Lucene search
+L

9548 matches found

Kitploit
Kitploit
•added 2026/10/25 3:43 p.m.•78 views

kbd-audio

kbd-audio This is a collection of command-line and GUI tools for capturing and analyzing audio data. Keytap The most interesting tool is called keytap - it can guess pressed keyboard keys only by analyzing the audio captured from the computer's microphone. Check this blog post for more details:...

6AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/10/25 1:10 p.m.•35 views

nextcloud_android

Nextcloud Android app Codacy Badge The Android client forNextcloud. Easily work with your data on your Nextcloud. How to contribute If you want to contribute to Nextcloud, you are very welcome: on our IRC channels and on freenode our forum at https://help.nextcloud.com for translations of the app...

6.4AI score
SaveExploits0References9
Kitploit
Kitploit
•added 2026/10/25 11:55 a.m.•484 views

pmd

PMD - source code analyzer PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex , but supports 16 other languages. It comes with 400...

5.8AI score
SaveExploits0References13
Kitploit
Kitploit
•added 2026/10/25 7:06 a.m.•26 views

AuroraStore

Aurora Store Aurora Store enables you to search and download apps from the official Google Play store. You can check app descriptions, screenshots, updates, reviews, and download the APK directly from Google Play to your device. To use Aurora Store, log in using Google Play account, when you firs...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/25 2:53 a.m.•18 views

billing-hack

Billing Hack For information about this code, go to http://sufficientlysecure.org/index.php/2013/10/29/google-play-billing-hacked/...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/25 1:18 a.m.•16 views

streambox-cve-2026-28618

Zero-click APV, in a player that auto-plays shared clips CVE-2026-28618 in StreamBox — the same OpenAPV decoder class as CVE-2026-0006, turned into a heap write against a session object. This repo is a public, redacted writeup: flags, instance tokens, and the HMAC key are omitted. The APK and...

9.8CVSS7AI score0.00676EPSS
SaveExploits2References3
Kitploit
Kitploit
•added 2026/10/24 11:11 p.m.•21 views

POC-CVE-2017-8464-OpenCalculator

CVE-2017-8464 / research + PoC Create 1 Shortcut + 1 .DLL containing malicious payload = Put it on a USB and send to victim = victim opens USB = Payload automatically triggers ! ROOT CAUSE 1. First, we need to know exactly where this bug comes from! It's because of a feature called Plug-and-Play ...

9.3CVSS7.3AI score0.90026EPSS
SaveExploits22References3
Tenable Nessus
Tenable Nessus
•added 2026/10/16 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2026-110717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside...

6.9CVSS5.7AI score0.00464EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/10/15 7:33 p.m.•15 views

CVE-2026-110655

A flaw was found in miniupnpc. An out-of-bounds read vulnerability in the XML attribute parser can lead to a Denial of Service DoS by crashing the client application. A network-adjacent attacker operating a rogue Universal Plug and Play UPnP gateway can exploit this by sending specially crafted...

3.1CVSS5.8AI score0.0029EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•17 views

Astra Linux – Vulnerability in liblivemedia

In liveMedia/FramedSource.cpp within Live555, up to version 1.08, an assertion failure can occur, leading to an application exit through multiple SETUP and PLAY commands...

5.5CVSS6.2AI score0.00865EPSS
SaveExploits1References2
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•26 views

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10

In the Linux kernel, the following vulnerability has been resolved: media: av7110: prevent underflow in writetstodecoder The value of buf4 comes from the user via tsplay. This value is within the u8 range. The final length that we pass to av7110ipackinstantrepack is “len – buf4 + 1 – 4”. Therefor...

7.1CVSS6.4AI score0.00157EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/10/15 12:00 a.m.•11 views

CVE-2026-110717

Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordingspath via the record request filename. Attackers can supply filenames with path separators to create or truncate files ending i...

6.9CVSS5.8AI score0.00464EPSS
SaveExploits0References6
osv_ubuntu
osv_ubuntu
•added 2026/10/15 12:00 a.m.•9 views

UBUNTU-CVE-2026-110717

Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordingspath via the record request filename. Attackers can supply filenames with path separators to create or truncate files ending i...

6.9CVSS5.8AI score0.00464EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/14 4:17 p.m.•10 views

CVE-2026-110717

Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordingspath via the record request filename. Attackers can supply filenames with path separators to create or truncate files ending i...

6.9CVSS0.00464EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2026/10/14 4:17 p.m.•6 views

DEBIAN-CVE-2026-110717

Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordingspath via the record request filename. Attackers can supply filenames with path separators to create or truncate files ending i...

6.9CVSS5.8AI score0.00464EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/10/14 3:01 p.m.•9 views

CVE-2026-110717 Janus WebRTC Server through 1.4.3 Path Traversal via Record&Play Filename

Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordingspath via the record request filename. Attackers can supply filenames with path separators to create or truncate files ending i...

6.9CVSS5.9AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/10/14 3:01 p.m.•11 views

CVE-2026-110717 Janus WebRTC Server through 1.4.3 Path Traversal via Record&Play Filename

Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordingspath via the record request filename. Attackers can supply filenames with path separators to create or truncate files ending i...

6.9CVSS5.8AI score0.00464EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/14 3:01 p.m.•10 views

EUVD-2026-101140

Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordingspath via the record request filename. Attackers can supply filenames with path separators to create or truncate files ending i...

6.9CVSS5.8AI score0.00464EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/14 3:01 p.m.•20 views

CVE-2026-110717

The Janus WebRTC Server (versions through 1.4.3 ) contains a path traversal vulnerability within the Record&Play plugin . This flaw allows unauthenticated attackers to bypass the recordings_path restriction by supplying filenames with path separators during a record request. Consequently, attacke...

6.9CVSS5.8AI score0.00464EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/14 3:01 p.m.•39 views

CVE-2026-110717 Janus WebRTC Server through 1.4.3 Path Traversal via Record&Play Filename

Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordingspath via the record request filename. Attackers can supply filenames with path separators to create or truncate files ending i...

6.9CVSS0.00464EPSS
SaveExploits0References5
Rows per page
Query Builder