Lucene search
+L

10 matches found

Kitploit
Kitploit
•added 2026/09/24 8:48 a.m.•14 views

exrex

EXREX 正则表达式的非正则方法。 Exrex 是一个命令行工具和 Python 模块,能够生成给定正则表达式的所有或随机匹配字符串,以及更多功能。 它纯 Python 实现,无外部依赖。 有些正则表达式具有无限匹配字符串(例如:a-z+),在这种情况下,exrex 会限制无限部分的最大长度。 Exrex 使用生成器,因此内存使用量不依赖于匹配字符串的数量。 功能 生成所有匹配字符串 生成随机匹配字符串 计算匹配字符串的数量 简化正则表达式 安装 要安装 exrex,只需: root@kitploit: $ pip install exrex 或 root@kitploit: $...

6.1AI score
SaveExploits0References4
NVD
NVD
•added 2024/01/03 5:15 p.m.•41 views

CVE-2023-46740

CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string generator to generate user-specific, sensitive keys used to authenticate users in a CubeFS deployment. This could allow an attacker to predict and/or guess the generated string...

9.8CVSS6.9AI score0.00439EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/01/03 4:20 p.m.•51 views

CVE-2023-46740 Insecure random string generator used for sensitive data

CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string generator to generate user-specific, sensitive keys used to authenticate users in a CubeFS deployment. This could allow an attacker to predict and/or guess the generated string...

6.5CVSS9.4AI score0.00439EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/01/03 4:20 p.m.•4 views

CVE-2023-46740 Insecure random string generator used for sensitive data

CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string generator to generate user-specific, sensitive keys used to authenticate users in a CubeFS deployment. This could allow an attacker to predict and/or guess the generated string...

6.5CVSS7.7AI score0.00439EPSS
SaveExploits0References2
OSV
OSV
•added 2024/01/03 4:14 p.m.•99 views

GHSA-4248-P65P-HCRM Insecure random string generator used for sensitive data

CubeFS used an insecure random string generator to generate user-specific, sensitive keys used to authenticate users in a CubeFS deployment. This could allow an attacker to predict and/or guess the generated string and impersonate a user thereby obtaining higher privileges. When CubeFS creates ne...

8.2CVSS9.2AI score0.00439EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/01/03 4:14 p.m.•46 views

Insecure random string generator used for sensitive data

CubeFS used an insecure random string generator to generate user-specific, sensitive keys used to authenticate users in a CubeFS deployment. This could allow an attacker to predict and/or guess the generated string and impersonate a user thereby obtaining higher privileges. When CubeFS creates ne...

9.8CVSS6.6AI score0.00439EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2019/01/09 7:29 p.m.•7 views

CVE-2017-15428

Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS7.6AI score0.18118EPSS
SaveExploits0References2
OSV
OSV
•added 2019/01/09 7:29 p.m.•9 views

UBUNTU-CVE-2017-15428

Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS7.7AI score0.18118EPSS
SaveExploits0References4
FreeBSD
FreeBSD
•added 2018/04/03 12:00 a.m.•13 views

wordpress -- multiple issues

wordpress developers reports: Don't treat localhost as same host by default. Use safe redirects when redirecting the login page if SSL is forced. Make sure the version string is correctly escaped for use in generator tags...

0.7AI score
SaveExploits0References1
Metasploit
Metasploit
•added 2017/10/29 12:00 a.m.•76 views

Xplico Remote Code Execution

This module exploits command injection vulnerability. Unauthenticated users can register a new account and then execute a terminal command under the context of the root user. The specific flaw exists within the Xplico, which listens on TCP port 9876 by default. The goal of Xplico is extract from ...

9CVSS8AI score0.80759EPSS
SaveExploits7
Rows per page
Query Builder