eps-CVE-2017-0261

eps-CVE-2017-0261- eps 취약점CVE-2017-0261 취약점 분석 분석 과정 idbida6.1 중간 문서 eps 프로그램 로드 사용된 poc 코드 및 취약점의 원본 파일...

CVE-2020-3153

CVE-2020-3153 CVE-2020-3153에 대한 POC 코드 - Cisco AnyConnect 경로 탐색 취약점 취약점에 대한 자세한 내용은 여기에서 확인하세요: https://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal/ Windows 셸을 바탕화면에서 SYSTEM 권한으로 얻기 위한 단계: 1. class1.cs 파일에서 CAC-nc-install 명령줄 매개변수의 Username 문자열을 사용자...

ppfuzz

ppfuzz Prototype Pollution Fuzzer A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀 Installation Binary Source Dependencies Demonstration Usage Basic Options Usage Supporting Materials Contributing Attribution Acknowledments License Installation...

CVE-2018-18026

CVE-2018-18026 CVE-2018-18026에 대한 PoC 코드. 자세한 내용은 @ https://downwithup.github.io/CVEPosts.html에서 확인하세요. 취약한 소프트웨어 다운로드 @: https://www.iobit.com/en/malware-fighter.php...

CVE-2015-8088

CVE-2015-8088 PoC 코드 출처. CVE 상세 정보: https://vulners.com/cve/CVE-2015-8088 취약점 상세 정보: http://kernfunny.org/blog/cve-2015-8088-heap-based-buffer-overflow-in-the-hifi-driver-of-huawei-smart-phone.html...

CVE-2018-16711

CVE-2018-16711 CVE-2018-16711에 대한 PoC 코드 자세한 내용은 @ https://downwithup.github.io/CVEPosts.html에서 확인하세요 취약한 소프트웨어 다운로드 @: https://www.iobit.com/en/advancedsystemcarefree.php...

Arbitrary Code Injection

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Arbitrary Code Injection through lib/builtin.js. An attacker can execute host code when the allowlist includes -X or uses and then calls...

📄 IBM BigFix Platform 9.2 Information Disclosure

IBM BigFix Platform version 9.2 information gathering proof of concept exploit. ============================================================================================================================================= | Title : IBM BigFix Platform 9.2 gather information Vulnerability | | Auth...

Exploit for CVE-2025-52689

CVE-2025-52689 PoC Code PoC code for CVE-2025-52689 Alcatel-L...

Axigen 8.10 Directory Traversal

Axigen version 8.10 directory traversal exploit that demonstrates a flaw discovered in 2012. ============================================================================================================================================= | Title : Axigen 8.10 WebAdmin interface Directory Traversal...

Exploit for Deserialization of Untrusted Data in Ibm Sterling_B2B_Integrator

IBM Sterling B2B Integrator PoC Proof of concept code for the...

Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

CVE-2024-38063 PoC | DKob & N3TCR4SH Overview This scr...

CVE-2024-35329

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

LibreNMS vulnerable to a Time-Based Blind SQL injection leads to database extraction

Summary Get a valid API token, make sure you can access api functions, then replace string on my PoC code, Test on offical OVA image, it's a old version 23.9.1, but this vulerable is also exists on latest version 24.2.0 Details in file apifunctions.php, line 307 for function listdevices php $orde...

Attacks, Vulnerabilities and Actors 18 to 24 March 2024

For a detailed threat digest, download the pdf file here Summary HiveForce Labs recently made several significant discoveries in the realm of cybersecurity threats. In the past week alone, a total of fifteen attacks were executed, eight vulnerabilities were uncovered, and five active adversaries...

Users can avoid liquidation by splitting their positions into smaller ones

Lines of code Vulnerability details Impact Bad debt creation, as the total sum of positions could yield a signicant underwater position, but they would likely not be liquidated as it wouldn't compensate liquidators. Proof of Concept A recent, random transaction on Mantle shows a gas fee of 0.47...

Environment variables still accessible through /proc

Impact Environment variables can be read from procfs unless a new process is started. PoC use birdcage::Birdcage, Sandbox; use std::env, fs; fn main Birdcage::new.lock.unwrap; asserteq!env::varos"SECRET", None; let environ = fs::readtostring"/proc/self/environ".unwrap;...

Chaijs/get-func-name vulnerable to ReDoS

The current regex implementation for parsing values in the module is susceptible to excessive backtracking, leading to potential DoS attacks. The regex implementation in question is as follows: js const functionNameMatch = /\sfunction?:\s|\s/^?:/+\/\s^\s/+/; This vulnerability can be exploited...

Qualys Tackles 2022’s Top Routinely Exploited Cyber Vulnerabilities

A unified front against malicious cyber actors is climactic in the ever-evolving cybersecurity landscape. The joint Cybersecurity Advisory CSA, a collaboration between leading cybersecurity agencies from the United States, Canada, United Kingdom, Australia, and New Zealand, is a critical guide to...

PT-2023-4447

Name of the Vulnerable Software and Affected Versions Ivanti MobileIron Sentry versions 9.18.0 and below Description A security vulnerability in the MICS Admin Portal of Ivanti MobileIron Sentry may allow an attacker to bypass authentication controls on the administrative interface due to an...