Lucene search
+L

43654 matches found

NVD
NVD
added 2026/09/17 3:16 p.m.5 views

CVE-2026-92880

A weakness has been identified in vgmstream up to r2117. Impacted is the function vadpcmreadcoefsbe of the file src/coding/vadpcmdecoder.c of the component EA SCHl parser. This manipulation of the argument entry/entries causes out-of-bounds write. Remote exploitation of the attack is possible...

7.5CVSS0.00247EPSS
SaveExploits0References8
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.214 views

Ruijie RG-EW1200G Router Background - Login Bypass

A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to t...

8.8CVSS6.8AI score0.58296EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.71 views

Cobbler 'XML-RPC' - Authentication Bypass

Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. utils.getsharedsecret always returns -1, which allows anyone to connect to cobbler...

9.8CVSS7.7AI score0.04003EPSS
SaveExploits6References3
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.29 views

HuangDou UTCMS V9 - OS Command Injection

A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection.The attack may be launched remotely. The...

9.8CVSS6.9AI score0.73617EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.48 views

Hongjing e-HR 2020 - SQL Injection

A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some unknown functionality of the file /wselfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree of the component Login Interface. The manipulation of the argument...

9.8CVSS7.1AI score0.03735EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.25 views

WeiYe-Jing datax-web <= 2.1.2 - OS Command Injection

A vulnerability, which was classified as critical, has been found in WeiYe-Jing datax-web 2.1.2. Affected by this issue is some unknown functionality of the file /api/log/killJob of the component HTTP POST Request Handler. The manipulation of the argument processId leads to os command injection...

9.8CVSS6.7AI score0.09901EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.20 views

Discuz! X5.0 - Authentication Bypass

Discuz! X5.0 20260320 through 20260501 contains an authentication bypass caused by exploitation of a shared cryptographic key and encryption oracle in dbbak.php and loggingctl::loggingmore, letting unauthenticated remote attackers access database backup and restore functions, exploit requires...

9.3CVSS5.8AI score0.04717EPSS
SaveExploits4References4
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.17 views

Kimai <= 2.57.0 - Default APP_SECRET Authentication Bypass

Kimai Docker images = 2.58.0 which generates a random APPSECRET on first boot. Alternatively, manually set a unique APPSECRET in your .env.local file. reference: - https://github.com/advisories/GHSA-jr9p-4h4j-6c58 - https://github.com/kimai/kimai/releases/tag/2.58.0 classification: cve-id:...

9.1CVSS5.8AI score0.02062EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.22 views

PHPGurukul Hospital Management System 4.0 - SQL Injection

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain sensitive database information. id: CVE-2020-22165 info: name: PHPGurukul Hospital Management System 4.0 - SQL Injection...

7.5CVSS7.2AI score0.06348EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/17 1:18 a.m.9 views

CVE-2026-4747-

CVE-2026-4747: FreeBSD 원격 커널 RCE AI가 발견하고 악용한 최초의 원격 커널 익스플로잇 📋 빠른 요약...

8.8CVSS8.2AI score0.02494EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/17 12:06 a.m.11 views

CVE-2023-38632

CVE-2023-38632 async-sockets-cpp 0.3.1까지의 버전에는 tcpsocket.hpp의 102-110행에 있는 static void ReceiveTCPSocket socket에 원격 버퍼 오버플로 취약점이 있습니다. 이 버퍼 오버플로는 해당하는 모든 TCP 서버에 영향을 미칩니다. 원격 버퍼 오버플로는 소켓에 연결한 후 대용량 바이트 버퍼를 전송하여 트리거할 수 있습니다. root@kitploit: while messageLength = recvsocket-sock, tempBuffer,...

9.8CVSS8.8AI score0.01882EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 11:40 a.m.7 views

Samba-Usermap-exploit

CVE-2007-2447 - Samba usermap exploit. Usage: root@kitploit: $ python3 exploit.py RHOST -- The target address RPORT -- The target port TCP : 139 LHOST -- The listen address LPORT -- The listen port Installation root@kitploit: git clone https://github.com/Nosferatuvjr/Samba-Usermap-exploit pip...

6CVSS8.1AI score0.49759EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/16 10:36 a.m.9 views

CVE-2022-31269

CVE-2022-31269 Nortek Control Linear eMerge E3-Series Information Disclosure Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use python3 CVE-2022-31269.py -u http://127.0.0.1 python3...

8.2CVSS8.3AI score0.06987EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/16 9:46 a.m.6 views

CVE-2007-2447

Sambaster cve-2007-2447 Samba 3.0.20 requirement module: root@kitploit: pysmb if you not installed it: root@kitploit: pip3 install pysmb Usage: root@kitploit: python3 sambaster.py...

6CVSS8.3AI score0.49759EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/16 4:13 a.m.12 views

Exim-CVE-2018-6789

Exim CVE-2018-6789 PoC materials to exploit CVE-2018-6789. Blogpost explaining the PoC is available on Synacktiv Blog. This PoC connects to a vulnerable Exim server and exploits CVE-2018-6789. Usage root@kitploit: usage: exploit -hv options: -h, --help Print this help -v, --verbose Enable verbose...

9.8CVSS8.3AI score0.82137EPSS
SaveExploits19
Cvelist
Cvelist
added 2026/09/15 6:34 p.m.30 views

CVE-2026-57012

In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00102EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 2:08 p.m.11 views

CVE-2020-1971

CVE-2020-1971 CVE-2020-1971 Auto Scan & Remote Exploit Script. Auto Local Scan & Patch Script. Currently in development Patched Source Code of OpenSSL 1.1.1i Install from source/Update .deb Script Currently in development 5:38pm Completed 5:50pm Install from source/Update Windows Currently in...

5.9CVSS6.9AI score0.07051EPSS
SaveExploits3References2
EUVD
EUVD
added 2026/09/15 6:30 a.m.8 views

EUVD-2026-78301

A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmxprocess of the file filters/reframempgvid.c of the component MPEG Video Reframer. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The...

7.5CVSS6.5AI score0.00323EPSS
SaveExploits0References9
CVE
CVE
added 2026/09/15 6:15 a.m.9 views

CVE-2026-91005

SourceCodester Online Faculty Clearance System 1.0 is vulnerable to an unrestricted file upload in the Profile Picture Upload component. The flaw resides in the move_uploaded_file function within production/edit_picture.php , where manipulation of the File argument allows an attacker to upload ar...

6.5CVSS6.2AI score0.00209EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/15 6:15 a.m.32 views

CVE-2026-91005 SourceCodester Online Faculty Clearance System Profile Picture Upload edit_picture.php move_uploaded_file unrestricted upload

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function moveuploadedfile of the file production/editpicture.php of the component Profile Picture Upload. Performing a manipulation of the argument File results in unrestricted upload. The attack is...

6.5CVSS0.00209EPSS
SaveExploits0References6
Rows per page
Query Builder