Lucene search
+L

8406 matches found

Positive Technologies
Positive Technologies
added 2026/08/28 12:00 a.m.11 views

PT-2026-82973

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the look-ahead attribute-list entry in ntfs external attr find When resolving an attribute lookup with a non-zero @lowest vcn, ntfs external attr find peeks at the next $ATTRIBUTE LIST entry to decide whether to keep...

6AI score0.00379EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/27 9:29 p.m.1 views

Holistic-Deconstruction-of-CVE-2019-5736-

= doi.org/10.5281/zenodo.18304765 = orcid.org/0009-0007-7728-256X README.md 💀 CVE-2019-5736: Decostruzione della container breakout di runc Purple Teaming avanzato e analisi forense della fuga alla root dell'host 🛡️ Panoramica Questo repository contiene una decostruzione ad alta fedeltà e un...

9.3CVSS6.8AI score0.98452EPSS
SaveExploits34
Kitploit
Kitploit
added 2026/08/27 9:08 p.m.6 views

DNSHighJackMonitoring

Monitoraggio del dirottamento DNS Panoramica Script di tradecraft per facilitare il rilevamento di tentativi di dirottamento DNS dopo le divulgazioni di gennaio 2019. https://www.us-cert.gov/ncas/alerts/AA19-024A...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 9:03 p.m.4 views

hostresolver

HostResolver Versione corrente: 1.0.0 Invia commenti e segnalazioni di bug a: [email protected] ==================================================================================== Contenuti: 1. Panoramica 2. Utilizzo di HostResolver File di input Opzioni e impostazioni Scansione Output...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 7:46 p.m.2 views

s3-bucket-take-0v3r

s3-bucket-take-0v3r S3 Bucket Takeover Scanner & Claim Tool 📌 Beschreibung S3 Bucket Takeover Scanner & Claim Tool ist ein auf Python 2.7 basierendes Dienstprogramm, das: 1. Domainnamen scannt, um potenzielle Amazon-S3-Bucket-Übernahme-Schwachstellen zu identifizieren. 2. Nicht registrierte...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 5:54 p.m.2 views

CVE-2021-3310

CVE-2021-3310 Western Digital MyCloud PR4100 – Schwachstelle zur Offenlegung von Informationen durch Linkauflösung Verwenden Sie die enthaltenen Dateien, um die Schwachstelle auf mycloud OS 3 auszulösen; in OS 5 wurde sie behoben...

7.8CVSS7.5AI score0.01008EPSS
SaveExploits0
OSV
OSV
added 2026/08/27 5:25 p.m.5 views

GHSA-MF7Q-R4RV-JV94 Crossplane's TOCTOU between cosign verification and image fetch in xpkg.CachedClient allows tag-based package install to bypass signature check

Summary Crossplane allows package signature verification to be configured via the ImageConfig mechanism. When enabled, the package manager uses cosign to verify that packages are correctly signed before pulling and installing them. When a package is installed using a tag reference e.g., a semanti...

8.2CVSS5.6AI score
SaveExploits0References2
NVD
NVD
added 2026/08/27 5:20 p.m.5 views

CVE-2026-81697

opensslencrypt pip package openssl-encrypt versions = 1.4.8 contain a CWD-relative configuration file resolution flaw in cryptsettings.py, where CONFIGFILE originally the absolute per-user path /.cryptsettings.json is reassigned at line 84 to the bare relative name 'cryptsettings.json'. As a...

8.7CVSS0.00149EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/27 5:18 p.m.7 views

CVE-2026-59280

Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is configured to resolve templates through SpringTemplateLoader. Spring Framework 7.0.0 - 7.0.8 Spring...

4.3CVSS0.00232EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/27 4:41 p.m.8 views

EUVD-2026-67094

Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is configured to resolve templates through SpringTemplateLoader. Spring Framework 7.0.0 - 7.0.8 Spring...

4.3CVSS5.3AI score0.00232EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/27 2:51 p.m.6 views

EUVD-2026-67053

opensslencrypt pip package openssl-encrypt versions = 1.4.8 contain a CWD-relative configuration file resolution flaw in cryptsettings.py, where CONFIGFILE originally the absolute per-user path /.cryptsettings.json is reassigned at line 84 to the bare relative name 'cryptsettings.json'. As a...

8.7CVSS5.4AI score0.00149EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/27 1:35 p.m.4 views

CVE-2020-8277

CVE-2020-8277 Solo per scopi educativi. Esecuzione rapida root@kitploit: clone this repository $ git clone https://github.com/masahiro331/CVE-2020-8277 run bind $ docker build -t bind-local ./bind Need TCP fallback $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind use " v15.2.1" versio...

7.5CVSS7AI score0.54164EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/27 11:40 a.m.6 views

CVE-2026-72814

A flaw was found in actix-files. When a non-existing folder is provided as the servefrom argument to Files::new, the service incorrectly resolves request paths as relative to the application's working directory. This allows an attacker to access unintended files, leading to information disclosure...

6.3CVSS5.2AI score0.00382EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/27 8:11 a.m.3 views

CVE-2025-32463

CVE-2025-32463 शोषण --- प्रूफ-ऑफ-कॉन्सेप्ट PoC अस्वीकरण: इस रिपॉजिटरी में एक प्रूफ-ऑफ-कॉन्सेप्ट शामिल है जो केवल शैक्षिक, रक्षात्मक अनुसंधान और अधिकृत पैठ परीक्षण के लिए है। उन सिस्टमों पर इस कोड का उपयोग न करें जिनके आप मालिक नहीं हैं या जिनके परीक्षण के लिए आपके पास स्पष्ट लिखित अनुमति नहीं है।...

9.3CVSS7.5AI score0.59417EPSS
SaveExploits71
Kitploit
Kitploit
added 2026/08/27 7:52 a.m.2 views

CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE

Microsoft Semantic Kernel 1.39.4 – रिमोट कोड एक्ज़ीक्यूशन PoC CVE-2026-26030 InMemoryVectorStore में अविश्वसनीय फ़िल्टर एक्सप्रेशन असुरक्षित एट्रिब्यूट रिज़ॉल्यूशन की अनुमति देते हैं, जिससे builtins / globals ट्रैवर्सल के माध्यम से मनमाना Python कोड एक्ज़ीक्यूशन संभव होता है। 👤 लेखक Mohammed Idre...

9.9CVSS5.2AI score0.03712EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2026/08/27 5:20 a.m.33 views

CVE-2026-59278 In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages

JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted packages list. When these mappers are used — which is the default configuration for all @KafkaListener consumers — an external Kafka producer can inject a java.net.InetAddress type via the...

6.5CVSS0.00159EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/27 5:20 a.m.50 views

CVE-2026-59278

Spring for Apache Kafka is vulnerable to SSRF via DNS resolution in its JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper classes. Because java.net is included in the default trusted packages list, an external Kafka producer can inject a java.net.InetAddress type through the spring_json_header_t...

6.5CVSS5.4AI score0.00159EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/27 4:27 a.m.2 views

zig-pe

zig-pe Caricatore PE riflessivo scritto in Zig. Carica ed esegue file PE nativi e .NET direttamente dalla memoria. Caratteristiche Pipeline di caricamento PE Analizza header DOS e NT PE32 e PE32+ a runtime Mappa le sezioni nella memoria allocata Risolve le importazioni per nome e ordinale, thunk...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 3:51 a.m.4 views

SSRF-CVE-2020-15002

Краткое описание Логика проверки URL, применяемая при обработке /appsuite/api/oxodocumentfilter&action=addfile, имеет три дефекта, которые могут быть использованы для выполнения атаки SSRF типа «время проверки — время использования» ToCToU. Эта проблема позволяет злоумышленникам выполнять HTTP...

5CVSS5.4AI score0.0159EPSS
SaveExploits2References3
EUVD
EUVD
added 2026/08/27 3:32 a.m.5 views

EUVD-2026-66823

Spring Integration's JSON to object conversion uses the jsonTypeId header to choose the deserialization target type, and resolves that header value to a class with ClassUtils.forName and no type/package allow-list. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0...

6.3CVSS5.4AI score0.00235EPSS
SaveExploits0References2
Rows per page
Query Builder