Lucene search
+L

583 matches found

Kitploit
Kitploit
•added 2026/10/06 2:17 p.m.•18 views

installer

Overview Installation mql cnspec Scan your target platform Package Information Kubernetes Status Docker Containers: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: Installation The easiest way to install mql & cnspec is to use the install scripts. via Shell Script Linux and macOS...

6.2AI score
SaveExploits0References12
Kitploit
Kitploit
•added 2026/10/06 12:54 p.m.•17 views

malwoverview

Malwoverview !Alt...

6.3AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/10/06 12:32 p.m.•55 views

Pentest-Collaboration-Framework

Pentest Collaboration Framework Pentest Collaboration Framework - an opensource, cross-platform and portable toolkit for automating routine processes when carrying out various works for testing! Explore the docs » ‼️ Important Links Links | ---|--- 📖Installation Guide | 🌐Wiki 🚀Releases 💬Telegram...

6.1AI score
SaveExploits0References5
Nuclei
Nuclei
•added 2026/10/06 2:09 a.m.•94 views

Spotweb <= 1.5.1 - Cross Site Scripting

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the lastname parameter. id: CVE-2021-40973 info: name: Spotweb = 1.5.1 - Cross Site Scripting author: theamanrawat severity:...

6.1CVSS6.5AI score0.0225EPSS
SaveExploits1References4
Kitploit
Kitploit
•added 2026/10/04 7:24 a.m.•36 views

linux

Linux kernel The Linux kernel is the core of any Linux operating system. It manages hardware, system resources, and provides the fundamental services for all other software. Quick Start Report a bug: See Documentation/admin-guide/reporting-issues.rst Get the latest kernel: https://kernel.org Buil...

6AI score
SaveExploits0
NVD
NVD
•added 2026/10/03 6:16 a.m.•7 views

CVE-2026-101162

The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings before outputting them in posts, which could allow users with a role as low as author to perform Stored Cross-Site Scripting attacks, when author reviews are enabled...

6.4CVSS0.00241EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/03 6:00 a.m.•6 views

CVE-2026-101162

The WP Ultimate Review WordPress plugin, in versions prior to 2.4.4 , is vulnerable to Stored Cross-Site Scripting (XSS) . The issue stems from the application failing to properly escape certain review overview settings before they are displayed in posts. If author reviews are enabled, an attacke...

6.4CVSS5.9AI score0.00241EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/03 6:00 a.m.•49 views

CVE-2026-101162 WP Ultimate Review < 2.4.4 - Author+ Stored XSS via Review Overview Settings

The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings before outputting them in posts, which could allow users with a role as low as author to perform Stored Cross-Site Scripting attacks, when author reviews are enabled...

0.00241EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/03 12:00 a.m.•8 views

PT-2026-104518

Name of the Vulnerable Software and Affected Versions WP Ultimate Review WordPress plugin versions prior to 2.4.4 Description Stored Cross-Site Scripting XSS occurs when the plugin fails to escape review overview settings before outputting them in posts. This allows users with permissions as low ...

6.4CVSS6.1AI score0.00241EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/01 1:15 p.m.•15 views

CVE-2023-29808

Exploit Title: Reflected Cross Site Scripting Google Dork: Date: 27.04.2023 Exploit Author: Lucas Noki 0xPrototype Vendor Homepage: https://github.com/vogtmh Software Link: https://github.com/vogtmh/cmaps Version: 8.0 Tested on: Mac, Windows, Linux CVE : CVE-2023-29808 Description: The...

6.1CVSS6.6AI score0.0137EPSS
SaveExploits3References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•16 views

Astra Linux – Vulnerability in Chromium

In the Overview Mode of Google Chrome on Chrome OS, before version 109.0.5414.74, a remote attacker who convinced a user to perform certain UI interactions could potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

8.8CVSS8.2AI score0.00604EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•6 views

Astra Linux – Vulnerability in Chromium

In the Overview Mode of Google Chrome on Chrome OS, before version 104.0.5112.79, a remote attacker who convinced a user to engage in certain user interactions could potentially exploit heap corruption through specific UI interactions...

8.8CVSS8.2AI score0.00513EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/09/06 12:29 p.m.•24 views

exploit_dev_overview

ExploitDev Overview ExpDev Welcome Peeps to an short overvie...

9.3CVSS8.2AI score0.99999EPSS
SaveExploits162
NVD
NVD
•added 2026/08/21 10:16 p.m.•21 views

CVE-2026-53487

Kite is a Kubernetes dashboard. Prior to version 0.12.3, authenticated Kite users with any role can request /api/v1/overview for a cluster that their roles do not permit by selecting that cluster with x-cluster-name. The overview route is registered before middleware.RBACMiddleware and GetOvervie...

4.3CVSS0.0027EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/21 9:35 p.m.•21 views

EUVD-2026-64181

Kite is a Kubernetes dashboard. Prior to version 0.12.3, authenticated Kite users with any role can request /api/v1/overview for a cluster that their roles do not permit by selecting that cluster with x-cluster-name. The overview route is registered before middleware.RBACMiddleware and GetOvervie...

4.3CVSS8AI score0.0027EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/21 9:35 p.m.•6 views

CVE-2026-53487 Kite has an authenticated cluster RBAC bypass in /api/v1/overview

Kite is a Kubernetes dashboard. Prior to version 0.12.3, authenticated Kite users with any role can request /api/v1/overview for a cluster that their roles do not permit by selecting that cluster with x-cluster-name. The overview route is registered before middleware.RBACMiddleware and GetOvervie...

4.3CVSS8AI score0.0027EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/21 9:35 p.m.•52 views

CVE-2026-53487

Kite, a Kubernetes dashboard, has an authenticated cluster RBAC bypass in the /api/v1/overview endpoint prior to version 0.12.3. The root cause is that the overview route is registered before middleware.RBACMiddleware(), and the GetOverview handler only verifies len(user.Roles) &gt; 0 rather than...

4.3CVSS8AI score0.0027EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/08/08 1:22 a.m.•17 views

malwoverview v8.1.0

Malwoverview !Alt...

10CVSS7.6AI score0.99999EPSS
SaveExploits536References7
Redos
Redos
•added 2026/07/16 12:00 a.m.•16 views

ROS-20260716-73-0072

The vulnerability of the Overview Mode function in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.8CVSS8.6AI score0.00604EPSS
SaveExploits0
OSV
OSV
•added 2026/07/07 11:40 p.m.•17 views

GHSA-GVHC-WV3V-7PF8 Kite has an authenticated cluster RBAC bypass in /api/v1/overview

Summary Authenticated Kite users with any role can request /api/v1/overview for a cluster that their roles do not permit by selecting that cluster with x-cluster-name. The overview route is registered before middleware.RBACMiddleware and GetOverview only checks lenuser.Roles 0, so it returns...

4.3CVSS7.9AI score0.0027EPSS
SaveExploits0References2
Rows per page
Query Builder