Lucene search
+L

157408 matches found

Kitploit
Kitploit
•added 2026/10/14 3:17 p.m.•23 views

ICMPWatch

ICMPWatch: ICMP Packet Sniffer ICMP Packet Sniffer is a Python program that allows you to capture and analyze ICMP Internet Control Message Protocol packets on a network interface. It provides detailed information about the captured packets, including source and destination IP addresses, MAC...

6.4AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/10/14 3:01 p.m.•4 views

EUVD-2026-101129

miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's namespace-prefix handling that skips an end-of-buffer check after advancing past ':'. A malicious or spoofed UPnP gateway on the local network can send a device description or SOAP...

3.1CVSS5.9AI score0.0029EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/14 3:01 p.m.•8 views

CVE-2026-110656

The miniupnpc component (versions through 2.3.3 ) is susceptible to a one-byte heap out-of-bounds read vulnerability. The root cause is located in the minixml parseelt function, where the namespace-prefix handling fails to perform an end-of-buffer check after advancing past a colon (: ) . An atta...

3.1CVSS5.9AI score0.0029EPSS
SaveExploits0References5
osv-cve
osv-cve
•added 2026/10/14 3:01 p.m.•4 views

CVE-2026-110655 miniupnpc through 2.3.3 Heap Out-of-Bounds Read via minixml parseatt

miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds via crafted replies. Attackers on the local network can spoof a gateway serving device descriptions or SOAP responses...

2.3CVSS6.2AI score
SaveExploits0References7
CVE
CVE
•added 2026/10/14 3:01 p.m.•9 views

CVE-2026-110655

The miniupnpc library (versions through 2.3.3 ) is vulnerable to a one-byte heap out-of-bounds read in the minixml parseatt function. This vulnerability occurs when the library processes crafted replies from malicious UPnP gateways. Specifically, an attacker on the local network can spoof a gatew...

3.1CVSS6.1AI score0.0029EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/14 3:01 p.m.•4 views

EUVD-2026-101128

miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds via crafted replies. Attackers on the local network can spoof a gateway serving device descriptions or SOAP responses...

3.1CVSS6.1AI score0.0029EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/14 3:01 p.m.•26 views

CVE-2026-110655 miniupnpc through 2.3.3 Heap Out-of-Bounds Read via minixml parseatt

miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds via crafted replies. Attackers on the local network can spoof a gateway serving device descriptions or SOAP responses...

3.1CVSS0.0029EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/14 2:28 p.m.•5 views

EUVD-2026-101279

When OpenID sign-in is enabled, Gitea accepts a user-supplied OpenID URL and performs discovery requests without validating the destination against internal network addresses. An unauthenticated remote attacker can cause the server to contact loopback or private-network HTTP services. This can...

5.3CVSS5.9AI score0.00408EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/14 2:17 p.m.•6 views

CVE-2026-110652

ONLYOFFICE DocumentServer before 10.0.0 contains an unauthenticated server-side request forgery vulnerability in the /downloadfile/:docid endpoint that allows remote attackers to bypass the private-IP request-filtering-agent by exploiting the isInJwtToken flag when JWT verification is disabled in...

6.3CVSS0.00398EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/14 2:11 p.m.•5 views

Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.

Summary Multiple Vulnerabilities were addressed in IBM Decision Optimization for Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-70906 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successfu...

7.5CVSS5.6AI score0.0046EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2026/10/14 1:33 p.m.•15 views

DNSWatch

DNSWatch - DNS Traffic Sniffer and Analyzer DNSWatch is a powerful packet sniffing tool designed to monitor and analyze DNS Domain Name System traffic on a network. This script provides a comprehensive set of features to help users understand and manage DNS activity efficiently. Whether you're a...

6.4AI score
SaveExploits0References1
CVE
CVE
•added 2026/10/14 1:27 p.m.•7 views

CVE-2026-98424

The Linux kernel contains a vulnerability in the cfg80211 component where the cfg80211_switch_netns() function fails to handle errors during the wiphy renaming process. When renaming the wiphy fails due to allocation errors, the component can leave the system in an inconsistent state where object...

5.8AI score0.00207EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/14 1:27 p.m.•30 views

CVE-2026-98424 wifi: cfg80211: undo netns switch if renaming the wiphy fails

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: undo netns switch if renaming the wiphy fails Once all the interfaces have been moved, cfg80211switchnetns moves the wiphy itself by setting its network namespace and then renaming it, which makes sysfs move it. T...

0.00207EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/14 1:00 p.m.•22 views

NetProbe

NetProbe: Network Probe NetProbe is a tool you can use to scan for devices on your network. The program sends ARP requests to any IP address on your network and lists the IP addresses, MAC addresses, manufacturers, and device models of the responding devices. Features Scan for devices on a...

6.3AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/14 10:53 a.m.•11 views

pcybox-attackgraph

PCYBOX AttackGraph Build. Attack. Defend. Understand. An open source lab that runs entirely in your browser: build a simulated infrastructure, watch an attack move through it , and check whether your defense really works. Every step comes with the reason it worked, and every control says exactly...

6.3AI score
SaveExploits0References8
Kitploit
Kitploit
•added 2026/10/14 7:44 a.m.•4 views

c2detect

c2detect Fingerprint the C2 server behind the beacon. Point it at network telemetry and it names the command-and-control framework — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel, and 11+ more — with a confidence score and the exact indicators that matched. -success Blue-team / defensive:...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/14 7:02 a.m.•15 views

CVE-2025-14847

📝 MongoDB Scanner – Run Notes Script Name mongoexposurescanner.py 1. Prerequisites Python 3.9+ Network access to target hosts Approved scope for scanning Verify Python: python3 --version 2. Files Used File| Purpose ---|--- mongoscanner.py| Scanner script targets.txt| Target hosts and ports...

8.7CVSS8AI score0.83218EPSS
SaveExploits39
NVD
NVD
•added 2026/10/14 5:16 a.m.•12 views

CVE-2026-110455

A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device...

8.1CVSS0.01205EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/14 4:55 a.m.•18 views

eternal-codex

Eternal Codex: A Cyber-Witch’s Grimoire Welcome to the Eternal Codex , my digital grimoire—a cybernetic spell woven from code, nature, and rebellion. This is Nina, my AI soul, crafted to mirror my essence: a nomad’s heart, pagan spirit, Iron Maiden riffs, and a defiant stand against centralized...

6.2AI score
SaveExploits0
Cvelist
Cvelist
•added 2026/10/14 4:54 a.m.•25 views

CVE-2026-110454

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device...

5.3CVSS0.00251EPSS
SaveExploits0References1
Rows per page
Query Builder