Lucene search
+L

239 matches found

Kitploit
Kitploit
added 2026/08/27 3:21 a.m.2 views

conduit

Conduit The on-prem control plane for AI coding agents. Per-engineer cost attribution · hard budgets · egress governance · context-rot observability · audit-ready exports — all inside your VPC. Conduit sits between your AI coding agents Claude Code, Cursor, Codex, Aider and whatever provider you...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/27 1:07 a.m.3 views

CVE-2019-19547

CVE-2019-19547 CVE-2019-19547 PoC Версия Symantec EDR on-prem до "4.3.0" уязвима к неаутентифицированному отраженному XSS через следующий URL: root@kitploit: https://@IPEDR/r3epmpi/v1/dx/log Ссылка...

6.1CVSS5.9AI score0.01379EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 12:47 a.m.2 views

CVE-2020-5839

CVE-2020-5839 CVE-2020-5839 POC Symantec EDR 온프레미스 버전 4.4.0 미만은 다음 URL을 통해 정보 노출 취약점에 취약합니다: root@kitploit: https://@IPEDR/r3epmpi/status/ https://@IPEDR/r3epmpi/status/routes https://@IPEDR/r3epmpi/v1/event/status/ds https://@IPEDR/atpapp/features/list 참조...

7.5CVSS7.4AI score0.02014EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 11:40 p.m.2 views

CVE-2020-12593

CVE-2020-12593 CVE-2020-12593 POC Symantec EDR sur site version antérieure à "4.5" est sujet à une vulnérabilité de divulgation d'informations via l'URL suivante : root@kitploit: https://@IPEDR/atpapi/v2/policies/blacklist Référence...

7.5CVSS7.4AI score0.01997EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 8:47 p.m.3 views

CVE-2025-53770

CVE-2025-53770 Questo è uno scanner per la vulnerabilità di esecuzione remota di codice non autenticata di SharePoint, con numero CVE CVE-2025-53770. Il codice è stato scritto tramite reverse engineering di un payload visto in natura. Usalo a tuo rischio, non sono responsabile per eventuali impat...

9.8CVSS8.4AI score0.99982EPSS
SaveExploits42References2
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.4 views

CVE-2025-53770

CVE-2025-53770 Dies ist ein Scanner für die SharePoint-Schwachstelle für nicht authentifizierte Remote Code Execution, die die CVE-Nummer CVE-2025-53770 erhalten hat. Der Code dafür wurde durch Reverse Engineering eines in freier Wildbahn beobachteten Payloads geschrieben. Nutzung auf eigene...

9.8CVSS7.8AI score0.99982EPSS
SaveExploits42References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.76 views

Cisco SSM On-Prem <= 8-202206 - Password Reset Account Takeover

A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process...

10CVSS9.1AI score0.80635EPSS
SaveExploits3References5
Kitploit
Kitploit
added 2026/08/25 12:24 a.m.3 views

cve-2021-27065

Continuerò ad aggiungere nuovo codice o a modificare il codice esistente basandomi sulla ricerca di dati rubati Se sei stato compromesso, questi script non ti risolveranno il problema! Questi non ti forniscono alcun beneficio se non quello di sapere ora l'entità di ciò che è accaduto al tuo siste...

7.8CVSS8.7AI score0.99876EPSS
SaveExploits31
Kitploit
Kitploit
added 2026/08/24 10:38 p.m.60 views

drs-malware-scan

Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/23 1:17 p.m.5 views

cve-2021-26084-confluence

Dies ist ein schneller und schmutziger poc, der für eine bestimmte Confluence-Instanz optimiert wurde, da keiner der vorhandenen handelsüblichen pocs funktioniert hat. Offensichtlich basiert es fast vollständig auf der Arbeit von https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md un...

9.8CVSS8.1AI score0.99999EPSS
SaveExploits46References2
Imperva Blog
Imperva Blog
added 2026/08/07 6:17 p.m.10 views

Imperva Customers Protected Against Novel HTTP Desync Attacks

TL;DR: Recent Portswigger research introduced novel HTTP desync techniques discovered through an AI-assisted research system called the HTTP Terminator. The findings expand the range of unusual HTTP behaviors that can cause front-end and back-end systems to interpret the same traffic differently...

5.8AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/31 8:25 a.m.7 views

Security Bulletin: Sterling Order Management System Software, (On prem)

Summary Multiple vulnerabilities were addressed in Sterling Order Management System Software, On prem : 10.0.2607.0-Sterling-SSFF-All-Major-Update-Installer Vulnerability Details CVEID:CVE-2026-48978 DESCRIPTION: oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client...

7.5CVSS5.5AI score0.00507EPSS
SaveExploits1Affected Software1
Vulnrichment
Vulnrichment
added 2026/07/27 4:11 p.m.9 views

CVE-2026-16812 VeloCloud Orchestrator OS Command Injection

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

10CVSS6AI score0.01568EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/22 1:16 p.m.15 views

CVE-2026-8152

Unblu Spark contains an open redirect vulnerability that can be escalated to a DOM-based cross-site scripting XSS attack. When Unblu Spark is deployed with com.unblu.identifier.siteEmbeddedSetup=true, it runs in the same origin as the host application. Any JavaScript injected through this...

9.3CVSS0.00414EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2026/06/09 11:30 a.m.33 views

The Hidden Security Risk in Modern Networks: The Work Between Tools

Organizations have more visibility than ever. Growing tech stacks provide greater coverage, and network security teams are increasingly adopting AI and automation to help with routine tasks and reduce manual effort. But the same challenges persist. Outages still last hours, causing significant...

5.8AI score
SaveExploits0
NVD
NVD
added 2026/05/21 2:16 p.m.29 views

CVE-2026-34926

A directory traversal vulnerability in the Apex One on-premise server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations. This vulnerability is only exploitable on the on-premise version of Apex...

6.7CVSS0.12682EPSS
SaveExploits0References5
The Hacker News
The Hacker News
added 2026/05/15 6:19 a.m.54 views

On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email

Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-42897 CVSS score: 8.1, has been described as a spoofing bug stemming from a cross-site scriptin...

8.1CVSS5.9AI score0.71205EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/04/30 1:18 p.m.106 views

CVE-2026-7163 Assisted-service: assisted-service: authenticated users can gain administrative access to openshift clusters via credential disclosure

A vulnerability in the assisted-service REST API, an optional Assisted Installer assisted-service component in the Multicluster Engine MCE, allows an authenticated user with minimal namespace-scoped privileges to obtain administrative credentials for arbitrary clusters provisioned through the hub...

6.1CVSS0.00194EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.30 views

PT-2026-32619

Name of the Vulnerable Software and Affected Versions Kiuwan Cloud affected versions not specified Kiuwan SAST on-premise KOP versions prior to 2.8.2509.4 Description Kiuwan SAST improperly authorizes SSO logins for mapped user accounts that have been locally disabled. This allows users whose...

5.4CVSS5.8AI score0.00189EPSS
SaveExploits1References5
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/09 10:57 a.m.12 views

Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem

Summary Multiple vulnerabilities were addressed in IBM watsonx Code Assistant On Prem V5.3.1 Patch 1 Vulnerability Details CVEID:CVE-2024-58340 DESCRIPTION: LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service ReDoS vulnerability in the MRKLOutputParser.pars...

9.8CVSS6AI score0.00808EPSS
SaveExploits4Affected Software1
Rows per page
Query Builder