Lucene search
+L

2226 matches found

GithubExploit
GithubExploit
•added 2026/07/19 6:12 a.m.•89 views

Exploit for CVE-2026-63030

wp2shell Pre-Authentication Remote Code Execution in WordPres...

9.8CVSS8.6AI score0.10119EPSS
SaveExploits88
GithubExploit
GithubExploit
•added 2026/07/18 5:07 p.m.•62 views

Exploit for CVE-2026-63030

CVE-2026-63030: WordPress Pre-Auth RCE Explained 📖 Read t...

9.8CVSS8.4AI score0.10119EPSS
SaveExploits88
GithubExploit
GithubExploit
•added 2026/07/18 2:06 p.m.•101 views

Exploit for CVE-2026-63030

wp2shell CVE-2026-63030 / CVE-2026-60137 PoC for an unaut...

9.8CVSS8.4AI score0.10119EPSS
SaveExploits88
GithubExploit
GithubExploit
•added 2026/07/18 3:56 a.m.•96 views

wp2shell

wp2shell Pre-authentication RCE exploit for WordPress Core RE...

9.8CVSS8.6AI score0.10119EPSS
SaveExploits86
GithubExploit
GithubExploit
•added 2026/07/18 3:16 a.m.•87 views

Exploit for CVE-2026-60137

wp2shell-lab Educational PoC and lab for CVE-2026-63030 + C...

9.1CVSS8.3AI score0.10119EPSS
SaveExploits88
GithubExploit
GithubExploit
•added 2026/07/18 12:44 a.m.•132 views

Exploit for CVE-2026-63030

WordPress REST API Batch Route Confusion + SQL Injection → RCE...

9.1CVSS8.6AI score0.10119EPSS
SaveExploits88
Tenable Nessus
Tenable Nessus
•added 2026/07/18 12:00 a.m.•11 views

SUSE SLES15 Security Update : libssh2_org (SUSE-SU-2026:3082-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:3082-1 advisory. This update for libssh2org fixes the following issue - CVE-2026-55199: pre-Authentication DoS via SSHMSGEXTINFO Handler bsc1268530. Tenable has extract...

8.2CVSS7AI score0.00692EPSS
SaveExploits1References4
OSV
OSV
•added 2026/07/17 7:42 p.m.•19 views

GO-2026-5962 File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE) in github.com/filebrowser/filebrowser

File Browser: Command Injection via Authentication Hook Shell Substitution Pre-Authentication RCE in github.com/filebrowser/filebrowser...

9.3CVSS8.1AI score0.00764EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/17 6:40 p.m.•64 views

CVE-2026-45309 AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.0, AsyncSSH expands the OpenSSH-compatible AuthorizedKeysFile %u token in asyncssh/config.py, asyncssh/connection.py,...

8.2CVSS0.00592EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/07/17 6:40 p.m.•13 views

CVE-2026-45309 AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.0, AsyncSSH expands the OpenSSH-compatible AuthorizedKeysFile %u token in asyncssh/config.py, asyncssh/connection.py,...

8.2CVSS5.7AI score0.00592EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2026/07/17 6:40 p.m.•15 views

CVE-2026-45309

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.0, AsyncSSH expands the OpenSSH-compatible AuthorizedKeysFile %u token in asyncssh/config.py, asyncssh/connection.py,...

8.2CVSS5.7AI score0.00592EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2026/07/17 6:40 p.m.•145 views

CVE-2026-45309

CVE-2026-45309 affects AsyncSSH prior to 2.23.0. Root cause: the OpenSSH-style token %u in AuthorizedKeysFile was expanded from the remote username without rejecting path separators or .. segments, letting a username such as with traversal characters read an attacker-controlled authorized-keys fi...

8.2CVSS5.7AI score0.00592EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2026/07/17 6:40 p.m.•14 views

CVE-2026-45309 AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.0, AsyncSSH expands the OpenSSH-compatible AuthorizedKeysFile %u token in asyncssh/config.py, asyncssh/connection.py,...

8.2CVSS4.7AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/17 12:00 a.m.•2 views

CVE-2026-45309: Improper Limitation of a Pathname to a Restricted Directory

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.0, AsyncSSH expands the OpenSSH-compatible AuthorizedKeysFile %u token in asyncssh/config.py, asyncssh/connection.py,...

8.2CVSS5.9AI score0.00592EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2026/07/17 12:00 a.m.•11 views

SUSE SLES15 Security Update : libssh2_org (SUSE-SU-2026:3074-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3074-1 advisory. This update for libssh2org fixes the following issue Security changes: - CVE-2026-55199: pre-Authentication DoS via SSHMSGEXTINFO Handler...

8.2CVSS7.1AI score0.00692EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2026/07/17 12:00 a.m.•12 views

SUSE SLED15 / SLES15 Security Update : libssh2_org (SUSE-SU-2026:3076-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3076-1 advisory. This update for libssh2org fixes the following issue - CVE-2026-55199: pre-Authentication DoS via SSHMSGEXTINFO Handler...

8.2CVSS7.1AI score0.00692EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2026/07/16 4:17 p.m.•16 views

Security update for libssh2_org

This update for libssh2org fixes the following issue CVE-2026-55199: pre-Authentication DoS via SSHMSGEXTINFO Handler bsc1268530. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

5.9CVSS7.1AI score0.00692EPSS
SaveExploits1References4
OSV
OSV
•added 2026/07/16 4:17 p.m.•10 views

SUSE-SU-2026:3082-1 Security update for libssh2_org

This update for libssh2org fixes the following issue - CVE-2026-55199: pre-Authentication DoS via SSHMSGEXTINFO Handler bsc1268530...

8.2CVSS7.2AI score0.00692EPSS
SaveExploits1References3
SUSE Linux
SUSE Linux
•added 2026/07/16 1:04 p.m.•25 views

Security update for libssh2_org

This update for libssh2org fixes the following issue CVE-2026-55199: pre-Authentication DoS via SSHMSGEXTINFO Handler bsc1268530. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

5.9CVSS7.1AI score0.00692EPSS
SaveExploits1References4
OSV
OSV
•added 2026/07/16 1:04 p.m.•11 views

SUSE-SU-2026:3076-1 Security update for libssh2_org

This update for libssh2org fixes the following issue - CVE-2026-55199: pre-Authentication DoS via SSHMSGEXTINFO Handler bsc1268530...

8.2CVSS7.2AI score0.00692EPSS
SaveExploits1References3
Rows per page
Query Builder