Lucene search
+L

966 matches found

EUVD
EUVD
added 2026/09/11 1:57 p.m.7 views

EUVD-2026-76108

An information leakage vulnerability exists in the Endpoint DLP component epdlpdrv.sys of Netskope Client for Windows prior to version R141. An internal communication channel used by the user-space hook DLL to pass messages through the kernel driver to the daemon lacked proper token-based message...

6.8CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 6:31 a.m.6 views

CVE-2025-5777-CitrixBleed

CVE-2025-5777-CitrixBleed CitrixBleed-2 CVE-2025-5777 – NetScaler ADC/Gateway “内存泄漏” 的概念验证漏洞利用 CVE-2025-5777 是 Citrix NetScaler ADC/Gateway(Gateway 或 AAA vServer 模式)中的一个严重的未认证越界读取漏洞。单个精心构造的请求即可转储包含会话令牌的内存,从而实现完全认证绕过——因此得名“CitrixBleed 2”。 补丁版本于 2025 年 6 月 17 日发布: NetScaler ADC 和 NetScaler Gateway...

9.3CVSS8.1AI score0.99953EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/10 11:57 p.m.4 views

vertx-web-xsrf

概述 io.vertx.ext.web.handler.impl.CSRFHandlerImpl 中的 CSRFHandlerImpl(在 Vert.x Web 中)不会为每个用户会话创建唯一的 CSRF Token。恶意网站仍然可以通过获取有效的 CSRF Token 并将其添加到 HTML 表单中,然后向易受攻击的 Web 应用程序提交表单来执行 CSRF。 目前,预检 CORS OPTIONS HTTP 请求可以通过 XMLHTTPRequests 防止 CSRF,但可能存在绕过预检请求的方法。 构建 root@kitploit: mvn clean package 测试 应用程序...

5.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2026/09/10 5:47 p.m.9 views

ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for access and takes too much. A trusted service becomes part of a phishing chain. An old bug still gets results. An exposed system stays exposed. A package looks usef...

8CVSS0.00126EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2026/09/09 2:23 p.m.8 views

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

Cybercriminals are hijacking artificial intelligence AI user accounts via information stealer logs to create "stolen keys" that grant illicit access to tools from model providers like Google, Anthropic, and others. Information stealers like Lumma Stealer or Vidar are equipped to harvest a wide...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 1:57 p.m.5 views

CVE-2025-5777

CVE-2025-5777 — Divulgación de memoria "CitrixBleed 2" en Citrix NetScaler Informe de investigación de Sentinel AI Defense. Solo análisis defensivo — aquí no se publica ningún exploit funcional ni PoC. La secuela del CitrixBleed original: una lectura fuera de los límites en los endpoints de...

9.3CVSS8.2AI score0.99953EPSS
SaveExploits20
Nuclei
Nuclei
added 2026/09/08 9:47 a.m.15 views

DAEnetIP4 METO v1.25 - Session Hijacking

DAEnetIP4 METO v1.25 contains improper session management in the /loginok.htm endpoint, letting attackers hijack sessions, exploit requires attacker to control or intercept session tokens. id: CVE-2025-28242 info: name: DAEnetIP4 METO v1.25 - Session Hijacking author: 0xAkoko severity: high...

9.8CVSS5.9AI score0.01805EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/04 8:17 p.m.6 views

CVE-2026-53603

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, Operator session tokens are stored in plaintext in the operatorsessions table the token column is the PRIMARY KEY. The session token is a 32-byte random hex value sent directly in a cookie and valid for ...

7.1CVSS0.00204EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/04 7:40 p.m.36 views

CVE-2026-53603 nebula-mesh: Operator session tokens stored in plaintext in the database

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, Operator session tokens are stored in plaintext in the operatorsessions table the token column is the PRIMARY KEY. The session token is a 32-byte random hex value sent directly in a cookie and valid for ...

7.1CVSS0.00204EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/04 7:40 p.m.5 views

CVE-2026-53603 nebula-mesh: Operator session tokens stored in plaintext in the database

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, Operator session tokens are stored in plaintext in the operatorsessions table the token column is the PRIMARY KEY. The session token is a 32-byte random hex value sent directly in a cookie and valid for ...

7.1CVSS5.7AI score
SaveExploits0References5
NVD
NVD
added 2026/08/25 12:16 p.m.10 views

CVE-2026-79665

Ech0 before 4.5.1 contains an authorization bypass vulnerability where session tokens skip scope validation in RequireScopes middleware, allowing logged-in non-admin users to access admin endpoints. Attackers can read system logs, visitor statistics, user emails, and subscribe to live WebSocket...

8.8CVSS0.00352EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 11:33 a.m.11 views

EUVD-2026-65449

Ech0 before 4.5.1 contains an authorization bypass vulnerability where session tokens skip scope validation in RequireScopes middleware, allowing logged-in non-admin users to access admin endpoints. Attackers can read system logs, visitor statistics, user emails, and subscribe to live WebSocket...

8.8CVSS5.4AI score0.00352EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/25 11:33 a.m.4 views

CVE-2026-79665 Ech0 before 4.5.1 Authorization Bypass via Session Tokens

Ech0 before 4.5.1 contains an authorization bypass vulnerability where session tokens skip scope validation in RequireScopes middleware, allowing logged-in non-admin users to access admin endpoints. Attackers can read system logs, visitor statistics, user emails, and subscribe to live WebSocket...

8.7CVSS5.5AI score
SaveExploits0References4
CVE
CVE
added 2026/08/25 11:33 a.m.27 views

CVE-2026-79665

Ech0 before 4.5.1 is affected by an authorization bypass vulnerability. The root cause is that session tokens skip scope validation in the RequireScopes middleware , enabling logged-in non-admin users to access admin endpoints. An attacker with a valid low-privilege session token can read system ...

8.8CVSS5.4AI score0.00352EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/19 9:34 p.m.40 views

CVE-2026-76366 Information Disclosure through the REST API in Splunk SOAR

In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representational State Transfer REST API filtering on playbook runs to recover session tokens that compromise all data available to the affected user. The information disclosure is possible because Splunk SOAR...

6.5CVSS0.00293EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/08/13 10:18 a.m.9 views

nanoid: nanoid: Predictable ID generation due to integer overflow

A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...

7.4CVSS5.5AI score0.00296EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
added 2026/08/13 10:01 a.m.16 views

nanoid: nanoid: Predictable ID generation due to integer overflow

A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...

7.4CVSS5.5AI score0.00296EPSS
SaveExploits0References10
NVD
NVD
added 2026/08/07 6:17 p.m.13 views

CVE-2026-47363

In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session including OAuth tokens from Intent extras with no permission guard, and signs the app into that session without validating it against the backend. Th...

6.3CVSS0.00142EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/07 3:17 p.m.16 views

CVE-2026-19264

Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied path segments onto the upload directory and streams the file without normalising the path or confining it to that directory, and the route requires no authentication. Raw...

9.8CVSS0.00771EPSS
SaveExploits1References3
Snyk
Snyk
added 2026/08/06 9:33 p.m.46 views

Cross-site Scripting (XSS)

Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the draftName field in the control panel rendering process. An attacker can execute arbitrary JavaScript in the session of higher-privileged users by crafting a...

6.4CVSS5.3AI score0.0019EPSS
SaveExploits0References2
Rows per page
Query Builder