19402 matches found
GHSA-C5J8-JXJ3-HH36
creationtimestamp| type| source ---|---|--- 2025-02-07 16:16:05+00:00| published-proof-of-concept| https://t.me/haj3imad/779...
Exploit for Server-Side Request Forgery in Rocket.Chat
CVE-2024-39713: Rocket.Chat SSRF PoC Description A Server...
CVE-2020-15253
Versions of Grocy = 2.7.1 are vulnerable to Cross-Site Scripting via the Create Shopping List module, that is rendered upon deleting that Shopping List. The issue was also found in users, batteries, chores, equipment, locations, quantity units, shopping locations, tasks, taskcategories, product...
CVE-2024-35235
creationtimestamp| type| source ---|---|--- 2025-02-05 10:00:06+00:00| published-proof-of-concept| Telegram/tROXu-VoDvIGOcLcpszl-EBZ8Ot5WUMl6WIZHqWkyLe8WA0 2025-02-06 20:00:07+00:00| published-proof-of-concept| Telegram/Emfos1Bry778nZeLXZUQDUE4A45ZiVElYgXfAdoaC3h9SE 2025-02-21 17:18:30+00:00|...
CVE-2024-42450
The Versa Director uses PostgreSQL Postgres to store operational and configuration data. It is also needed for High Availability function of the Versa Director. The default configuration has a common password across all instances of Versa Director. By default, Versa Director configures Postgres t...
PHPJabbers Cinema Booking System 2.0 SQL Injection Vulnerability
CVE-2024-57430 An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database...
Exploit for CVE-2024-2961
Buddyforms 2.7.7 CNEXT RCE Abusing CVE-2024-2961 and CVE-2023...
Malicious code in poc-creation (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-859 Malicious code in poc-creation (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-53393
creationtimestamp| type| source ---|---|--- 2025-02-02 16:00:08+00:00| published-proof-of-concept| Telegram/UyVI-ODfpx-m79cxnYxNG85GR0fDpOs6exyBtw4kZXt7s...
Exploit for Out-of-bounds Write in Apple Ipados
CVE-2025-24118 Exploit Python Overview This repository...
GHSA-24F2-FV38-3274
creationtimestamp| type| source ---|---|--- 2025-02-01 01:25:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3707...
CVE-2023-31287
creationtimestamp| type| source ---|---|--- 2025-01-31 22:16:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3680...
CVE-2023-31286
creationtimestamp| type| source ---|---|--- 2025-01-31 22:16:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3681...
GHSA-X9QQ-236J-GJ97
creationtimestamp| type| source ---|---|--- 2025-01-30 23:12:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3520...
GHSA-VPXM-CR3R-PJP9
creationtimestamp| type| source ---|---|--- 2025-01-30 18:12:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3503...
Exploit for Out-of-bounds Write in Xiongmaitech Nbd6808T-Pl_Firmware
Proof of Concept for CV...
New Aquabot Botnet Exploits CVE-2024-41710 in Mitel Phones for DDoS Attacks
A Mirai botnet variant dubbed Aquabot has been observed actively attempting to exploit a medium-severity security flaw impacting Mitel phones in order to ensnare them into a network capable of mounting distributed denial-of-service DDoS attacks. The vulnerability in question is CVE-2024-41710 CVS...
PT-2025-2262 · WordPress · Icontrolwp
Name of the Vulnerable Software and Affected Versions: iControlWP – Multiple WordPress Site Manager plugin for WordPress versions up to, and including, 4.4.5 Description: The issue is related to PHP Object Injection via deserialization of untrusted input from the reqpars parameter. This allows...