Lucene search
+L

1306 matches found

Kitploit
Kitploit
added 2026/09/01 4:43 a.m.6 views

paragon

Deprecation Notice This project has been deprecated, please refer to our new Realm project, which builds upon many of the ideas we had when building this repo. Paragon Paragon is a Red Team engagement platform. It aims to unify offensive tools behind a simple UI, abstracting much of the backend...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/01 3:37 a.m.4 views

CVE-2026-18963_analyst

...

9.1CVSS7.4AI score0.03239EPSS
SaveExploits11References1
Kitploit
Kitploit
added 2026/09/01 2:41 a.m.37 views

certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/01 2:27 a.m.76 views

kerberoast

🚩 Sponsors If you like this project, consider sponsoring it on GitHub! Sponsors kerberoast Kerberos attack toolkit -pure python- Install pip3 install kerberoast Prereqirements Python 3.6 See requirements.txt For the impatient IMPORTANT: the accepted target url formats for LDAP and Kerberos are th...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 2:14 a.m.5 views

CVE-2026-27495

CVE-2026-27495 — n8n JS Task Runner Sandbox Escape Sandbox escape on n8n JavaScript Task Runner via host-realm object leak...

9.9CVSS6.8AI score0.00729EPSS
SaveExploits1
NVD
NVD
added 2026/08/27 5:20 p.m.8 views

CVE-2026-81679

OpenRemote versions before 1.28.0 contain a cross-realm information disclosure vulnerability in the Notification REST API that allows per-realm tenant administrators to read all tenants' sent notifications including message bodies. Attackers with read:admin credentials in one realm can submit a...

8.3CVSS0.00286EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/27 2:50 p.m.13 views

CVE-2026-81679

OpenRemote versions before 1.28.0 are affected by a cross-realm information disclosure vulnerability in the Notification REST API . An attacker with read:admin credentials in a single realm can issue a zero-parameter GET request to the notification endpoint and retrieve sent notification metadata...

8.3CVSS5.3AI score0.00286EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/27 2:50 p.m.6 views

CVE-2026-81679 OpenRemote before 1.28.0 Cross-Realm Information Disclosure via Notification API

OpenRemote versions before 1.28.0 contain a cross-realm information disclosure vulnerability in the Notification REST API that allows per-realm tenant administrators to read all tenants' sent notifications including message bodies. Attackers with read:admin credentials in one realm can submit a...

8.3CVSS5.5AI score
SaveExploits0References4
EUVD
EUVD
added 2026/08/27 2:50 p.m.6 views

EUVD-2026-67035

OpenRemote versions before 1.28.0 contain a cross-realm information disclosure vulnerability in the Notification REST API that allows per-realm tenant administrators to read all tenants' sent notifications including message bodies. Attackers with read:admin credentials in one realm can submit a...

8.3CVSS5.3AI score0.00286EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/27 2:50 p.m.30 views

CVE-2026-81679 OpenRemote before 1.28.0 Cross-Realm Information Disclosure via Notification API

OpenRemote versions before 1.28.0 contain a cross-realm information disclosure vulnerability in the Notification REST API that allows per-realm tenant administrators to read all tenants' sent notifications including message bodies. Attackers with read:admin credentials in one realm can submit a...

8.3CVSS0.00286EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/26 10:22 p.m.8 views

CVE-2025-51471-POC

CVE-2025-51471 - PoC di esposizione del token cross-dominio di Ollama Autore: ajtazer 🔥 Panoramica Questo repository contiene un Proof of Concept PoC per CVE-2025-51471 , una vulnerabilità di esposizione del token di autenticazione cross-dominio che colpisce tutte le versioni di Ollama inclusa...

6.9CVSS6.2AI score0.1423EPSS
SaveExploits2
Snyk
Snyk
added 2026/08/26 12:33 a.m.8 views

Improper Authorization

Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Improper Authorization through the Request.isUserInRole and RealmBase.hasRole role-checking paths in...

8.1CVSS5.9AI score0.00574EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-66422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in addition...

8.1CVSS5.4AI score0.00574EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/25 10:17 p.m.6 views

DEBIAN-CVE-2026-66422

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...

8.1CVSS5.4AI score0.00574EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/25 10:17 p.m.8 views

CVE-2026-66422

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...

8.1CVSS0.00574EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/25 9:55 p.m.37 views

CVE-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...

0.00574EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/25 9:55 p.m.20 views

CVE-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...

8.1CVSS5.9AI score
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/08/25 9:55 p.m.9 views

CVE-2026-66422

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...

8.1CVSS5.4AI score0.00574EPSS
SaveExploits0
CVE
CVE
added 2026/08/25 9:55 p.m.53 views

CVE-2026-66422

This is an Improper Authorization vulnerability in Apache Tomcat where security-role-ref definitions were incorrectly treated as role aliases within the Realm , enabling a bypass of declarative role constraints beyond the intended Request.isUserInRole() mechanism. Affected releases span 11.0.0-M1...

8.1CVSS5.3AI score0.00574EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/08/25 11:42 a.m.6 views

BIT-KEYCLOAK-2026-9099 Keycloak: group-admin escalation to realm-admin

A flaw was found in Keycloak. A missing authorization check in the GroupResource.addChild endpoint within the Admin REST API allows an authenticated user with limited administrative privileges to reparent any existing group. When Fine-Grained Admin Permissions v2 FGAPv2 is enabled, an attacker wi...

7.7CVSS5.5AI score0.0049EPSS
SaveExploits0References8
Rows per page
Query Builder