12904 matches found
MAL-2025-1003 Malicious code in w722-poc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 74cbe1029791e4751e8b8c53fda75aa07cd3a6ca974a239c87867db522c2ee8e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Photon OS 5.0: Netkit PHSA-2023-5.0-0108
An update of the netkit package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0108. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Curl PHSA-2022-4.0-0205
An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0205. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Exploit for SQL Injection in Payplus Payplus_Payment_Gateway
CVE-2024-6205 pip install requests This is a...
Exploit for Exposure of Private Personal Information to an Unauthorized Actor in Follow-Redirects_Project Follow-Redirects
CVE-2022-0155 Proof-of-Concept PoC This repository contains...
@jmondi/url-to-png contains a Path Traversal vulnerability
Summary When trying to add a BLOCKLIST feature when the maintainer noticed they didn't sanitize the ImageId in the code, which leads to path traversal vulnerability. Now, this is different from a traditional path traversal issue, because as of NOW you can store the image in any place arbitrarily,...
GHSA-5248-H45P-9PGW SQL Injection in the KubeClarity REST API
Summary A time/boolean SQL Injection is present in the following resource /api/applicationResources via the following parameter packageID Details As it can be seen here, while building the SQL Query the fmt.Sprintf function is used to build the query string without the input having first been...
Exploit for ASP.NET Misconfiguration: Use of Identity Impersonation in Vmware Vcenter_Server
VMware vCenter - CVE-2024-37081 Proof of Concept Descripci...
Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms
CVE-2023-4220 Chamilio exploit PoC Shamelessly Copied from...
Exploit for Protection Mechanism Failure in Artifex Ghostscript
PoC exploit for CVE-2024-29510, a Ghostscript format string vuln...
Directus GraphQL Field Duplication Denial of Service (DoS)
Summary A denial of service DoS attack by field duplication in GraphQL is a type of attack where an attacker exploits the flexibility of GraphQL to overwhelm a server by requesting the same field multiple times in a single query. This can cause the server to perform redundant computations and...
Exploit for Path Traversal in Progress Whatsup_Gold
CVE-2024-4885 PoC for CVE-2024-4885 Progress WhatsUp Gold GetF...
Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms
Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unres...
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
A Cosmicsting POC...
HackerOne: TOTP Authenticator implementation Accepts Expired Codes
Vulnerability description not provided...
CVE-2024-6387: New OpenSSH RegreSSHion Vulnerability Gives Hackers Root Access on Linux Servers – 700,000+ Linux Boxes Potentially at Risk
Labeled as CVE-2024-6387, the recently discovered vulnerability in OpenSSH has become a serious cause for concern among Linux servers. OpenSSH is a collection of networking tools built on the Secure Shell SSH protocol. It is widely utilized to secure remote logins, manage and administer remote...
U.S. Dept Of Defense: Email Takeover leads to permanent account deletion
The security vulnerability found allowed an attacker to change the email address of a victim's account, leading to the permanent deletion of the victim's account. The vulnerability was caused by improper authentication on the change email functionality...
Exploit for Race Condition in Openbsd Openssh
0.省流 这本质上是一种统计漏洞：需要进行大量尝试才能赢得竞争条件并成功执行任意代码，攻击者需要克服很多障碍，”Schwa...