Lucene search
+L

878 matches found

Kitploit
Kitploit
β€’added 2026/10/12 5:48 p.m.β€’29 views

peer-tweet

PeerTweet Decentralized feeds using BitTorrent's DHT. Idea from Arvid and The8472 "DHT RSS feeds" http://libtorrent.org/dhtrss.html Screenshot Quick links Download the latest binaries from the releases page. Find and share PeerTweet addresses from the addresses issues page. What is PeerTweet?...

6AI score
SaveExploits0References8
Kitploit
Kitploit
β€’added 2026/10/12 9:56 a.m.β€’52 views

cansina

Cansina Cansina is a Web Content Discovery Application. It is well known Web applications don't publish all their resources or public links, so the only way to discover these resources is requesting for them and check the response. Cansina duty is to help you making requests and filtering and...

6.1AI score
SaveExploits0References4
Kitploit
Kitploit
β€’added 2026/10/12 9:10 a.m.β€’98 views

fprobe

FProbe FProbe - Fast HTTP Probe Installation GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format with some...

6.1AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/10/11 10:34 a.m.β€’21 views

hget

hget Este proyecto es mi proyecto personal para aprender Golang y construir algo ΓΊtil. Estado de compilaciΓ³n : InstalaciΓ³n $ go get -d github.com/huydx/hget $ cd $GOPATH/src/github.com/huydx/hget $ make clean install El archivo binario se generarΓ‘ en ./bin/hget. Puedes copiarlo a /usr/bin o...

6.3AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/10/08 4:26 p.m.β€’18 views

CVE-2026-29000

CVE-2026-29000 Exploit Generator Rust This repository contains a specialized Rust implementation for exploiting CVE-2026-29000, an authentication bypass vulnerability in pac4j-jwt. The vulnerability stems from a "Signature Validation Skip" when a PlainJWT alg: none is nested within an encrypted J...

9.3CVSS7.6AI score0.00502EPSS
SaveExploits17
Mend
Mend
β€’added 2026/10/08 3:28 p.m.β€’7 views

CVE-2026-107660

FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tlsopen of libavformat/tlsmbedtls.c, which skips hostname checks for IP-address hosts. Network attackers can intercept https, rtmps, or tls connections to IP-literal URLs with any trusted CA-issu...

6.3CVSS5.9AI score0.00136EPSS
SaveExploits0References8
Kitploit
Kitploit
β€’added 2026/10/08 3:20 p.m.β€’15 views

CVE-2026-60137-With-Skip-SSL

CVE-2026-60137-With-Skip-SSL Adding --insecure to skip ssl Original-without-skip-ssl : https://github.com/ZephrFish/wp2shell-scanner...

5.9CVSS8.4AI score0.05323EPSS
SaveExploits68References1
NVD
NVD
β€’added 2026/10/08 3:17 p.m.β€’6 views

CVE-2026-105832

EspoCRM before 10.0.6 contains an authentication bypass vulnerability that accepts a login stopped at the second factor on routes not requiring authentication. Attackers knowing a 2FA-enabled user's username and password can skip the second factor to read config parameters not exposed publicly...

5.3CVSS0.00266EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
β€’added 2026/10/08 2:10 p.m.β€’10 views

CVE-2026-105832 EspoCRM before 10.0.6 Two-Factor Authentication Bypass on Unauthenticated Routes

EspoCRM before 10.0.6 contains an authentication bypass vulnerability that accepts a login stopped at the second factor on routes not requiring authentication. Attackers knowing a 2FA-enabled user's username and password can skip the second factor to read config parameters not exposed publicly...

5.3CVSS5.9AI score0.00266EPSS
SaveExploits0References2
EUVD
EUVD
β€’added 2026/10/08 2:10 p.m.β€’7 views

EUVD-2026-95019

EspoCRM before 10.0.6 contains an authentication bypass vulnerability that accepts a login stopped at the second factor on routes not requiring authentication. Attackers knowing a 2FA-enabled user's username and password can skip the second factor to read config parameters not exposed publicly...

5.3CVSS5.9AI score0.00266EPSS
SaveExploits0References2
Mend
Mend
β€’added 2026/10/08 2:10 p.m.β€’3 views

CVE-2026-105832

EspoCRM before 10.0.6 contains an authentication bypass vulnerability that accepts a login stopped at the second factor on routes not requiring authentication. Attackers knowing a 2FA-enabled user's username and password can skip the second factor to read config parameters not exposed publicly...

5.3CVSS5.9AI score0.00266EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
β€’added 2026/10/08 12:00 a.m.β€’9 views

PT-2026-108035

FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls open of libavformat/tls mbedtls.c, which skips hostname checks for IP-address hosts. Network attackers can intercept https, rtmps, or tls connections to IP-literal URLs with any trusted...

6.3CVSS5.9AI score0.00136EPSS
SaveExploits0References8
Kitploit
Kitploit
β€’added 2026/10/07 9:07 a.m.β€’14 views

CVE-2025-29927-NextJs-Middleware-Simulation

CVE-2025-29927: Next.js Middleware Authorization Bypass Simulation This repository demonstrates the exploitation of CVE-2025-29927 , a critical vulnerability in Next.js that allows attackers to bypass middleware-based authorization checks. The flaw stems from improper handling of the internal...

9.1CVSS7.7AI score0.99225EPSS
SaveExploits62References2
Positive Technologies
Positive Technologies
β€’added 2026/10/07 12:00 a.m.β€’10 views

PT-2026-107683

Name of the Vulnerable Software and Affected Versions AsyncHttpClient versions prior to 3.0.13 Description In the AsyncHttpClient library, a peer offering only Digest qop=auth-int causes mutual-authentication verification to be skipped. This occurs because the computeExpectedRspAuth function in...

8.8CVSS5.7AI score0.00358EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
β€’added 2026/10/06 5:57 p.m.β€’9 views

CVE-2026-72366

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfscreatewritereq to handle async cache object creation netfscreatewritereq will skip caching if the fscache cookie is disabled, but this is a problem because async cache object creation might not have got far enough...

9.8CVSS6.9AI score0.00649EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
β€’added 2026/10/06 12:00 a.m.β€’5 views

PT-2026-106590

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the cifs chan skip or disable function. When a server no longer supports a secondary channel, the function calls cifs put tcp session, which may drop the...

8.1CVSS5.9AI score0.00441EPSS
SaveExploits0References7
AstraLinux
AstraLinux
β€’added 2026/10/05 11:39 a.m.β€’19 views

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: sctp: A potential overflow issue in sctpifwdtsnskip has been fixed. Currently, when using sctpwalkifwdtsn to traverse ifwdtsnskip, it only checks the position pos against the end of the chunk. However, the data remaining at the...

8.2CVSS6AI score0.00385EPSS
SaveExploits0References2
AstraLinux
AstraLinux
β€’added 2026/10/05 11:39 a.m.β€’6 views

Astra Linux – Vulnerability in libsoup2.4

A flaw was discovered in libsoup. A vulnerability exists in the functions snifffeedorhtml and skipinsignificantspace, which may lead to an over-reading of the heap buffer...

6.5CVSS7.2AI score0.00656EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
β€’added 2026/10/05 12:00 a.m.β€’12 views

CVE-2026-66858

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...

8.7CVSS5.8AI score0.00263EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
β€’added 2026/10/02 10:44 p.m.β€’17 views

aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers

Summary Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations. An issue exists which allows uncontrolled recursion in the unknown-key skip path of the...

8.7CVSS5.8AI score0.00431EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder