19436 matches found
Hospital Management System 1.0 Insecure Direct Object Reference / Account Takeover
Exploit Title: Hospital Management System - IDOR + Accaunt Takeover Google Dork: N/A Application: Hospital Management System Date: 27.02.2024 Bugs: IDOR + Accaunt Takeover Exploit Author: SoSPiro Vendor Homepage: https://www.sourcecodester.com/ Software Link:...
Hospital Management System 1.0 SQL Injection
Exploit Title: Hospital Management System - SQL Injection Google Dork: N/A Application: Hospital Management System Date: 26.02.2024 Bugs: SQL Injection Exploit Author: SoSPiro Vendor Homepage: https://www.sourcecodester.com/ Software Link:...
perl2exe 30.10C Arbitrary Code Execution
Exploit Title: Executables Created with perl2exe safe.pl user@testing:/example$ ./perl2exe-Linux-x64-5.30.1/perl2exe safe.pl Perl2Exe V30.10C 2020-12-11 Copyright c 1997-2020 IndigoSTAR Software ... Generating safe user@testing:/example$ user@testing:/example$ Check that the program executes as...
GHSA-9P8R-4XP4-GW5W Vyper's `_abi_decode` vulnerable to Memory Overflow
Summary If an excessively large value is specified as the starting index for an array in abidecode, it can cause the read position to overflow. This results in the decoding of values outside the intended array bounds, potentially leading to bugs in contracts that use arrays within abidecode. The...
Vyper's `_abi_decode` vulnerable to Memory Overflow
Summary If an excessively large value is specified as the starting index for an array in abidecode, it can cause the read position to overflow. This results in the decoding of values outside the intended array bounds, potentially leading to bugs in contracts that use arrays within abidecode. The...
CVE-2013-3313
creationtimestamp| type| source ---|---|--- 2024-02-26 08:41:45+00:00| published-proof-of-concept| https://t.me/ctinow/193158...
CVE-2013-3312
creationtimestamp| type| source ---|---|--- 2024-02-26 08:41:44+00:00| published-proof-of-concept| https://t.me/ctinow/193157...
Simple Inventory Management System v1.0 - (email) SQL Injection Vulnerability
Exploit Title: Simple Inventory Management System v1.0 - 'email' SQL Injection Application: Simple Inventory Management System Bugs: SQL Injection Exploit Author: SoSPiro Vendor Homepage: https://www.sourcecodester.com/ Software Link:...
FAQ Management System v1.0 - (faq) SQL Injection Vulnerability
Exploit Title: FAQ Management System v1.0 - 'faq' SQL Injection Application: FAQ Management System Bugs: SQL Injection Exploit Author: SoSPiro Vendor Homepage: https://www.sourcecodester.com/ Software Link:...
Flashcard Quiz App v1.0 - (card) SQL Injection Vulnerability
Exploit Title: Flashcard Quiz App v1.0 - 'card' SQL Injection Application: Flashcard Quiz App Bugs: SQL Injection Exploit Author: SoSPiro Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/17160/flashcard-quiz-app-using-php-and-mysql-source-code.htm...
Simple Inventory Management System 1.0 SQL Injection
Exploit Title: Simple Inventory Management System - SQL Injection Google Dork: N/A Application: Simple Inventory Management System Date: 26.02.2024 Bugs: SQL Injection Exploit Author: SoSPiro Vendor Homepage: https://www.sourcecodester.com/ Software Link:...
Regular Expression Denial of Service (ReDoS)
Overview org.webjars.bower:showdown is a JavaScript Markdown to HTML converter. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the anchors subparser in anchors.js AKA links.js. PoC time node -e '/?:^|^\ ??:\n ?.?/g.test"".repeat9999' Details...
CVE-2011-5331
creationtimestamp| type| source ---|---|--- 2024-02-23 14:41:12+00:00| published-proof-of-concept| https://t.me/ctinow/191759...
GHSA-44JG-JGJX-3XG5
creationtimestamp| type| source ---|---|--- 2024-02-22 22:07:58+00:00| published-proof-of-concept| https://t.me/arpsyndicate/4071...
pypqc private key retrieval vulnerability
Impact kyber512, kyber768, and kyber1024 only: An attacker able to submit many decapsulation requests against a single private key, and to gain timing information about the decapsulation, could recover the private key. Proof-of-concept exploit exists for a local attacker...
GHSA-84XV-JFRM-H4GM
creationtimestamp| type| source ---|---|--- 2024-02-22 19:00:30+00:00| published-proof-of-concept| https://t.me/arpsyndicate/4003 2025-03-13 00:43:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7390 2025-05-12 23:29:29+00:00| published-proof-of-concept|...
GHSA-FMG4-X8PW-HJHG Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials
The CORS middleware allows for insecure configurations that could potentially expose the application to multiple CORS-related vulnerabilities. Specifically, it allows setting the Access-Control-Allow-Origin header to a wildcard "" while also having the Access-Control-Allow-Credentials set to true...
Exploit for OS Command Injection in Apache Spark
CVE-2022-33891 - Apache Spark UI Remote Code Execution RCE 🔐...