Lucene search
+L

992 matches found

Nuclei
Nuclei
added 2026/09/19 2:05 a.m.16 views

LottieFiles for Gutenberg <= 3.0.0 - Unauthenticated Settings Disclosure

The LottieFiles – Lottie block for Gutenberg plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.0 via the /wp-json/lottiefiles/v1/settings/ REST API endpoint. This makes it possible for unauthenticated attackers to retrieve the site...

5.3CVSS5.5AI score0.00699EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.42 views

RestroPress 3.0.0-3.2.1 - Authentication Bypass

RestroPress Online Food Ordering System WordPress plugin 3.0.0 to 3.1.9.2 contains an authentication bypass caused by exposure of user private tokens and API data via /wp-json/wp/v2/users endpoint, letting unauthenticated attackers forge JWT tokens and authenticate as other users including...

9.8CVSS8.1AI score0.02334EPSS
SaveExploits6References2
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.39 views

WordPress AI Engine Plugin - Token Exposure

Unauthenticated sensitive information exposure in AI Engine WordPress plugin = 3.1.3 exposes bearer tokens via REST API endpoints when No-Auth URL is enabled. id: CVE-2025-11749 info: name: WordPress AI Engine Plugin - Token Exposure author: 4m3rr0r severity: critical description: | Unauthenticat...

9.8CVSS7.4AI score0.74759EPSS
SaveExploits5References2
Kitploit
Kitploit
added 2026/09/18 8:12 p.m.9 views

CVE-2025-11749

CVE-2025-11749 AI Engine = 3.1.3 - 未授权敏感信息泄露导致权限提升 ⚠️ AI Engine = 3.1.3 — 未授权敏感信息泄露 → 权限提升 GitHub: Nxploited Telegram: @KNxploited 重要通知: 许多不道德的个人试图通过转售或重命名脚本并声称原创来利用我编写的代码获利。本项目是免费的、独家的,并由 Khaled Alenazi Nxploited 官方发布。 🔎 概述 用于 WordPress 的 AI Engine 插件(版本 3.1.3 及以下)存在信息泄露漏洞,如果启用了某些插件配置,未认证用户可以通过暴露...

9.8CVSS7.5AI score0.74759EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/18 1:07 p.m.14 views

DiscoRape

DiscoRape DiscoRapeは、Python3.8で書かれたDiscord用のselfbotです。 このフォーク元のオリジナルリポジトリはこちらにあります EC-discord制作 プレビュー 📝 インストール/実行 pip3 install -r requirements.txt data/config.jsonにトークンを追加し、python3 selfbot.pyで実行します。 または、 サポート/貢献 サポートについては、以下のサポートDiscordに参加できます。 または、こちらでIssueやプルリクエストを開くことができます。...

5.7AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/18 11:55 a.m.11 views

CVE-2024-37051

CVE-2024-37051 分析 概述 CVE-2024-37051 是 JetBrains 基于 IntelliJ 的 IDE 中发现的一个漏洞,影响 GitHub 插件。当加载恶意拉取请求 PR 时,它允许未经授权地暴露 GitHub 访问令牌。 技术细节 该漏洞发生在 IDE 中 PR 的渲染过程中。恶意 PR 可导致 IDE 将 GitHub 令牌发送到攻击者指定的 URL。补丁包括主机验证,以确保令牌仅发送到授权的 GitHub 域。 影响 主要风险是未经授权访问 GitHub 令牌,使攻击者能够访问私有仓库、修改代码以及访问敏感数据。这需要用户加载恶意 PR。建议及时更新到...

9.3CVSS8.1AI score0.03837EPSS
SaveExploits1
CVE
CVE
added 2026/09/17 6:43 a.m.27 views

CVE-2026-44940

CVE-2026-44940 affects the rancher-extension-stackstate extension in SUSE Observability . The root cause is the exposure of service tokens in plain configuration or insecure locations , rather than storing them in a secure secret management mechanism. An attacker with minimal access (low privileg...

5.7CVSS0.00134EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/17 1:01 a.m.12 views

HotelDruid-CVE-2021-42948

CVE-2021-42948 HotelDruid 酒店管理软件 v3.0.3 及以下版本被发现通过 GET 参数在多个链接中暴露会话令牌,使攻击者能够获取用户会话 ID。 用于访问应用程序已认证页面的会话令牌是通过 head.php 文件生成的 GET 方法传递的。head.php 文件创建应用程序的菜单栏,用于导航到各种应用程序功能。菜单栏中的每个链接都将会话令牌作为参数 idsessione 的值暴露出来。 会话令牌明文在 GET 请求中被暴露,攻击者可以通过代理、中间人攻击或类似手段拦截这些请求,并利用其劫持应用程序用户会话。 修复措施 供应商已决定不发布补丁来修复此漏洞。 产品...

3.7CVSS5.5AI score0.00826EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/15 7:23 p.m.7 views

EUVD-2026-79198

A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the cache synchronization endpoint...

9.9CVSS5.8AI score0.00395EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/15 7:23 p.m.31 views

CVE-2026-76672

CVE-2026-76672 affects the HPE Networking EdgeConnect SD-WAN Orchestrator . An authenticated remote attacker holding only read-only privileges can send a specially crafted request to the cache synchronization endpoint , leading to disclosure of sensitive third-party API tokens and credentials. Su...

9.9CVSS5.8AI score0.00395EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/15 5:50 p.m.8 views

CVE-2026-57442 MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested

MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.5, PathFilter in src/pathfilter.ts uses root-anchored deny-list patterns, so nested .git, .obsidian, and nodemodules path segments do not match the restriction and pass both...

6.9CVSS
SaveExploits0References6
OSV
OSV
added 2026/09/15 2:34 p.m.6 views

CVE-2026-53957 Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint

Contentful MCP Server is a Model Context Protocol server for the Contentful Management API. Prior to @contentful/mcp-server 1.7.19 and @contentful/mcp-tools 0.4.5, exportspace and importspace in packages/mcp-tools/src/tools/jobs/space-to-space-migration/exportSpace.ts and...

7.7CVSS5.8AI score
SaveExploits0References7
CVE
CVE
added 2026/09/15 2:34 p.m.53 views

CVE-2026-53957

CVE-2026-53957 affects the Contentful MCP Server (@contentful/mcp-tools and @contentful/mcp-server). The export_space and import_space tools spread LLM-controlled host, proxy, rawProxy, and insecure arguments into the options passed to the Contentful Management API SDK, which then attaches the se...

7.7CVSS5.8AI score0.00249EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/09/15 12:00 a.m.7 views

JFrog Artifactory < 7.111.20 / 7.117.x < 7.117.27 / 7.125.x < 7.125.19 / 7.133.x < 7.133.28 / 7.146.x < 7.146.35 Improper Authentication

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is prior to 7.111.20, 7.117.x prior to 7.117.27, 7.125.x prior to 7.125.19, 7.133.x prior to 7.133.28, or 7.146.x prior to 7.146.35. It is, therefore, affected by an improper authenticatio...

7.5CVSS6.2AI score0.0092EPSS
SaveExploits1References3
NVD
NVD
added 2026/09/14 6:17 p.m.7 views

CVE-2026-50157

Auth0 Symfony is a Symfony SDK for Auth0 Authentication and Management APIs. From 5.0.0-BETA0 until 5.9.0, the Authorizer::authenticate and Authorizer::supports paths in the Authorizer security authenticator may accept OAuth 2.0 bearer access tokens from the token URL query parameter as well as t...

6.5CVSS0.00498EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/14 6:17 p.m.7 views

CVE-2026-47256

OpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such as traces, metrics, and logs. Prior to 0.154.0, the Sentry exporter reads the remote OTLP sender-controlled service.name resource...

5.3CVSS0.00416EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/14 5:17 p.m.6 views

CVE-2026-55102

hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, every API method in src/Vault.js passes failed requests through parseAxiosError, which rethrows the raw AxiosError while retaining AxiosError.config and the equivalent response configuration. These...

5.8CVSS0.00114EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/14 5:06 p.m.6 views

CVE-2026-50157 Auth0 Symfony: Bearer Token Accepted via URL Query Parameter in Auth0 Symfony SDK

Auth0 Symfony is a Symfony SDK for Auth0 Authentication and Management APIs. From 5.0.0-BETA0 until 5.9.0, the Authorizer::authenticate and Authorizer::supports paths in the Authorizer security authenticator may accept OAuth 2.0 bearer access tokens from the token URL query parameter as well as t...

6.5CVSS5.7AI score
SaveExploits0References5
NVD
NVD
added 2026/09/14 1:18 p.m.6 views

CVE-2026-73178

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Syncope. An administrator with adequate entitlements can get access via REST to the list of existing Access Tokens, including their signed JWT body. These values can be then used to perform further REST requests,...

7.5CVSS0.00413EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 4:35 p.m.7 views

citrix_bleed_2

Citrix Bleed 2 PoC 扫描器 CVE-2025-5777 此脚本是针对假设性漏洞“Citrix Bleed 2”CVE-2025-5777的概念验证PoC扫描器。它旨在通过发送超大型请求并分析响应中是否包含敏感信息,来检测 Citrix ADC 设备潜在的内存泄漏。 功能 多种测试方法 :支持 oversized-headers、oversized-body 和 randomized 测试方法。 差异分析 :将测试响应与基线进行对比,以识别泄露的数据。 高置信度令牌提取 :使用正则表达式和熵分析来查找潜在的令牌(例如会话 cookie、JWT)。 多种导出格式...

9.3CVSS8.4AI score0.99972EPSS
SaveExploits20
Rows per page
Query Builder