11768 matches found
Store XSS at Label sets list in (Version 6.2.7)
Description First of all, I apologize for reporting back. I noticed, the latest current version is 6.2.7. XSS vulnerabilities still exist Proof of Concept Detail: 1 .Login and access Label sets list 2 .Create new label set 3 . Insert payload in to Title haido" onclick="alert1 4 .Click save ==...
GHSA-M9XQ-6H2J-65R2 Markdown vulnerable to Out-of-bounds Read while parsing citations
Summary Parsing malformed markdown input with parser that uses parser.Mmark extension could result in out-of-bounds read vulnerability. Details To exploit the vulnerability, parser needs to have parser.Mmark extension set. The panic occurs inside the citation.go file on the line 69 when the parse...
Deceptive WinRAR PoC Released on GitHub Drops VenomRAT
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A hacker is disseminating a counterfeit proof-of-concept PoC exploit for a WinRAR vulnerability that was recently patched on GitHub, with the intention of infecting those who download it with the VenomRA...
Exploit for Out-of-bounds Write in Google Chrome
CVE-2023-4863/CVE-2023-41064 A POC for CVE-2023-48...
Exploit for Improper Authentication in Chachethq Cachet
CVE-2021-39165 Python3 POC for CVE-2021-39165 in CachetHQ...
Exploit for Classic Buffer Overflow in Jerryscript
CVE-2023-36109 a poc for cve-2023-36109 request repo g...
Fake PoC Script Used to Trick Researchers into Downloading VenomRAT
By Waqas New Malware Campaign Targets CVE-2023-40477 Vulnerability in WinRAR - Researchers Advise Users to Update WinRAR and Be Cautious of Clicking on Links. This is a post from HackRead.com Read the original post: Fake PoC Script Used to Trick Researchers into Downloading VenomRAT...
Weaver Xtreme Theme Support < 6.3.1 - Admin+ PHP Object Injection
Description The plugin unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog. PoC To simulate a gadget chain, put the following code in a plugin: class Te...
Exploit for CVE-2023-3244
proof of concept for CVE-2023-3244 Hello, this is a simple Pr...
Blood Bank And Donor Management System 2.2 Cross Site Scripting
Exploit Title: Blood Bank & Donor Management System using v2.2 - Stored XSS Application: Blood Donor Management System Version: v2.2 Bugs: Stored XSS Technology: PHP Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/blood-bank-donor-management-system-free-download/...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831-WinRAR-Exploit Proof of concept...
OpenRefine Remote Code execution in project import with mysql jdbc url attack
Summary An remote Code exec vulnerability allows any unauthenticated user to exec code on the server. Details Hi,Team, i find openrefine support to import data from database,When use mysql jdbc to connect to database,It is vulnerable to jdbc url attacks,for example,unauthenticated attacker can ge...
GHSA-P3R5-X3HR-GPG5 OpenRefine Remote Code execution in project import with mysql jdbc url attack
Summary An remote Code exec vulnerability allows any unauthenticated user to exec code on the server. Details Hi,Team, i find openrefine support to import data from database,When use mysql jdbc to connect to database,It is vulnerable to jdbc url attacks,for example,unauthenticated attacker can ge...
Store DOM XSS in FAQ
Description I noticed, your website is very secure. But you overlooked a flaw XSS Proof of Concept 1 .Login vs admin demo account and access admin page. 2 .Create a category, Question with payload: haidoalertdocument.domain 3 .Select FAQ status published and Sticky 4 .Back to the homepage, detect...
Magento LTS's guest order "protect code" can be brute-forced too easily
Impact Guest orders may be viewed without authentication using a "guest-view" cookie which contains the order's "protectcode". This code is 6 hexadecimal characters which is arguably not enough to prevent a brute-force attack. Exposing each order would require a separate brute force attack. Patch...
Stored xss using journal-name
BUG ======== Stored xss using journal-name ACCOUNT ========== 1. user-A -- superadmin -- Victim -- Firefox browser Normal mode\ 2. user-B -- journal manager -- Attacker -- Firefox browser Container-1\ STEP TO RERPODUCE ====================== 1. From user-A account create a journal called...
Exploit for Incorrect Authorization in Cacti
CVE-2022-46169 PoC - Unauthenticated RCE in Cacti 1.2.22 This...
GOM Player 2.3.90.5360 - Buffer Overflow (PoC)
Exploit Title: GOM Player 2.3.90.5360 - Buffer Overflow PoC Discovered by: Ahmet Ümit BAYRAM Discovered Date: 30.08.2023 Vendor Homepage: https://www.gomlab.com Software Link: https://cdn.gomlab.com/gretech/player/GOMPLAYERGLOBALSETUPNEW.EXE Tested Version: 2.3.90.5360 latest Tested on: Windows 1...
Wrong calculation of elapsed days
Lines of code Vulnerability details Impact For a certain period of time, the dailyIr is compounded every day. However, when calculating prevClosePrice, the last day's addition is missed. The formula for calculating the current price is as follows: Range.dailyInterestRate Days Elapsed + 1...