Lucene search
+L

28515 matches found

Kitploit
Kitploit
added 2026/09/02 10:55 a.m.6 views

CVE-2021-22893

CVE-2021-22893 Vulnerabilidad RCE en Pulse Connect Secure CVE-2021-22893 Shodan : https://www.shodan.io/search?query=http.component%3A%22pulse+secure%22...

10CVSS7.4AI score0.47172EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/02 8:28 a.m.6 views

CVE-2025-22457

PoC para CVE-2025-22457 Un desbordamiento de búfer basado en pila remoto sin autenticación que afecta a Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure y ZTA Gateways Resumen Este es un exploit de prueba de concepto para demostrar la explotación de CVE-2025-22457. Para un anális...

9.8CVSS7.4AI score0.9998EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/02 8:06 a.m.24 views

pcc

PHP Secure Configuration Checker Check current PHP configuration for potential security flaws. Simply access this file from your webserver or run on CLI. Author This software was written by Ben Fuhrmannek, SektionEins GmbH, in an effort to automate php.ini checks and spend more time on cheerful...

5.7AI score
SaveExploits0
OSV
OSV
added 2026/09/02 8:00 a.m.4 views

CURL-CVE-2026-80255 secure cookie attribute bypass with tab

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

5.9AI score
SaveExploits0
curl security advisories
curl security advisories
added 2026/09/02 8:00 a.m.9 views

secure cookie attribute bypass with tab

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

5.9AI score
SaveExploits0References1Affected Software2
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.81 views

Oracle Secure Global Desktop Administration Console 4.4 - Cross-Site Scripting

Oracle Secure Global Desktop Administration Console 4.4 contains a reflected cross-site scripting vulnerability in helpwindow.jsp via all parameters, as demonstrated by the sgdadmin/faces/comsunwebui/help/helpwindow.jsp windowTitle parameter. id: CVE-2018-19439 info: name: Oracle Secure Global...

6.1CVSS6.3AI score0.20457EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.54 views

Ivanti Connect Secure - Stack-based Buffer Overflow

Ivanti Connect Secure 22.7R2.5, Ivanti Policy Secure 22.7R1.2, and Ivanti Neurons for ZTA gateways 22.7R2.3 contain a stack-based buffer overflow in the clientCapabilities parameter handling. This vulnerability allows remote unauthenticated attackers to execute arbitrary code through IF-T TLS...

9CVSS7.5AI score0.99979EPSS
SaveExploits14References4
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.178 views

Pulse Secure Pulse Connect Secure - Cross-Site Scripting (Reflected)

Pulse Secure Pulse Connect Secure PCS 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3 contain a reflected cross-site scripting caused by insufficient sanitization on the Application Launcher page, letting attackers execute scripts in the context of the affected page, exploit requires victim to visit ...

6.1CVSS6.5AI score0.04055EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.20 views

Langflow <= 1.8.4 - Path Traversal to RCE via File Upload

The application contains a path traversal vulnerability caused by unsanitized 'filename' parameter in the 'POST /api/v2/files' multipart form data, letting attackers write files to arbitrary filesystem locations, exploit requires crafted request. id: CVE-2026-5027 info: name: Langflow = 1.8.4 -...

8.8CVSS6.2AI score0.36141EPSS
SaveExploits7References3
Kitploit
Kitploit
added 2026/09/02 7:07 a.m.3 views

themis

Themis proporciona criptografía sólida y fácil de usar para personas ocupadas Librería criptográfica de propósito general para almacenamiento y mensajería para iOS Swift, Obj-C, Android Java, Kotlin, React Native iOS, Android, Java de escritorio, С/С++, Node.js, Python, Ruby, PHP, Go, Rust, WASM...

5.9AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/02 6:33 a.m.38 views

skf-flask

OLD and archived Security Knowledge Framework Please note that this is the archived version of SKF, we are busy building a brand new Security Knowledge Framework. For more updates please visit this github repo: https://github.com/Security-Knowledge-Framework/Platform...

5.6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/02 3:48 a.m.7 views

CVE-2023-46805

CVE-2023-46805 Scanner CVE-2023-46805 Scanner for possible vulnerable Ivanti Connect Secure appliances by country using Shodan. Script version: 1.3 Updated with the recent blog post made by Assetnote ⚠️ This script is for defensive purposes and should be used by cybersecurity professionals to...

9.1CVSS7.7AI score0.99999EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/02 2:48 a.m.7 views

secure-boot-cert-servicing

Renovación de certificados de Secure Boot — evaluación y servicio Un único script de PowerShell autocontenido que evalúa la postura de certificados de Secure Boot de una máquina Windows para la renovación de 2011 → 2023 CVE-2023-24932 / KB5025885 y, solo cuando se lo pides explícitamente, inscrib...

6.7CVSS7AI score0.10561EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 2:23 a.m.6 views

pulse-secure-vpn-mitm-research

pulse-secure-vpn-mitm-research Pulse Secure 中间人研究 发布日期 与厂商联合发布日期:2020年10月26日 作者 David Kierznowski, @withdk 致谢 Sahil Mahajan,来自 Pulse Secure PSIRT 团队,在整个披露过程中给予支持。 Alyssa Herrera、Justin Wagner、Mimir 和 Rich Warren,感谢他们的文章《红队人员 Pulse Secure SSL VPN 指南》——Alyssa Herrera(2019年9月4日)。 SA 红队(SA Red...

9.8CVSS7.1AI score0.02022EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/02 2:04 a.m.9 views

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure IFT TLS Stack Overflow pre-auth RCE CVE-2025-0282 This is purposefully broken in non-trivial ways and will require effort to work as outlined previously in our exploitation technique blogpost. To understand this vulnerability, you can take a look at our technic...

9CVSS6.9AI score0.99979EPSS
SaveExploits14
Fedora
Fedora
added 2026/09/02 1:35 a.m.8 views

[SECURITY] Fedora 44 Update: openssl-3.5.8-1.fc44

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

9.8CVSS6.1AI score0.01481EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 12:47 a.m.7 views

ivanti-cve-2023-35080-privilege-escalation-bof

Ivanti Connect Secure VPN 权限提升 Ivanti Secure Access(原 Pulse Secure)权限提升 Cobalt Strike BOF(CVE-2023-35080)。 漏洞利用由 Alex 开发,BOF 由 Tijme 完成。感谢 Northwave Cyber Security 提供支持 描述 这是一个 Cobalt Strike CS Beacon 对象文件 BOF 和可执行文件,用于利用 Ivanti Secure Access(原 Pulse Secure)VPN...

8.8CVSS7.1AI score0.00713EPSS
SaveExploits1References6
OSV
OSV
added 2026/09/02 12:00 a.m.4 views

UBUNTU-CVE-2026-84308

phpseclib is a PHP secure communications library. Prior to 3.0.57 and...

6.3CVSS5.9AI score0.00212EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/01 10:42 p.m.6 views

CVE-2025-22457

PoC for CVE-2025-22457 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-22457. For a complete technical analysis of...

9.8CVSS7.6AI score0.9998EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/01 10:32 p.m.8 views

Ivanti-Connect-Around-Scan

Comprobador de Vulnerabilidad Ivanti Connect Around Comprobador de Vulnerabilidad Ivanti Connect Around Resumen Características Tipos de Comprobaciones WEB ACCESS SYSTEM INFO BYPASS DETECTED Explicación de los Tipos de Estado Primeros Pasos Requisitos Uso Argumentos Especificación del Objetivo...

9.1CVSS7.3AI score0.99999EPSS
SaveExploits25References2
Rows per page
Query Builder