12904 matches found
@lobehub/chat Server Side Request Forgery vulnerability
Summary lobe-chat before 1.19.13 has an unauthorized ssrf vulnerability. An attacker can construct malicious requests to cause SSRF without logging in, attack intranet services, and leak sensitive information. Details visit https://chat-preview.lobehub.com/ click settings - llm - openai fill the...
Exploit for CVE-2024-50395
CVE-2024-50395 CVE Info An authorization bypass through u...
Exploit for CVE-2024-21534
Vulnerability Information: CVE-2024-21534 The jsonpath-plus...
Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os
cve-2024-0012-poc CVE-2024-0012 is an authentication bypass v...
Exploit for Missing Authentication for Critical Function in Alibaba Nacos
Introduction The Nacos Derby command execution vulnerability...
Exploit for CVE-2024-29671
NEXTU FLETA Wifi6 Router RCE Exploit POC This document...
Exploit for OS Command Injection in Paloaltonetworks Pan-Os
CVE-2024-9474 PoC for Palo Alto PAN-OS vuln...
Litestar allows unbounded resource consumption (DoS vulnerability)
Summary Litestar offers multiple methods to return a parsed representation of the request body, as well as extractors that rely on those parsers to map request content to structured data types. Multiple of those parsers do not have size limits when reading the request body into memory, which allo...
Exploit for Unrestricted Upload of File with Dangerous Type in Avaya Aura_Device_Services
CVE-2023-3722 Python POC for CVE-2023-3722 Avaya Aura Device S...
Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os
!imagehttps://github.com/user-attachments/assets/12f20c84-ca7...
Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft
CVE-2024-38063 PoC | DKob & N3TCR4SH Overview This scr...
Exploit for Improper Input Validation in Saleor
saleor-platform All Saleor services started from a single repo...
Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit
Crafting a very large and well crafted string can increase the CPU usage and crash the program. POC js const ConfigCommentParser = require"@eslint/plugin-kit"; var str = ""; for var i = 0; i 1000000; i++ str += " "; str += "A"; console.log"start" var parser = new ConfigCommentParser;...
GHSA-7Q7G-4XM8-89CQ Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit
Crafting a very large and well crafted string can increase the CPU usage and crash the program. POC js const ConfigCommentParser = require"@eslint/plugin-kit"; var str = ""; for var i = 0; i 1000000; i++ str += " "; str += "A"; console.log"start" var parser = new ConfigCommentParser;...
Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php
Summary A Stored Cross-Site Scripting XSS vulnerability in the "Manage User Access" page allows authenticated users to inject arbitrary JavaScript through the "billname" parameter when creating a new bill. This vulnerability can lead to the execution of malicious code when visiting the "Bill...
GHSA-888J-PJQH-FX58 Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php
Summary A Stored Cross-Site Scripting XSS vulnerability in the "Manage User Access" page allows authenticated users to inject arbitrary JavaScript through the "billname" parameter when creating a new bill. This vulnerability can lead to the execution of malicious code when visiting the "Bill...
3DPrint Lite < 2.1 - Settings Update via CSRF
Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack. PoC Have a logged in admin open an HTML page containing the following form:...
GHSA-HFF8-HJWV-J9Q7 Remote Code Execution on click of <a> Link in markdown preview
Summary There is a vulnerability in Joplin-desktop that leads to remote code execution RCE when a user clicks on an link within untrusted notes. The issue arises due to insufficient sanitization of tag attributes introduced by the Mermaid. This vulnerability allows the execution of untrusted HTML...
PT-2024-35159 · Craft · Craft
Name of the Vulnerable Software and Affected Versions: Craft versions prior to 4.12.2 and 5.4.3 Description: The issue is related to a missing normalizePath in the FileHelper::absolutePath function, which could lead to Remote Code Execution on the server via twig Server Side Template Injection...