11763 matches found
Exploit for CVE-2023-38646
Metabase Pre-Auth RCE POC - CVE-2023-38646 Metabase open sourc...
Exploit for SQL Injection in Spiceworks Help_Desk_Server
Spiceworks Sort SQLi There's a SQLi in a sort parameter of...
kk Star Ratings < 5.4.6 - Rating Tampering via Race Condition
Description The plugin does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition. PoC 1- Install and activate kk Star Ratings. 2- Go to the page that displays the star rating. 3- Using Burp and the Turbo Intruder extension, intercept the rating...
Exploit for Improper Initialization in Linux Linux_Kernel
!Dirty Pipehttps://forum.hackersploit.org/uploads/default/ori...
Exploit for Cross-site Scripting in Wondercms
CVE-2023-41425 Description Cross Site Scripting vulnerabil...
Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center
CVE-2023-22518 An Exploitation tool to exploit the confluence...
Exploit for Deserialization of Untrusted Data in Apache Activemq
CVE-2023-46604 This repository contains an exploit script and...
Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware
CVE-2023-20198 An Exploitation script developed to exploit the...
Medialist < 1.4.1 - Contributor+ Stored XSS
Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks PoC medialist style='"...
HelloKitty Ransomware Group Exploiting Apache ActiveMQ Vulnerability
Cybersecurity researchers are warning of suspected exploitation of a recently disclosed critical security flaw in the Apache ActiveMQ open-source message broker service that could result in remote code execution. "In both instances, the adversary attempted to deploy ransomware binaries on target...
Teams_Dump - PoC For Dumping And Decrypting Cookies In The Latest Version Of Microsoft Teams
PoC for dumping and decrypting cookies in the latest version of Microsoft Teams extract.py just dumps without arguments extract.exe is just extract.py packed into an exe List values in the database python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key, value...
Exploit for Code Injection in Vmware Spring_Cloud_Function
CVE-2022-22963-Poc-Bearcules This is a POC for CVE-2022-229...
SugarCRM 13.0.1 Shell Upload
------------------------------------------------------------------------------- SugarCRM = 13.0.1 setnoteattachment Unrestricted File Upload Vulnerability ------------------------------------------------------------------------------- - Software Link: https://www.sugarcrm.com - Affected Versions:...
Solmate safetransfer and safeTransferFrom do not check the code size of the token address, which may lead to loss of funds
Lines of code Vulnerability details Impact WildcatMarketWithdrawals, WildcatMarketController, WildcatMarket contracts use Solmate safetransfer and safeTransferFrom functions. However, these functions don't check the existence of code at the token address. This is a known issue while using solmate...
Exploit for Improper Access Control in Joomla Joomla\!
CVE-2023-23752 Exploit for CVE-2023-23752 4.0.0 = Joomla...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831 CVE-2023-38831 is an RCE in WinRAR 6.23...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2023-36745 Microsoft Exchange Server CVE-2...
U.S. Dept Of Defense: Reflected XSS via Keycloak on ███ [CVE-2021-20323]
The Keycloak 8.0 and prior versions contained a cross-site scripting vulnerability. An attacker could have executed arbitrary script by inserting a malicious payload in the path of a POST request to the /auth/realms/master/clients-registrations/openid-connect endpoint. This allowed the server to...