43 matches found
dirty_sock
dirtysock: Linux Privilege Escalation via snapd In January 2019, current versions of Ubuntu Linux were found to be vulnerable to local privilege escalation due to a bug in the snapd API. This repository contains the original exploit POC, which is being made available for research and education. F...
dirty_sock
dirtysock Local Privilege Escalation via snapd CVE-2019-7304 Remastered PoC exploit Credit goes to initstring. Original dirtysock. Usage Wait 40 seconds before executing the script again otherwise it sucks. root@kitploit: chmod u+x lpe.py ./lpe.py...
CVE-2019-7304_DirtySock
This repository does not have a README...
snap_priv_esc
snapprivesc Another implementation for linux privilege escalation exploit via snapd CVE-2019-7304 What is snap? Snap is a software packaging and deployment system developed by Canonical for the operating systems that use the Linux kernel. The packages, called snaps , and the tool for using them,...
CVE-2026-7304
creationtimestamp| type| source ---|---|--- 2026-05-18 12:41:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4vkipbja2p 2026-05-18 17:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm5e2sswfb2n 2026-05-18 17:28:06+00:00| seen|...
CVE-2026-7304
SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads will be deserialized without validation...
CVE-2020-7304
Cross site request forgery vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated remote attacker to embed a CRSF script via adding a new label...
CVE-2023-7304
creationtimestamp| type| source ---|---|--- 2025-10-15 09:06:57+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3m37vdav3hk2e 2025-10-16 21:02:36+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrl7ciw26 2025-11-20 00:00:00+00:00| seen| The Shadowserver...
CVE-2025-7304 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...
CVE-2025-7304
creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-551/ 2025-07-22 03:54:23+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:38+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...
CVE-2018-7304
Tiki 17.1 does not validate user input for special characters; consequently, a CSV Injection attack can open a CMD.EXE or Calculator window on the victim machine to perform malicious activity, as demonstrated by an "=cmd|' /C calc'!A0" payload during User Creation...
Linux Distros Unpatched Vulnerability : CVE-2017-7304
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8 because of missing a check in...
CVE-2024-7304
creationtimestamp| type| source ---|---|--- 2024-08-27 09:52:34+00:00| seen| https://t.me/cvedetector/4229...
CVE-2024-7304
The Ninja Tables – Easiest Data Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.0.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2024-7304 Ninja Tables – Easiest Data Table Builder <= 5.0.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
The Ninja Tables – Easiest Data Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.0.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress Ninja Tables Plugin <= 5.0.12 is vulnerable to Cross Site Scripting (XSS)
Software Ninja Tables Type Plugin Vulnerable versions = 5.0.12 Fixed in 5.0.13 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-7304 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a12833da3c4c Credits wesley wcraft Required...
Malicious code in wlwz-2312-7304 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0f966a8b22c3f738416b42210c76d55ef561aa0310633d20e2f9f801708e989 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2019-7304
Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1...
