Lucene search
+L

1332 matches found

Kitploit
Kitploit
added 2026/09/21 3:58 a.m.14 views

openclaw-dashboard

OpenClaw Agent Dashboard A beautiful, secure, real-time monitoring dashboard for OpenClaw agents. Track sessions, monitor API usage, view costs, manage memory files, and keep tabs on system health — all in one place. 📸 Screenshots Overview| Sessions| Costs ---|---|--- | | Rate Limits| Live Feed|...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/20 8:57 p.m.8 views

Credential-and-breach-monitoring

Breach / Stealer-Log / Identity Exposure Services Comparison with Scoring This document compares breach intelligence, dark web monitoring, and identity exposure services across practical dimensions relevant to modern security teams. It focuses on: Breach corpus depth Infostealer-log coverage API...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/20 3:37 p.m.11 views

CVE-2023-34845

CVE-2023-34845 Vulnerability POC for CVE-2023-34845 Vulnerability I found a cross-site scripting attack on the new content creating page http://localhost:800/admin/new-content it will execute the script in user context allowing the attacker to access any cookies or sessions tokens retained by the...

5.4CVSS6AI score0.00804EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/20 2:26 p.m.9 views

CVE-2024-42327_Zabbix_SQLi

🛡️ Zabbix 7.0.0 SQL Injection Exploit Script A Python script to exploit a Zabbix 7.0.0 authenticated SQL injection vulnerability, supporting multiple modes of action including user data extraction, session token leaks, remote command execution RCE, and custom query injection. ⚠️ DISCLAIMER: This...

9.9CVSS8.9AI score0.78716EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/20 2:10 p.m.9 views

CVE-2021-24019

CVE-2021-24019 Exploit FortiClient EMS 6.2.6 - Authentication Bypass Exploit Overview This script automates session token validation to test if authentication can be bypassed in FortiClient EMS 6.2.6. The user provides the target, and the script checks a list of session tokens for valid access...

9.8CVSS8.2AI score0.03902EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/20 1:04 p.m.11 views

CVE-2025-51860

CVE-2025-51860 Vulnerability description TelegAI, a web application for constructing and chatting with AI Characters, is vulnerable to Stored Cross-Site Scripting XSS in its chat component and character container component. An attacker can achieve arbitrary client-side script execution by craftin...

6.1CVSS6.1AI score0.00281EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/20 10:02 a.m.9 views

CVE-2023-31779

CVE-2023-31779 Stored XSS in Wekan Description : Stored XSS vulnerability exists in the "Reaction to comment" feature. An attacker with user privilege on kanban board can execute JavaScript code in the browsers of users who open card with malicious reaction. Impact : An attacker can steal...

5.4CVSS6.1AI score0.0056EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/20 9:40 a.m.8 views

sessionprobe

SessionProbe 🚀⚡ SessionProbe is a multi-threaded pentesting tool designed to assist in evaluating user privileges in web applications. It takes a user's session token and checks for a list of URLs if access is possible, highlighting potential authorization issues. SessionProbe deduplicates URL...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/20 8:15 a.m.10 views

CVE-2024-55040-Sensaphone-XSS

SENSAPHONE VULNERABILITY DISCLOSURE Summary In mid-September 2024, I identified several medium-to-low severity security issues in the Sensaphone Web600 Monitoring System, including stored cross-site scripting XSS vulnerabilities in the system Setup, Profile, and Zone options. Remote authenticated...

6.1CVSS6.1AI score0.00692EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/20 2:20 a.m.8 views

CitrixBleedCVE-2026-8452-2025-5777

CitrixBleed 漏洞利用工具 - CVE-2025-5777 与 CVE-2026-8452 未经身份验证即可从 Citrix NetScaler ADC 与 Gateway 远程读取内存。窃取管理员会话令牌、提取 nsroot 哈希、转储机密信息并绕过 MFA。基于 Python 3 的漏洞利用工具,具备完整的内存解析功能。 https://satoshi-box.com/pay/CSHeT8...

9.8CVSS8.2AI score0.99972EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/19 4:12 p.m.9 views

CVE-2023-31851

CVE-2023-31851 Reflected cross-site scripting XSS attack exists in web-based management interface of Cudy LT400. The page /cgi-bin/luci/admin/network/wireless/status has reflected XSS via the iface parameter. The methods of exploitation would involve sending a specially crafted request to the...

6.1CVSS6.4AI score0.00499EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/19 1:55 p.m.8 views

CVE-2025-492030

CVE-2025-492030 セキュリティ勧告: CVE-2025-492030 概要 SecureVPN アプリケーションに重大な脆弱性が確認されました。この脆弱性により、脆弱なAPIエンドポイントを介して アカウント乗っ取り が可能になります。この欠陥により、攻撃者はユーザーアカウントへの不正アクセスを取得し、機密データの漏洩やユーザープライバシーの侵害につながる可能性があります。 脆弱性の詳細 CVE ID : CVE-2025-492030 深刻度 : 重大 影響 : アカウント乗っ取り 影響を受けるコンポーネント : SecureVPN API エンドポイント 攻撃経路 :...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/19 1:43 p.m.15 views

CVE-2023-52268

FreeScout End-User Portal Authentication Bypass Exploit CVE-2023-52268 Overview This exploit targets a vulnerability in the FreeScout End-User Portal Module versions below 1.0.65 that allows an attacker to bypass authentication through improper session token management. By generating and testing...

9.1CVSS6AI score0.00617EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 8:38 p.m.9 views

CVE-2026-79294

CVE-2026-79294 CVE-2026-79294 — Stored XSS in Moonshot AI Kimi's HTML artifact Preview, delivered through the public Share view, leading to session token exfiltration and demonstrated account takeover. Responsible disclosure advisory. Vulnerability Details Vulnerability Type: Stored/Stored-like...

6.1CVSS5.8AI score0.00506EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 10:50 p.m.10 views

CVE-2026-3055

🔥 NetScalerBleed2:Citrix NetScaler 中的严重未授权内存过度读取 CVE-2026-3055 未授权越界内存读取(内存泄漏) 仅适用于配置为 SAML 身份提供程序 IdP 的设备 📋 概述 CVE-2026-3055 是 Citrix NetScaler ADC 和 NetScaler Gateway 中的一个严重 越界读取漏洞(CWE-125)。 该漏洞由 SAML 处理过程中输入验证不足 导致。未授权 远程攻击者可触发内存过度读取,泄露设备内存中的敏感数据——包括活动的会话令牌 、凭据或其他机密(在特定条件下)。...

9.8CVSS8.8AI score0.87166EPSS
SaveExploits7
CVE
CVE
added 2026/09/17 7:40 p.m.52 views

CVE-2026-45720

Omni (by Sidero Labs), a platform for managing Kubernetes on bare metal, VMs, or cloud, contains a TOCTOU race condition in SAML.getSession (internal/pkg/auth/interceptor/saml.go). The Used flag on a SAMLAssertion is checked and marked in two separate non-atomic operations, allowing concurrent re...

7CVSS0.00112EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/09/17 12:33 p.m.9 views

EUVD-2026-81573

admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn domain events. Attackers with log:view permission can read the JSON response from the GET /logs endpoint to harvest session tokens and replay them as bearer credentials for full user access...

8.8CVSS0.00354EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/17 12:15 p.m.10 views

CVE-2025-63667

CVE-2025-63667 — Vatilon-based IP Cameras Vulnerability Evidence Sanitized Summary Several Vatilon-based IP cameras observed brands: SIMICAM, KEVIEW, ASECAM issue Session-Id tokens without verifying credential correctness. This flaw allows unauthenticated attackers to obtain valid sessions and...

7.5CVSS6AI score0.0048EPSS
SaveExploits0
NVD
NVD
added 2026/09/17 6:16 a.m.7 views

CVE-2026-86824

The Newsletter WordPress plugin before 9.3.8 does not generate its email tracking signing key with sufficient entropy and signs its tracking links with an unkeyed hash, allowing an unauthenticated attacker who recovers that key offline to forge tracking links, obtain any subscriber's session toke...

4.8CVSS0.001EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/17 6:00 a.m.25 views

CVE-2026-86824

The Newsletter WordPress plugin (before 9.3.8 ) generates its email tracking signing key with insufficient entropy and signs tracking links with an unkeyed hash . An unauthenticated attacker who recovers that key offline can forge tracking links, steal any subscriber's session token, and read or ...

4.8CVSS0.001EPSS
SaveExploits0References1
Rows per page
Query Builder