12852 matches found
Calibre Python Code Injection (CVE-2024-6782)
This module exploits a Python code injection vulnerability in the Content Server component of Calibre v6.9.0 - v7.15.0. Once enabled disabled by default, it will listen in its default configuration on all network interfaces on TCP port 8080 for incoming traffic, and does not require any...
Exploit for Race Condition in Openbsd Openssh
CVE-2024-6387 regreSSHion Proof of concept python script for...
GHSA-CF56-G6W6-PQQ2 Twisted vulnerable to HTML injection in HTTP redirect body
Summary The twisted.web.util.redirectTo function contains an HTML injection vulnerability. If application code allows an attacker to control the redirect URL this vulnerability may result in Reflected Cross-Site Scripting XSS in the redirect response HTML body. Details Twisted’s redirectTo functi...
Twisted vulnerable to HTML injection in HTTP redirect body
Summary The twisted.web.util.redirectTo function contains an HTML injection vulnerability. If application code allows an attacker to control the redirect URL this vulnerability may result in Reflected Cross-Site Scripting XSS in the redirect response HTML body. Details Twisted’s redirectTo functi...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft
CVE-2024-30088 Questa repository contiene un Proof of Concept...
Malicious code in this-is-poc-fortesting-dontinstall-12345 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6731f0b45ddfd51d7b4ede3181c38007a58a01e569b13d867b987cd9487ee472 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in w722-poc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 74cbe1029791e4751e8b8c53fda75aa07cd3a6ca974a239c87867db522c2ee8e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in w7-poc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6f1e22fd67359f4e020261c99a45facf30e85d789c3247f245391d4b2ef77feb Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-1003 Malicious code in w722-poc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 74cbe1029791e4751e8b8c53fda75aa07cd3a6ca974a239c87867db522c2ee8e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Photon OS 5.0: Netkit PHSA-2023-5.0-0108
An update of the netkit package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0108. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Curl PHSA-2022-4.0-0205
An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0205. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Exploit for SQL Injection in Payplus Payplus_Payment_Gateway
CVE-2024-6205 pip install requests This is a...
Exploit for Exposure of Private Personal Information to an Unauthorized Actor in Follow-Redirects_Project Follow-Redirects
CVE-2022-0155 Proof-of-Concept PoC This repository contains...
@jmondi/url-to-png contains a Path Traversal vulnerability
Summary When trying to add a BLOCKLIST feature when the maintainer noticed they didn't sanitize the ImageId in the code, which leads to path traversal vulnerability. Now, this is different from a traditional path traversal issue, because as of NOW you can store the image in any place arbitrarily,...
GHSA-5248-H45P-9PGW SQL Injection in the KubeClarity REST API
Summary A time/boolean SQL Injection is present in the following resource /api/applicationResources via the following parameter packageID Details As it can be seen here, while building the SQL Query the fmt.Sprintf function is used to build the query string without the input having first been...
Exploit for ASP.NET Misconfiguration: Use of Identity Impersonation in Vmware Vcenter_Server
VMware vCenter - CVE-2024-37081 Proof of Concept Descripci...
Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms
CVE-2023-4220 Chamilio exploit PoC Shamelessly Copied from...
Exploit for Protection Mechanism Failure in Artifex Ghostscript
PoC exploit for CVE-2024-29510, a Ghostscript format string vuln...
Directus GraphQL Field Duplication Denial of Service (DoS)
Summary A denial of service DoS attack by field duplication in GraphQL is a type of attack where an attacker exploits the flexibility of GraphQL to overwhelm a server by requesting the same field multiple times in a single query. This can cause the server to perform redundant computations and...