Lucene search
+L

215052 matches found

Kitploit
Kitploit
added 2026/09/10 4:36 p.m.82 views

reconmap

Reconmap Pentesting Management, Automation and Reporting Platform Reconmap is an open source vulnerability assessment and penetration testing platform designed to support security professionals throughout the entire engagement lifecycle. It enables penetration testers and InfoSec teams to...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 4:36 p.m.8 views

reconmap

Reconmap Plataforma de gestión, automatización y generación de informes de pentesting Reconmap es una plataforma de código abierto para evaluación de vulnerabilidades y pruebas de penetración, diseñada para apoyar a los profesionales de seguridad durante todo el ciclo de vida del compromiso...

5.9AI score
SaveExploits0
CVE
CVE
added 2026/09/10 4:36 p.m.7 views

CVE-2026-73699

FileRun before 2026.3.0 is affected by a PHP object injection vulnerability in the Perms::getPerms() method. The root cause is an incorrect option passed to unserialize() : a positional array is used instead of the required named-key array, failing to disable class instantiation. Authenticated at...

8.6CVSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/10 4:36 p.m.18 views

CVE-2026-73699 FileRun < 2026.3.0 PHP Object Injection via Perms::getPerms()

FileRun before 2026.3.0 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary code by exploiting incorrect options passed to unserialize in the Perms::getPerms method, where a positional array is used instead of the required named-key array to...

8.6CVSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/10 4:36 p.m.5 views

EUVD-2026-75601

FileRun before 2026.3.0 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary code by exploiting incorrect options passed to unserialize in the Perms::getPerms method, where a positional array is used instead of the required named-key array to...

8.6CVSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/09/10 4:36 p.m.4 views

CVE-2026-73699 FileRun < 2026.3.0 PHP Object Injection via Perms::getPerms()

FileRun before 2026.3.0 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary code by exploiting incorrect options passed to unserialize in the Perms::getPerms method, where a positional array is used instead of the required named-key array to...

8.6CVSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 4:36 p.m.4 views

Sequelize-1day-CVE-2023-25813

CVE-2023-25813 CVE Information CVE Number : CVE-2023-25813 Description : In Sequelize versions prior to 6.19.1, input passed through the replacements option is not properly escaped, which can lead to SQL Injection depending on the query structure. Affected Versions : Sequelize 6.19.0 and below...

10CVSS8AI score0.01444EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 4:36 p.m.8 views

securesystemslib

securesystemslib Securesystemslib is a cryptography interface for signing and verifying digital signatures. It is developed for the TUF and in-toto projects: the key and signature containers are compatible with metadata formats from those projects. Under the hood, Securesystemslib can use various...

6AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/10 4:34 p.m.6 views

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Rails Active Storage/libvips Arbitrary File Read → SECRETKEYBASE Theft → RCE Overview CVE-2026-66066 is a critical-severity CVSS 9.5 pre-authentication arbitrary file read to remote code execution chain in Ruby on Rails Active Storage, affecting Rails 7.2.0–7.2.3...

9.5CVSS8.5AI score0.27861EPSS
SaveExploits10
CVE
CVE
added 2026/09/10 4:34 p.m.9 views

CVE-2026-73698

FileRun versions prior to 2026.3.0 contain an authenticated SQL injection vulnerability in the Groups Add action. A delegated or simple administrator can submit the description parameter as an array, causing the getValuesString() method in DB/DP.php to interpolate raw array values into an INSERT ...

8.6CVSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/10 4:34 p.m.6 views

EUVD-2026-75600

FileRun before 2026.3.0 contains a SQL injection vulnerability that allows delegated or simple administrators to execute arbitrary SQL by submitting the description parameter as an array, causing the getValuesString method in DB/DP.php to interpolate raw array values directly into an INSERT...

8.6CVSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/10 4:34 p.m.17 views

CVE-2026-73698 FileRun < 2026.3.0 Authenticated SQL Injection via Groups Add Action

FileRun before 2026.3.0 contains a SQL injection vulnerability that allows delegated or simple administrators to execute arbitrary SQL by submitting the description parameter as an array, causing the getValuesString method in DB/DP.php to interpolate raw array values directly into an INSERT...

8.6CVSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 4:34 p.m.10 views

CVE-2026-54121-PoC-Exploit

CVE-2026-54121 - AD CS "Certighost" Elevation of Privilege Framework-Toolkit Active Directory Certificate Services — Certighost → Domain Takeover Exploit Framework & Audit Toolkit For authorized security testing only. --- ⚖️ Legal Disclaimer & Responsible Use This tool is provided for educational...

8.8CVSS7.9AI score0.01788EPSS
SaveExploits12References5
Kitploit
Kitploit
added 2026/09/10 4:34 p.m.4 views

PowerLurk

PowerLurk PowerLurk is a PowerShell toolset for building malicious WMI Event Subsriptions. The goal is to make WMI events easier to fire off during a penetration test or red team engagement. Please see my post Creeping on Users with WMI Events: Introducing PowerLurk for more detailed information:...

5.9AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/09/10 4:34 p.m.4 views

netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake

A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS Transport Layer Security ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service DoS due to excessive memor...

7.5CVSS5.8AI score0.00856EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/10 4:34 p.m.3 views

artemis-openwire-protocol: AMQ Broker Artemis: pre-authentication arbitrary durable queue deletion via OpenWire RemoveSubscriptionInfo

An unauthenticated network attacker can delete arbitrary durable queues on any Apache Artemis broker with OpenWire protocol enabled default. The processRemoveSubscription method executes pre-authentication with no authorization check, and uses the internal destroyQueueSimpleString overload that...

9.1CVSS0.00288EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/10 4:34 p.m.3 views

artemis-core-client: activemq-artemis: Unsafe deserialization via JsonUtil CompositeData on management address

A flaw was found in Apache ActiveMQ Artemis. The JsonUtil.fromJsonArray method uses ObjectInputStream.readObject to deserialize CompositeData from Base64-encoded serialized objects in management message bodies sent to the activemq.management address. While the deserialization is protected by an...

6.5CVSS0.00171EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/10 4:34 p.m.3 views

XLL_Phishing

XLLPhishing Introduction With Microsoft's recent announcement regarding the blocking of macros in documents originating from the internet email AND web download, attackers have began aggressively exploring other options to achieve user driven access UDA. There are several considerations to be...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 4:30 p.m.10 views

firejail

Firejail Firejail is a lightweight security tool intended to protect a Linux system by setting up a restricted environment for running potentially untrusted applications. More specifically, it is an SUID sandbox program that reduces the risk of security breaches by using Linux namespaces,...

7.8CVSS7AI score0.00444EPSS
SaveExploits1References29
Kitploit
Kitploit
added 2026/09/10 4:30 p.m.13 views

river

River is a Python library for online machine learning. It aims to be the most user-friendly library for doing machine learning on streaming data. River is the result of a merger between creme and scikit-multiflow. ⚡️ Quickstart As a quick example, we'll train a logistic regression to classify the...

6AI score
SaveExploits0References9
Rows per page
Query Builder