19444 matches found
Exploit for Cross-site Scripting in Modcluster Mod_Proxy_Cluster
CVE-2023-6710 Exploit POC Explore the depths of CVE-2023-6710...
Exploit for Heap-based Buffer Overflow in Gnu Glibc
CVE-2023-4911 - Looney Tunables This is a atm very rough pr...
CVE-2023-51449
creationtimestamp| type| source ---|---|--- 2023-12-22 22:22:12+00:00| seen| https://t.me/ctinow/158638 2024-01-18 08:11:50+00:00| seen| https://t.me/ctinow/169610 2024-04-01 13:07:17+00:00| published-proof-of-concept|...
CVE-2023-42681
creationtimestamp| type| source ---|---|--- 2023-12-22 16:19:16+00:00| published-proof-of-concept| https://t.me/ctinow/158456...
CVE-2023-42684
creationtimestamp| type| source ---|---|--- 2023-12-22 16:19:09+00:00| published-proof-of-concept| https://t.me/ctinow/158455...
Hospital Management System 4.0 XSS / Shell Upload / SQL Injection Vulnerabilities
Hospital Management System versions 4.0 and below suffer from cross site scripting, remote shell upload, and remote SQL injection vulnerabilities. Description: Mutiple vulnerabilties were discovered in Hospital Management System Affected CMS: Hospital Management System Affected Version: unread...
CVE-2023-4233
creationtimestamp| type| source ---|---|--- 2023-12-21 09:54:36+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/4191...
CVE-2023-4234
creationtimestamp| type| source ---|---|--- 2023-12-21 09:54:36+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/4191...
setPosMode function doesn't check if wLp is whitelisted
Lines of code Vulnerability details Proof of Concept Using setPosMode function owner of position can change it's mode. When the function is called, then there are a lot of checks, like if current mode allows to decollateralize and if new mode allows to collateralize. Also it's checked, that all...
Validate Creators Array
Lines of code Vulnerability details Potential Risk: The validateCreatorsArray function in the CreatorUtils contract performs input validation for the creatorArray parameter, which is an array of CreatorBps structs. While the function checks the individual elements of the array for valid addresses...
changing LOAN_TERM changes terms for existing loans
Lines of code Vulnerability details Impact If the protocol updates the loan terms, this will affect existing loans taken under different terms. Proof of Concept LOANTERM is a guarantee for the lender liquidity provider to eventually get their liquidity back. After loan term has passed the lender...
wrong implementation of maxHeap.extractMax();
Lines of code Vulnerability details Impact Detailed description of the impact of this finding. wrong implementation of maxHeap.extractMax; as it should return values but here its not assigned to anything. Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, log...
CVE-2022-29063
creationtimestamp| type| source ---|---|--- 2023-12-20 15:45:48+00:00| published-proof-of-concept| https://t.me/arpsyndicate/2050...
Lack of input validation for ClosePositionParams.amountSwap results in theft of fund (premium + protocol fee))
Lines of code Vulnerability details Impact Lack of input validation for ClosePositionParams.amountSwap results in theft of fund Proof of Concept ParticlePositionManager.sol hold two part of fund 1. the contract hold premium added by borrower 2. the contract hold protocol fee before protocol...
CVE-2022-0320
creationtimestamp| type| source ---|---|--- 2023-12-18 10:58:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9608 2024-08-16 08:57:34+00:00| published-proof-of-concept| https://t.me/Rootsec2/2289...
CVE-2023-46998
creationtimestamp| type| source ---|---|--- 2023-12-17 12:43:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9604 2024-08-16 08:57:34+00:00| published-proof-of-concept| https://t.me/Rootsec2/2285...
PDF24 Creator 11.15.1 Local Privilege Escalation
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Local Privilege Escalation via MSI installer product: PDF24 Creator geek Software GmbH vulnerable version: =11.15.1 fixed version: 11.15.2 CVE number: CVE-2023-49147...
PT-2023-9122 · Qnap · Qts +1
Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.7.2770 build 20240520 QuTS hero versions prior to h5.1.7.2770 build 20240520 Description: The issue is related to a buffer copy without checking the size of the input, which can lead to a stack overflow. This allows...