Exploit for Incorrect Authorization in Nexxtsolutions Nebula1200-Ac_Firmware

EN This project provides a proof-of-concept exploit for a remo...

CVE-2023-50809

creationtimestamp| type| source ---|---|--- 2024-08-09 16:50:05+00:00| published-proof-of-concept| https://t.me/truesecator/6078...

Open WebUI 0.1.105 File Upload / Path Traversal Vulnerabilities

Title: Open WebUI Arbitrary File Upload + Path Traversal Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2024-006.txt 1. Vulnerability Details Affected Vendor: Open WebUI Affected Product: Open WebUI Affected Version: 0.1.105 Platform: Debian 12 CWE Classification: CWE-22:...

Journyx 11.5.4 XML Injection Vulnerability

Journyx version 11.5.4 has an issue where the soapcgi.pyc API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources. Title:...

CVE-2024-42243

creationtimestamp| type| source ---|---|--- 2024-08-07 18:38:41+00:00| published-proof-of-concept| https://t.me/cvedetector/2704...

Exploit for CVE-2023-6444

CVE-202306444-POC Proof of concept...

Sony: 明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）

The WH-1000XM5 headphones were found to have an authentication vulnerability that allowed an attacker to connect to the device without going through the proper pairing process. This vulnerability could be combined with existing Bluetooth attacks to enable man-in-the-middle attacks...

CVE-2021-37915

creationtimestamp| type| source ---|---|--- 2024-08-05 18:55:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4614 2026-07-29 12:02:51+00:00| seen| https://t.me/reverseame/1794 2026-07-30 00:02:41+00:00| seen| https://t.me/reverseame/1794 2026-08-03 04:06:25+00:00|...

zzz

It is an offensive tool for Linux. The repository appears to be...

CVE-2024-27878

creationtimestamp| type| source ---|---|--- 2024-08-05 05:02:14+00:00| published-proof-of-concept| https://t.me/HackerArsenal/116 2024-08-05 05:02:29+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/700 2024-08-05 11:03:34+00:00| published-proof-of-concept|...

CVE-2024-2997

creationtimestamp| type| source ---|---|--- 2024-08-05 00:05:59+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/2112 2026-04-21 15:00:06+00:00| published-proof-of-concept| Telegram/OSwk74LPyb-SoCOGGq7g6dJYTwStVpGs5Vg25MlO305tzc...

ReadyMade Unilevel Ecommerce MLM Blind SQL Injection / Cross Site Scripting

x========================================================================================================================================x | Title : Readymade Unilevel Ecommerce MLM Blind SQL & XSS Vulnerabilities | Software : Readymade Unilevel Ecommerce | Last Update : 15/03/24 TESTED VERSION...

PT-2025-17686 · Cloudera · Cloudera Hue

Name of the Vulnerable Software and Affected Versions: Cloudera Hue affected versions not specified Description: The issue is related to a directory traversal information disclosure problem. It is described as having a high severity. There is a proof-of-concept exploit available. Recommendations:...

Fixed in ClickHouse v24.5, 2024-08-01​

It is possible to redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request to the ClickHouse server native interface. This redirection is limited to what is available within a 256-byte range of memory at the time of...

CVE-2024-22064

creationtimestamp| type| source ---|---|--- 2024-07-31 12:00:34+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/665 2024-07-31 23:46:54+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10911...

Readymade Real Estate Script SQL Injection / Cross Site Scripting Vulnerabilities

x========================================================================================================================================x | Title : Readymade Real Estate Script Blind SQL & XSS Vulnerabilities | Software : Advanced Real Estate Script | Vendor : http://www.i-netsolution.com/ | Dat...

Readymade Real Estate Script SQL Injection / Cross Site Scripting

x========================================================================================================================================x | Title : Readymade Real Estate Script Blind SQL & XSS Vulnerabilities | Software : Advanced Real Estate Script | Last Update : 12/07/24 | First Release:...

GHSA-V75F-HC9P-6G26

creationtimestamp| type| source ---|---|--- 2024-07-30 04:27:38+00:00| published-proof-of-concept| https://t.me/HackerArsenal/71...

CVE-2024-32656

creationtimestamp| type| source ---|---|--- 2024-07-30 00:54:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10486...

Admidio has Blind SQL Injection in ecard_send.php

Description: An SQL Injection has been identified in the /admprogram/modules/ecards/ecardsend.php source file of the Admidio Application. The SQL Injection results in a compromise of the application's database. The value of ecardrecipients POST parameter is being directly concatenated with the SQ...