19411 matches found
Exploit for Unrestricted Upload of File with Dangerous Type in Git
CVE-2024-32002-PoC Proof of Concep...
Exploit for Unrestricted Upload of File with Dangerous Type in Git
CVE-2024-32002-POC This is a demo...
Linux OverlayFS Local Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Local Privilege Escalation via CVE-2023-0386', 'Description' = %q This exploit targets the Linux kernel bug in OverlayFS. A flaw was found in the...
Exploit for CVE-2024-4956
!cvehttps://github.com/user-attachments/assets/c06cbfa1-8fb9-...
Exploit for Incorrect Implementation of Authentication Algorithm in Ivanti Virtual_Traffic_Management
CVE-2024-7593 Exploit Script This Bash script serves as a pro...
Exploit for Use of Hard-coded Credentials in Solarwinds Web_Help_Desk
CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential...
Exploit for Improper Privilege Management in Oracle Vm_Virtualbox
cve-2023-21987-poc Oracle VirtualBox VGA OOB-Read Vulnerab...
Duplicate Advisory: Camaleon CMS vulnerable to remote code execution through code injection (GHSL-2024-185)
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7x4w-cj9r-h4v9. This link is maintained to preserve external references. Original Description The actions defined inside of the MediaController class do not check whether a given path is inside a certain path e....
CVE-2024-27394
creationtimestamp| type| source ---|---|--- 2024-09-23 17:58:32+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11175...
PT-2024-40048 · Unknown · Camaleon Cms
Name of the Vulnerable Software and Affected Versions: Camaleon CMS affected versions not specified Description: The issue concerns a path traversal vulnerability in the MediaController class. An attacker who has taken over an administrator account could delete arbitrary files or folders on the...
BlackNET 3.7.0.0 Missing Authentication / File Deletion / Traversal Exploit
BlackNET version 3.7.0.0 appears to allow unauthenticated access to modify data and suffers from arbitrary file deletion and directory traversal vulnerabilities while authenticated. Exploit Title: BlackNET - Multiple Vulnerabilities Exploit Author: bRpsd Date: 20/09/2024 Vendor Homepage:...
CVE-2024-36683
creationtimestamp| type| source ---|---|--- 2024-09-22 23:29:49+00:00| published-proof-of-concept| https://t.me/codeb0ss/1606 2024-09-30 06:28:15+00:00| published-proof-of-concept| https://t.me/LYNXBLACKHHATS/8327 2024-09-30 06:28:15+00:00| published-proof-of-concept|...
GHSA-58VJ-CV5W-V4V6 Navidrome has Multiple SQL Injections and ORM Leak
Security Advisory: Multiple Vulnerabilities in Navidrome Summary Navidrome automatically adds parameters in the URL to SQL queries. This can be exploited to access information by adding parameters like password=... in the URL ORM Leak. Furthermore, the names of the parameters are not properly...
CVEs
It is an offensive tool for web exploitation. This repository co...
Exploit for Cross-Site Request Forgery (CSRF) in Creativeitem Academy_Lms
CVE-2022-47132 Academy LMS = 5.10 CSRF Description Acad...
CVE-2022-46723
creationtimestamp| type| source ---|---|--- 2024-09-19 10:18:53+00:00| published-proof-of-concept| https://t.me/ton618cyber/3863 2024-09-19 10:18:53+00:00| published-proof-of-concept| https://t.me/ton618cyber/933 2024-09-19 13:11:55+00:00| published-proof-of-concept| https://t.me/HackerArsenal/39...
CVE-2024-46785
creationtimestamp| type| source ---|---|--- 2024-09-18 10:53:25+00:00| published-proof-of-concept| https://t.me/cvedetector/5947...
CVE-2024-44346
creationtimestamp| type| source ---|---|--- 2024-09-17 18:25:44+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8545...
GHSA-R49H-6QXQ-624F
creationtimestamp| type| source ---|---|--- 2024-09-17 09:09:01+00:00| published-proof-of-concept| https://t.me/G18Division/34 2024-09-17 20:40:45+00:00| published-proof-of-concept| https://t.me/whoisAlixan/2908 2024-10-15 01:39:58+00:00| published-proof-of-concept| https://t.me/BhinnekaSec/2642...