Exploit for CVE-2024-42327

Zabbix-CVE-2024-42327 RCE PoC...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

CVE-2024-50379 Proof of Concept PoC This repository contain...

MAL-2024-12009 Malicious code in network-test-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f3556105e3d88ae9ead88263d04cf512babaad83e9f169da9751c0b6d86e022 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in network-test-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f3556105e3d88ae9ead88263d04cf512babaad83e9f169da9751c0b6d86e022 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12059 Malicious code in vintage-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63f6bc17c1c01e6f49a004e5384314cbf05ad37d339d259358798671c386b601 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vintage-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63f6bc17c1c01e6f49a004e5384314cbf05ad37d339d259358798671c386b601 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for CVE-2022-26318

Watchguard-RCE-POC-CVE-2022-26318 PoC for Watc...

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

PoC Authentication Bypass MFA Really Simple Security WordPress...

Russian FSB Cross Site Scripting

/! - VULNERABILITY: Cross Site Scripting Federal Security Service of the Russian Federation - Authenticated Persistent XSS - GOOGLE DORK: inurl:fsb.ru/fsb/sh.htm?query= - DATE: 2024-11-29 - SECURITY RESEARCHER: E1.Coders - VENDOR: FSB http://www.fsb.ru/ - SOFTWARE LINK: http://www.fsb.ru/ - CVSS:...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Amcsgroup Trux_Waste_Management

CVE-2024-22734 Exploit PoC for CVE-2024-22734 !imageh...

Exploit for Cross-site Scripting in Wondercms

CVE-2023-41425 CVE-2023-41425 XSS to RCE, Wonder CMS 3.2.0 &l...

Exploit for Use of Hard-coded Credentials in Mariazevedo88 Travels-Java-Api

PoC Authentication Bypass MFA Really Simple Security WordPress...

@lobehub/chat Server Side Request Forgery vulnerability

Summary lobe-chat before 1.19.13 has an unauthorized ssrf vulnerability. An attacker can construct malicious requests to cause SSRF without logging in, attack intranet services, and leak sensitive information. Details visit https://chat-preview.lobehub.com/ click settings - llm - openai fill the...

Exploit for CVE-2024-50395

CVE-2024-50395 CVE Info An authorization bypass through u...

Exploit for CVE-2024-21534

Vulnerability Information: CVE-2024-21534 The jsonpath-plus...

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

cve-2024-0012-poc CVE-2024-0012 is an authentication bypass v...

Exploit for Missing Authentication for Critical Function in Alibaba Nacos

Introduction The Nacos Derby command execution vulnerability...

Exploit for CVE-2024-29671

NEXTU FLETA Wifi6 Router RCE Exploit POC This document...

Exploit for OS Command Injection in Paloaltonetworks Pan-Os

CVE-2024-9474 PoC for Palo Alto PAN-OS vuln...

Litestar allows unbounded resource consumption (DoS vulnerability)

Summary Litestar offers multiple methods to return a parsed representation of the request body, as well as extractors that rely on those parsers to map request content to structured data types. Multiple of those parsers do not have size limits when reading the request body into memory, which allo...