12920 matches found
Malicious code in ccfedrtest-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis feab86ad551b54c16a189445e6ca91a8da0298130e49846935284822d9ebca1f The OpenSSF Package Analysis project identified 'ccfedrtest-poc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...
MAL-2023-8042 Malicious code in ccfedrtest-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis feab86ad551b54c16a189445e6ca91a8da0298130e49846935284822d9ebca1f The OpenSSF Package Analysis project identified 'ccfedrtest-poc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...
CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Photo URL and YouTube URL) Vulnerability
Exploit Title: CSZ CMS 1.3.0 - Stored Cross-Site Scripting 'Photo URL' and 'YouTube URL' CVE: CVE-2023-38910 Exploit Author: Daniel González Vendor Homepage: https://www.cszcms.com/ Software Link: https://github.com/cskaza/cszcms Version: 1.3.0 Tested on: CSZ CMS 1.3.0 Description: CSZ CMS 1.3.0 ...
NVClient v5.0 - Stack Buffer Overflow Exploit
Exploit Title: NVClient v5.0 - Stack Buffer Overflow DoS Discovered by: Ahmet Ümit BAYRAM Software Link: http://www.neonguvenlik.com/yuklemeler/yazilim/kst-f919-hd2004.rar Software Manual: http://download.eyemaxdvr.com/DVST%20ST%20SERIES/CMS/Video%20Surveillance%20Management%20SoftwareV5.0.pdf...
DLINK DPH-400SE - Exposure of Sensitive Information
Exploit Title : DLINK DPH-400SE - Exposure of Sensitive Information Date : 25-08-2023 Exploit Author : tahaafarooq Vendor Homepage : https://dlink.com/ Version : FRU2.2.15.8 Tested on: DLINK DPH-400SE VoIP Phone Description: With default credential for the guest user "guest:guest" to login on the...
NVClient 5.0 Stack Buffer Overflow
Exploit Title: NVClient v5.0 - Stack Buffer Overflow DoS Discovered by: Ahmet Ümit BAYRAM Discovered Date: 2023-08-19 Software Link: http://www.neonguvenlik.com/yuklemeler/yazilim/kst-f919-hd2004.rar Software Manual:...
CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery')
Exploit Title: CSZ CMS 1.3.0 - Stored Cross-Site Scripting Plugin 'Gallery' Date: 2023/08/18 CVE: CVE-2023-38911 Exploit Author: Daniel González Vendor Homepage: https://www.cszcms.com/ Software Link: https://github.com/cskaza/cszcms Version: 1.3.0 Tested on: CSZ CMS 1.3.0 Description: CSZ CMS...
NVClient v5.0 - Stack Buffer Overflow (DoS)
Exploit Title: NVClient v5.0 - Stack Buffer Overflow DoS Discovered by: Ahmet Ümit BAYRAM Discovered Date: 2023-08-19 Software Link: http://www.neonguvenlik.com/yuklemeler/yazilim/kst-f919-hd2004.rar Software Manual:...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831 winrar exploit generator Quick poc test Ge...
PoC Exploit Released for Critical VMware Aria's SSH Auth Bypass Vulnerability
Proof-of-concept PoC exploit code has been made available for a recently disclosed and patched critical flaw impacting VMware Aria Operations for Networks formerly vRealize Network Insight. The flaw, tracked as CVE-2023-34039, is rated 9.8 out of a maximum of 10 for severity and has been describe...
Exploit for Path Traversal in Stagil Stagil_Navigation
CVE-2023-26255 CVE-2023-26256 POC FOFA: body="JI...
Exploit for Code Injection in Langchain
CVE-2023-36281 PoC of CVE-2023-36281 I referred to this PoC...
Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile
CVE-2023-35078 Ivanti Endpoi...
Import XML and RSS Feeds < 2.1.4 - Admin+ Arbitrary File Upload
Description The plugin does not filter file extensions for uploaded files, allowing an attacker to upload a malicious PHP file, leading to Remote Code Execution. NOTE: Because of an error in this version of the plugin, the following POC only works on PHP versions previous to 8.0. 1. As an admin,...
Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE
Description The plugin contains a web shell, allowing unauthenticated attackers to perform RCE. The plugin/vendor was not compromised and the files are the result of running a PoC for a previously reported issue https://wpscan.com/vulnerability/d4220025-2272-4d5f-9703-4b2ac4a51c42 and not deletin...
GitPython untrusted search path on Windows systems leading to arbitrary code execution
Summary When resolving a program, Python/Windows look for the current working directory, and after that the PATH environment see big warning in https://docs.python.org/3/library/subprocess.htmlpopen-constructor. GitPython defaults to use the git command, if a user runs GitPython from a repo has a...
Exploit for Improper Validation of Array Index in Rarlab Winrar
CVE-2023-4047 PoC By Wild Pointer Read Research: https://wil...
Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets
Maltrail v0.53 RCE PoC for Maltrail v0.53 RCE I could not get...