Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

152411 matches found

EUVD
EUVD•added 2026/09/15 8:02 p.m.•2 views

EUVD-2026-79511

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

9.8CVSS5.6AI score
SaveExploits0References1
CVE
CVE•added 2026/09/15 8:02 p.m.•7 views

CVE-2026-70756

CVE-2026-70756 is a critical vulnerability in the Core component of Oracle WebLogic Server (Oracle Fusion Middleware), affecting supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker with network access via T3 or IIOP can exploit this vulnerability to ...

9.8CVSS5.6AI score
SaveExploits0References1
CVE
CVE•added 2026/09/15 8:02 p.m.•6 views

CVE-2026-70748

Oracle WebLogic Server (Oracle Fusion Middleware, component: Core ) in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 is affected by a critically rated vulnerability (CVSS 3.1: 9.8 ). An unauthenticated attacker with network access via the T3 or IIOP protocols can exploit this flaw w...

9.8CVSS5.6AI score
SaveExploits0References1
EUVD
EUVD•added 2026/09/15 8:02 p.m.•3 views

EUVD-2026-79509

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

9.8CVSS5.6AI score
SaveExploits0References1
Kitploit
Kitploit•added 2026/09/15 8:01 p.m.•8 views

CVE-2025-7384

CVE-2025-7384 — Inyección de Objetos PHP a RCE Plugin: Database for Contact Form 7 contact-form-entries ≤ 1.4.3 CVSS: 9.8 Crítico CWE: CWE-502 — Deserialización de Datos No Confiables Requisito de autenticación: Ninguno No autenticado Impacto: Ejecución Remota de Código Tabla de Contenidos 1...

9.8CVSS6.1AI score0.01281EPSS
SaveExploits1
Kitploit
Kitploit•added 2026/09/15 7:59 p.m.•4 views

CVE-2023-38646

CVE-2023-38646 Metabase Pre-Auth RCE Metabase open source anterior a 0.46.6.1 y Metabase Enterprise anterior a 1.46.6.1 permiten a los atacantes ejecutar comandos arbitrarios en el servidor, al nivel de privilegio del servidor. No se requiere autenticación para la explotación. Las otras versiones...

9.8CVSS8.7AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit•added 2026/09/15 7:59 p.m.•5 views

CVE-2023-38646-PoC

CVE-2023-38646 - Metabase 预授权 RCE Metabase 开源版本 0.46.6.1 之前以及 Metabase 企业版 1.46.6.1 之前的版本允许攻击者在服务器上以服务器的权限级别执行任意命令。利用该漏洞无需认证。其他已修复的版本包括 0.45.4.1、1.45.4.1、0.44.7.1、1.44.7.1、0.43.7.2 和 1.43.7.2。 PoC 步骤 1. 访问 http://vulnerablehost.com/api/session/properties 2. 找到 "setup-token" 3. 获取一个 collaborator...

9.8CVSS8.7AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit•added 2026/09/15 7:59 p.m.•6 views

pre2k

root@kitploit: /'\ /\ \ /\ /\ \ \ /'\ /\ '/'/'\ //// /\ \ , \ \ \L\ \ \ //\ //\ // /\ \ \ \\ \ \ ,/\ \\ \// // \ \ \ \ \ / // // // //// \ \ v3.0 // @unsignedsh0rt @Tw1sm Pre2k Pre2k 是一款用于查询 pre-windows 2000 计算机对象是否存在的工具，这些对象由 @Oddvarmoe 所发现，可被利用来在目标域中获取立足点。Pre2k...

5.8AI score
SaveExploits0
Kitploit
Kitploit•added 2026/09/15 7:59 p.m.•8 views

Blackash-CVE-2025-54574

🛑 CVE-2025-54574 — Squid（≤ 6.3）中的堆缓冲区溢出 🛑 严重性： 严重（CVSS 9.3） 受影响软件： Squid 代理（6.3 及更早版本） 漏洞类型： 基于堆的缓冲区溢出 发现于： URN（统一资源名称）处理 影响： 可能实现远程代码执行 或拒绝服务 ，可通过网络利用，无需任何身份验证 🔍 这是什么问题？ 该缺陷出现在 Squid 解析 URN 响应的过程中。内存处理不当会导致堆溢出，这意味着恶意的 HTTP 响应可能会破坏内存，从而可能让攻击者使 Squid 崩溃或运行任意代码。 ✅ 如何修复 升级到 Squid 6.4 或更高版本。该版本已修补此漏洞...

9.8CVSS8.3AI score0.22669EPSS
SaveExploits1
Kitploit
Kitploit•added 2026/09/15 7:59 p.m.•7 views

Solr-GRAB

Solr-GRAB Apache Solr インスタンスのクエリを、ユーザー名とパスワードの有無にかかわらず収集します。 免責事項 : このプロジェクトは、許可されたテストおよび教育目的にのみ使用すべきです。 ダウンロード root@kitploit: git clone https://github.com/GnosticPlayers/Solr-GRAB 使用方法 Censys を使用して、dork "Welcome To Solr" または "Apache Solr Admin" で Apache Solr インスタンスを検索できます。クエリを取得するには、HTTP...

6AI score
SaveExploits0References2
Kitploit
Kitploit•added 2026/09/15 7:58 p.m.•8 views

CVE-2023-4220

CVE-2023-4220 RCE Chamilo 1.11.24 | https://starlabs.sg/advisories/23/23-4220/ | | Chamilo LMS /tmp/rce.php EOF curl -F 'bigUploadFile=@/tmp/rce.php' "$HOST/$URLUPLD" CMD=$echo $CMD|base64 -w0| python3 -c "import urllib.parse,sys; printurllib.parse.quoteplussys.stdin.read" curl...

8.1CVSS7.2AI score0.76084EPSS
SaveExploits26
Kitploit
Kitploit•added 2026/09/15 7:58 p.m.•10 views

CVE-2023-25136

CVE-2023-25136 OpenSSH 9.1 漏洞批量扫描与利用 描述 OpenSSH server sshd 9.1 在处理 options.kexalgorithms 时引入了双重释放漏洞，该问题已在 OpenSSH 9.2 中修复。在默认配置下，未经身份验证的远程攻击者可利用该双重释放漏洞跳转到 sshd 地址空间中的任意位置。第三方报告称“远程代码执行在理论上是可能的”。 https://nvd.nist.gov/vuln/detail/CVE-2023-25136 使用 1. 运行 scan.py 脚本并输入包含 IP 地址的文件名 python scan.py 2. ...

6.5CVSS7.3AI score0.89685EPSS
SaveExploits10
EUVD
EUVD•added 2026/09/15 7:56 p.m.•3 views

EUVD-2026-79506

Vulnerability in the Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks o...

8.1CVSS5.6AI score
SaveExploits0References1
EUVD
EUVD•added 2026/09/15 7:56 p.m.•3 views

EUVD-2026-79507

Vulnerability in the Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks o...

8.1CVSS5.6AI score
SaveExploits0References1
CVE
CVE•added 2026/09/15 7:56 p.m.•4 views

CVE-2026-87287

CVE-2026-87287 affects the Compiler component of Oracle GraalVM 25.0.4.1 (part of Oracle Java SE). A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, resulting in full takeover of Oracle GraalVM. The CVSS 3.1 base score ...

8.1CVSS5.6AI score
SaveExploits0References1
CVE
CVE•added 2026/09/15 7:56 p.m.•7 views

CVE-2026-87288

Oracle GraalVM (component: Compiler ), part of Oracle Java SE, is affected in supported version 25.0.4.1 . The vulnerability allows an unauthenticated attacker with network access via HTTP to achieve takeover of Oracle GraalVM, with high impact on confidentiality, integrity, and availability. The...

8.1CVSS5.6AI score
SaveExploits0References1
Kitploit
Kitploit•added 2026/09/15 7:56 p.m.•8 views

CVE-2025-24071

Informe de vulnerabilidad de seguridad: CVE-2025-24071 - Vulnerabilidad de suplantación en el Explorador de archivos de Windows Resumen NSFOCUS CERT ha detectado que Microsoft publicó recientemente una actualización de seguridad para abordar una vulnerabilidad crítica de suplantación en el...

6.5CVSS7.5AI score0.22915EPSS
SaveExploits23
CVE
CVE•added 2026/09/15 7:56 p.m.•7 views

CVE-2026-87286

Oracle GraalVM (component: Compiler ), version 25.0.4.1 , is affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product. The vulnerability is rated CVSS 8.1 (HIGH) with high impact on confidentiality, integrity, and ava...

8.1CVSS5.6AI score
SaveExploits0References1
EUVD
EUVD•added 2026/09/15 7:56 p.m.•3 views

EUVD-2026-79505

Vulnerability in the Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks o...

8.1CVSS5.6AI score
SaveExploits0References1
Kitploit
Kitploit•added 2026/09/15 7:55 p.m.•10 views

text4shell-exploit

Text4shell-exploit 这是一个概念验证（PoC），用于利用 Apache Commons Text 中的漏洞 CVE-2022-42889 受影响版本：1.5.0 至（不含）1.10.0 影响 成功利用此漏洞，可使未经身份验证的攻击者在易受攻击的资产上执行任意代码 用于验证 PoC 的易受攻击应用程序 由 @securekomodo 开发的应用程序，附加在 此处。 Docker 该应用程序也可以从 docker-registry 加载 root@kitploit: docker run -p 8080:8080 gokul2/text4shell-poc:latest...

9.8CVSS7.9AI score0.99931EPSS
SaveExploits42References4
Rows per page
Query Builder