CVE-2020-35698

Thinkific Thinkific Online Course Creation Platform 1.0 is affected by: Cross Site Scripting XSS. The impact is: execute arbitrary code remote. The component is: Affected Source code of the website CMS which is been used by many to host their online courses using the Thinkific Platform. The attac...

copyparty vulnerable to reflected cross-site scripting via hc parameter

Summary The application contains a reflected cross-site scripting via URL-parameter ?hc=... Details A reflected cross-site scripting XSS vulnerability exists in the web interface of the application that could allow an attacker to execute malicious javascript code by tricking users into accessing ...

CVE-2023-37918

creationtimestamp| type| source ---|---|--- 2023-07-21 17:02:33+00:00| published-proof-of-concept| https://github.com/dapr/dapr/security/advisories/GHSA-59m6-82qm-vqgj...

CVE-2023-24044

creationtimestamp| type| source ---|---|--- 2023-07-21 16:07:38+00:00| published-proof-of-concept| https://t.me/codeb0ss/895...

CVE-2023-37917

creationtimestamp| type| source ---|---|--- 2023-07-21 15:05:31+00:00| published-proof-of-concept| https://github.com/1Panel-dev/KubePi/security/advisories/GHSA-757p-vx43-fp9r...

CVE-2023-30367

creationtimestamp| type| source ---|---|--- 2023-07-21 06:50:41+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4782 2026-07-29 12:00:14+00:00| seen| https://t.me/CVEhub/17422 2026-07-30 00:00:32+00:00| seen| https://t.me/CVEhub/17422 2026-07-31 00:00:44+00:00|...

Proposal cannot be executed if signers update their accounts and threshold halfway

Lines of code Vulnerability details Impact If signers update their accounts and threshold halfway into voting, then the proposal cannot be executed anymore Proof of Concept execute is protected under onlySigners function execute address target, bytes calldata callData, uint256 nativeValue -...

RWS WorldServer 11.7.3 - Session Token Enumeration

Exploit Title: RWS WorldServer 11.7.3 - Session Token Enumeration Session tokens in RWS WorldServer have a low entropy and can be enumerated, leading to unauthorised access to user sessions. Details ======= Product: WorldServer Affected Versions: 11.7.3 and earlier versions Fixed Version: 11.8.0...

PaulPrinting CMS - Multiple Cross Site Web Vulnerabilities

Exploit Title: PaulPrinting CMS - Multiple Cross Site Web Vulnerabilities Common Vulnerability Scoring System: ==================================== 5.8 Vulnerability Class: ==================== Cross Site Scripting - Persistent Current Estimated Price: ======================== 500€ - 1.000€ Produ...

Payable functions using delegatecall inside a loop

Lines of code Vulnerability details Impact The use of delegatecall within a loop, in the context of a payable function, can lead to the repeated crediting of the msg.value amount, potentially causing unexpected behavior or loss of funds. Proof of Concept contract DelegatecallInLoop is Multicall...

CVE-2023-3696

creationtimestamp| type| source ---|---|--- 2023-07-20 11:00:35+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8703 2023-08-21 14:31:25+00:00| published-proof-of-concept| https://t.me/MrVGunz/847...

RWS WorldServer 11.7.3 - Session Token Enumeration

Exploit Title: RWS WorldServer 11.7.3 - Session Token Enumeration Session tokens in RWS WorldServer have a low entropy and can be enumerated, leading to unauthorised access to user sessions. Details ======= Product: WorldServer Affected Versions: 11.7.3 and earlier versions Fixed Version: 11.8.0...

CVE-2023-24892

creationtimestamp| type| source ---|---|--- 2023-07-19 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8696 2023-07-22 17:37:23+00:00| published-proof-of-concept| https://t.me/dilagrafie/3124 2026-09-01 17:00:18+00:00| seen| https://t.me/cissp/7043 2026-09-02...

CVE-2023-33148

creationtimestamp| type| source ---|---|--- 2023-07-19 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8696 2023-07-22 17:37:23+00:00| published-proof-of-concept| https://t.me/dilagrafie/3124 2026-09-01 17:00:18+00:00| seen| https://t.me/cissp/7043 2026-09-02...

RWS WorldServer 11.7.3 Session Token Enumeration

Advisory: Session Token Enumeration in RWS WorldServer Session tokens in RWS WorldServer have a low entropy and can be enumerated, leading to unauthorised access to user sessions. Details ======= Product: WorldServer Affected Versions: 11.7.3 and earlier versions Fixed Version: 11.8.0 Vulnerabili...

U.S. Dept Of Defense: SqlInject at ██████

Vulnerability description not provided...

CVE-2022-30858

An issue was discovered in ngiflib 0.4. There is SEGV in SDLLoadAnimatedGif when use SDLaffgif. poc : ./SDLaffgif CAfile20...

CVE-2023-2929

creationtimestamp| type| source ---|---|--- 2023-07-17 17:00:38+00:00| published-proof-of-concept| Telegram/RBRi8qpCx4FDT1MstKiy3fEU-jZkUVZjocmEPEaKaF-qVfw 2023-08-22 16:41:34+00:00| published-proof-of-concept| Telegram/uHyw4ugSuJPumXrlGG37OT5kzW1eR2BbK60BwDinWaA64kA 2024-08-16 08:08:27+00:00|...

CVE-2023-26512

creationtimestamp| type| source ---|---|--- 2023-07-17 12:35:00+00:00| published-proof-of-concept| https://t.me/cibsecurity/66801...

Reflected XSS at upload file

Description 1/ Access to the demo website and login at this case I used user admin 2/ At function upload photo to an album, try upload a file with the name is payload XSS. 3/ The payload will be triggered at error content. Proof of Concept Video PoC:...