MagnusSolution magnusbilling 7.3.0 - Command Injection

Exploit Title: MagnusSolution magnusbilling 7.3.0 - Command Injection Date: 2024-10-26 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/magnussolution/magnusbilling7 Software Link: https://github.com/magnussolution/magnusbilling7 Version: 7.3.0 Tested on: Centos CVE : CVE-2023-30258...

Malicious code in snyk-malware-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7aeae88b889d949c7ba644287aedbedf75ee127f6628eac66f1d18650e5ed899 The OpenSSF Package Analysis project identified 'snyk-malware-poc' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

CodeCanyon Rise CRM 3.7.0 SQL Injection

CodeCanyon Rise CRM version 3.7.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass. PROOF OF CONCEPT CVE: CVE-2024-8945 Exploit Title: RISE Ultimate Project Manager 3.7 sql injection POC Google Dork: N/A Date: September 19, 2024 Exploit Author: Jobyer Ahmed...

Malicious code in vuln-checker-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 321617c9d897d693d750b3e9f986a6a95c4a4810f21d0534e913990ed1eb673e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2719 Malicious code in vuln-checker-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 321617c9d897d693d750b3e9f986a6a95c4a4810f21d0534e913990ed1eb673e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2025-2720

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: According to the code maintainer the call of the POC is invalid because the buffer pointed to by "data...

Exploit for CVE-2025-29927

CVE-2025-29927-PoC-Exploit Proof-of-Concept for Authorization...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

CVE-2025-24813 Apache Tomcat RCE PoC PoC for CVE-2025-24813, a...

Exploit for CVE-2024-7014

PoC for-CVE-2024-7014 Exploit Proof of concept for the CVE-202...

ImageX Image Converter Cross Site Request Forgery

ImageX Image Converter suffers from a cross site request forgery vulnerability that allows you to add an administrator. This software does not list a version but was reported as of March 03, 2025 to be vulnerable. Exploit Title: ImageX - Image Converter - Cross Site Request Forgery CSRF Add Admin...

Axigen 8.10 Directory Traversal

Axigen version 8.10 directory traversal exploit that demonstrates a flaw discovered in 2012. ============================================================================================================================================= | Title : Axigen 8.10 WebAdmin interface Directory Traversal...

Malicious code in poc-by-shahwar (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6381347b8b3c6e2f8f2d7aa1b39647e7f7444e10122cd821b80ae6b3d05c5a7e The OpenSSF Package Analysis project identified 'poc-by-shahwar' @ 0.1.0 rubygems as malicious. It is considered malicious because: - The packag...

MAL-2025-2209 Malicious code in poc-by-shahwar (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09ef73baffffbe5500ee11679985dd5c75ed06b4e014acf464810a079f6aabb2 Source: ossf-package-analysis 6381347b8b3c6e2f8f2d7aa1b39647e7f7444e10122cd821b80ae6b3d05c5a7e The OpenSSF Package Analysis project identified...

Malicious code in poc-genrateed-by-noob (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2adff977f2503f0afe5fb20e3154fa4f8c9a3d0fa5dc7a96613fb5b9434673b4 The OpenSSF Package Analysis project identified 'poc-genrateed-by-noob' @ 0.1.0 rubygems as malicious. It is considered malicious because: - The...

MAL-2025-2210 Malicious code in poc-genrateed-by-noob (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9f9ca4768a627177924962e93c9c19af4c2325059cb28369e50778c7a26e7b4 Source: ossf-package-analysis 2adff977f2503f0afe5fb20e3154fa4f8c9a3d0fa5dc7a96613fb5b9434673b4 The OpenSSF Package Analysis project identified...

CZS CMS 1.3.0 Cross Site Request Forgery

CZS CMS version 1.3.0 suffers from a cross site request forgery vulnerability. Exploit Title: CZS CMS 1.3.0 - Cross Site Request Forgery CSRF Add Admin Date: 2024-05-03 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.cszcms.com Software Link:...

Hestia Control Panel 1.9.3 Remote Code Execution

Hestia Control Panel version 1.9.3 suffers from a remote command execution vulnerability. Exploit Title: Hestia Control Panel Remote Code Execution Google Dork: N/A Date: 05-03-2025 Exploit Author: Buğra Enis Dönmez n3c1 Vendor Homepage: https://hestiacp.com/ Software Link: https://hestiacp.com/...

MAL-2025-1672 Malicious code in dep-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 880d5ea6c43eb50d284249180eca08fc64f4f7efa0a1e1abaaf234acfce4b6d6 The OpenSSF Package Analysis project identified 'dep-poc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in dep-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 880d5ea6c43eb50d284249180eca08fc64f4f7efa0a1e1abaaf234acfce4b6d6 The OpenSSF Package Analysis project identified 'dep-poc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in dependencies-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c3ca96aa79b3d1be281fd751a05f4550a914026dcfd52672223bb466cf6e3d6 The OpenSSF Package Analysis project identified 'dependencies-poc' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...