483699 matches found
CVE-2021-43811
CVE-2021-43811 awslabs/sockeye Code injection via unsafe YAML loading CVE-2021-43811 NVD Description Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 us...
CVE-2023-22809
CVE-2023-22809 CVE-2023-22809 is a critical vulnerability that affects the popular sudo software, specifically the sudoedit command. This vulnerability allows an attacker to gain root privileges on a targeted system by exploiting a flaw present in the sudoedit command. Exploiting the CVE-2023-228...
CVE-2022-30190
CVE-2022-30190 IMPORTANT Patched as of: June 14th 2022 Security updates CVE Report HTML file must be served to target exaple exploit.html An easy way to run the attack is by running server.py...
AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution
AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution CVE-2024-22515 arbitrary file upload and CVE-2024-22514 remote code execution for AgentDVR 5.1.6.0 Authenticated Older versions likely affected https://github.com/Orange-418/CVE-2024-22514-Remote-Code-Execution...
chithi
Chithi Documentation · Landing Page · Public Instances Chithi pronounced: chee-thee | IPA: /ˈtʃiː θiː/ is an open source end-to-end encrypted file sharing system with a zero trust backend server architecture. Contributing Contributions are welcome. Please open issues for bugs or feature requests,...
CVE-2023-46694
CVE-2023-46694 Discovered by: Federico Zambito with Innovery Summary Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, resulting in remote code execution. This flaw exists due to the application's failure to enforce proper authentication controls when accessing the Ckedito...
CVE-2024-9932
CVE-2024-9932 Wux Blog Editor = 3.0.0 - Unauthenticated Arbitrary File Upload Description: The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbtinsertImageNew' function in versions up to, and including, 3.0.0. This...
Get-log4j-Windows-local
Get-log4j-Windows-local.ps1 Identify all log4j components on a single local windows servers. CVE-2021-44228. A single use copy - see https://github.com/KeysAU/Get-log4j-Windows.ps1 for multi computer. Apache log4j CVE-2021-44228 Script Running: Export: Columns A - I: Continued: Description: Local...
KslKatzBof
KslKatzBOF A Beacon Object File BOF in-line LSASS credential extraction from C2 using the KslD.sys BYOVD technique. This project is based on the blog post: https://avantguard.io/blog/erfahrungsbericht-ki-gest%C3%BCtzte-bof-entwicklung-im-red-team Attribution This BOF is based on KslKatz Maximilia...
CVE-2023-50564-pluck
CVE-2023-50564-pluck CVE-2023-50564 An arbitrary file upload vulnerability in the component /inc/modulesinstall.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file. This is an authenticated vulnerability. Disclaimer: This code is meant for...
CVE-2023-45878
CVE-2023-45878 GibbonEdu Arbitrary File Write to Web Shell Execution Description This repository contains an exploit for CVE-2023-45878 , an arbitrary file write vulnerability in GibbonEdu. The vulnerability affects the rubricsvisualisesaveAjax.php endpoint and allows an unauthenticated attacker ...
Krb5RoastParser
Krb5RoastParser 📑 Table of Contents ❓ What is Krb5RoastParser? ⭐ Features ⚙️ Installation ▶️ Execution 📈 Post Execution 📜 License ❓ What is Krb5RoastParser? Krb5RoastParser is a tool designed to parse Kerberos authentication packets AS-REQ, AS-REP and TGS-REP from .pcap files and generate...
CVE-2024-48914
This post is a research article published by EQSTLab. Thanks toRajesh Sharma, who discovered this vulnerability. CVE-2024-48914 ★ CVE-2024-48914 Arbitrary File Read and DoS PoC ★ Description CVE-2024-48914 : vendure-ecommerce Arbitrary file read and DoS Vulnerability description: Vendure is an...
agentseal
Security toolkit for AI agents. Red-team prompts, detect MCP poisoning, scan skill files, trace toxic data flows. 225+ tests across 28 agents. Docs · MCP Registry · Dashboard · Blog Quick Start pip install agentseal or: npm install agentseal agentseal guard scan your machine - no API key needed...
CVE-2025-25279
Security Advisory MMSA-2025-00430 / CVE-2025-25279 Summary After uploading a file to Mattermost Boards, when the fileId parameter is modified and the board is copied, the file now points to and downloads the target file specified in the parameter. Affected Versions: Mattermost instances with Boar...
mariadb: MariaDB: Unauthorized file access via CONNECT engine functions
A flaw was found in MariaDB. Certain file-access User-Defined Functions UDFs within the CONNECT storage engine do not properly enforce user privileges or directory restrictions when handling file system paths. An authenticated, low-privileged database user can exploit this vulnerability to read...
CVE-2019-2615
CVE-2019-2615 GET /beawlsmanagementinternal2/wlmanagement HTTP/1.1 Host: 192.168.5.137:7001 User-Agent: Mozilla/5.0 Windows NT 6.1; Win64; x64; rv:66.0 Gecko/20100101 Firefox/66.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/ ;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encodin...
CVE-2022-45771
CVE-2022-45771 The PwnDoc is vulnerable to both path traversal and local file inclusion LFI, which allows unprivileged users to disclose JWT secrets and achive code execution. Requirements: An attacker has valid account with user role The application has a report template with either...
Scanner-CVE-2021-41773
Scanner-CVE-2021-41773 A automatic scanner to apache 2.4.49 • run: go run main.go OR go build main.go && ./main • you can customize your payload • vulnerable hosts are saved Make your lab: 1. Pull Image: sudo docker pull blueteamsteve/cve-2021-41773:no-cgid 2. Run Image: sudo docker run -dit -p...