Lucene search
+L

2200 matches found

Kitploit
Kitploit
•added 2026/10/09 10:06 a.m.•1290 views

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

6.1AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/10/09 3:04 a.m.•16 views

py

si encuentras algún error, repórtalo en los issues de usuario de Github Aún en desarrollo Compatible con win7 a win11 última Configuración de MCP / Uso de MCP PYArkClient incluye un servidor MCP Streamable HTTP integrado; cualquier cliente MCP Claude Code / Claude Desktop / CodePilot, etc. puede...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/09 2:20 a.m.•16 views

CVE-2021-21978

CVE-2021-21978 CVE-2021-21978 RCE exp Versiones afectadas VMware View Planner Harness 4.X Al igual que CVE-2021-21978, esta vulnerabilidad permite subir archivos arbitrarios sin acceso autorizado y lograr la ejecución remota de código modificando el script py incluido. Es importante señalar que l...

9.8CVSS8.5AI score0.99005EPSS
SaveExploits9
Nuclei
Nuclei
•added 2026/10/09 2:16 a.m.•100 views

Mesop AI Sandbox <= 1.2.2 - Remote Code Execution

Mesop = 1.2.2 contains an unrestricted remote code execution caused by unauthenticated ingestion and execution of base64-encoded Python code in the /exec-py endpoint of ai/testing module, letting attackers execute arbitrary commands on the host, exploit requires HTTP access to the server. id:...

9.8CVSS6.7AI score0.04111EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/10/08 9:30 p.m.•14 views

Py-RDP-Patcher

Py-RDP-Patcher Py-RDP-Patcher is a tool made in python to patch the termsrv file to allow simultaneous RDP sessions Setup Guide: This script only requires the art library which is installed by executing : pip install art Requirements: Python3, Windows Limitations: For now this script only support...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/08 7:49 p.m.•15 views

py-amsi

py-amsi py-amsi is a library that scans strings or files for malware using the Windows Antimalware Scan Interface AMSI API. AMSI is an interface native to Windows that allows applications to ask the antivirus installed on the system to analyse a file/string. AMSI is not tied to Windows Defender...

6.3AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/08 1:56 p.m.•15 views

py-network-scanner

███╗ ██╗███████╗████████╗██╗ ██╗ ██████╗ ██████╗ ██╗ ██╗ ██████╗ ██████╗ ███████╗██████╗ ████╗ ██║██╔════╝╚══██╔══╝██║ ██║██╔═══██╗██╔══██╗██║ ██╔╝ ██╔══██╗██╔══██╗██╔════╝██╔══██╗ ██╔██╗ ██║█████╗ ██║ ██║ █╗ ██║██║ ██║██████╔╝█████╔╝ ██████╔╝██████╔╝█████╗ ██║ ██║ ██║╚██╗██║██╔══╝ ██║...

5.9CVSS7.3AI score0.98631EPSS
SaveExploits26References1
Kitploit
Kitploit
•added 2026/10/08 1:00 p.m.•15 views

cve-2026-40072-ssrf-lab

CVE-2026-40072 SSRF Lab Hands-on local lab to demonstrate CVE-2026-40072 in web3.py, show the SSRF impact in Burp Suite, and verify the official fix. Overview This repository contains a safe, local-only proof of concept for CVE-2026-40072, a Server-Side Request Forgery SSRF issue tied to CCIP Rea...

7.2CVSS6.3AI score0.00311EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/08 12:09 p.m.•10 views

CVE-2017-0199-PY-KIT

CVE-2017-0199-PY-KIT...

9.3CVSS7.9AI score0.99497EPSS
SaveExploits30
Kitploit
Kitploit
•added 2026/10/08 11:57 a.m.•21 views

JSRat-Py

JSRat-Py Esta es mi implementación de JSRat.ps1 en Python, por lo que ahora puedes ejecutar el servidor de ataque desde cualquier sistema operativo en lugar de limitarte a un sistema Windows con PowerShell habilitado. Se añadió soporte para manejar la invocación del cliente mediante los métodos...

6.1AI score
SaveExploits0References2
EUVD
EUVD
•added 2026/10/07 4:18 p.m.•9 views

EUVD-2026-93873

Twisted: IMAP wildcardToRegexp ReDoS...

4.3CVSS5.8AI score0.0033EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/10/07 4:18 p.m.•12 views

Twisted: IMAP wildcardToRegexp() ReDoS

Summary wildcardToRegexp in twisted/mail/imap4.py converts IMAP LIST/LSUB wildcard patterns to Python regular expressions. It substitutes the two IMAP wildcards → ?:.? and % → ?:?:^\/? but passes every other character through unchanged to re.compile. This means that an authenticated IMAP client...

4.3CVSS6.2AI score0.0033EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2026/10/07 4:18 p.m.•8 views

GHSA-8PQF-F4M5-798G Twisted: IMAP wildcardToRegexp() ReDoS

Summary wildcardToRegexp in twisted/mail/imap4.py converts IMAP LIST/LSUB wildcard patterns to Python regular expressions. It substitutes the two IMAP wildcards → ?:.? and % → ?:?:^\/? but passes every other character through unchanged to re.compile. This means that an authenticated IMAP client...

4.3CVSS6.2AI score0.0033EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/10/06 11:51 p.m.•13 views

CVE-2026-87902

PoC for CVE-2026-87902 nothing too detailed, some basic checks. usage: python3 wp87902.py -u https://targeturl optional flags: -p PAGE -d DEPTH --prefix PREFIX --page-scan-limit PAGESCANLIMIT --timeout TIMEOUT -k -v...

8.1CVSS8AI score0.39979EPSS
SaveExploits30
OSV
OSV
•added 2026/10/06 8:17 p.m.•4 views

DEBIAN-CVE-2026-106454

Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegexp in twisted/mail/imap4.py translates the IMAP asterisk and percent wildcards but passes all other characters from an authenticated client's LIST or LSUB pattern directly t...

4.3CVSS5.9AI score0.0033EPSS
SaveExploits0References1
OSV
OSV
•added 2026/10/06 8:17 p.m.•5 views

AZL-106712 CVE-2026-106454 affecting package python-twisted 22.10.0-6

Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegexp in twisted/mail/imap4.py translates the IMAP asterisk and percent wildcards but passes all other characters from an authenticated client's LIST or LSUB pattern directly t...

4.3CVSS5.9AI score0.0033EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 8:17 p.m.•8 views

CVE-2026-106454

Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegexp in twisted/mail/imap4.py translates the IMAP asterisk and percent wildcards but passes all other characters from an authenticated client's LIST or LSUB pattern directly t...

4.3CVSS0.0033EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/06 7:55 p.m.•43 views

CVE-2026-106454 Twisted: IMAP wildcardToRegexp() ReDoS

Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegexp in twisted/mail/imap4.py translates the IMAP asterisk and percent wildcards but passes all other characters from an authenticated client's LIST or LSUB pattern directly t...

4.3CVSS0.0033EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/10/06 7:55 p.m.•5 views

CVE-2026-106454

Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegexp in twisted/mail/imap4.py translates the IMAP asterisk and percent wildcards but passes all other characters from an authenticated client's LIST or LSUB pattern directly t...

4.3CVSS5.9AI score0.0033EPSS
SaveExploits0
OSV
OSV
•added 2026/10/06 10:30 a.m.•26 views

ROOT-APP-PYPI-CVE-2025-69224 CVE-2025-69224 in aiohttp - Patched by Root

Root has patched CVE-2025-69224 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

6.5CVSS6.8AI score0.0025EPSS
SaveExploits0
Rows per page
Query Builder