689 matches found
CVE-2022-23307
creationtimestamp| type| source ---|---|--- 2022-01-18 18:24:49+00:00| seen| https://t.me/cibsecurity/35703 2023-12-11 15:30:06+00:00| seen| https://t.me/truesecator/5186 2025-06-24 12:56:14+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lse5h5hays2r 2026-02-26...
CVE-2021-4056
Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Pentaho Business Analytics / Pentaho Business Server 9.1 User Enumeration Vulnerability
Pentaho implements a series of web services using the SOAP protocol to allow scripting interaction with the backend server. HAWSEC identified that the services userRoleListService and ServiceAction exposed through the /pentaho/webservices/userRoleListService and...
CVE-2025-34077
creationtimestamp| type| source ---|---|--- 2021-11-02 14:37:05+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wppieregisterbypassrce.rb 2025-07-10 03:00:13+00:00| published-proof-of-concept|...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
This is a PoC exploit for CVE-2020-0796, a SMBv3 RCE vulnerability. The scanner is designed to test whether a server is vulnerable to this exploit. It checks for SMB dialect 3.1.1 and compression capability through a negotiate request. The scanner sends a specially crafted SMB packet to the targe...
UBUNTU-CVE-2021-22172
Improper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data that should be inaccessible on the releases page...
UBUNTU-CVE-2021-28952
An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port ID number is encountered, aka CID-1c668e1c0a0f. This has been fixed in 5.12-rc4...
Exploit for Path Traversal in Microsoft
I will continue to add any new code or modify existing code ba...
CVE-2020-24679
creationtimestamp| type| source ---|---|--- 2020-12-23 00:54:03+00:00| seen| https://t.me/cibsecurity/21199...
PYSEC-2020-148
urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest. NOTE: this is similar to CVE-2020-26116...
UBUNTU-CVE-2020-15113
In etcd before versions 3.3.23 and 3.4.10, certain directory paths are created etcd data directory and the directory path when provided to automatically generate self-signed certificates for TLS connections with clients with restricted access permissions 700 by using the os.MkdirAll. This functio...
GHSA-XP63-6VF5-XF3V Command injection in codecov (npm package)
Impact The upload method has a command injection vulnerability. Clients of the codecov-node library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. A similar CVE was issued: CVE-2020-7597, but the fix was incomplete. It only blocked &, and...
SUSE-SU-2020:1789-1 Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2020-8022: Fixed a local root exploit due to improper permissions bsc1172405...
OX Guard 2.10.3 Cross Site Scripting / Server-Side Request Forgery Vulnerabilities
Exploit for php platform in category web applications Product: OX Guard Vendor: OX Software GmbH Internal reference: GUARD-179 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 2.10.3 Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed by Vendor Fixed...
OX Guard 2.10.3 Cross Site Scripting / Server-Side Request Forgery
Product: OX Guard Vendor: OX Software GmbH Internal reference: GUARD-179 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 2.10.3 Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 2.10.2-rev9, 2.10.3-rev4 Vendor notification...
CVE-2019-5135
WAGO PFC100/200 Web-Based Management (WBM) authentication timing information disclosure (CVE-2019-5135) is detailed in the TALOS entry. The vulnerability resides in the WBM login routine where the PHP crypt() function is used to generate a password hash for comparison, allowing an attacker to inf...
eMerge E3 Access Controller 4.6.07 - Remote Code Execution Exploit
Exploit Title: eMerge E3 Access Controller 4.6.07 - Remote Code Execution Exploit Author: LiquidWorm Vendor Homepage: http://linear-solutions.com/nscfamily/e3-series/ Software Link: http://linear-solutions.com/nscfamily/e3-series/ Version: 4.6.07 Tested on: NA CVE : CVE-2019-7265 Advisory:...
CVE-2019-8042
creationtimestamp| type| source ---|---|--- 2019-08-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47276 2025-08-31 03:01:29+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:13:06+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...