Lucene search
+L

3102 matches found

Kitploit
Kitploit
added 2026/09/14 12:33 a.m.8 views

firmware-mod-kit

Descargo de responsabilidad Exportado automáticamente desde code.google.com/p/firmware-mod-kit Kit de Modificación de Firmware Este kit es una colección de scripts y utilidades para extraer y reconstruir imágenes de firmware basadas en Linux. root@kitploit: Extraer una imagen de firmware en sus...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:31 p.m.225 views

attifyos

AttifyOS v3.0 AttifyOS is a distro intended to help you perform security assessment and penetration testing of Internet of Things IoT devices. It saves you a lot of time by providing a pre-configured environment with all the necessary tools loaded. The new version is based on Ubuntu 18.04 64-Bit ...

6AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.201 views

Apache HTTP Server - ACL Bypass

Encoding problem in modproxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. id: CVE-2024-38473 info: name: Apache HTTP Server - ACL Bypass author: pdteam severity: high...

8.1CVSS6.8AI score0.25878EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.115 views

Php-mod/curl Library <2.3.2 - Cross-Site Scripting

Php-mod/curl library before 2.3.2 contains a cross-site scripting vulnerability via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php. An attacker can inject arbitrary script, which can allow theft of cookie-based authentication credentials and launch of other...

6.1CVSS6.4AI score0.01261EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/09/13 5:45 a.m.4 views

GZDoom-Arbitrary-Code-Execution-via-ZScript-PoC

GZDoom = 4.13.1 Ejecución de Código Arbitrario a través de ZScript Malicioso Una prueba de concepto para una vulnerabilidad de ejecución de código arbitrario que encontré en la funcionalidad ZScript de GZDoom https://github.com/zdoom/gzdoom. Un atacante puede compartir un archivo PK3 que contenga...

6.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 5:19 p.m.8 views

CVE-2022-35978-POC

CVE-2022-35978 POC Description CVE-2022-35978 is a critical security vulnerability affecting Minetest versions up to and including 5.5.1. Minetest is a free, open-source voxel game engine that supports easy modding and game creation. In single-player mode, a mod can set a global setting that...

10CVSS8.1AI score0.02925EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/09/10 7:58 a.m.14 views

CVE-2026-56864

A flaw was found in golang.org/x/mod/sumdb. A malicious Go checksum database GOSUMDB can serve arbitrary module content that is not recorded in the transparency log. This allows a coordinated Go proxy GOPROXY and GOSUMDB to deliver malicious module content to a client, which cannot be detected by...

8.1CVSS5.9AI score0.00298EPSS
SaveExploits0References8
NVD
NVD
added 2026/09/09 9:17 p.m.6 views

CVE-2026-79387

SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields including passwords and roles via crafted parameters to the User/mod interface, enabling account takeover...

0.00324EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/09/09 12:00 a.m.7 views

EUVD-2026-75157

SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields including passwords and roles via crafted parameters to the User/mod interface, enabling account takeover...

0.00324EPSS
SaveExploits1References2
CVE
CVE
added 2026/09/09 12:00 a.m.16 views

CVE-2026-79387

CVE-2026-79387 is an SQL injection (CWE-89) in PbootCMS versions 3.2.0 through 3.2.5, located in the mod() method of UserController.php and modUser() in UserModel.php. The field and value GET parameters are concatenated directly into a SQL UPDATE statement without sanitization or parameterized qu...

0.00324EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/07 6:39 p.m.7 views

BiblioRCE

Un descuido en BiblioCraft que permite la manipulación restringida de archivos en el lado del servidor. ¡Este método solo requiere BiblioCraft! No demasiado trucos y no se necesitan otros mods para lograr la ejecución de código. CoreTweaks El informe original centrado en CoreTweaks se puede...

5.9AI score
SaveExploits0References1
Nuclei
Nuclei
added 2026/09/07 6:34 a.m.112 views

Apache Tomcat JK Connect <=1.2.44 - Manager Access

Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 allows specially constructed requests to expose application functionality through the reverse proxy. It is also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is so...

7.5CVSS7.3AI score0.90647EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/09/07 12:00 a.m.5 views

CVE-2026-6244

libpcap BPF interpreter for the div k and mod k ALU instructions...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/03 9:18 a.m.12 views

ROOT-APP-GOBINARY-CVE-2026-56864 CVE-2026-56864 in golang.org/x/mod - Patched by Root

Root has patched CVE-2026-56864 in the golang.org/x/mod package for Root:Go. Multiple fixed versions available...

7.5CVSS5.3AI score0.00298EPSS
SaveExploits0
OSV
OSV
added 2026/09/03 7:39 a.m.10 views

ROOT-APP-GOBINARY-CVE-2026-56865 CVE-2026-56865 in golang.org/x/mod - Patched by Root

Root has patched CVE-2026-56865 in the golang.org/x/mod package for Root:Go. Multiple fixed versions available...

8.4CVSS5.4AI score0.00107EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.13 views

PT-2026-84264

Name of the Vulnerable Software and Affected Versions Erlang/OTP versions 17.0 through 27.3.4.16 Erlang/OTP versions 28.0 through 28.5.0.5 Erlang/OTP versions 29.0 through 29.0.5 Description Improper handling of case sensitivity in the inets httpd component allows a remote unauthenticated attacke...

8.2CVSS5.9AI score0.00661EPSS
SaveExploits0References13
NVD
NVD
added 2026/08/27 8:17 p.m.9 views

CVE-2026-55758

CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to 1.120.0, the SSRF protection in projects/core/src/main/java/dan200/computercraft/core/apis/http/options/AddressPredicate.java blocks the RFC 6052 64:ff9b::/96 NAT64 prefix but omits the R...

6.9CVSS0.00427EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/27 5:11 p.m.31 views

CVE-2026-55758 CC: Tweaked: Incomplete fix for GHSA-5jh9-2h63-pw4q: RFC 8215 NAT64 prefix (64:ff9b:1::/96) bypasses SSRF protection

CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to 1.120.0, the SSRF protection in projects/core/src/main/java/dan200/computercraft/core/apis/http/options/AddressPredicate.java blocks the RFC 6052 64:ff9b::/96 NAT64 prefix but omits the R...

6.9CVSS0.00427EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/27 5:11 p.m.8 views

EUVD-2026-67159

CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to 1.120.0, the SSRF protection in projects/core/src/main/java/dan200/computercraft/core/apis/http/options/AddressPredicate.java blocks the RFC 6052 64:ff9b::/96 NAT64 prefix but omits the R...

6.9CVSS5.5AI score0.00427EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/27 5:11 p.m.17 views

CVE-2026-55758

CC: Tweaked , a mod for Minecraft adding programmable computers, has an SSRF protection bypass in its AddressPredicate.java component. Prior to 1.120.0 , the protection blocks the RFC 6052 64:ff9b::/96 NAT64 prefix but omits the RFC 8215 64:ff9b:1::/48 local-use prefix, so PrivatePattern.matches(...

6.9CVSS5.5AI score0.00427EPSS
SaveExploits0References2
Rows per page
Query Builder