Lucene search
+L

68095 matches found

Kitploit
Kitploit
added 2026/08/25 3:36 p.m.2952 views

openssl

Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...

7.8AI score
SaveExploits0References29
Kitploit
Kitploit
added 2026/08/25 12:34 p.m.267 views

aircrack-ng

Aircrack-ng Badges GitHub CI...

7.3AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/25 9:43 a.m.37 views

gef

GEF pronounced ʤɛf - "Jeff" is a set of commands for x86/64, ARM, MIPS, PowerPC and SPARC to assist exploit developers and reverse-engineers when using old school GDB. It provides additional features to GDB using the Python API to assist during the process of dynamic analysis and exploit...

7.2AI score
SaveExploits0References1
NVD
NVD
added 2026/08/25 9:17 a.m.3 views

CVE-2026-77146

The extension's invitation controller fails to stop processing after redirecting on invalid input missing hash, non-existent, disabled, or deleted users, allowing an unauthenticated attacker to set a new password for and re-enable an arbitrary existing frontend user account. This vulnerability is...

8.3CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/25 9:00 a.m.4 views

EUVD-2026-65330

The extension's invitation controller fails to stop processing after redirecting on invalid input missing hash, non-existent, disabled, or deleted users, allowing an unauthenticated attacker to set a new password for and re-enable an arbitrary existing frontend user account. This vulnerability is...

8.3CVSS5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 7:38 a.m.109 views

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

8.5AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/25 7:06 a.m.22 views

phishlulz

PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...

7.3AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/25 6:21 a.m.242 views

btlejack

BtleJack: a new Bluetooth Low Energy swiss-army knife Btlejack provides everything you need to sniff, jam and hijack Bluetooth Low Energy devices. It relies on one or more BBC Micro:Bit . devices running a dedicated firmware. You may also want to use anAdafruit's Bluefruit LE sniffer or a nRF5182...

7.2AI score
SaveExploits0
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.34 views

Joomla! Component Love Factory 1.3.4 - Local File Inclusion

A directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1957 info: name: Joomla! Component Love Factory 1.3.4 - Local File Inclusion...

7.5CVSS5.6AI score0.14847EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.63 views

Limit Login Attempts WordPress - Stored Cross-site Scripting

Limit Login Attempts WordPress plugin 4.0.50 contains a stored cross-site scripting caused by not escaping IP addresses controlled via headers like X-Forwarded-For before outputting them in reports, letting unauthenticated attackers execute scripts in admin context. id: CVE-2021-24657 info: name:...

6.1CVSS5.8AI score0.01582EPSS
SaveExploits2References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.8 views

Etherpad 2.1.0 <= 3.0.0 - Cross-Site Scripting

Etherpad versions 2.1.0 through 3.0.0 reflect the x-proxy-path request header into admin HTML, JavaScript, and CSS responses without sanitization. An attacker can abuse this behavior to inject crafted content into generated resource URLs, enabling cross-site scripting and cache poisoning scenario...

6.1CVSS5AI score0.00523EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.35 views

LumisXP - Cross-site Scripting

A cross-site scripting XSS vulnerability in the XsltResultControllerHtml.jsp component of LumisXP v15.0.x to v16.1.x allows attackers to execute arbitrary web scripts or HTML via the lumPageID parameter. id: CVE-2024-33326 info: name: LumisXP - Cross-site Scripting author: 0xr2r severity: medium...

6.1CVSS5.3AI score0.0081EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.222 views

VMware VRealize Network Insight - Remote Code Execution

VMWare Aria Operations for Networks vRealize Network Insight is vulnerable to command injection when accepting user input through the Apache Thrift RPC interface. This vulnerability allows a remote unauthenticated attacker to execute arbitrary commands on the underlying operating system as the ro...

9.8CVSS10AI score0.98281EPSS
SaveExploits7References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.121 views

SPIP BigUp Plugin - Remote Code Execution

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request. id: CVE-2024-8517 info: name: SPIP BigUp Plugin - Remote Code Execution...

9.8CVSS9.1AI score0.94614EPSS
SaveExploits7References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.89 views

NetAlert X - Arbitary File Read

A directory traversal vulnerability has been identified in NetAlertX versions v24.7.18 - v24.9.12. id: CVE-2024-48766 info: name: NetAlert X - Arbitary File Read author: s4e-io severity: critical description: | A directory traversal vulnerability has been identified in NetAlertX versions v24.7.18...

8.6CVSS7.7AI score0.69697EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.30 views

MPDV Mikrolab GmbH HYDRA X, MIP 2 & FEDRA 2 - Path Traversal

MPDV Mikrolab GmbH HYDRA X, MIP 2, and FEDRA 2 = Maintenance Pack 36 with Servicepack 8 week 36/2025 contain an unauthenticated local file disclosure vulnerability caused by improper validation of the "Filename" parameter in the public $SCHEMAS$ resource, letting attackers read arbitrary Windows ...

7.5CVSS8.9AI score0.03572EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.85 views

Traefik - Open Redirect

Traefik before 1.7.26, 2.2.8, and 2.3.0-rc3 contains an open redirect vulnerability in the X-Forwarded-Prefix header. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2020-15129 info: name:...

6.1CVSS5.5AI score0.08011EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.108 views

QCube Cross-Site-Scripting

A reflected cross-site scripting vulnerability in qcubed all versions including 3.1.1 in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users. id: CVE-2020-24912 info: name: QCube Cross-Site-Scripting author: pikpikcu severity: medium...

6.1CVSS6.7AI score0.06289EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.84 views

Intel Active Management - Authentication Bypass

Intel Active Management platforms are susceptible to authentication bypass. A non-privileged network attacker can gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology AMT and Intel Standard Manageability. A non-privileged local attacker can provision...

10CVSS7.3AI score0.92189EPSS
SaveExploits7References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.4 views

Gitea Docker Image <= 1.26.2 - Reverse Proxy Header Authentication Bypass

The official Gitea Docker image through version 1.26.2 ships with REVERSEPROXYTRUSTEDPROXIES set to a wildcard, causing Gitea to trust reverse-proxy authentication headers X-WEBAUTH-USER from any source IP instead of restricting trust to the configured reverse proxy. When reverse-proxy...

9.8CVSS8.7AI score0.02755EPSS
SaveExploits7References5
Rows per page
Query Builder