Lucene search
+L

1403 matches found

Kitploit
Kitploit
added 2026/09/14 4:41 a.m.12 views

CVE-2021-3129

Ejecución Remota de Código: Laravel CVE-2021-3129 📜 Descripción Este script está diseñado para explotar la vulnerabilidad de Ejecución Remota de Código RCE identificada en varias versiones de Laravel, conocida como CVE-2021-3129. Aprovechando esta vulnerabilidad, el script permite a los usuarios...

9.8CVSS7.9AI score0.99943EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/09/14 12:52 a.m.7 views

VUL4J-23

Apache Sling Bringing Back the Fun! Apache Sling is a web framework that uses a Java Content Repository, such as Apache Jackrabbit, to store and manage content. Sling applications use either scripts or Java servlets, selected based on simple name conventions, to process HTTP requests in a RESTful...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 11:23 p.m.5 views

cve-2025-55182-poc

Información Básica CVE-2025-55182 es una de las vulnerabilidades de framework web más extendidas en 2025. React Server Components RSC ya es la arquitectura dominante en aplicaciones Next.js modernas, y una gran cantidad de proyectos estándar creados con create-next-app están afectados, sin...

10CVSS7.4AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/13 11:07 p.m.12 views

kurukshetra

Kurukshetra Kurukshetra es un framework web desarrollado con el objetivo de ser el primer framework de código abierto que proporciona una base sólida para alojar desafíos de codificación segura razonablemente complejos, al tiempo que ofrece la capacidad de ejecutar cada desafío de manera eficient...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 5:23 p.m.9 views

awesome-nodejs-security

Una lista curada de increíbles recursos de seguridad de Node.js. Aprende técnicas de codificación segura de Node.js y mejores prácticas de Liran Tal Contenido Herramientas Fortalecimiento del framework web Análisis estático de código Pruebas de seguridad dinámicas de aplicaciones Validación de...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:10 p.m.13 views

CVE-2025-64459-hunter

CVE-2025-64459-hunter Escáner de red rápido para CVE-2025-64459 vulnerabilidad de inyección SQL en Django. Instalación root@kitploit: pip install -r requirements.txt Uso root@kitploit: Scan single IP python cve202564459hunter.py -t 192.168.1.100 Scan CIDR range python cve202564459hunter.py -t...

9.1CVSS7.2AI score0.19396EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/13 9:54 a.m.10 views

perwendel__spark_CVE-2018-9159_2-7-1

Spark - un pequeño framework web para Java 8 NOTICIAS : ¡Spark 2.7.0 ha sido lanzado! Por favor, pruébalo y reporta cualquier error. root@kitploit: com.sparkjava spark-core 2.7.0 Importante - Existe una vulnerabilidad en versiones antiguas de Spark versiones inferiores a 2.5.2. Actualiza a la...

5.3CVSS6.5AI score0.04445EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 7:10 a.m.7 views

perwendel__spark_CVE-2018-9159_2_7_2_fixed

Spark: un micro framework web para Java 8 NOTICIAS : Spark 2.7.1 ya está disponible. Pruébalo y reporta cualquier error. root@kitploit: com.sparkjava spark-core 2.7.1 Importante: existe una vulnerabilidad en versiones antiguas de Spark versiones anteriores a la 2.5.2. Actualiza a la última versió...

5.3CVSS6.6AI score0.04445EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:31 a.m.12 views

apache-struts-cve-2017-9805

Apache Struts Web框架 Apache Struts Web框架是一个免费的开源解决方案,用于创建Java Web应用程序。 Web应用程序与传统网站的不同之处在于,Web应用程序可以创建动态响应。许多网站仅提供静态页面。Web应用程序可以与数据库和业务逻辑引擎交互以定制响应。 基于JavaServer Pages的Web应用程序有时会混杂数据库代码、页面设计代码和控制流代码。在实践中,我们发现除非将这些关注点分离,否则较大的应用程序将难以维护。...

8.1CVSS7.2AI score0.99396EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/12 7:12 a.m.6 views

CVE-2025-55182

This is a Next.js project bootstrapped with create-next-app. Getting Started First, run the development server: root@kitploit: npm run dev or yarn dev or pnpm dev or bun dev Open http://localhost:3000 with your browser to see the result. You can start editing the page by modifying app/page.tsx. T...

10CVSS7.5AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/08 10:26 a.m.8 views

recon-test-livewire

Acerca de Laravel Laravel es un framework de aplicaciones web con una sintaxis expresiva y elegante. Creemos que el desarrollo debe ser una experiencia agradable y creativa para ser verdaderamente satisfactorio. Laravel elimina el dolor del desarrollo al facilitar tareas comunes utilizadas en...

5.8AI score
SaveExploits0References1
Veracode
Veracode
added 2026/09/08 8:50 a.m.6 views

Denial Of Service (DoS)

Spring Framework is vulnerable to Denial Of Service. The vulnerability is due to stream corruption when Server-Sent Events SSE are used with functional web framework applications in Spring MVC...

9.8CVSS0.00387EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/09/02 2:38 p.m.15 views

EUVD-2026-68892

Tornado: Urlencoded body parsing omits maxnumfields, so one request can stall the event loop...

7.5CVSS5.9AI score0.0035EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/09/01 1:25 p.m.12 views

SUSE CVE-2026-82397

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parseqs in tornado/escape.py without passing maxnumfields. RequestHandler.execute in tornado/web.py parses the body before handl...

7.5CVSS5.9AI score0.0035EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.12 views

PT-2026-84501

Name of the Vulnerable Software and Affected Versions Hono versions prior to 4.13.5 Description Query helpers treat a question mark following a literal hash fragment as the start of a query string. This allows the application to read request parameters that are ignored by browsers, reverse proxie...

5.9CVSS5.8AI score0.00345EPSS
SaveExploits0References8
NVD
NVD
added 2026/08/31 10:17 p.m.14 views

CVE-2026-82397

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parseqs in tornado/escape.py without passing maxnumfields. RequestHandler.execute in tornado/web.py parses the body before handl...

7.5CVSS0.0035EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/08/28 1:06 a.m.9 views

SUSE CVE-2026-55677

Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decoding. The router matches routes using the raw encoded path preserving %2F as-is, while StaticDirectoryHandler unescapes %2F to / before resolving filesystem paths. This allows an...

7.5CVSS5.9AI score0.00431EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/27 8:17 p.m.9 views

CVE-2026-59313

Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events SSE. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49...

9.8CVSS0.00387EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/27 8:17 p.m.12 views

DEBIAN-CVE-2026-59313

Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events SSE. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49...

9.8CVSS5.9AI score0.00387EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/08/27 8:17 p.m.12 views

CVE-2026-59313

Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events SSE. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49...

9.8CVSS5.9AI score0.00387EPSS
SaveExploits0References2
Rows per page
Query Builder