمين بالحصول على كلمات مرور قوية وفريدة لكل موقع ويب، دون...

5.8AI score
SaveExploits0
EUVD
EUVD
•added 2026/10/07 8:25 p.m.•11 views

EUVD-2026-92770

Ghost: Stored XSS via File Uploads on Local Storage...

7.3CVSS5.8AI score0.00236EPSS
SaveExploits0References5
OSV
OSV
•added 2026/10/07 8:25 p.m.•10 views

GHSA-GFJP-2P8F-94QV Ghost: Stored XSS via File Uploads on Local Storage

Impact Ghost restricts the content type that uploaded files are served with, to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user were served with a content type derived from their file...

7.3CVSS5.7AI score0.00255EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2026/10/07 8:25 p.m.•10 views

NPM: Ghost: Stored XSS via File Uploads on Local Storage

NPM: Ghost: Stored XSS via File Uploads on Local Storage vulnerability discovered by ? in WordPress Npm ghost versions = 6.22.1, 6.64.0...

7.3CVSS5.8AI score0.00236EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
•added 2026/10/07 8:25 p.m.•12 views

Ghost: Stored XSS via File Uploads on Local Storage

Impact Ghost restricts the content type that uploaded files are served with, to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user were served with a content type derived from their file...

7.3CVSS5.7AI score0.00236EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2026/10/05 8:17 p.m.•9 views

CVE-2026-105679

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

7.3CVSS0.00236EPSS
SaveExploits0References4
OSV
OSV
•added 2026/10/05 7:22 p.m.•8 views

CVE-2026-105679 Ghost: Stored XSS via File Uploads on Local Storage

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

7.3CVSS5.8AI score0.00255EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/05 7:22 p.m.•10 views

CVE-2026-105679 Ghost: Stored XSS via File Uploads on Local Storage

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

7.3CVSS5.8AI score0.00236EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/05 7:22 p.m.•38 views

CVE-2026-105679 Ghost: Stored XSS via File Uploads on Local Storage

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

7.3CVSS0.00236EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/05 7:22 p.m.•19 views

CVE-2026-105679

The Ghost Node.js content management system is vulnerable to Stored XSS in versions 6.22.1 through 6.64.0 . The root cause is that the restriction on content types for uploaded files is not applied when using the default local storage adapter , allowing files to be served with content types deriv...

7.3CVSS5.8AI score0.00236EPSS
SaveExploits0References4
Mend
Mend
•added 2026/10/05 7:22 p.m.•7 views

CVE-2026-105679

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

8.5CVSS5.8AI score0.00236EPSS
SaveExploits0References7
Kitploit
Kitploit
•added 2026/10/05 6:25 p.m.•15 views

CyberQRM

CyberQRM – إدارة المخاطر الكمية السيبرانية منصة مفتوحة المصدر محلية لتقييم المخاطر السيبرانية الكمية باستخدام إطار عمل FAIR v3.1 التحليل العاملي لمخاطر المعلومات. قم بنمذجة التهديدات، تشغيل محاكاة مونت كارلو، قياس فعالية الضوابط، وإدارة محافظ المخاطر — كل ذلك من متصفحك، بدون حساب سحابي. الميزات...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/05 1:17 p.m.•21 views

CVE-2024-56428

CVE-2024-56428 بيانات الاعتماد النصية الصريحة في قاعدة البيانات المحلية لـ iLabClient قراءة التكوين بما في ذلك كلمة المرور يُستخدم iLabClient لتنزيل النتائج من خادم المختبر. يتم تخزين بيانات التكوين محليًا في مثيل Apache Derby iLabClient. يتم تخزين كلمة المرور كنص عادي. لقراءة ذلك، يجب أولاً إنشا...

7.7CVSS6.2AI score0.00157EPSS
SaveExploits1References1
AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•11 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed out-of-bounds access in cgroup local storage Lonial reported that an out-of-bounds access in cgroup local storage can occur through tail calls. This occurs when two programs each utilize a cgroup local storage with...

7.8CVSS6.1AI score0.00171EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•9 views

CVE-2026-105679: Improper Neutralization of Input During Web Page Generation

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

7.3CVSS5.8AI score0.00236EPSS
SaveExploits0References3
Rows per page
Query Builder