Lucene search
+L

875 matches found

Kitploit
Kitploit
added 2026/09/15 6:08 a.m.60 views

vbsmin

VBSmin VBScript minifier Features ⬜️ Remove extra whitespace Trailing whitespace Leading whitespace Blank lines Inline extra spaces 💬 Remove comments Single quote start of the line Single quote inline REM 1️⃣ One-line Line splitting underscore Colon Quick start Quick install root@kitploit: $ gem...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/15 12:58 a.m.22 views

drinkme

drinkme drinkme is a shellcode test harness. It reads shellcode from stdin and executes it. This allows pentesters to quickly test their payloads before deployment. Formats drinkme can handle shellcode in the following formats: "0x" "\x" "x" "" For example, NOP could be represented as any of...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 3:47 p.m.9 views

CVE-2025-9491_POC

CVE-2025-9491 LNK 難読化 PoC Windows ショートカット(.lnk)ファイルの脆弱性(ZDI-CAN-25373 / CVE-2025-9491)を実証する概念実証ツールです。このツールは、空白文字パディングを利用して悪意のあるコマンドライン引数を .lnk ファイル内に隠す方法を示します。 このツールは教育目的および許可されたセキュリティテストの目的のみで提供されています。 コンピュータシステムへの不正アクセスは違法です。このツールは、自分が所有しているか、明示的なテスト許可を得ているシステムでのみ使用してください。 目次 説明 脆弱性の詳細 インストール...

7.8CVSS7.5AI score0.68864EPSS
SaveExploits3References1
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.17 views

Astra Linux – Vulnerability in tar

GNU Tar version 1.34 has a one-byte out-of-bounds read operation that allows for the use of uninitialized memory during a conditional jump. Exploitation to alter the control flow has not been demonstrated. The issue occurs in the fromheader section of the list.c file, due to a V7 archive where...

5.5CVSS6.6AI score0.01476EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.4 views

Astra Linux – Vulnerability in Ruby 2.5

REXML is an XML toolkit for Ruby. The REXML gem before version 3.3.2 had some DoS vulnerabilities when parsing XML that contained many special characters, such as whitespace characters, , , and . The REXML gem versions 3.3.3 or later include patches to fix these vulnerabilities...

7.5CVSS6.6AI score0.01283EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/11 8:19 p.m.6 views

AZL-100181 CVE-2026-89497 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

7.8CVSS0.00129EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/09/11 7:43 p.m.9 views

CVE-2026-89497

In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes each client debug keyword buffer with strcspncdshead, " ", but then parses the keyword with %s. The %s conversion skips leading...

7.8CVSS0.00129EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-88056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, a...

8.6CVSS0.00426EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/09/10 8:19 p.m.12 views

Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

Summary A discrepancy between WHATWG URL parsing and Angular SSR's URL resolution allows attackers to bypass same-origin checks and cause Server-Side Request Forgery SSRF, potentially leaking sensitive server-side credentials. Technical Description When applications validate incoming URLs using t...

8.6CVSS0.00426EPSS
SaveExploits0References9Affected Software1
NVD
NVD
added 2026/09/10 7:17 p.m.9 views

CVE-2026-88056

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClien...

8.6CVSS0.00426EPSS
SaveExploits0References7
CVE
CVE
added 2026/09/10 6:42 p.m.25 views

CVE-2026-88056

Angular's @angular/platform-server is vulnerable to SSRF and cross-origin credential disclosure prior to versions 20.3.30, 21.2.22, and 22.1.4 . The root cause is that the resolveUrl and parseUrl utilities invoked String.prototype.trim(), which strips leading Unicode whitespace (e.g. U+00A0, U+FE...

8.6CVSS0.00426EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/09/10 6:42 p.m.30 views

CVE-2026-88056 Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClien...

8.6CVSS0.00426EPSS
SaveExploits0References7
OSV
OSV
added 2026/09/10 6:42 p.m.10 views

CVE-2026-88056 Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClien...

8.6CVSS5.8AI score
SaveExploits0References9
EUVD
EUVD
added 2026/09/10 6:42 p.m.6 views

EUVD-2026-75675

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClien...

8.6CVSS0.00426EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2026/09/10 6:42 p.m.12 views

CVE-2026-88056

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes user-controlled resource or request URLs through HttpClien...

8.6CVSS0.00426EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 7:22 a.m.9 views

CVE-2023-24329-lab

CVE-2023-24329 — パーサーの差異を学ぶラボ 教育目的のみ。 このラボは、安全で隔離された環境で実際の脆弱性を示すために存在します。自分が所有していないシステムに対して実行しないでください。意図的に壊れたフィルターコードを本番システムで再利用しないでください。 CVE-2023-24329 の自己完結型 Docker ラボです。この脆弱性は Python の urllib.parse.urlparse におけるパーサーの差異であり、Python 3.11.4 で URL スキームやホストのフィルターをバイパスすることを可能にします。 このラボでは、file:// URL...

7.5CVSS7.5AI score0.20459EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/10 12:53 a.m.10 views

CVE-2023-24329-Exploit

简介 URL 解析函数专注于将 URL 字符串拆分为其组成部分,或将 URL 组成部分组合成 URL 字符串。 urllib.parse.urlparse 简单来说 ,urllib.parse 用于解析 URL,我们可以通过在 URL 前添加空格来绕过它。这发生在 Python 3.11.4 及更早版本中。 PoC 让我们分解 example.py 以下是一组你不应访问的网站: root@kitploit: blockedlist = "http://example.com/", "http://example2.com/" 此函数检查网站是否在阻止列表中,如果在阻止列表中,则应返回 U...

7.5CVSS7.5AI score0.20459EPSS
SaveExploits3
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.10 views

PT-2026-89690

Summary A discrepancy between WHATWG URL parsing and Angular SSR's URL resolution allows attackers to bypass same-origin checks and cause Server-Side Request Forgery SSRF, potentially leaking sensitive server-side credentials. Technical Description When applications validate incoming URLs using t...

8.6CVSS5.9AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/09 9:31 p.m.10 views

CVE-2026-33033-PoC

CVE-2026-33033 PoC 通过 base64 空白字符 CPU 放大在 DjangoMultiPartParser 中实现拒绝服务 单个 2.5 MB 的 HTTP 请求即可占用 Django worker 约 5 秒 ,相比同大小的正常请求实现了 约 2,100 倍 CPU 放大 。无需任何身份验证。 受影响版本 该漏洞已在 Django 6.0.4 安全版本(2026 年 4 月 7 日)中修复,并已向后移植到所有受支持的版本分支。 分支| 受影响| 已修复 ---|---|--- Django 6.0.x| CVE-2026-33033:MultiPartParser ...

6.5CVSS6.9AI score0.00879EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/09/09 12:28 a.m.5 views

CVE-2026-73276

A flaw was found in the Erlang/OTP inets httpd server. This vulnerability allows a remote attacker to perform HTTP Request Smuggling due to the server silently dropping HTTP headers that contain whitespace between the header field-name and the colon. When deployed behind a reverse proxy that...

8.3CVSS0.00328EPSS
SaveExploits0References9
Rows per page
Query Builder