1439219 matches found
Mongo-Express - Remote Code Execution
Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...
Dahua Smart Park Management - Arbitrary File Upload
Dahua wisdom park integrated management platform is a comprehensive management platform, a park operations,resource allocation, and intelligence services,and other functions, including/emap/devicePointaddImgIco?. id: CVE-2023-3836 info: name: Dahua Smart Park Management - Arbitrary File Upload...
SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass
SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality. id: CVE-2025-40536 info: name: SolarWinds Web Help Desk 12.8.8 Hotfix 1 HF1 - Security...
DEBIAN-CVE-2026-16658
Bulletin has no description...
ROOT-APP-NPM-CVE-2026-48779 CVE-2026-48779 in ws - Patched by Root
Root has patched CVE-2026-48779 in the ws package for Root:npm. Multiple fixed versions available...
CLSA-2026-1788333194 TuxCare security update for guzzlehttp/psr7 (1 CVE)
TuxCare rebuilt guzzlehttp/psr7 to address 1 CVE. Fixed in 1.1.0-p2+tuxcare...
Important: Red Hat Security Advisory: golang security update
An update for golang is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
ROOT-APP-NPM-CVE-2026-67214 CVE-2026-67214 in nanoid - Patched by Root
Root has patched CVE-2026-67214 in the nanoid package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-67213 CVE-2026-67213 in nanoid - Patched by Root
Root has patched CVE-2026-67213 in the nanoid package for Root:npm. Multiple fixed versions available...
CVE-2019-18634
CVE-2019-18634...
Mr.SIP
SIP Security, Attack and Audit Framework Mr.SIP is...
ROOT-APP-PYPI-CVE-2026-69249 CVE-2026-69249 in cryptography - Patched by Root
Root has patched CVE-2026-69249 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-26007 CVE-2026-26007 in cryptography - Patched by Root
Root has patched CVE-2026-26007 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-OS-ALPINE-322-CVE-2026-66035 CVE-2026-66035 in libssh2 - Patched by Root
Root has patched CVE-2026-66035 in the libssh2 package for Root:Alpine:3.22. Multiple fixed versions available...
cve-scanner
CVE Scanner for OpenClaw Version: 1.0.0 Author: Simon Autonomous Chief of Staff License: MIT Published: March 22, 2026 Category: Security, Tooling TL;DR Zero-dependency CVE scanner for OpenClaw. Checks your version against 522+ known vulnerabilities, recommends updates, displays recent...
GHSA-C3F5-4G7F-QJQJ
creationtimestamp| type| source ---|---|--- 2026-09-02 06:00:06+00:00| seen| https://t.me/HackingTeamGrupoOfficial/47087 2026-09-03 00:00:51+00:00| published-proof-of-concept| https://t.me/HackingTeamGrupoOfficial/47087...
middleforce
MiddleForce 🔍 Descripción general MiddleForce es una herramienta especializada de pruebas de seguridad diseñada para detectar y explotar la vulnerabilidad CVE-2025-29927 en el middleware de Next.js. Esta herramienta ayuda a los profesionales de la seguridad a identificar aplicaciones vulnerables ...
dotdotslash
dotdotslash An tool to help you search for Directory Traversal Vulnerabilities Benchmarks Platforms that I tested to validate tool efficiency: DVWA low/medium/high bWAPP low/medium/high Screenshots Instalation You can download the last version cloning this repository root@kitploit: git clone...
CVE-2025-41242
Vulhub Vulhub是一个开源的、即开即用的漏洞靶场环境集合。无需Docker基础，只需一条命令即可快速启动用于安全研究、学习或演示的漏洞环境。 快速开始 安装Docker （以Ubuntu 24.04为例）： root@kitploit: curl -s https://get.docker.com/ | sh systemctl start docker 其他操作系统请参考Docker官方文档。 虽然所有Vulhub环境都基于Docker compose制作，但你不再需要安装独立的docker-compose，而是使用Docker自带的compose命令来启动Vulhub环境。...