Lucene search
+L

10873 matches found

Kitploit
Kitploit
added 2026/09/03 8:59 p.m.3 views

ncccodenavi

ncccodenavi NCC Code Navi the Text Viewer and Searcher for Code Reviewers Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com http://www.github.com/nccgroup/ncccodenavi Released under AGPL see LICENSE for more...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/03 7:40 p.m.7 views

burp-jq

Burp JQ This is a Burp Extension to apply jq queries to JSON content from the HTTP message viewer. Build root@kitploit: $ gradle fatJar Credits Burp JQ relies on jackson-jq, a Java implementation of jq. jq jackson jackson-jq...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/03 11:14 a.m.8 views

TCPViewer v1.14.0

TCP Viewer A simple, native packet viewer for Mac. Website · Download · Docs · Releases TCP Viewer captures and reads network packets on macOS. It uses system libpcap for capture and Wireshark libraries for deep packet details. Features Native macOS app, built with AppKit Built on top of Wireshar...

5.9AI score
SaveExploits0References4
NVD
NVD
added 2026/09/02 4:17 p.m.8 views

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS0.00335EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/02 3:40 p.m.8 views

EUVD-2026-70114

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.8AI score0.00335EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 3:40 p.m.32 views

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

0.00335EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 3:40 p.m.13 views

CVE-2026-84648

CVE-2026-84648 is a stored cross-site scripting (XSS) vulnerability in the system log viewer of Jenkins 2.579 and earlier (LTS 2.568.2 and earlier). The root cause is the failure to escape log record metadata (source, level, and timestamp) before rendering, allowing attackers who control agent pr...

8.8CVSS5.8AI score0.00335EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/09/02 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-84138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155. CVE-2026-84138 Note that Nessus relies on the...

7.5CVSS6.4AI score0.00204EPSS
SaveExploits0References2
Jenkins Security Advisories
Jenkins Security Advisories
added 2026/09/02 12:00 a.m.8 views

Stored XSS vulnerability in system log viewer

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes. TIP: On Jenkins 2.539 and newer, LTS...

8.8CVSS5.8AI score0.00335EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/09/02 12:00 a.m.10 views

PT-2026-84771

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

8.8CVSS5.8AI score0.00335EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/01 1:20 p.m.7 views

CVE-2026-84138

Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

7.5CVSS0.00204EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/01 12:19 p.m.40 views

CVE-2026-84138 Denial-of-service in the PDF Viewer component

Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

0.00204EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/01 12:19 p.m.8 views

EUVD-2026-69086

Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

5.9AI score0.00204EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/09/01 12:19 p.m.8 views

CVE-2026-84138

Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

7.5CVSS5.9AI score0.00204EPSS
SaveExploits0
CVE
CVE
added 2026/09/01 12:19 p.m.30 views

CVE-2026-84138

CVE-2026-84138 is a denial-of-service vulnerability in the PDF Viewer component of Mozilla Firefox and Thunderbird . It was fixed in Firefox 155 and Thunderbird 155 (also in Firefox ESR 115.40, 140.15, 153.2, and Thunderbird 140.15, 153.2 per the associated Nessus plugins). The NVD rates it CVSS ...

7.5CVSS5.9AI score0.00204EPSS
SaveExploits0References3Affected Software2
AlpineLinux
AlpineLinux
added 2026/09/01 12:19 p.m.10 views

CVE-2026-84138

Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

7.5CVSS5.2AI score0.00204EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.9 views

PT-2026-84191

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Thunderbird versions prior to 155 Description A denial-of-service issue exists within the PDF Viewer component. Recommendations Update Firefox to version 155. Update Thunderbird to version 155...

9.8CVSS5.8AI score0.00378EPSS
SaveExploits1References35
NVD
NVD
added 2026/08/28 12:16 p.m.11 views

CVE-2026-81733

WWBN AVideo through 30.0 and master up to commit 4cb576e contains a cross-site request forgery vulnerability in plugin/Live/myLiveControls.save.json.php. The endpoint only checks that a user is logged in and processes customUrl, customMessage, and autoRedirect parameters from $REQUEST via a GET...

5.1CVSS0.00171EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/28 10:49 a.m.14 views

EUVD-2026-67684

WWBN AVideo through 30.0 and master up to commit 4cb576e contains a cross-site request forgery vulnerability in plugin/Live/myLiveControls.save.json.php. The endpoint only checks that a user is logged in and processes customUrl, customMessage, and autoRedirect parameters from $REQUEST via a GET...

5.1CVSS5.7AI score0.00171EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/28 10:49 a.m.18 views

CVE-2026-81733

WWBN AVideo through version 30.0 (and master up to commit 4cb576e) is affected by a cross-site request forgery (CSRF) vulnerability in plugin/Live/myLiveControls.save.json.php. The endpoint accepts customUrl, customMessage, and autoRedirect parameters via a GET request and only verifies that the ...

5.1CVSS5.7AI score0.00171EPSS
SaveExploits0References2
Rows per page
Query Builder