Lucene search
+L

1306 matches found

Kitploit
Kitploit
added 2026/09/01 4:43 a.m.6 views

paragon

弃用通知 本项目已弃用,请参考我们的新项目 Realm 项目,它建立在我们在构建此仓库时提出的许多想法之上。 Paragon Paragon 是一个红队交战平台。它旨在将攻击性工具统一到一个简单的用户界面后面,抽象出大部分后端工作,使操作人员能够专注于编写植入物,减少对数据库和 CSS 的操心。该仓库还提供了一些已经与 Paragon 集成的攻击性工具,可在交战期间使用。 此仓库仍处于重度开发阶段,尚未准备好用于生产环境。当它被认为是稳定版本时,将发布 V1.0.0 标签。在此之前,API...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/01 3:37 a.m.3 views

CVE-2026-18963_analyst

...

9.1CVSS8.7AI score0.03239EPSS
SaveExploits11References1
Kitploit
Kitploit
added 2026/09/01 2:41 a.m.37 views

certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/01 2:27 a.m.76 views

kerberoast

🚩 Sponsors If you like this project, consider sponsoring it on GitHub! Sponsors kerberoast Kerberos attack toolkit -pure python- Install pip3 install kerberoast Prereqirements Python 3.6 See requirements.txt For the impatient IMPORTANT: the accepted target url formats for LDAP and Kerberos are th...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 2:14 a.m.5 views

CVE-2026-27495

CVE-2026-27495 — Escape de sandbox en el Task Runner de JS de n8n Escape de sandbox en el Task Runner de JavaScript de n8n mediante una fuga de objetos del host-realm...

9.9CVSS6.8AI score0.00729EPSS
SaveExploits1
NVD
NVD
added 2026/08/27 5:20 p.m.8 views

CVE-2026-81679

OpenRemote versions before 1.28.0 contain a cross-realm information disclosure vulnerability in the Notification REST API that allows per-realm tenant administrators to read all tenants' sent notifications including message bodies. Attackers with read:admin credentials in one realm can submit a...

8.3CVSS0.00286EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/27 2:50 p.m.13 views

CVE-2026-81679

OpenRemote versions before 1.28.0 are affected by a cross-realm information disclosure vulnerability in the Notification REST API . An attacker with read:admin credentials in a single realm can issue a zero-parameter GET request to the notification endpoint and retrieve sent notification metadata...

8.3CVSS5.3AI score0.00286EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/27 2:50 p.m.6 views

EUVD-2026-67035

OpenRemote versions before 1.28.0 contain a cross-realm information disclosure vulnerability in the Notification REST API that allows per-realm tenant administrators to read all tenants' sent notifications including message bodies. Attackers with read:admin credentials in one realm can submit a...

8.3CVSS5.3AI score0.00286EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/27 2:50 p.m.6 views

CVE-2026-81679 OpenRemote before 1.28.0 Cross-Realm Information Disclosure via Notification API

OpenRemote versions before 1.28.0 contain a cross-realm information disclosure vulnerability in the Notification REST API that allows per-realm tenant administrators to read all tenants' sent notifications including message bodies. Attackers with read:admin credentials in one realm can submit a...

8.3CVSS5.5AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/27 2:50 p.m.30 views

CVE-2026-81679 OpenRemote before 1.28.0 Cross-Realm Information Disclosure via Notification API

OpenRemote versions before 1.28.0 contain a cross-realm information disclosure vulnerability in the Notification REST API that allows per-realm tenant administrators to read all tenants' sent notifications including message bodies. Attackers with read:admin credentials in one realm can submit a...

8.3CVSS0.00286EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/26 10:22 p.m.8 views

CVE-2025-51471-POC

CVE-2025-51471 - PoC di esposizione del token cross-dominio di Ollama Autore: ajtazer 🔥 Panoramica Questo repository contiene un Proof of Concept PoC per CVE-2025-51471 , una vulnerabilità di esposizione del token di autenticazione cross-dominio che colpisce tutte le versioni di Ollama inclusa...

6.9CVSS6.2AI score0.1423EPSS
SaveExploits2
Snyk
Snyk
added 2026/08/26 12:33 a.m.8 views

Improper Authorization

Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Improper Authorization through the Request.isUserInRole and RealmBase.hasRole role-checking paths in...

8.1CVSS5.9AI score0.00574EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-66422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in addition...

8.1CVSS5.4AI score0.00574EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/25 10:17 p.m.5 views

DEBIAN-CVE-2026-66422

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...

8.1CVSS5.4AI score0.00574EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/25 10:17 p.m.8 views

CVE-2026-66422

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...

8.1CVSS0.00574EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/25 9:55 p.m.37 views

CVE-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...

0.00574EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/25 9:55 p.m.19 views

CVE-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...

8.1CVSS5.9AI score
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/08/25 9:55 p.m.9 views

CVE-2026-66422

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...

8.1CVSS5.4AI score0.00574EPSS
SaveExploits0
CVE
CVE
added 2026/08/25 9:55 p.m.51 views

CVE-2026-66422

This is an Improper Authorization vulnerability in Apache Tomcat where security-role-ref definitions were incorrectly treated as role aliases within the Realm , enabling a bypass of declarative role constraints beyond the intended Request.isUserInRole() mechanism. Affected releases span 11.0.0-M1...

8.1CVSS5.3AI score0.00574EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/08/25 11:42 a.m.6 views

BIT-KEYCLOAK-2026-9099 Keycloak: group-admin escalation to realm-admin

A flaw was found in Keycloak. A missing authorization check in the GroupResource.addChild endpoint within the Admin REST API allows an authenticated user with limited administrative privileges to reparent any existing group. When Fine-Grained Admin Permissions v2 FGAPv2 is enabled, an attacker wi...

7.7CVSS5.5AI score0.0049EPSS
SaveExploits0References8
Rows per page
Query Builder