Lucene search
+L

3235 matches found

Kitploit
Kitploit
added 2026/08/25 6:40 a.m.130 views

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

7.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 4:13 a.m.38 views

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

7.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 4:13 a.m.408 views

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

7.6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/25 4:12 a.m.53 views

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...

7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 4:12 a.m.188 views

pacbot

Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...

7.3AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/25 3:35 a.m.2592 views

ysoserial.net

A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and property-oriented programming "gadget chains" discovered in common .NET libraries that can, under the right conditions, exploit .NET...

10AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/24 1:10 p.m.72 views

avpass

AVPASS AVPASS is a tool for leaking the detection model of Android malware detection systems i.e., antivirus software, and bypassing their detection logics by using the leaked information coupled with APK obfuscation techniques. AVPASS is not limited to detection features used by detection system...

7AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/24 7:31 a.m.46 views

weakpass

Weakpass Here, you can find the list of tools and example of API server from weakpass.com for password and hash cracking in one place. 📂 Folder Structure tools A collection of password and hash cracking tools. Check them out: Kraker-js Lookup Passcheck Passgen libs Links to the libraries used in...

7.6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/21 3:53 a.m.27 views

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/21 12:00 a.m.13 views

PT-2026-79402

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6 rule suppress drops a suppressed route with ip6 rt put flags, but leaves res-rt6 pointing at the released rt6 info. If no later rule supplies a replacement, fib6 rule lookup still...

5.3AI score0.00165EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2026/08/20 3:37 p.m.28 views

CVE-2026-63037 Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache InLong. This appears to allow SQL injection in the ORDER BY clause against the Manager backend database. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgra...

0.00209EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 8:17 p.m.6 views

CVE-2026-68561

Wekan is open source kanban built with Meteor. Prior to 9.89, the second Boards.allow update rule in server/permissions/boards.js called canUpdateBoardSort in server/lib/utils.js, which authorized any board member whenever fieldNames included sort. Because Meteor combines allow rules with OR...

8.8CVSS0.00375EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/19 7:24 p.m.31 views

CVE-2026-68561 Wekan: a low-privilege board member escalates to board admin and takes over a private board via the `sort` collection-allow rule

Wekan is open source kanban built with Meteor. Prior to 9.89, the second Boards.allow update rule in server/permissions/boards.js called canUpdateBoardSort in server/lib/utils.js, which authorized any board member whenever fieldNames included sort. Because Meteor combines allow rules with OR...

8.8CVSS0.00375EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/19 7:24 p.m.10 views

CVE-2026-68561 Wekan: a low-privilege board member escalates to board admin and takes over a private board via the `sort` collection-allow rule

Wekan is open source kanban built with Meteor. Prior to 9.89, the second Boards.allow update rule in server/permissions/boards.js called canUpdateBoardSort in server/lib/utils.js, which authorized any board member whenever fieldNames included sort. Because Meteor combines allow rules with OR...

8.8CVSS5.4AI score
SaveExploits0References5
NVD
NVD
added 2026/08/19 6:16 p.m.9 views

CVE-2026-17183

An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID incorrect authorization. This can expose data accessible through Grafana's configured...

7.1CVSS0.00285EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/19 5:40 p.m.6 views

CVE-2026-72416

A flaw was found in the Linux kernel's netfilter component, specifically within the nftcompat layer. This vulnerability allows the ebtables emulation to process network traffic targets that it should normally reject. This oversight can lead to incorrect application of network filtering rules,...

7.3CVSS5.3AI score0.00173EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/19 5:30 p.m.9 views

CVE-2026-17183 CVE-2026-17183 CVE Record

An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID incorrect authorization. This can expose data accessible through Grafana's configured...

7.1CVSS5.3AI score0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/18 4:35 p.m.21 views

CVE-2026-19869 Privilege Escalation via Dropped Field-Level @authentication

@neo4j/graphql from 5.2.0 until the patched versions fails to enforce field-level @authentication rules on root custom-resolver fields when a type-level @authentication rule is also present on the same operation type. When both a type-level @authentication on Query/Mutation and a...

7.6CVSS0.00279EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/17 1:16 p.m.19 views

CVE-2026-75004

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesievedisabledactions setting bypass via a crafted rule name in a Sieve script. This issue only affects Roundcube instances using the managesieve plugin...

4.3CVSS0.00286EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/17 12:53 p.m.8 views

EUVD-2026-60170

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesievedisabledactions setting bypass via a crafted rule name in a Sieve script. This issue only affects Roundcube instances using the managesieve plugin...

4.3CVSS5.3AI score0.00286EPSS
SaveExploits0References3
Rows per page
Query Builder