Lucene search
+L

27 matches found

Kitploit
Kitploit
•added 2026/10/20 6:26 a.m.•21 views

CVE-2024-39930-PoC

CVE-2024-39930-PoC Exploit Code for CVE-2024-39930 gogs ssh server RCE...

9.9CVSS8.9AI score0.07743EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/10/14 2:43 p.m.•14 views

CVE-2024-39930-ptrace-detection-mitigation

This repository does not have a README...

9.9CVSS8.7AI score0.07743EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2021-39930

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 14.5.2 allowed an attacker to access a...

4.3CVSS5.1AI score0.00833EPSS
SaveExploits0References2
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•8 views

MAL-2025-39930 Malicious code in xray-cbb-project (npm)

The package xray-cbb-project was found to contain malicious code...

7.2AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2025/07/02 12:00 a.m.•314 views

gogs 0.13.0 - Remote Code Execution (RCE)

Exploit Title: gogs 0.13.0 - Remote Code Execution RCE Date: 27th June, 2025 Exploit Author: Ardayfio Samuel Nii Aryee Software link: https://github.com/gogs/gogs.git Version: gogs =0.13.0 Tested on: Ubuntu CVE: CVE-2024-39930 =============================== Example Usage: python3 exploit.py...

9.9CVSS8.6AI score0.07743EPSS
SaveExploits3
RedhatCVE
RedhatCVE
•added 2025/05/22 6:44 p.m.•13 views

CVE-2021-39930

Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 14.5.2 allowed an attacker to access a user's custom project and group templates...

4.3CVSS6.4AI score0.00833EPSS
SaveExploits0References1
osv_bell
osv_bell
•added 2025/04/19 5:58 a.m.•22 views

BELL-CVE-2025-39930

Bulletin has no description...

5.5CVSS6AI score0.00257EPSS
SaveExploits0References1
Circl
Circl
•added 2025/04/18 7:59 a.m.•29 views

CVE-2025-39930

creationtimestamp| type| source ---|---|--- 2025-04-18 07:59:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12396 2025-04-18 09:14:16+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3brjurnbs2...

8.4CVSS5.4AI score0.00257EPSS
SaveExploits0References2
NVD
NVD
•added 2025/04/18 7:15 a.m.•21 views

CVE-2025-39930

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Don't use freedevicenode at graphutilparsedai commit 419d1918105e "ASoC: simple-card-utils: use freedevicenode for device node" uses freedevicenode for dlc-ofnode, but we need to keep it while driver is i...

8.4CVSS0.00257EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2025/04/18 7:15 a.m.•10 views

CVE-2025-39930

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Don't use freedevicenode at graphutilparsedai commit 419d1918105e "ASoC: simple-card-utils: use freedevicenode for device node" uses freedevicenode for dlc-ofnode, but we need to keep it while driver is i...

8.4CVSS5.9AI score0.00257EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2025/04/18 7:01 a.m.•24 views

CVE-2025-39930

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Don't use freedevicenode at graphutilparsedai commit 419d1918105e "ASoC: simple-card-utils: use freedevicenode for device node" uses freedevicenode for dlc-ofnode, but we need to keep it while driver is i...

8.4CVSS5.3AI score0.00257EPSS
SaveExploits0
CVE
CVE
•added 2025/04/18 7:01 a.m.•150 views

CVE-2025-39930

The CVE-2025-39930 entry concerns the Linux kernel ASoC simple-card-utils. The root cause is the premature __free of device_node in graph_util_parse_dai(), which could free a node still in use. The correction is to stop freeing __free(device_node) in graph_util_parse_dai() and to retain freeing b...

8.4CVSS5.5AI score0.00257EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2025/04/18 7:01 a.m.•47 views

CVE-2025-39930 ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai()

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Don't use freedevicenode at graphutilparsedai commit 419d1918105e "ASoC: simple-card-utils: use freedevicenode for device node" uses freedevicenode for dlc-ofnode, but we need to keep it while driver is i...

8.4CVSS0.00257EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/02/04 11:15 p.m.•14 views

CVE-2024-39930

The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution. Authenticated attackers can exploit this by opening an SSH connection and sending a malicious --split-string env request if the built-in SSH server is activated...

9.9CVSS9.8AI score0.07743EPSS
SaveExploits3References1
osv_ghsa
osv_ghsa
•added 2024/07/04 6:31 p.m.•20 views

GHSA-P69R-V3H4-RJ4F Duplicate Advisory: github.com/gogs/gogs affected by CVE-2024-39930

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vm62-9jw3-c8w3. This link is maintained to preserve external references. Original Description The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote co...

9.9CVSS9.8AI score0.07743EPSS
SaveExploits3References5
Github Security Blog
Github Security Blog
•added 2024/07/04 6:31 p.m.•35 views

Duplicate Advisory: github.com/gogs/gogs affected by CVE-2024-39930

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vm62-9jw3-c8w3. This link is maintained to preserve external references. Original Description The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote co...

9.9CVSS9.9AI score0.07743EPSS
SaveExploits3References5Affected Software1
osv_cve
osv_cve
•added 2024/07/04 12:00 a.m.•23 views

CVE-2024-39930

The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution. Authenticated attackers can exploit this by opening an SSH connection and sending a malicious --split-string env request if the built-in SSH server is activated...

9.9CVSS7.7AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2024/01/02 12:00 a.m.•46 views

GitLab 12.4 < 14.3.6 / 14.4 < 14.4.4 / 14.5 < 14.5.2 (CVE-2021-39930)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 14.5.2 allowed an attacker to access a user's custom project and group templates...

4.3CVSS5.2AI score0.00833EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2023/10/25 6:17 p.m.•25 views

CVE-2023-39930

A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request...

9.8CVSS5.8AI score0.00692EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/10/24 8:54 p.m.•19 views

CVE-2023-39930 PingFederate PingID Radius PCV Authentication Bypass

A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request...

7.5CVSS7.1AI score0.00692EPSS
SaveExploits0References2
Rows per page
Query Builder