13118 matches found
Livewire Remote Code Execution on File Uploads
In livewire/livewire prior to v2.12.7 and v3.5.2, the file extension of an uploaded file is guessed based on the MIME type. As a result, the actual file extension from the file name is not validated. An attacker can therefore bypass the validation by uploading a file with a valid MIME type e.g.,...
Exploit for Code Injection in Getgrav Grav
EN GenGravSSTIExploit is a PoC Python script that exploits...
GHSA-78P3-FWCQ-62C2 @saltcorn/server Remote Code Execution (RCE) / SQL injection via prototype pollution by manipulating `lang` and `defstring` parameters when setting localizer strings
Summary The endpoint /site-structure/localizer/save-string/:lang/:defstring accepts two parameter values: lang and defstring. These values are used in an unsafe way to set the keys and value of the cfgStrings object. It allows to add/modify properties of the Object prototype that result in severa...
@saltcorn/server Remote Code Execution (RCE) / SQL injection via prototype pollution by manipulating `lang` and `defstring` parameters when setting localizer strings
Summary The endpoint /site-structure/localizer/save-string/:lang/:defstring accepts two parameter values: lang and defstring. These values are used in an unsafe way to set the keys and value of the cfgStrings object. It allows to add/modify properties of the Object prototype that result in severa...
Exploit for Use After Free in Linux Linux_Kernel
RU GenIoURingExploit is a PoC exploit targeting a specific...
dizqueTV 1.5.3 Remote Code Execution
Exploit Title: dizqueTV 1.5.3 - Remote Code Execution RCE Date: 9/21/2024 Exploit Author: Ahmed Said Saud Al-Busaidi Vendor Homepage: https://github.com/vexorian/dizquetv Version: 1.5.3 Tested on: linux POC: Vulnerability Description dizqueTV 1.5.3 is vulnerable to unauthorized remote code...
CVE-2024-45870
Bandisoft BandiView 7.05 is vulnerable to Incorrect Access Control in sub0x3d80fc via a crafted POC file...
CVE-2024-45870
Bandisoft BandiView version 7.05 (2024/7/15, BuildNo=26122) is vulnerable to Incorrect Access Control within the sub_0x3d80fc function. An attacker can exploit this by providing a crafted POC file , which may lead to unauthorized access. While the vulnerability is confirmed, there is currently no...
reNgine 2.2.0 Command Injection
Exploit Title: reNgine 2.2.0 - Command Injection Authenticated Date: 2024-09-29 Exploit Author: Caner Tercan Vendor Homepage: https://rengine.wiki/ Software Link: https://github.com/yogeshojha/rengine Version: v2.2.0 Tested on: macOS POC : 1. Login the Rengine Platform 2. Click the Scan Engine 3...
CVE-2024-45870: Improper Access Control
Bandisoft BandiView 7.05 is vulnerable to Incorrect Access Control in sub0x3d80fc via a crafted POC file...
CVE-2024-45870
Bandisoft BandiView 7.05 is vulnerable to Incorrect Access Control in sub0x3d80fc via a crafted POC file...
GHSA-GCGP-Q2JQ-FW52 LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Templates" feature
Summary A Self Cross-Site Scripting Self-XSS vulnerability in the "Alert Templates" feature allows users to inject arbitrary JavaScript into the alert template's name. This script executes immediately upon submission but does not persist after a page refresh. Details The vulnerability occurs when...
reNgine 2.2.0 - Command Injection (Authenticated)
Exploit Title: reNgine 2.2.0 - Command Injection Authenticated Date: 2024-09-29 Exploit Author: Caner Tercan Vendor Homepage: https://rengine.wiki/ Software Link: https://github.com/yogeshojha/rengine Version: v2.2.0 Tested on: macOS POC : 1. Login the Rengine Platform 2. Click the Scan Engine 3...
Exploit for Use After Free in Apple Macos
EN GenEtherExploit is a Proof-of-Concept PoC exploit for t...
Responsive Binary mlm 3.2.0 SQL Injection
==================================================================================================================================== | Title : Responsive Binary mlm 3.2.0 Auth By PAss Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64 bits...
Apple iOS 17.2.1 Screen Time Passcode Retrieval / Mitigation Bypass
Document Title: =============== Apple iOS 17.2.1 - Screen Time Passcode Retrieval Mitigation Bypass Release Date: ============= 2024-09-24 Affected Products: ==================== Vendor: Apple Inc. Product: Apple iOS 17.2.1 possibly all 18.0 excluding 18.0 References: ==================== VIDEO...
Exploit for NULL Pointer Dereference in Sierrawireless Aleos
CVE-2023-40459 CVE-2023-40459 Unauthenticated DoS PoC Exploit...
PT-2024-10293 · Google +1 · Google Messages +1
The vulnerable software is Samsung's Monkey's Audio APE decoder, used in Samsung smartphones running Android versions 12, 13, and 14. The vulnerability is a high-severity out-of-bounds write flaw that allows remote attackers to execute arbitrary code on the device without any user interaction. Th...
Exploit for Command Injection in Jc21 Nginx_Proxy_Manager
POCCVE-2024-46256 CVE-2024-46256 and CVE-2024-46257 is the...
Vite's `server.fs.deny` is bypassed when using `?import&raw`
Summary The contents of arbitrary files can be returned to the browser. Details @fs denies access to files outside of Vite serving allow list. Adding ?import&raw to the URL bypasses this limitation and returns the file content if it exists. PoC sh $ npm create vite@latest $ cd vite-project/ $ npm...