CVE-2022-0847-DirtyPipe-Exploit

Une vulnérabilité a été trouvée dans le noyau Linux jusqu'aux versions 5.10.101/5.15.24/5.16.10 système d'exploitation et classée comme critique. Ce problème affecte un traitement inconnu du composant Pipe Handler. La confidentialité, l'intégrité et la disponibilité sont impactées. La faiblesse a...

kin

The diff is not the change. AI agents can write a change faster than a team can establish what it touches, whether it reverses an earlier fix, and how far its consequences reach. Git records files and line history. Kin records the software itself as a graph of entities, relations, changes, and...

CVE-2026-29000

Script semplice che sfrutta CVE-2026-29000. Tutto ciò di cui hai bisogno è la chiave pubblica in formato PEM e puoi usarlo. Per maggiori informazioni sulla vulnerabilità leggi: https://www.codeant.ai/security-research/pac4j-jwt-authentication-bypass-public-key...

database-druid

druid encode java -cp druid-1.1.19.jar com.alibaba.druid.filter.config.ConfigTools 密码 Beispiel: java -cp druid-1.1.19.jar com.alibaba.druid.filter.config.ConfigTools jas502n root@kitploit:...

CVE-2026-81486 bsmi021 mcp-file-context-server Path Resolution index.ts read_context path traversal

A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function readcontext of the file src/index.ts of the component Path Resolution. Performing a manipulation of the argument path results in path traversal. It is possible to initiate the attack...

CVE-2026-81486

bsmi021 mcp-file-context-server 1.0.0 contains a path traversal vulnerability in the Path Resolution component, specifically in the function read_context within src/index.ts. Manipulating the path argument allows an unauthenticated remote attacker to read files outside the intended directory, res...

CVE-2026-81421

A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component rawsentryapi. The manipulation of the argument endpoint results in server-side request forgery. It is possible to launch the attack remotely. The exploit has...

CVE-2021-43798-Grafana-File-Read

Grafana-File-Read Неавторизованное чтение файлов в Grafana Затронутые версии: 8.0.0-lastest reference: - https://github.com/tangxiaofeng7/Grafana-File-Read Использование уязвимости недостаточной проверки маршрутов URL в интерфейсе Grafana /public/plugins для чтения произвольных локальных файлов н...

web

Je n'ai pas encore de données. C'est une erreur capitale de théoriser avant d'avoir des données. Insensiblement, on commence à tordre les faits pour les adapter aux théories, au lieu d'adapter les théories aux faits. 🚧 ⚠️ Travail en cours ; Pas encore prêt pour une utilisation,mais ça vient ⚠️ 🚧...

EUVD-2026-66809

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

unauthscout

UnauthScout UnauthScout ist ein CLI-Tool für unauthorisierte OSINT-Aufklärung auf öffentlichen Entwicklerplattformen wie GitHub und GitLab. Es standardisiert die Sammlung öffentlich verfügbarer Benutzerdaten über eine konsistente Schnittstelle und normalisierte JSON-Ausgabeverträge. Problemstellu...

PT-2026-82603

openssl encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities from identity.json, allowing attackers to substitute public keys in identity stores. Attackers can replace legitimate public keys with their own while maintaining the claimed fingerprint, enabling...

PT-2026-82805

A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function save pipeline/load pipeline of the file pipeline tools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and...

CVE-2026-81421 ddfourtwo sentry-selfhosted-mcp raw_sentry_api server-side request forgery

A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component rawsentryapi. The manipulation of the argument endpoint results in server-side request forgery. It is possible to launch the attack remotely. The exploit has...

CVE-2026-81421

CVE-2026-81421 affects ddfourtwo sentry-selfhosted-mcp 0.4.0 , where the raw_sentry_api component is vulnerable to server-side request forgery (SSRF) through manipulation of the endpoint argument. The vulnerability allows remote, unauthenticated attacks with low complexity. A Proof-of-Concept exp...

subdosec

Subdosec Scanner e strumento di ricognizione per takeover di sottodomini. Installazione • Utilizzo • Basato sul web • Contributo • Scansione online • Riconoscimenti Subdosec è uno scanner per takeover di sottodomini veloce e accurato, senza falsi positivi, con un database pubblico di sottodomini...

bugsy

Bugsy Bugsy is a command-line interface CLI tool that provides automatic security vulnerability remediation for your code. It is the community edition version of Mobb, the first vendor-agnostic automated security vulnerability remediation tool. Bugsy is designed to help developers quickly identif...

CVE-2026-33017-Exploit

Fireflow RCE एक्सप्लॉइट Langflow के लिए buildpublictmp एंडपॉइंट के माध्यम से रिमोट कोड निष्पादन। पब्लिक फ्लो बिल्ड एंडपॉइंट के माध्यम से एक्सप्लॉइट जो टार्गेट पर रिवर्स शेल निष्पादित करता है। आवश्यकताएँ Python 3.8+ httpx लाइब्रेरी इंस्टॉल करें: root@kitploit: pip install httpx उपयोग root@kitploit...

CVE-2021-43798

CVE-2021-43798 by Privacy Hunter प्रभावित संस्करण: Grafana 8.0.0-beta1 से 8.3.0 तक पैच किए गए संस्करणों को छोड़कर कमजोरी का प्रकार: Directory Traversal निर्देशिका में भ्रमण प्रभाव स्तर: अत्यंत खतरनाक Critical प्लेटफ़ॉर्म: Grafana ओपन-सोर्स मॉनिटरिंग और ऑब्ज़र्वेबिलिटी प्लेटफ़ॉर्म ⚠️ कमजोरी का विवर...

BucketLoot

BucketLoot 一款自动化 S3 兼容 Bucket 检查工具 描述 • 安装 • 功能 • 文档 • 致谢 描述 BucketLoot 是一款自动化 S3 兼容 Bucket 检查工具，能够帮助用户从公开暴露的存储桶中提取资产、标记机密泄露，甚至搜索自定义关键词和正则表达式，通过扫描以纯文本形式存储数据的文件来实现。 该工具可以扫描部署在 Amazon Web Services AWS、Google Cloud Storage GCS、DigitalOcean Spaces 以及可能连接到这些平台的自定义域名/URL 上的存储桶。它会以 JSON...