Lucene search
+L

292 matches found

Kitploit
Kitploit
•added 2026/09/25 8:19 p.m.•7 views

reload.sh

reload.sh 하지 마세요... 절대로 실제 시스템예: 프로덕션이나 중요한 데이터가 저장된 개인 컴퓨터 에서 실행하지 마세요. 이 레시피는 다른 시스템이 이미 설치되어 실행 중인 상태에서 새 시스템을 설치하는 방법을 보여줍니다. 정말 멋지고 놀랍지만 매우 위험합니다! 만약 혼란의 늪에 빠져보고 싶다면 계속 읽어보세요. 왜 만들었나요? 저는 실험을 좋아합니다. 사물이 어떻게 작동하는지 알고 싶어하기 때문입니다. 실험을 통해 더 까다로운 개념들을 이해하고 볼 수 있습니다. 오래전, 이 방법이 제 목숨을 구해준 적이 있지만 정말...

6AI score
SaveExploits0References3
CVE
CVE
•added 2026/09/17 10:49 a.m.•18 views

CVE-2026-81438

Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 contain a Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote network access could exploit this flaw, resulting in Information disclosure . The CVSS 3.1 score is 3.7 (LOW) , ...

3.7CVSS5.9AI score0.00178EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 3:17 p.m.•9 views

CVE-2025-36591

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

4.4CVSS0.00111EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•18 views

PT-2026-87420

Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network...

5.9CVSS5.7AI score0.00481EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/31 3:30 p.m.•36 views

CVE-2026-76133

Ebyte NE2-D11 (and related variant NA111-M ) uses a deprecated hashing algorithm in an authentication-related operation. When an attacker can manipulate or predict the authentication exchange, the weak cryptographic construction may reduce the assurance of the authentication mechanism and facilit...

9.8CVSS5.9AI score0.00397EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/24 2:16 p.m.•17 views

CVE-2026-21751

HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached...

7.4CVSS0.00162EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/24 1:42 p.m.•13 views

CVE-2025-68833 HCL Hive is affected by use of a cryptographic primitive with a risky implementation

HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources...

5.3CVSS5.3AI score0.00153EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/24 1:18 p.m.•17 views

EUVD-2026-64855

HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached...

7.4CVSS5.3AI score0.00162EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/24 1:18 p.m.•26 views

CVE-2026-21751

HCL Hive is affected by a cryptographic primitive with a risky implementation , which could allow an attacker to achieve unauthorized lateral compromise or widespread credential leakage if a single internal component is breached. The vulnerability is rated CVSS 3.1 7.4 (HIGH) with a network attac...

7.4CVSS5.2AI score0.00162EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/24 1:18 p.m.•43 views

CVE-2026-21751 HCL Hive is affected by use of a cryptographic primitive with a risky implementation

HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached...

7.4CVSS0.00162EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/24 1:18 p.m.•13 views

CVE-2026-21751 HCL Hive is affected by use of a cryptographic primitive with a risky implementation

HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached...

7.4CVSS5.2AI score0.00162EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/24 12:00 a.m.•21 views

PT-2026-80848

HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached...

7.4CVSS5.2AI score0.00162EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/20 7:45 p.m.•18 views

EUVD-2026-63578

A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of the file internal/util/crypto/crypto.go. Performing a manipulation results in risky cryptographic algorithm. Remote exploitation of the attack is possible. The complexity of an...

6.3CVSS4.2AI score0.00367EPSS
SaveExploits0References9
EUVD
EUVD
•added 2026/08/20 12:35 a.m.•19 views

EUVD-2026-62961

In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedulesearch capability could cause a scheduled search to load and deserialize a model file through the apply search command. The improper access control is possible because Splunk AI Toolkit does not mark the apply...

7.5CVSS5.3AI score0.00323EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/20 12:35 a.m.•18 views

EUVD-2026-62906

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store attacker-controlled Search Processing Language SPL in a Table Editor dataset and share the dataset. A user who holds the "admin" Splunk role triggers the SPL when that user...

5.4CVSS5.4AI score0.00227EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/20 12:00 a.m.•1 views

CVE-2026-77151: Use of a Broken or Risky Cryptographic Algorithm

A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of the file internal/util/crypto/crypto.go. Performing a manipulation results in risky cryptographic algorithm. Remote exploitation of the attack is possible. The complexity of an...

6.3CVSS4.9AI score0.00367EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/19 9:34 p.m.•44 views

CVE-2026-76342 Risky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store risky Search Processing Language SPL commands in a Table Editor dataset and share the dataset. A user who holds the "admin" Splunk role triggers the commands when that user...

5.4CVSS0.00227EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/19 9:34 p.m.•39 views

CVE-2026-76342

A "power"-role Splunk user can embed risky SPL commands in a shared Table Editor dataset; when an admin opens it, the commands execute with admin privileges, bypassing SPL safeguards on the field-summary search and risking data exposure and lookup modification. Patch versions: 10.4.2, 10.2.6, 10....

5.4CVSS5.4AI score0.00227EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/08/19 9:34 p.m.•29 views

CVE-2026-76341

In Splunk Enterprise below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a "power"-role user can store attacker-controlled SPL in a Table Editor dataset; when an "admin" opens it, the SPL runs with admin privileges, exposing all relevant data. The root cause is the Table Editor not applying SPL safeguards ...

5.4CVSS5.4AI score0.00227EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/08/19 9:34 p.m.•45 views

CVE-2026-76341 Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store attacker-controlled Search Processing Language SPL in a Table Editor dataset and share the dataset. A user who holds the "admin" Splunk role triggers the SPL when that user...

5.4CVSS0.00227EPSS
SaveExploits0References1
Rows per page
Query Builder