Stored XSS on user "Write private message" function

Description An attacker can inject malicious executable scripts into the code of the message field. Proof of Concept Log in as a Member user, access Messages - Write private message function for sending admin a message.COde Insert this payload into the message field testscriptprompt'1'/script the...

Stored XSS on user "Edit own profile" function

Description An attacker can inject malicious executable scripts into the code of the Social media field Proof of Concept Log in as a Member user, access My profile - Edit own profile function, insert this payload to any field " autofocus onfocus=promptdocument.domain then click Save. Access the...

Improper handling of input value leads to Remote Code Execution or Denial of Service

Description Some value in some input field was directly inserted into a file called "tp.config.php", an attacker can inject malicious PHP code to perform a remote code execution attack. Proof of Concept Go to Settings - MFA - Duo Security function, input this payload: ',; phpinfo; ?// on the...

Exploit for Cross-site Scripting in Advancedcustomfields Advanced_Custom_Fields

CVE-2023-30777 Proof of Concept PoC URL generator for...

CVE-2023-78001

creationtimestamp| type| source ---|---|--- 2023-06-16 18:40:41+00:00| published-proof-of-concept| https://t.me/codeb0ss/812...

CVE-2023-34600

creationtimestamp| type| source ---|---|--- 2023-06-16 08:42:39+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4571...

Exploit for Code Injection in Apache Cassandra

0day 由于众所周知的原因，原始仓库被删除，但保留了副本，forks和stars 清零 不过请放心，还是原来的配方，原来的味道。 为了避免再次出现这种情况找不到此项目，可以Follow 一下 本仓库所有内容仅限用于学习交流 English | 中文 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新 优秀项目列表 1. Fastjson RCE https://github.com/dbgee/fastjson-rce 2. Log4j RCE https://github.com/dbgee/log4j2rce 3. redis RCE...

GHSA-6QMP-9P95-FC5F

creationtimestamp| type| source ---|---|--- 2023-06-15 11:07:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8492...

CVE-2023-34251

creationtimestamp| type| source ---|---|--- 2023-06-14 20:51:04+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-f9jf-4cp4-4fq5 2023-06-18 11:04:31+00:00| published-proof-of-concept| https://t.me/cKure/11130...

Fake Researcher Profiles Spread Malware through GitHub Repositories as PoC Exploits

At least half of dozen GitHub accounts from fake researchers associated with a fraudulent cybersecurity company have been observed pushing malicious repositories on the code hosting service. All seven repositories, which are still available as of writing, claim to be a proof-of-concept PoC exploi...

Fake Researcher Profiles Spread Malware through GitHub Repositories as PoC Exploits

At least half of dozen GitHub accounts from fake researchers associated with a fraudulent cybersecurity company have been observed pushing malicious repositories on the code hosting service. All seven repositories, which are still available as of writing, claim to be a proof-of-concept PoC exploi...

NATIVE TOKENS COULD GET STUCK INSIDE THE LlamaCore CONTRACT SINCE THERE IS NO WITHDRAWAL MECHANISM

Lines of code Vulnerability details Impact The LlamaCore contract has a single payable function LlamaCore.executeAction. It is used to execute actions by calling the executor.execute function. But the native token recieved by this contract is passed on to the executor.execute function call. Only...

ERC721 tokens can be forever locked when transferring

Lines of code Vulnerability details Impact An action that transfers ERC721 tokens from the account contract to another contract could result in the ERC721 tokens being locked forever if the receiving contract doesn't support receiving ERC721 tokens. Proof of Concept The LlamaAccount contract uses...

The low-level call returns true if the address does not exist

Lines of code Vulnerability details Impact As written in the Solidity documentation , the call, delegatecall and staticcall low-level functions return true as its first return value if the account being invoked does not exist, as part of the design of the EVM. The existence of the account must be...

Exploit for CVE-2023-2986

CVE-2023-2986 Proof of Concept POC Python Vers...

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Gvectors Wpforo_Forum

Original Proof of Concept for CVE-2023-2249 - Proof of Concep...

XSS_vuln_issue

It is an offensive tool for web application security testing. Th...

Sales Tracker Management System v1.0 - Multiple Vulnerabilities

Exploit Title: Sales Tracker Management System v1.0 – Multiple Vulnerabilities EXPLOIT-AUTHOR: AFFAN AHMED Vendor Homepage: Software Link: Version: 1.0 Tested on: Windows 11 + XAMPP CVE : CVE-2023-3184 ============================== CREDENTIAL TO USE ============================== ADMIN-ACCOUNT...

Teachers Record Management System 1.0 - File Upload Type Validation

Exploit Title: Teachers Record Management System 1.0 – File Upload Type Validation Date: 17-01-2023 EXPLOIT-AUTHOR: AFFAN AHMED Vendor Homepage: Software Link: Version: 1.0 Tested on: Windows 11 + XAMPP CVE : CVE-2023-3187 =============================== STEPSTOREPRODUCE...

Desktop APP RCE via saveDraft IPC

🔒️ Requirements The user must load a malicious project. 📝 Description In version 20.3.3 commit 5383c20e947fd772668316e407edc5d5db4850db, the shell=true option is added to a spawn execution. This is really dangerous has it allows a malicious user to execute commands even from attributes. Example: j...