Lucene search
+L

2112 matches found

Kitploit
Kitploit
added 2026/09/15 4:26 a.m.30 views

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares:...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 7:52 p.m.38 views

reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehböck. Reaver has been designed to be a robust an...

6.3AI score
SaveExploits0References8
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.5 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Fixed a potential index out of bounds issue in the color transformation function. The issue could occur when the index ‘i’ exceeds the number of transfer function points TRANSFERFUNCPOINTS. The fix includes a...

7.8CVSS6.3AI score0.00297EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 10:36 a.m.12 views

failpoint

failpoint Golang 的 failpoints 实现。故障点用于以用户可控的方式在代码中添加可注入错误的位置。故障点是一段代码片段,仅当对应的故障点处于激活状态时才会执行。 快速开始(使用 failpoint-ctl) 1. 从源码构建 failpoint-ctl root@kitploit: git clone https://github.com/pingcap/failpoint.git cd failpoint make ls bin/failpoint-ctl 2. 向你的程序注入故障点,例如: root@kitploit: package main import...

6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/14 6:25 a.m.117 views

tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 4:43 a.m.8 views

PiSavar

PiSavar - Detects PineAP module and starts deauthentication attack for fake access points - WiFi Pineapple Activities Detection About Project The goal of this project is to find out the fake access points opened by the WiFi pineapple device using the PineAP module and to prevent clients from bein...

5.9AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.95 views

FortiWeb - Cross Site Scripting

FortiWeb 6.3.0 through 6.3.7 and versions before 6.2.4 contain an unauthenticated cross-site scripting vulnerability. Improper neutralization of input during web page generation can allow a remote attacker to inject malicious payload in vulnerable API end-points. id: CVE-2021-22122 info: name:...

6.1CVSS6.3AI score0.1052EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/11 7:33 a.m.7 views

sccm-http-looter

SCCM HTTP Looter 工作原理 SCCM 分发点(DP)是 Microsoft SCCM 用于托管软件安装、补丁、脚本部署等所用全部文件的服务器。默认情况下,这些服务器允许通过 SMB(TCP/445)和 HTTP/S(TCP/80 和/或 TCP/443)进行访问,并且需要某种类型的 Windows 身份验证(即 NTLM)。 当前的 SCCM DP 文件提取工具依赖于浏览 SMB 共享来收集文件的能力。 CMloot cmloot 然而,组织限制内部网络服务器上的入站 SMB 访问并不少见,并且阻止来自互联网的入站 SMB 访问也是标准做法。另一方面,HTTP/S...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 7:39 p.m.9 views

CaptainHook

Captain Hook 它是什么? 该工具的目的是追踪用户输入,以便发现进入敏感方法(如 java.lang.Runtime.exec、java.sql.Statement.executeQuery 等)的注入点,以及这些输入从注入点到方法调用之间发生的变异。 会生成“标记”(Marks),你必须在应用的每个可能的用户输入中插入这些标记。不同的标记将帮助你确定警报的来源。 受监控方法的列表可通过 CLI 中的 listbreakpoints 命令查看。该列表可通过 addbreakpoint 和 deletebreakpoint 命令进行修改。 架构 root@kitploit:...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 12:35 p.m.7 views

veeam-velociraptor

Veeam Backup & Replication Velociraptor 工件 - PoC 本仓库包含一组 Velociraptor 工件,作为远程 Veeam Backup & Replication 取证管线的概念验证: artifacts/ 包含工件定义 tools/ 包含一个 qemu-img.zip 归档,可用于 Windows.QEMU.ImgConvert...

6AI score
SaveExploits0
NVD
NVD
added 2026/09/09 5:18 a.m.3 views

CVE-2026-87736

An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points...

4.3CVSS0.00212EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/09 5:18 a.m.5 views

DEBIAN-CVE-2026-87736

An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points...

4.3CVSS0.00212EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/09 4:19 a.m.7 views

EUVD-2026-74622

An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points...

4.3CVSS0.00212EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/09 4:19 a.m.33 views

CVE-2026-87736

An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points...

4.3CVSS0.00212EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/09 4:19 a.m.12 views

CVE-2026-87736

The mirage-crypto-ec package for OCaml, versions before 2.3.0 , contains an out-of-bounds read in EC public key handling for compressed points . The vulnerability is network-reachable with low complexity and requires low privileges, carrying a CVSS 3.1 score of 4.3 (MEDIUM) with a low availabilit...

4.3CVSS0.00212EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-87736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points. CVE-2026-877...

4.3CVSS0.00212EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/08 6:22 p.m.7 views

CVE-2020-1337

CVE-2020-1337 - 二进制植入(CVE-2020-1048 绕过) SafeBreach 的 Peleg Hadar @peleghd 和 Tomer Bar 因 CVE-2020-1048 而受到 Microsoft 致谢,该漏洞是 Windows 打印后台处理程序漏洞,可在 Windows 7 及更高版本上实现权限提升。 Alex Ionescu @aionescu 和 Yarden Shafir @yardenshafir 在其精彩的博客文章 PrintDemon: Print Spooler Privilege Escalation, Persistence &...

7.8CVSS7.7AI score0.16373EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/07 10:04 p.m.8 views

CVE-2026-72585-PoC

CVE-2026-72585 — Grafana:对 CVE-2026-21724 的修复不完整,允许编辑者角色删除受保护的联系点 产品: Grafana(Grafana Labs)—— 13.2.0 及之前版本 文件: pkg/services/ngalert/provisioning/contactpoints.go CWE: CWE-284 — 访问控制不当 CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N — 6.5(中危) CNA: Turan Security · CVE 记录 相关: CVE-2026-21724(本次被绕过的原始修...

6.5CVSS6.7AI score0.00263EPSS
SaveExploits1References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/07 6:51 a.m.34 views

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-31613 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB reads parsing symlink error response When a CREATE returns...

8.1CVSS7.8AI score0.00378EPSS
SaveExploits4Affected Software1
CVE
CVE
added 2026/09/02 6:00 a.m.13 views

CVE-2026-77764

The GamiPress WordPress plugin before version 7.9.9.6 does not properly restrict its video watch-tracking functionality . A user with the Subscriber role (the lowest default WordPress role) can award configured gamification points, achievements, and ranks to arbitrary users—including administrato...

4.3CVSS6AI score0.00185EPSS
SaveExploits0References1
Rows per page
Query Builder