84 matches found
CVE-2024-1651-PoC
CVE-2024-1651 Cette CVE a été découverte par Carlos Bello de l'équipe Fluid Attack Offensive. La découverte aborde la désérialisation non sécurisée d'objets pour obtenir une exécution de code à distance RCE. Ici, j'ai créé un PoC Proof of Concept plus rapide et plus facile à utiliser. Ainsi, si...
CVE-2024-1651-PoC
CVE-2024-1651 Cette CVE a été découverte par Carlos Bello de la Fluid Attack Offensive Team. La découverte porte sur une désérialisation d'objets non sécurisée permettant d'obtenir une RCE Remote Code Execution. J'ai créé ici un PoC Proof of Concept plus rapide et plus facile à utiliser. Par...
Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-1651)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1651 advisory. In the Linux kernel, the following vulnerability has been resolved:crypto: algifaead - Revert to operating out-of-place To mitigate this issue, we recommend that customers disable loading of t...
CVE-2026-1651
creationtimestamp| type| source ---|---|--- 2026-03-04 03:54:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg7f4uyscy2v...
EUVD-2021-1651
Malware in sbrugna...
CVE-2012-1651
Cross-site scripting XSS vulnerability in the Submenu Tree module before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2025-1651
A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
CVE-2025-1651
A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
CVE-2025-1651 MODEL File Parsing Heap-Based Buffer Overflow Vulnerability
A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
CVE-2025-1651
CVE-2025-1651 concerns Autodesk AutoCAD and a vulnerability in parsing a malicious MODEL file that can trigger a Heap-Based Overflow. Affected component: MODEL file parsing in AutoCAD. Root cause: heap overflow during processing of a crafted MODEL file, enabling crash, potential information discl...
CVE-2025-1651 MODEL File Parsing Heap-Based Buffer Overflow Vulnerability
A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
Exploit for Deserialization of Untrusted Data in Torrentpier
CVE-2024-1651 This CVE was discovered by Carlos Bello from the...
Exploit for Deserialization of Untrusted Data in Torrentpier
CVE-2024-1651 This CVE was discovered by Carlos Bello from the...
CVE-2024-1651
creationtimestamp| type| source ---|---|--- 2024-02-20 01:26:35+00:00| seen| https://t.me/ctinow/188020 2024-02-21 06:52:09+00:00| seen| https://t.me/arpsyndicate/3699 2024-02-23 11:07:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6662 2024-02-23 12:19:39+00:00|...
CVE-2024-1651
Torrentpier version 2.4.1 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to insecure deserialization...
CVE-2024-1651
CVE-2024-1651 affects Torrentpier 2.4.1. The root cause is insecure deserialization, allowing arbitrary commands to be executed on the server (Remote Code Execution). Multiple connected sources provide a concrete exploit presence via PoC code on GitHub, and descriptions confirm the vulnerability ...
CVE-2024-1651 Torrentpier 2.4.1 - RCE
Torrentpier version 2.4.1 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to insecure deserialization...
CVE-2023-1651
creationtimestamp| type| source ---|---|--- 2023-05-08 18:37:36+00:00| seen| https://t.me/cibsecurity/63427...
CVE-2023-1651
The CVE-2023-1651 entry concerns the WordPress plugin AI ChatBot prior to version 4.4.9. The vulnerability arises from missing authorization and CSRF protection in the AJAX action used to update OpenAI settings, allowing any authenticated user (e.g., subscribers) to modify settings. Additionally,...
Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2023-1651)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...