Lucene search
+L

19048 matches found

Kitploit
Kitploit
•added 2026/09/28 9:29 p.m.•8 views

CVE-2026-46457

CVE-2026-46457 — camel-nats Inbound Header Injection SSRF Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...

7.5CVSS7.5AI score0.00659EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2026/09/28 9:23 p.m.•5 views

fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority

Impact fast-uri accepts a host that contains an unbalanced or misplaced authority bracket or without reporting an error. A host that starts with but does not end with , such as @127.0.0.1, is neither validated as an IP literal nor canonicalized as a domain name, so parse returns it as the host wi...

7.5CVSS5.7AI score0.0038EPSS
SaveExploits0References9Affected Software1
EUVD
EUVD
•added 2026/09/28 9:23 p.m.•12 views

EUVD-2026-70282

fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority...

7.5CVSS5.8AI score0.0038EPSS
SaveExploits0References8
OSV
OSV
•added 2026/09/28 9:23 p.m.•2 views

GHSA-58MR-GQGX-XQ4G fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority

Impact fast-uri accepts a host that contains an unbalanced or misplaced authority bracket or without reporting an error. A host that starts with but does not end with , such as @127.0.0.1, is neither validated as an IP literal nor canonicalized as a domain name, so parse returns it as the host wi...

7.5CVSS5.7AI score0.0038EPSS
SaveExploits0References9
Kitploit
Kitploit
•added 2026/09/28 9:11 p.m.•17 views

GitHacker

GitHacker Una herramienta de explotación de carpetas .git multi-hilo. Reconstruye el repositorio objetivo por completo — código fuente, historial de confirmaciones, ramas, stashes, remotos, etiquetas — incluso cuando DirectoryListings está deshabilitado, mediante fuerza bruta de referencias...

6.1AI score
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/09/28 8:43 p.m.•5 views

ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts

Summary Address6.isLinkLocal recognizes fe80::/64 rather than fe80::/10. Link-local unicast is the whole /10 under RFC 4291 §2.4 and the IANA IPv6 Special-Purpose Address Registry, so the method returns false for every link-local address outside the one /64 that stateless address autoconfiguratio...

6.3CVSS5.8AI score
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/28 8:43 p.m.•4 views

ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass

Summary No classifier on Address6 recognizes the NAT64 local-use range 64:ff9b:1::/48 RFC 8215. isPrivate, isLoopback, isLinkLocal and their siblings all return false for every address in it, so an internal IPv4 destination written through a local-use NAT64 prefix 64:ff9b:1:7f00:0:100:: for...

6.9CVSS5.8AI score
SaveExploits0References5Affected Software1
Kitploit
Kitploit
•added 2026/09/28 8:35 p.m.•155 views

vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...

6.4AI score
SaveExploits0References20
Kitploit
Kitploit
•added 2026/09/28 8:18 p.m.•13 views

CVE-2026-51385

CVE-2026-51385 Advisory for CVE-2026-51385. Needed to publish it as GRAPHIFY hasnt recognized the advisory neither publish it, and MITRE assigned CVE-2026-51385, this is the advisory for it. ES: Este fue mi primer cve, para ser honesto encontre una manera de romper la logica en la funcion ANTI...

6.9CVSS5.9AI score0.00529EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/28 8:17 p.m.•15 views

EUVD-2026-65088

jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution SSRF still present in InetAddress deserialization...

5.3CVSS5.8AI score0.00313EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
•added 2026/09/28 8:17 p.m.•4 views

jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution (SSRF) still present in InetAddress deserialization

Summary CVE-2026-54514 GHSA-hgj6-7826-r7m5 fixed an eager-DNS-resolution / SSRF issue in jackson-databind's deserialization of java.net.InetSocketAddress by switching to InetSocketAddress.createUnresolved... PR 5951, commit 1f5a1037, released in 2.18.8 / 2.21.4 / 3.1.4. That fix did not cover the...

5.3CVSS6AI score0.00368EPSS
SaveExploits0References10Affected Software2
Kitploit
Kitploit
•added 2026/09/28 8:11 p.m.•17 views

rxerium-templates

A curated collection of 144+ Nuclei templates focusing on zero-day and actively exploited vulnerabilities in the wild with a few miscellaneous templates. Templates use passive detection techniques version/date matching and are organized by year for easy navigation. ⚠️ Note: Date matching may be...

7.6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 8:09 p.m.•16 views

osiris

⬡ OSIRIS Open Source Intelligence & Reconnaissance Integrated System A real-time global intelligence dashboard that aggregates live flight tracking, CCTV networks, earthquake monitoring, conflict zone mapping, and 24/7 news feeds into a single GPU-accelerated interface. Live Demo · Report Bug ·...

6AI score
SaveExploits0References7
Kitploit
Kitploit
•added 2026/09/28 8:09 p.m.•13 views

CVE-2022-31188

CVE-2022-31188 CVE-2022-31188 - SSRF en OpenCV CVAT Computer Vision Annotation Tool CVAT es una herramienta de anotación de visión por computadora de código abierto desarrollada por Intel. Cualquier usuario con autorización "Task Create" puede desencadenar la vulnerabilidad SSRF al enviar una...

9.8CVSS8.4AI score0.48643EPSS
SaveExploits4
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/28 8:02 p.m.•17 views

Security Bulletin: Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components

Summary Langflow contains multiple Server-Side Request Forgery vulnerabilities across several components where authenticated users can supply attacker-controlled URLs or database connection strings that reach internal network hosts without adequate validation. The LMStudio model and embeddings...

8.6CVSS6.2AI score0.00307EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2026/09/28 8:01 p.m.•11 views

mcp-attack-detection-sentinel

MCP Attack Detection — Sentinel Research Lab Sentinel detection research for MCP Model Context Protocol attack patterns : unusual identity access after an MCP-related event, tool-definition mutation, cross-resource access, and possible post-exploitation behavior. The rules map to the OWASP Top 10...

8.8CVSS8.1AI score0.00861EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 7:52 p.m.•12 views

tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE

Tugtainer v1.30.2 RCE El RCE se obtiene abusando de 2 vulnerabilidades CVE-2026-55494 CVE-2026-62308 En resumen, se abusa de una vulnerabilidad SSRF para llamar a un servicio no autenticado en la red interna y crear un docker que comparte el mismo PID con tugtainer, haciendo así accesible el...

5.9AI score
SaveExploits1References2
Kitploit
Kitploit
•added 2026/09/28 7:51 p.m.•12 views

bugbounty-cheatsheet

Bug Bounty Cheat Sheet 📚 Reference| 🔎 Vulnerabilities ---|--- Bug Bounty Platforms| XSS Books| SQLi Special Tools| SSRF Recon| CRLF Injection Practice Platforms| CSV Injection Bug Bounty Tips| LFI | XXE | RCE | Open Redirect | Crypto | Template Injection | Contributing We welcome contributions fr...

6.1AI score
SaveExploits0References26
Kitploit
Kitploit
•added 2026/09/28 7:37 p.m.•16 views

gitlab-SSRF-redis-RCE

gitlab-SSRF+CRLF-Redis-RCE GitLab 11.4.7 SSRF+CRLF Injection Combined with Redis Remote Code Execution 0x00 Vulnerability environment root@kitploit: root@kali: cd gitlab-docker root@kali: docker-compose up -d root@kali: docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES cf8c38aef6...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 7:36 p.m.•144 views

xxexploiter

XXExploiter It generates the XML payloads, and automatically starts a server to serve the needed DTD's or to do data exfiltration. Installation root@kitploit: install node and npm if you don't have it yet npm install -g xxexploiter Building & Running from source This is a simple Node application...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder