GHSA-9VFV-C966-JWRV

creationtimestamp| type| source ---|---|--- 2025-02-11 21:12:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3917...

CVE-2024-55347

creationtimestamp| type| source ---|---|--- 2025-02-11 16:00:08+00:00| published-proof-of-concept| Telegram/Udydye9MRniXQnKlLw6izn4LpjwmtcmKZHz8V5yRbLQn20...

Important: Red Hat Security Advisory: podman security update

An update for podman is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

360 Product Rotation <= 1.5.8 - Reflected XSS

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users. PoC...

CVE-2020-9529

creationtimestamp| type| source ---|---|--- 2025-02-10 22:00:05+00:00| published-proof-of-concept| Telegram/rUIMEoCECIUaxclc8OolC0dceMoJ6gK-ljKtBUPzkrhQaY...

CVE-2024-8438

creationtimestamp| type| source ---|---|--- 2025-02-08 08:25:55+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/agentscopecve20248438...

Malicious ML Models on Hugging Face Leverage Broken Pickle Format to Evade Detection

Cybersecurity researchers have uncovered two malicious machine learning ML models on Hugging Face that leveraged an unusual technique of "broken" pickle files to evade detection. "The pickle files extracted from the mentioned PyTorch archives revealed the malicious Python content at the beginning...

CVE-2023-27775

creationtimestamp| type| source ---|---|--- 2025-02-08 06:03:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3870...

CVE-2023-29571

creationtimestamp| type| source ---|---|--- 2025-02-08 06:03:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3866...

GHSA-VR5F-PHP7-RG24

creationtimestamp| type| source ---|---|--- 2025-02-07 22:02:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3835...

GHSA-5RJC-JC28-CWGG

creationtimestamp| type| source ---|---|--- 2025-02-07 21:03:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3830...

GHSA-2237-5R9W-VM8J

creationtimestamp| type| source ---|---|--- 2025-02-07 21:03:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3829...

RHSA-2016:0070

creationtimestamp| type| source ---|---|--- 2025-02-07 21:03:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3828...

CISCO-SA-20170907-STRUTS2

creationtimestamp| type| source ---|---|--- 2025-02-07 18:02:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3799...

GHSA-C5J8-JXJ3-HH36

creationtimestamp| type| source ---|---|--- 2025-02-07 16:16:05+00:00| published-proof-of-concept| https://t.me/haj3imad/779...

Exploit for Server-Side Request Forgery in Rocket.Chat

CVE-2024-39713: Rocket.Chat SSRF PoC Description A Server...

CVE-2020-15253

Versions of Grocy = 2.7.1 are vulnerable to Cross-Site Scripting via the Create Shopping List module, that is rendered upon deleting that Shopping List. The issue was also found in users, batteries, chores, equipment, locations, quantity units, shopping locations, tasks, taskcategories, product...

CVE-2024-35235

creationtimestamp| type| source ---|---|--- 2025-02-05 10:00:06+00:00| published-proof-of-concept| Telegram/tROXu-VoDvIGOcLcpszl-EBZ8Ot5WUMl6WIZHqWkyLe8WA0 2025-02-06 20:00:07+00:00| published-proof-of-concept| Telegram/Emfos1Bry778nZeLXZUQDUE4A45ZiVElYgXfAdoaC3h9SE 2025-02-21 17:18:30+00:00|...

CVE-2024-42450

The Versa Director uses PostgreSQL Postgres to store operational and configuration data. It is also needed for High Availability function of the Versa Director. The default configuration has a common password across all instances of Versa Director. By default, Versa Director configures Postgres t...

PHPJabbers Cinema Booking System 2.0 SQL Injection Vulnerability

CVE-2024-57430 An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database...