Exploit for Out-of-bounds Write in Linux Linux_Kernel

Linux Kernel 4.13.1 - BlueTooth Buffer Overf...

CVE-2022-26256

creationtimestamp| type| source ---|---|--- 2024-07-03 12:07:35+00:00| published-proof-of-concept| https://t.me/openSource3/197...

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002 PoC 1. You must set up the git's symbolic link...

CVE-2018-14714

creationtimestamp| type| source ---|---|--- 2024-07-03 02:45:46+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7842 2024-09-06 04:37:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11085 2024-09-09 12:20:42+00:00| published-proof-of-concept|...

Exploit for CVE-2018-14714

CVE-2018-14714 RCE exploit ASUS wifi router RCE vulnerability...

CVE-2024-3330

creationtimestamp| type| source ---|---|--- 2024-07-02 11:12:42+00:00| published-proof-of-concept| https://t.me/HackingInsights/4454...

GHSA-3669-72X9-R9P3 Potential memory exhaustion attack due to sparse slice deserialization

Details Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. For instance, in the Proof of Concept written below, someone can specify to set a field of the...

Potential memory exhaustion attack due to sparse slice deserialization

Details Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. For instance, in the Proof of Concept written below, someone can specify to set a field of the...

CVE-2024-27292

creationtimestamp| type| source ---|---|--- 2024-07-01 11:07:29+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/8887 2024-07-06 17:27:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10791 2024-07-09 10:22:28+00:00| published-proof-of-concept|...

Vulnerabilities fixed in Adobe Commerce

Adobe has fixed vulnerabilities in Commerce and Magento. A malicious party could exploit the vulnerabilities to bypass security measures and execute arbitrary code, possibly with administrator privileges. Proof-of-Concept code PoC has been published for the vulnerability with reference...

CVE-2024-36072

creationtimestamp| type| source ---|---|--- 2024-06-29 12:10:43+00:00| published-proof-of-concept| https://t.me/HackingInsights/4120...

CVE-2024-3801

Sites managed in S@M CMS Concept Intermedia might be vulnerable to Reflected XSS via including scripts in one of GET header parameters. Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears...

CVE-2024-3816

Sites managed in S@M CMS Concept Intermedia might be vulnerable to a blind SQL Injection executed using the search bar. Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears...

CVE-2024-3800

Sites managed in S@M CMS Concept Intermedia might be vulnerable to Reflected XSS via including scripts in requested file names. Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears...

CVE-2024-3816

The CVE-2024-3816 entry concerns the S@M CMS (Concept Intermedia) platform. It states a blind SQL Injection vulnerability exploitable via the search bar, affecting only a subset of observed services; the vendor has not investigated the root cause to determine when it occurs. The CVSS v3.1 metrics...

CVE-2024-3801

CVE-2024-3801 affects S@M CMS (Concept Intermedia); vulnerability is Reflected XSS triggered by including scripts in one of GET header parameters. The description notes that only a subset of observed services is vulnerable and that the vendor has not investigated the root cause, so it is unclear ...

CVE-2024-3801 XSS in S@M CMS

Sites managed in S@M CMS Concept Intermedia might be vulnerable to Reflected XSS via including scripts in one of GET header parameters. Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears...

CVE-2024-3800

CVE-2024-3800 affects sites managed in S@M CMS (Concept Intermedia). The vulnerability is a Reflected XSS caused by including scripts in requested file names. It is reported that only a portion of services is affected, and the root cause has not been fully investigated by the vendor. No exploit d...

CVE-2024-3800 XSS in S@M CMS

Sites managed in S@M CMS Concept Intermedia might be vulnerable to Reflected XSS via including scripts in requested file names. Only a part of observed services is vulnerable, but since vendor has not investigated the root problem, it is hard to determine when the issue appears...

Concept Intermedia S@M CMS Security Vulnerability

Concept Intermedia S@M CMS is a content management system from Concept Intermedia, Inc. A security vulnerability exists in Concept Intermedia S@M CMS version 3.3 and earlier, which stems from the inclusion of script in the parameters of a request via GET, resulting in a reflected cross-site...