19444 matches found
pocsuite3
This is a Python-based framework for remote vulnerability testing and proof-of-concept development, called pocsuite3. It is developed by the Knownsec 404 Team and is designed for penetration testers and security researchers. The framework comes with a powerful proof-of-concept engine and various...
PT-2024-1082 · Microsoft · Visual Studio
Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Microsoft Visual Studio, which could allow an attacker to gain elevated privileges on affected systems. The...
CVE-2022-1461
creationtimestamp| type| source ---|---|--- 2024-01-08 23:05:01+00:00| published-proof-of-concept| https://t.me/arpsyndicate/2692...
CVE-2022-1459
creationtimestamp| type| source ---|---|--- 2024-01-08 22:39:37+00:00| published-proof-of-concept| https://t.me/arpsyndicate/2690...
Mars: Datadog api keys exposed can be used to do all the read and write access to the instance
A vulnerability was identified where Datadog API keys were exposed in a JavaScript file, which could have enabled unauthorized access to Datadog services. The issue was responsibly disclosed along with a proof-of-concept demonstration...
NO access control in decreaseAllowance and increaseAllowance
Lines of code Vulnerability details Impact Detailed description of the impact of this finding. NO access control in decreaseAllowance and increaseAllowance.Anyone can call this function and increase or decrease the allowlance. Proof of Concept Provide direct links to all referenced code in GitHub...
Permanent DOS in liquidity_lockbox for under $10
Lines of code Vulnerability details Impact The liquiditylockbox contract in the lockbox-solana project is vulnerable to permanent DOS due to its storage limitations. The contract uses a Program Derived Address PDA as a data account, which is created with a maximum size limit of 10 KB. Every time...
L1 TO L2 ERC20 TOKEN TRANSFER CAN BE DoS IN THE FxERC20ChildTunnel CONTRACT SINCE A MALICIOUS USER CAN SET THE fxRootTunnel ADDRESS TO AN INVALID ADDRESS
Lines of code Vulnerability details Impact The FxERC20ChildTunnel is a smart contract which is used for the L2 token management. The FxERC20ChildTunnel contract inherits from the FxBaseChildTunnel contract. The FxBaseChildTunnel contract has the validateSender modifier which requires the sender o...
PT-2024-14052 · D Link · D-Link Dir-605L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L router affected versions not specified Description: A serious issue has been discovered in the D-Link DIR-605L router. The vendor has confirmed the finding but has tagged it as 'won't fix'. A proof-of-concept PoC video has bee...
CVE-2023-48983
creationtimestamp| type| source ---|---|--- 2024-01-01 13:25:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6352...
CVE-2023-48981
creationtimestamp| type| source ---|---|--- 2024-01-01 13:14:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6351...
CVE-2023-6656
creationtimestamp| type| source ---|---|--- 2024-01-01 10:31:29+00:00| published-proof-of-concept| https://t.me/ctinow/161260...
GHSA-9W2P-RH8C-V9G5
creationtimestamp| type| source ---|---|--- 2024-01-01 07:56:39+00:00| published-proof-of-concept| https://t.me/ctinow/161218...
CVE-2023-41171
creationtimestamp| type| source ---|---|--- 2023-12-31 09:46:24+00:00| published-proof-of-concept| https://t.me/ctinow/161033...
CVE-2023-50226
creationtimestamp| type| source ---|---|--- 2023-12-31 08:51:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6346...
Exploit for Files or Directories Accessible to External Parties in Apache Struts
This is a Proof of Concept PoC for CVE-2023-50164https://nv...
Apache OFBiz 18.12.09 Remote Code Execution
From: Jacques Le Roux Date: Mon, 04 Dec 2023 21:04:50 +0000 Severity: moderate Affected versions: - Apache OFBiz before 18.12.10 Description: Pre-auth RCE in Apache Ofbiz 18.12.09. It's due to XML-RPC no longer maintained still present. This issue affects Apache OFBiz: before 18.12.10. Users are...
Exploit for OS Command Injection in Openbsd Openssh
CVE-2023-51385 poc OpenSSH ProxyCommand RCE poc OpenSSH...