Lucene search
+L

294 matches found

Kitploit
Kitploit
added 2026/09/13 4:52 p.m.7 views

iris-web

Incident Response Investigation System Current Version v2.4.20 Online Demonstration IRIS Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. Table of contents Getting Started Run IrisWeb Configuration Versioning Showcase...

5.8AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/09/13 11:42 a.m.22 views

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. This allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers, operating remotely, to circumvent existing security mechanisms and gain unauthorized access to...

7.6CVSS5.5AI score
SaveExploits0References2Affected Software1
Kitploit
Kitploit
added 2026/09/13 11:13 a.m.6 views

VolWeb

Introduction VolWeb is a digital forensic memory analysis platform that leverages the power of the Volatility 3 framework. It is dedicated to aiding in investigations and incident responses. 🧬 Objectives The goal of VolWeb is to enhance the efficiency of memory collection and forensic analysis by...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 8:47 a.m.7 views

grepmarx

Grepmarx - Application Security Platform Grepmarx is a web application providing a single platform to quickly understand, analyze and identify vulnerabilities in possibly large and unknown code bases. Features SAST Static Analysis Security Testing capabilities: Multiple languages support: C/C++, ...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 6:14 a.m.10 views

AperiSolve

Aperi'Solve Try it now: https://www.aperisolve.com Support Aperi'Solve: Aperi'Solve is an open-source steganalysis web platform that performs automated analysis on images to detect and extract hidden data using common steganography tools and techniques. Key features Visualize each bit layer LSB a...

6AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/09/13 6:01 a.m.9 views

wvctf

WebVulnCTF WVCTF or WebVulnCTF is a gamified web platform which promotes training in pentesting and web application development security in an entertaining way. Through a rewards system, the user must search for a set of flags in the vulnerable application, that correspond to frequent...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 4:16 a.m.7 views

natlas

Natlas Resumen Tienes muchos mapas y se están volviendo bastante difíciles de manejar. ¿Qué haces? Los pones en un libro y lo llamas atlas. Esto es similar, excepto que es un sitio web y es una colección de nmaps. El objetivo de Natlas es facilitar la realización de escaneos continuos y la revisi...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/12 3:14 p.m.6 views

CVE-2025-58780

CVE-2025-58780 Vulnerability Disclosure: SQL Injection in ScienceLogic Overview This document outlines a responsibly disclosed SQL injection vulnerability found in ScienceLogic's web platform. The vulnerability has been reported to the project maintainers in accordance with responsible disclosure...

7.2CVSS5.9AI score0.00229EPSS
SaveExploits0
CVE
CVE
added 2026/09/08 8:18 p.m.8 views

CVE-2026-84685

The react-native-auth0 SDK 's web platform implementation fails to scope its in-memory token cache to individual user sessions in server-side rendering (SSR) environments where module state persists across HTTP requests. As a result, tokens cached in module memory can be retrieved by subsequent r...

6.5CVSS0.00177EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 6:19 p.m.6 views

CVE-2026-69708

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

7CVSS0.00252EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:16 p.m.8 views

CVE-2026-69708

CVE-2026-69708 is a use-after-free vulnerability in Windows Web Platform Storage that allows a locally authorized attacker to elevate privileges. The vulnerability is rated CVSS 3.1 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning exploitation requires local access, low p...

7CVSS0.00252EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 5:16 p.m.6 views

EUVD-2026-73613

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

7CVSS0.00252EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2026/09/08 2:00 p.m.6 views

Windows Web Platform Storage Elevation of Privilege Vulnerability

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

7CVSS0.00252EPSS
SaveExploits0
CVE
CVE
added 2026/08/21 7:39 a.m.71 views

CVE-2026-77264

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code WordPress plugin (versions ≤ 4.8.6 ) contains a critical authentication bypass (CVSS 9.8). The handle_email_otp_return() function returns the secret magic login token directly in the HTTP response to a publ...

9.8CVSS5.5AI score0.00568EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/21 7:39 a.m.43 views

CVE-2026-77264 Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handleemailotpreturn function returning the secret magic login token in the response t...

9.8CVSS0.00568EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/06/05 5:56 p.m.9 views

CVE-2026-45743

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. 16 file-manager endpoints in Termix prior to version 2.3.2 do not verify that the requesting user owns the SSH session identified by sessionId. An authenticated attacker who knows or...

8.1CVSS5.6AI score0.00282EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/04 8:57 p.m.10 views

CVE-2026-42540 IRIS has a Mass Assignment issue

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 allow a user to alter values in the database via manipulated API requests. Version 2.4.28 contains a patch...

4.3CVSS5.5AI score0.00183EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/04 8:54 p.m.38 views

EUVD-2026-34327

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 return sensitive data to the user which are not required for the client’s operation. Version 2.4.28 contains a patch...

6.5CVSS5.8AI score0.00232EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/04 8:47 p.m.15 views

EUVD-2026-34325

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 contain a weakness where an attacker can misuse it to redirect the user to a malicious website controlled by an attacker. Version 2.4.28 fixes the issue...

4.7CVSS5.8AI score0.00174EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/04 12:00 a.m.30 views

PT-2026-46385

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 do not properly validate uploaded files. The application can therefore be misused to host phishing pages, amongst other things. This also creates another...

6.3CVSS5.8AI score0.00175EPSS
SaveExploits0References2
Rows per page
Query Builder