19436 matches found
Exploit for CVE-2024-25600
CVE-2024-25600Nuclei-Template Nuclei template and information...
MeshCentral cross-site websocket hijacking (CSWSH) vulnerability
We have identified a cross-site websocket hijacking CSWSH vulnerability within the control.ashx endpoint of MeshCentral. This component is the primary mechanism used within MeshCentral to perform administrative actions on the server. To demonstrate the impact of the vulnerability we developed a...
GHSA-375G-39JQ-VQ7M Potential buffer overflow in CBOR2 decoder
Summary Ever since https://github.com/agronholm/cbor2/pull/204 or specifically https://github.com/agronholm/cbor2/commit/387755eacf0be35591a478d3c67fe10618a6d542 was merged, I can create a reproducible crash when running the snippet under PoC on a current Debian bullseye aarm64 on a Raspberry Pi ...
Exploit for CVE-2024-25600
CVE-2024-25600 Exploit Tool 🚀 Description 📝 This tool 🛠️...
CVE-2023-40150
creationtimestamp| type| source ---|---|--- 2024-02-20 20:05:39+00:00| published-proof-of-concept| https://t.me/SEReborn/4535...
CVE-2019-10869
creationtimestamp| type| source ---|---|--- 2024-02-20 04:27:58+00:00| published-proof-of-concept| Telegram/DjIZ6fWMXmlmEqKmpuFtQwgBJRCjkSBgRANI4QVLWKJ-IYk...
SPA-CART CMS 1.9.0.3 Cross Site Scripting
Exploit Title: SPA-CART CMS - Stored XSS Date: 2024-01-03 Exploit Author: Eren Sen Vendor: SPA-Cart Vendor Homepage: https://spa-cart.com/ Software Link: https://demo.spa-cart.com/ Version: 1.9.0.3 CVE-ID: N/A Tested on: Kali Linux / Windows 10 Vulnerabilities Discovered Date : 2024/01/03...
Petrol Pump Management Software 1.0 Shell Upload Vulnerability
Exploit Title: Petrol pump management software - File Upload Remote Code Execution RCE unauthenticated Application: Petrol pump management software Date: 20.02.2024 Bugs: File Upload Remote Code Execution RCE unauthenticated Exploit Author: SoSPiro Vendor Homepage: https://www.sourcecodester.com/...
CVE-2024-2065623
creationtimestamp| type| source ---|---|--- 2024-02-19 10:05:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6629...
CVE-2024-2065622
creationtimestamp| type| source ---|---|--- 2024-02-19 09:55:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6628...
Employee Management System v1 - (email) SQL Injection Vulnerability
Exploit Title: Employee Management System v1 - 'email' SQL Injection Application: Employee Management System Date: 19.02.2024 Bugs: SQL Injection Exploit Author: SoSPiro Vendor Homepage: https://www.sourcecodester.com/ Software Link:...
User Registration And Login And User Management System 3.1 SQL Injection
Exploit Title: User Registration & Login and User Management System With admin panel 3.1 - SQL injection Application: User Registration & Login and User Management System Date: 17.02.2024 Bugs: SQL Injection Exploit Author: SoSPiro Vendor Homepage: https://phpgurukul.com/ Software Link:...
XAMPP - Buffer Overflow Exploit
Exploit Title: XAMPP v3.3.0 — '.ini' Buffer Overflow Unicode + SEH Author: Talson @Ripp3rdoc Software Link: https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/8.0.28/xampp-windows-x64-8.0.28-0-VS16-installer.exe Version: 3.3.0 Tested on: Windows 11 CVE-2023-46517 \ / \ \ /| | || | /| ||...
Employee Management System v1 - 'email' SQL Injection
Exploit Title: Employee Management System v1 - 'email' SQL Injection Google Dork: N/A Application: Employee Management System Date: 19.02.2024 Bugs: SQL Injection Exploit Author: SoSPiro Vendor Homepage: https://www.sourcecodester.com/ Software Link:...
CVE-2021-31728
creationtimestamp| type| source ---|---|--- 2024-02-17 14:55:47+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3325 2026-09-01 17:00:50+00:00| seen| https://t.me/cissp/3150 2026-09-02 01:04:39+00:00| seen| https://t.me/cissp/3150 2026-09-11 07:00:05+00:00| seen|...
SISQUALWFM 7.1.319.103 - Host Header Injection Vulnerability
Exploit Title: SISQUALWFM 7.1.319.103 Host Header Injection Discovered Date: 17/03/2023 Reported Date: 17/03/2023 Resolved Date: 13/10/2023 Exploit Author: Omer Shaik unknownexploit Vendor Homepage: https://www.sisqualwfm.com Version: 7.1.319.103 Tested on: SISQUAL WFM 7.1.319.103 Affected Versio...
Exploit for Improper Input Validation in Microsoft
CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulne...
GHSA-RJHP-44RV-7V59
creationtimestamp| type| source ---|---|--- 2024-02-15 23:02:26+00:00| published-proof-of-concept| https://t.me/ctinow/185954...
CLSA-2024-1708029490 gnutls: Fix of 3 CVEs
Add CVE-2024-0567 PoC test - Remove src.rpm from sources - CVE-2023-5981: removes branching that depends on secret data to prevent potential side-channel attack - CVE-2024-0553: minimize branching after decryption...