Lender can cause unintended behavior for the borrower's transaction

Lines of code Vulnerability details This vulnerability comes in the form of when a borrower wants to remove a lender as a both deposit and withdraw and set them as a withdraw only, to avoid paying more interest on their funds in the market, this plan may not go as planned, based on the nature of...

Exploit for CVE-2023-38646

CVE-2023-38646 - Metabase RCE Metabase open source before 0.46...

apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2023-42792 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2023-42792 Source advisory:...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

CVE-2023-22515 Exploit Script 🔐 This script is designed to ex...

Vyper's `_abi_decode` input not validated in complex expressions

Impact abidecode does not validate input when it is nested in an expression. the following example gets correctly validated bounds checked: vyper x: int128 = abidecodeslicemsg.data, 4, 32, int128 however, the following example is not bounds checked vyper @external def abidecodex: uint256 - uint25...

HTMLSmuggler - HTML Smuggling Generator And Obfuscator For Your Red Team Operations

The full explanation what is HTML Smuggling may be found here. The primary objective of HTML smuggling is to bypass network security controls, such as firewalls and intrusion detection systems, by disguising malicious payloads within seemingly harmless HTML and JavaScript code. By exploiting the...

Malware in puppeteer-example

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Apache Airflow 1.10.10 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apache Airflow 1.10.10 - Example DAG Remote Code Execution', 'Description' = %q This module exploits an unauthenticated command injection...

Malicious code in puppeteer-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86dc3a8e94227c886be1f23f2acbcbfcf8e01dd2664461ea24aff9236351b195 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SQL Injection Vulnerability in Content Page

In menu Content page, there is a SQL Injection Vulnerability at Filter function. To exploit this vulnerability, attacker injection query into filter field. Proof of Concept 1. Login with admin 2. Go to "http://127.0.0.1/icms2/admin/content/5". In this case, the number 5 is content's id Can be...

io.fabric8.examples:camel-drools-example (>=1.1.0.beta1, <=1.1.0.beta4) potentially affected by CVE-2022-1415 via org.drools:drools-core (6.1.0.beta2)

org.drools:drools-core MAVEN version 6.1.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - io.fabric8.examples:camel-drools-example =1.1.0.beta1, =1.1.0.beta4 Source cves: CVE-2022-1415 Source advisor...

io.fabric8.examples:camel-drools-example (>=1.1.0.beta5, <=1.1.0.beta6), org.perfcake:perfcake (>=3.0, <=4.1) potentially affected by CVE-2022-1415 via org.drools:drools-core (6.1.0.beta3)

org.drools:drools-core MAVEN version 6.1.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - io.fabric8.examples:camel-drools-example =1.1.0.beta5, =3.0, =4.1 Source cves: CVE-2022-1415 Source advisory:...

org.eclipse.leshan:leshan-all (0.1.11-m1), org.eclipse.leshan:leshan-bs-server (0.1.11-m1) +5 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m1)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m1 - org.eclipse.leshan:leshan-bs-server 0.1.11-m1 -...

org.eclipse.leshan:leshan-all (0.1.11-m2), org.eclipse.leshan:leshan-bs-server (0.1.11-m2) +7 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m2)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m2 - org.eclipse.leshan:leshan-bs-server 0.1.11-m2 -...

org.eclipse.leshan:leshan-all (0.1.11-m4), org.eclipse.leshan:leshan-bs-server (0.1.11-m4) +7 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m4)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m4 - org.eclipse.leshan:leshan-bs-server 0.1.11-m4 -...

org.eclipse.leshan:leshan-all (0.1.11-m6), org.eclipse.leshan:leshan-bs-server (0.1.11-m6) +7 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m6)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m6 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m6 - org.eclipse.leshan:leshan-bs-server 0.1.11-m6 -...

org.eclipse.leshan:leshan-all (0.1.11-m7), org.eclipse.leshan:leshan-bs-server (0.1.11-m7) +7 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m7)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m7 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m7 - org.eclipse.leshan:leshan-bs-server 0.1.11-m7 -...

oss-fuzz-example:fuzz_complex_parser: Heap-buffer-overflow in parse_complex_format

Project: https://github.com/AdaLogics/oss-fuzz-example.git Detailed Report: https://oss-fuzz.com/testcase?key=4884946693783552 Project: oss-fuzz-example Fuzzing Engine: afl Fuzz Target: fuzzcomplexparser Job Type: aflasanoss-fuzz-example Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

Exploit for Command Injection in Apache Airflow

Apache Airflow SQL injection PoC CVE-2023-22884 PoC for C...

Bashfuscator - A Fully Configurable And Extendable Bash Obfuscation Framework

Documentation What is Bashfuscator? Bashfuscator is a modular and extendable Bash obfuscation framework written in Python 3. It provides numerous different ways of making Bash one-liners or scripts much more difficult to understand. It accomplishes this by generating convoluted, randomized Bash...