19457 matches found
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831 WinRAR RARLabs WinRAR before 6.23 allows att...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831 WinRAR RARLabs WinRAR before 6.23 allows att...
Siemens LOGO! 8 BM Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-25230)
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an outdated cipher mode on port 10005/tcp, an attacker could extract the encryption key from a captured communication with the device. This plugin only works with Tenable.ot. Please visi...
Siemens LOGO! 8 BM Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-25232)
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on port...
Siemens LOGO! 8 BM Use of Hard-Coded Cryptographic Key (CVE-2020-25233)
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. The firmware update of affected devices contains the private RSA key that is used as a basis for encryption of communication with the device. This plugin only works with Tenable.ot. Please visit...
CVE-2023-0099
creationtimestamp| type| source ---|---|--- 2023-09-20 05:14:43+00:00| published-proof-of-concept| https://t.me/CNArsenal/1146 2023-09-20 11:01:30+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9052 2023-09-25 18:35:02+00:00| published-proof-of-concept|...
CVE-2023-0255
creationtimestamp| type| source ---|---|--- 2023-09-20 00:23:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5169 2023-09-20 04:37:32+00:00| published-proof-of-concept| Telegram/gdTy7lgZskHUTKsNdChjK9XF0WDKgOaKiAgxFVHaZ5Dqg 2023-09-20 13:22:01+00:00| published-proof-of-concept|...
CVE-2023-3076
creationtimestamp| type| source ---|---|--- 2023-09-19 05:03:49+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5159 2023-09-19 23:27:23+00:00| published-proof-of-concept| https://t.me/v3n0mhack/282 2023-09-21 11:00:56+00:00| published-proof-of-concept|...
Time-Based Blind SQL injection leads to database extraction
Proof of Concept Login your account. then copy the coope and paste on below raw request POST /ajaxtable.php HTTP/1.1 Host: demo.librenms.org User-Agent: Mozilla/5.0 Windows NT 10.0; rv:78.0 Gecko/20100101 Firefox/78.0 Content-Length: 221 Accept: / Accept-Language: en-US,en;q=0.5 Content-Type:...
Exploit for Cross-site Scripting in Moosocial
mooSocial: XSS CVE-2023-43325 A reflected cross-site scripti...
CVE-2023-37459
creationtimestamp| type| source ---|---|--- 2023-09-16 00:25:55+00:00| published-proof-of-concept| https://t.me/cibsecurity/70620...
STORED XSS in Journal-> Sections
Description Stored attacks are those where the injected script is permanently stored on the target servers, such as in a database, in a message forum, visitor log, comment field, etc. The victim then retrieves the malicious script from the server when it requests the stored information. Stored XS...
Stored XSS at LOGO+USER menu
Description Please enter a description of the vulnerability. Proof of Concept login with admin account visit https://demo.instantcms.io/admin/widgets?templatename=modern&scrollto=row-14 navigate to logo+user menu tab insert payload 1" onmouseover = "alert'hackedbytisha' at Parent row Tag CSS clas...
Vulnerability: An Attacker can steal Tranche Tokens and Drain the Pool / Contract: InvestmentManager.
Lines of code Vulnerability details Impact An Attacker can mint Tranche Tokens for free and use them to Drain the Pool and steal the user's money. Proof of Concept Let's imagine that some users deposit money in the pool and mint tranches but they didn't redeem/withdraw their tokens, one of the...
An attacker can drain all the tokens from UserEscrow contract.
Lines of code Vulnerability details Impact An user who is allowed to invest can maliciously drain all the tokens from the UserEscrow contract from decreaseDepositRequest and decreaseRedeemRequest of LiquidityPool.sol contract. Both functions are first send to the router and when the call is...
LiquidityPool inflation attack
Lines of code Vulnerability details Bug Description The LiquidityPool uses an algorithm that converts prices to shares through a linear relationship. For instance, if there are 10,000 assets and 100 shares, then holding 100 assets should yield 1 share. However, a situation arises when investor...
The maxMint check should be cumulatively applied to ensure it's effectiveness
Lines of code Vulnerability details Impact Circumvention of the maximum minting restriction, since all a receiver need to do is not specify the whole amount of tokens in one attempt and then claim more than the maximum amount Proof of Concept Take a look at LiquidityPool.solL145-L157 /// @notice...
PT-2023-20784 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: There is a request for a proof of concept related to a specific issue, but no details are provided about the issue itself, including its nature,...
Improper input validation leads to arbitrary file deletion
Description The /process endpoint of the python API in collector/api.py exposes an endpoint waiting for a POST request with a parameter named filename : py @api.route"/process", methods="POST" def processfile: content = request.json targetfilename = content.get"filename" printf"Processing...