12940 matches found
Exploit for Cross-Site Request Forgery (CSRF) in Irz Ru21_Firmware
ez-iRZ Exploit for CVE-2022-27226 Cross Site Request Forgery...
sendFundsToUser() does not verify that the user has deposited anything
Lines of code Vulnerability details Impact Users can request arbitrary amounts when requesting funds from the executor, because the deposit hash is not checked against actual deposits. The user can be the executor him/herself if they wish to rug-pull directly. Proof of Concept function...
Exploit for Improper Initialization in Linux Linux_Kernel
Dirty Pipe POC CVE-2022-0847 POC - https://dirtypipe.cm4all.co...
Stored XSS via File Upload in star7th/showdoc in star7th/showdoc
Description Stored XSS via uploading file in .ofd format. Proof of Concept filename="test.ofd" alert1 Steps to Reproduce 1. Login into showdoc.com.cn. 2. Navigate to file library https://www.showdoc.com.cn/attachment/index 3. In the File Library page, click the Upload button and choose the test.o...
Stored XSS via File Upload in star7th/showdoc
Description Stored XSS via uploading file in .properties format. Proof of Concept filename="test.properties" alert1 Steps to Reproduce 1. Login into showdoc.com.cn. 2. Navigate to file library https://www.showdoc.com.cn/attachment/index 3. In the File Library page, click the Upload button and...
Exploit for Race Condition in Apple Ipados
descraceA15 CVE-2021-30955 iOS 15.1.1 POC for 6GB RAM device...
Exploit for Missing Authentication for Critical Function in Oracle Access_Manager
It is an offensive tool for Oracle Access Manager. The tool expl...
Library File Manager < 5.2.3 - Subscriber+ Arbitrary File Creation/Upload/Deletion
The plugin is using an outdated version of the elFinder library, which is know to be affected by security issues CVE-2021-32682, and does not have any authorisation as well as CSRF checks in its connector AJAX action, allowing any authenticated users, such as subscriber to call it. Furthermore, a...
Baixar GLPI Project 9.4.6 SQL Injection
Exploit Title: Baixar GLPI Project 9.4.6 - SQLi Date: 10/12 Exploit Author: Joas Antonio Vendor Homepage: https://glpi-project.org/pt-br/ https://www.blueonyx.it/ Software Link: https://glpi-project.org/pt-br/baixar/ Version: GLPI - 9.4.6 Tested on: Windows/Linux CVE : CVE-2021-44617 POC1:...
Exploit for Improper Initialization in Linux Linux_Kernel
CVE-2022-0847 my personal poc and exploit of CVE-2022-0847di...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulne...
Dirty Pipe: A privilege escalation vulnerability in Linux Kernel
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here A vulnerability in the Linux kernel existed since version 5.8 and allows overwriting data in arbitrary read-only files. Because unprivileged processes can inject code into root processes, this results in privilege escalation. ...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2022-0847 Reference: Dirty Pipehttps://dirtypipe.cm...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE Overview of CVE...
Plezi < 1.0.3 - Unauthenticated Stored XSS
The plugin has a REST endpoint allowing unauthenticated users to update the plzconfigurationtrackerenable option, which is then displayed in the admin panel without sanitisation and escaping, leading to a Stored Cross-Site Scripting issue PoC curl -X POST...
Wow Countdowns <= 3.1.2 - Admin+ SQLi
The plugin does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection. PoC https://example.com/wp-admin/admin.php?page=mwp-countdown=del=1+AND+SELECT+5382+FROM+SELECTSLEEP5PpNt...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947-RcePOC Batch URL detection for Spring-Clou...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947 Poc for CVE-2022-22947 DnsLog When I w...
Backdoor.Win32.FTP.Nuclear.10 Hardcoded Credential
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/9c23dad9ba11305fecf38bed46b0cec2.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.FTP.Nuclear.10 Vulnerability: Hardcoded Credentials Description: The malware builds...