33 matches found
Exploit for CVE-2024-32640
CVE-2024-32640 MySQL Blind SQL Injection Proof of Concept Thi...
Exploit for CVE-2024-32640
And exploited SQL injection vulnerabilities in Mura/Masa C...
Exploit for CVE-2024-32640
Muraider - Automating the detection & Exploitation of CVE-2024...
CVE-2024-32640
creationtimestamp| type| source ---|---|--- 2024-05-12 14:37:32+00:00| published-proof-of-concept| https://t.me/CNArsenal/2463 2024-05-16 01:20:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7315 2024-05-16 16:34:37+00:00| published-proof-of-concept| https://t.me/lostsec/514...
CVE-2022-32640
CVE-2022-32640 concerns MediaTek Meta WiFi with an out-of-bounds write caused by a missing bounds check. The vulnerability enables local privilege escalation with SYSTEM level execution privileges required; no user interaction is needed. Connected documents confirm affected component is Meta WiFi...
CVE-2022-32640
In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441652; Issue ID: ALPS07441652...
Reddit: Regular Expression Denial of Service vulnerability
Summary: The vulnerability I have found is classified as a Regular Expression Denial of Service. While inspecting the source code file RealtimeGQLSubscriptionAsync.js I came across the nodemodule subscriptions-transport-ws See Screenshot 1. The search result of the subscriptions-transport-ws...
Regular Expression Denial of Service
Overview In ws before versions 5.2.3, 6.2.2 and 7.4.6 there is a ReDOS vulnerability. Impact A specially crafted value of the Sec-Websocket-Protocol header can be used to significantly slow down a ws server. Proof of concept js for const length of 1000, 2000, 4000, 8000, 16000, 32000 const value ...
7ghost (>=4.11.25, <=4.11.46), @100mslive/hms-excalidraw (>=0.1.3, <=0.1.14) +1202 more potentially affected by CVE-2021-32640 via ws (>=6.0.0, <=6.2.1)
ws NPM version =6.0.0, =4.11.25, =0.1.3, =0.0.1-bate.30, =0.0.1, =0.0.1, =7.0.0-rc1, =0.1.0, =4.4.0-rc.1, =4.2.2, =2.9.0, =0.0.1-alpha.95, =1.0.0-alpha.46, =1.2.0, =1.0.2, =1.0.4 and more Source cves: CVE-2021-32640 Source advisory: OSV:GHSA-6FC8-4GX4-V693...
@agentlab/ldkg-ui-basetable (0.1.1), @agentlab/ldkg-ui-charts (>=0.1.2, <=0.1.7) +163 more potentially affected by CVE-2021-32640 via ws (>=5.0.0, <=5.2.2)
ws NPM version =5.0.0, =0.1.2, =0.3.7, =0.1.8, =1.0.0, =1.0.0, =1.0.17-beta, =1.3.6, =0.1.0, =3.0.0-alpha.1, =3.0.0-alpha.1, =1.0.21, =1.0.27 and more Source cves: CVE-2021-32640 Source advisory: OSV:GHSA-6FC8-4GX4-V693...
10secondsofcode-custom (1.0.0), 1kohei1 (>=1.0.0, <=1.0.1) +2767 more potentially affected by CVE-2021-32640 via ws (>=7.0.0, <=7.4.5)
ws NPM version =7.0.0, =1.0.0, =0.0.12, =0.0.12, =3.10.1, =5.0.0, =1.14.2, =1.0.1, =0.1.13, =0.0.4, =1.0.2, =0.1.0, =1.0.0, =1.0.4 and more Source cves: CVE-2021-32640 Source advisory: OSV:GHSA-6FC8-4GX4-V693...
CVE-2021-32640
CVE-2021-32640 affects the Node.js ws library. A specially crafted value in the Sec-Websocket-Protocol header can be used to significantly slow down a ws server (resource consumption). The issue is fixed in [email protected]. In vulnerable versions, mitigation includes reducing the maximum length of HTTP ...