19411 matches found
Exploit for CVE-2024-23995
Beekeeper-Studio PoC A Proof-Of-Concept for CVE-2024-23995 vul...
Exploit for Open Redirect in Nteract
Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerabilit...
Exploit for Cross-site Scripting in Lukasbach Yana
YANA Notebook PoC A Proof-Of-Concept for CVE-2024-23997 vulner...
PT-2024-39069
Name of the Vulnerable Software and Affected Versions: SPIP versions prior to 4.3.2, 4.2.16, and 4.1.18 Description: SPIP is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HT...
PT-2024-12772 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided input. Description: A proof of concept POC is available, but details about the issue are not explicitly mentioned. No information is provided about potentially affected devices or...
Exploit for OS Command Injection in Progress Loadmaster
CVE-2024-1212 Command Injection Exploit for Kemp LoadMaster 🛡️...
CVE-2024-45307
creationtimestamp| type| source ---|---|--- 2024-09-03 21:39:25+00:00| published-proof-of-concept| https://t.me/cvedetector/4709...
Vulnerabilities fixed in Progress WhatsUp Gold
Progress has fixed vulnerabilities in WhatsUp Gold. A malicious party can exploit the vulnerabilities to retrieve or change the password of the application user in a Single User installation, or in a Multi User installation to change the password of a user with elevated privileges through an...
CVE-2023-41111
creationtimestamp| type| source ---|---|--- 2024-09-02 09:10:13+00:00| published-proof-of-concept| https://t.me/HackerArsenal/248 2024-09-02 17:43:31+00:00| published-proof-of-concept| https://t.me/CNArsenal/3100 2024-09-06 18:12:05+00:00| published-proof-of-concept|...
PT-2024-30250 · Jenkins · Jenkins
Name of the Vulnerable Software and Affected Versions: Jenkins affected versions not specified Description: A proof of concept PoC exploit has been released for a bug in Jenkins. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...
CVE-2024-7435
The Attire theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.6 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is prese...
CVE-2024-1543
creationtimestamp| type| source ---|---|--- 2024-08-30 02:16:07+00:00| published-proof-of-concept| https://t.me/cvedetector/4484...
CVE-2024-45302
creationtimestamp| type| source ---|---|--- 2024-08-29 19:09:56+00:00| published-proof-of-concept| https://github.com/restsharp/RestSharp/security/advisories/GHSA-4rr6-2v9v-wcpc 2024-08-30 01:25:55+00:00| published-proof-of-concept| https://t.me/cvedetector/4478...
Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet Attacks
A years-old high-severity flaw impacting AVTECH IP cameras has been weaponized by malicious actors as a zero-day to rope them into a botnet. CVE-2024-7029 CVSS score: 8.7, the vulnerability in question, is a "command injection vulnerability found in the brightness function of AVTECH closed-circui...
Exploit for Improper Input Validation in Cacti
CVE-2024-25641 - Cacti 1.2.26 - Arbitrary file write to RCE 🌵...
CVE-2021-27090
creationtimestamp| type| source ---|---|--- 2024-08-28 19:30:05+00:00| published-proof-of-concept| https://t.me/truesecator/6144 2024-08-29 19:16:11+00:00| published-proof-of-concept| https://t.me/SEReborn/5065...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick
CVE-2022-44268-automated CVE-2022-44268 ImageMagick Arbitrary...
CVE-2021-26418
creationtimestamp| type| source ---|---|--- 2024-08-28 07:50:25+00:00| published-proof-of-concept| Telegram/7XG3Qhyveq0sd-sorvBusAou1bYnK4tFO-cr4qbsp7Vd2w0...
CISA Flags Critical Apache OFBiz Flaw Amid Active Exploitation Reports
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a critical security flaw affecting the Apache OFBiz open-source enterprise resource planning ERP system to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The...