Lucene search
+L

649096 matches found

Cvelist
Cvelist
added 2026/09/18 7:55 a.m.38 views

CVE-2026-67103 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by Cross-Site Scripting XSS vulnerability, which could allow an attacker to inject unsanitized malicious scripts that execute in a victim's browser, enabling session hijacking, account takeover, and unauthorized actions on behalf of affected users...

7.6CVSS0.00224EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 7:55 a.m.15 views

CVE-2026-67103

HCL BigFix Service Management is affected by a Cross-Site Scripting (XSS) vulnerability that allows an attacker to inject unsanitized malicious scripts executed in a victim's browser. The stated impact includes session hijacking , account takeover , and unauthorized actions on behalf of affected ...

7.6CVSS0.00224EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/18 7:55 a.m.5 views

EUVD-2026-82769

HCL BigFix Service Management is affected by Cross-Site Scripting XSS vulnerability, which could allow an attacker to inject unsanitized malicious scripts that execute in a victim's browser, enabling session hijacking, account takeover, and unauthorized actions on behalf of affected users...

7.6CVSS0.00224EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/18 7:54 a.m.6 views

EUVD-2026-82768

HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-privileged user to gain unauthorized access to administrative screens and functions reserved for higher-privileged roles...

8.1CVSS0.00272EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/18 7:54 a.m.39 views

CVE-2026-67102 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-privileged user to gain unauthorized access to administrative screens and functions reserved for higher-privileged roles...

8.1CVSS0.00272EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 7:54 a.m.14 views

CVE-2026-67102

HCL BigFix Service Management is affected by a Broken Access Control vulnerability that allows a low-privileged user to gain unauthorized access to administrative screens and functions reserved for higher-privileged roles. The CVSS v3.1 score is 8.1 (HIGH) , with a vector of AV:N/AC:L/PR:L/UI:N/S...

8.1CVSS0.00272EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/18 7:53 a.m.6 views

EUVD-2026-82767

HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated attacker to inject database commands to extract sensitive system details, as well as manipulate request values to gain unauthorized access to...

9.8CVSS0.00353EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 7:53 a.m.18 views

CVE-2026-67100

HCL BigFix Service Management is affected by two vulnerabilities: a SQL Injection flaw and a Cross-Tenant Data Exposure flaw. An attacker can inject database commands to extract sensitive system details and manipulate request values to gain unauthorized access to full personal profile data and PI...

9.8CVSS0.00353EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 7:50 a.m.16 views

CVE-2026-67101

HCL BigFix Service Management is vulnerable to a Server-Side Request Forgery (SSRF) flaw in its search functionality . An attacker can exploit this to force the application server to send requests to internal systems that are otherwise inaccessible from the internet, with high confidentiality and...

9.3CVSS0.00268EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/18 7:50 a.m.6 views

EUVD-2026-82765

HCL BigFix Service Management is affected by a Server-Side Request Forgery SSRF vulnerability in its search functionality, which could allow an attacker to force the application server to send requests to internal systems that are not accessible from the internet...

9.3CVSS0.00268EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/18 7:13 a.m.6 views

EUVD-2026-82735

A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count. A remote, unauthenticated attacker can send a small crafted image declaring enormous dimensions to trigger a very larg...

7.5CVSS0.00562EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/09/18 7:13 a.m.6 views

CVE-2026-89059

A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count. A remote, unauthenticated attacker can send a small crafted image declaring enormous dimensions to trigger a very larg...

7.5CVSS0.00562EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/18 7:09 a.m.9 views

cve-2021-45046

Although log4j RCE CVE-2021-44228 was patched in 2.15, a new vulnerability, CVE-2021-45046 causing DoS, has been discovered. Below are the test results. Test Environment log4j-2.15.0 api , core JRE-1.8.0 jdk1.8.0151 Eclipse IDE Maven Project 1. Log4j RCE CVE-2021-44228 syntax test - Not Vuln 2...

9CVSS7.2AI score0.99977EPSS
SaveExploits40
Kitploit
Kitploit
added 2026/09/18 7:05 a.m.10 views

quicmap

quicmap Escáner de servicios QUIC bastante rápido quicmap es un escáner de servicios QUIC relativamente rápido que elimina la necesidad de utilizar múltiples herramientas para identificar servicios QUIC, la versión de protocolo en uso, así como los ALPN soportados. Características principales...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 6:46 a.m.13 views

hi_my_name_is_keyboard

Hola, me llamo Keyboard Este repositorio contiene scripts de prueba de concepto para CVE-2023-45866, CVE-2024-21306 y CVE-2024-0230. Puedes encontrar más detalles en la publicación del blog. Prueba de concepto| Descripción ---|--- Inyección de teclado en Android| Fuerza el emparejamiento de un...

8.2AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 6:40 a.m.7 views

CVE-2026-11118-HTTP-2-Rapid-Reset-DDoS

CVE-2026-11118 – DDoS por reinicio rápido de HTTP/2 Código del programa cliente + servidor Python/http2 root@kitploit: http2serversim.py - Simple HTTP/2 server that processes reset streams import socket, ssl, h2.connection, h2.events def handle: sock = socket.socket sock.setsockoptsocket.SOLSOCKE...

8.8CVSS8.1AI score0.00387EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 6:26 a.m.8 views

Hadoop-Yarn-ResourceManager-RCE

Vuln Impact There was an unauthorized access vulnerability in Hadoop yarn ResourceManager. This vulnerability existed in Hadoop yarn, the core component of Hadoop. Because Hadoop yarn opened the RPC service to the public by default, a remote attacker could take advantage of this unauthorized...

6.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 6:00 a.m.11 views

CVE-2026-21008-Kubernetes-Service-Account-Token-Mounted-in-HostPath

CVE-2026-21008 – Token de cuenta de servicio de Kubernetes montado en HostPath Código del programa YAML + exploit en Python root@kitploit: vulnerable-pod.yaml - Pod that mounts /var/run/secrets/kubernetes.io/serviceaccount into a hostPath apiVersion: v1 kind: Pod metadata: name: sa-token-leak spe...

6.5CVSS6AI score0.00163EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 5:59 a.m.7 views

MAL-002

MAL-002: Forzar el reinicio del sistema mediante MSIs de Windows instalados Una vez que un software se instala correctamente en el sistema, uno o más archivos MSI de confianza aparecerán en la carpeta “C:\Windows\Installer” y pueden permitir a un usuario de bajo privilegio realizar acciones de...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 5:33 a.m.10 views

service-now

service-now Service-Now Article Bruteforcer The idea here is that there is misconfiguration with articles and could expose sensitive information. Any Issues raise the it here - https://github.com/RandomRobbieBF/service-now/issues or submit a PR! How to Use root@kitploit: python3 service-now.py -u...

6AI score
SaveExploits0References1
Rows per page
Query Builder