Lucene search
+L

37076 matches found

NVD
NVD
added 2026/09/08 8:18 p.m.5 views

CVE-2026-78560

The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP header without cryptographic validation. In architectures where this optional source is enabled without an upstream reverse proxy or firewall configured to saniti...

4.8CVSS0.00201EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 8:11 p.m.12 views

CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing

CVE-2026-9090 – Escritura Modbus TCP a Bobinas de Solo Lectura mediante Suplantación de Código de Función Código del Programa Python con simulación pymodbus root@kitploit: modbusplcsim.py - Simulated Modbus PLC with read‑only coils from pymodbus.server.sync import StartTcpServer from...

9.1CVSS8.1AI score0.00216EPSS
SaveExploits1
CVE
CVE
added 2026/09/08 8:09 p.m.13 views

CVE-2026-78560

CVE-2026-78560 affects the Okta Access Gateway , specifically its optional pass-through authentication source , which accepts user identity from a client-supplied HTTP header without cryptographic validation. When this source is enabled without an upstream reverse proxy or firewall that sanitizes...

4.8CVSS0.00201EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/08 8:09 p.m.23 views

CVE-2026-78560 Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source

The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP header without cryptographic validation. In architectures where this optional source is enabled without an upstream reverse proxy or firewall configured to saniti...

4.8CVSS0.00201EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 8:09 p.m.5 views

EUVD-2026-74171

The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP header without cryptographic validation. In architectures where this optional source is enabled without an upstream reverse proxy or firewall configured to saniti...

4.8CVSS0.00201EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 8:06 p.m.7 views

skylift

SkyLift SkyLift is an experimental Wi-Fi/BT geolocation spoofing device that uses the ESP8266 or ESP32 boards to broadcast Wi-Fi beacon frames or BT advertisements that emulate the wireless infrastructure from a remote/target location. The above example shows a successful georelocation to Peter...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 7:50 p.m.8 views

burpsuiefakeip

Reposted from https://github.com/TheKingOfDuck/burpFakeIP BurpFakeIP Forging IP in Burp Suite, and I'm dead serious. Four small features Forge a specified IP Forge a local IP Forge a random IP Random IP brute-forcing 0x01 Forge a specified IP In the Repeater module, right-click to select the fake...

5.9AI score
SaveExploits0References1
NVD
NVD
added 2026/09/08 7:19 p.m.7 views

CVE-2026-69646

Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network...

8.3CVSS0.0021EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 7:19 p.m.5 views

CVE-2026-69642

Improper neutralization of input during web page generation 'cross-site scripting' in Skype for Business allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS0.00272EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 7:18 p.m.6 views

CVE-2026-66305

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...

7.1CVSS0.00302EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 7:18 p.m.6 views

CVE-2026-63523

Improper neutralization of input during web page generation 'cross-site scripting' in Skype for Business allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS0.00666EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 7:15 p.m.5 views

CurveBall-CVE-2020-0601-PoC

CurveBall CVE-2020-0601 - PoC This vulnerability, known as CurveBall, is due to invalid verification of certificates that using the ECC algorithm. Windows try to verify previously verified certificates from the certificate cache and while doing this, it only checks whether the public keys of the...

8.1CVSS7.5AI score0.89436EPSS
SaveExploits15
EUVD
EUVD
added 2026/09/08 6:33 p.m.6 views

EUVD-2026-73939

Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network...

8.3CVSS0.0021EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 6:33 p.m.13 views

CVE-2026-69646

CVE-2026-69646 is an improper verification of cryptographic signature vulnerability in Skype for Business Server (Subscription Edition, 2015, and 2019). An unauthorized attacker on an adjacent network can perform spoofing without requiring privileges or user interaction. The CVSS 3.1 score is 8.3...

8.3CVSS0.0021EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 6:33 p.m.10 views

CVE-2026-69642

CVE-2026-69642 is a cross-site scripting (XSS) vulnerability in Skype for Business Server (Subscription Edition, 2019, and 2015), caused by improper input neutralization during web page generation. An unauthorized attacker can perform spoofing over a network with no user interaction or privileges...

6.5CVSS0.00272EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 6:33 p.m.5 views

EUVD-2026-73938

Improper neutralization of input during web page generation 'cross-site scripting' in Skype for Business allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS0.00272EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 6:32 p.m.52 views

CVE-2026-66305

CVE-2026-66305 is a spoofing vulnerability in Skype for Business Server (Subscription Edition, 2019, and 2015) caused by the use of client-side authentication , which allows an authorized attacker to perform spoofing over a network. The CVSS v3.1 score is 7.1 (HIGH) , with high integrity impact a...

7.1CVSS0.00302EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 6:32 p.m.8 views

EUVD-2026-73937

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...

7.1CVSS0.00302EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 6:32 p.m.6 views

EUVD-2026-73936

Improper neutralization of input during web page generation 'cross-site scripting' in Skype for Business allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS0.00666EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 6:32 p.m.46 views

CVE-2026-63523

CVE-2026-63523 is a stored cross-site scripting (XSS) vulnerability in Skype for Business Server , affecting the Subscription Edition , 2019 , and 2015 releases. The flaw stems from improper neutralization of input during web page generation, allowing an unauthenticated attacker to perform spoofi...

6.5CVSS0.00666EPSS
SaveExploits0References1
Rows per page
Query Builder