PT-2024-31901 · Unknown · Scriptcase

Name of the Vulnerable Software and Affected Versions: Scriptcase versions 9.10.023 and earlier Description: The issue allows an authenticated user to craft malicious payloads in the To-Do List, triggering a stored Cross Site Scripting XSS attack when the assigned user interacts with the task. Th...

CVE-2024-46083

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads using the messages feature, which allows the injection of malicious code into any user's account on the platform. It is important to note that regular users can trigger...

CVE-2024-46081

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform...

Exploit for Code Injection in Crushftp

EN GenCrushSSTIExploit is a PoC exploit tool targeting the...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

EN Is a Proof of Concept PoC script to check for vulnerabil...

Necro Android Malware Found in Popular Camera and Browser Apps on Play Store

Altered versions of legitimate Android apps associated with Spotify, WhatsApp, and Minecraft have been used to deliver a new version of a known malware loader called Necro. Kaspersky said some of the malicious apps have also been found on the Google Play Store. They have been cumulatively...

Taskhub 3.0.3 Insecure Settings

============================================================================================================================================= | Title : Taskhub v3.0.3 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bit...

Trados RWS MultiTrans 安全漏洞

Trados RWS MultiTrans is a translation management system from Trados. A security vulnerability exists in Trados RWS MultiTrans v7.0.23324.2 and earlier versions, which stems from the presence of HTML injection vulnerabilities that can be exploited by an attacker to change the HTML layout and...

PT-2024-38799 · WordPress · Accordion Image Menu

Name of the Vulnerable Software and Affected Versions: Accordion Image Menu WordPress plugin versions 3.1.3 and earlier Description: The issue is related to the lack of CSRF checks in some areas and missing sanitization as well as escaping. This could allow attackers to make logged-in admins add...

DEBIAN-CVE-2024-45590

body-parser is Node.js body parsing middleware. body-parser 1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in...

Elastic Kibana 安全漏洞

Elastic Kibana is an available data visualization dashboard software from Elastic. A security vulnerability exists in Elastic Kibana version 8.15.0 that stems from the presence of a deserialization issue that results in the execution of arbitrary code when parsing a YAML document containing a...

Malicious npm Packages Mimicking 'noblox.js' Compromise Roblox Developers' Systems

Roblox developers are the target of a persistent campaign that seeks to compromise systems through bogus npm packages, once again underscoring how threat actors continue to exploit the trust in the open-source ecosystem to deliver malware. "By mimicking the popular 'noblox.js' library, attackers...

HTTP Client Automatic Exploiter

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework ideas: - add a loading page option so the user can specify arbitrary html to insert all of the evil js and iframes into - caching is busted when different browsers come...

HTTP Client Automatic Exploiter 2 (Browser Autopwn)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "HTTP Client Automatic Exploiter 2 Browser Autopwn", 'Description' = %q This module will automatically serve browser exploits. Here are the option...

DedeBIZ 安全漏洞

DedeBIZ is a content management system from Muyun Intelligence DedeBIZ, a Chinese company. A security vulnerability exists in DedeBIZ version v6.3.0, which stems from vulnerability to cross-site scripting attacks that allow an attacker to execute arbitrary web script or HTML via a crafted payload...

CVE-2024-7428

creationtimestamp| type| source ---|---|--- 2024-08-23 19:38:38+00:00| seen| https://t.me/cvedetector/4018...

BIT-VALKEY-2021-41099 Integer overflow issue with strings in Redis

Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string library can be used to corrupt the heap and potentially result with denial of service or remote code execution. The vulnerability involves changing the default proto-max-bulk-len...

BIT-KEYDB-2021-41099 Integer overflow issue with strings in Redis

Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string library can be used to corrupt the heap and potentially result with denial of service or remote code execution. The vulnerability involves changing the default proto-max-bulk-len...

New PG_MEM Malware Targets PostgreSQL Databases to Mine Cryptocurrency

The new PGMEM malware targets PostgreSQL databases, exploiting weak passwords to deliver payloads and mine cryptocurrency. Researchers warn…...

CVE-2024-43401 In XWiki Platform, payloads stored in content is executed when a user with script/programming right edit them

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user without script/programming right can trick a user with elevated rights to edit a content with a malicious payload using a WYSIWYG editor. The user with elevated rights is not warned...