CVE-2024-6778-POC

CVE-2024-5836 / CVE-2024-6778 Этот репозиторий содержит эксплойты доказательства концепции для CVE-2024-5836 и CVE-2024-6778, которые являются уязвимостями в веб-браузере Chromium, позволявшими совершить побег из песочницы из расширения браузера. Для запуска этих эксплойтов необходимо использоват...

cve-2024-4367-poc

CVE-2024-4367 POC per PDF.js POC per la vulnerabilità CVE-2024-4367 di PDF.js - Lo script pdf-modify.py può essere utilizzato per modificare i tuoi PDF e iniettare payload. Utilizzo 1. Assicurati che CVE-2024-4367-POC-base-placeholder.pdf sia nella directory di lavoro. 2. Decommenta/modifica la...

WEAPONIZING-CVE-2024-4367

WEAPONIZING-CVE-2024-4367 CVE-2024-4367 ist eine kritische Schwachstelle CVSS 9.8 in PDF.js, die die Ausführung beliebigen JavaScript-Codes aufgrund unzureichender Typprüfungen des FontMatrix-Objekts in PDF-Dateien ermöglicht. CVE-2024-4367 Exploit-Assistent: Benutzerhandbuch CVE-KENNUNG|...

CVE-2024-4367

CVE-2024-4367 PoC Utilizzo root@kitploit: python poc.py mal.pdf "alert'0x2r2'" Riferimenti CVE-2024-4367: Esecuzione JS arbitraria in PDF.js PDF.js PoC Scanner templates...

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2024-29831

CVE-2024-29831 relates to an improper input validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed JavaScript to be executed on the server, potentially enabling remote code execution. Affected: DolphinScheduler; remediation guidance consistentl...

Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox

CVE-2024-4367 POC Usage bash python poc.py malicious.p...

CVE-2024-23320 Apache DolphinScheduler: Arbitrary js execution as root for authenticated users

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. This issue is a legacy of CVE-2023-49299. We didn't fix it completely in CVE-2023-49299, and we added one more patch to fix it. This...

CVE-2024-23320 Apache DolphinScheduler: Arbitrary js execution as root for authenticated users

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. This issue is a legacy of CVE-2023-49299. We didn't fix it completely in CVE-2023-49299, and we added one more patch to fix it. This...

Starbucks: Reflected XSS on https://www.starbucks.co.uk/shop/paymentmethod/ (bypass for 227486)

Hi guys, I am now able to prove my concerns from 227486 see my last comment. "s are still not correctly encoded when rendered into the page in the element on almost any https://starbucks.co.uk/ page. The WAF is bypassed by encoding "s as %2522 in the URL path. This won't work when the payload is...