20117 matches found
CVE-2025-56527
creationtimestamp| type| source ---|---|--- 2025-11-14 15:00:07+00:00| published-proof-of-concept| Telegram/JTPMSiIeITdIAco4zqe7AJCP4y0ey6zBic2rAw1xqSNEfqQ...
CVE-2025-56526
creationtimestamp| type| source ---|---|--- 2025-11-14 15:00:07+00:00| published-proof-of-concept| Telegram/JTPMSiIeITdIAco4zqe7AJCP4y0ey6zBic2rAw1xqSNEfqQ...
Now-Patched Fortinet FortiWeb Flaw Exploited in Attacks to Create Admin Accounts
Cybersecurity researchers are sounding the alert about an authentication bypass vulnerability in Fortinet FortiWeb Web Application Firewall WAF that could allow an attacker to take over admin accounts and completely compromise a device. "The watchTowr team is seeing active, indiscriminate...
Improper Authorization
Overview Affected versions of this package are vulnerable to Improper Authorization via the shareDeleteHandler function, which handles deletion requests based solely on the share hash, and does not verify whether the link.UserID matches the currently authenticated user's ID d.user.ID. An attacker...
GHSA-6CQF-CFHV-659G File Browser is Vulnerable to Insecure Direct Object Reference (IDOR) in Share Deletion Function
Summary It has been found an Insecure Direct Object Reference IDOR vulnerability in the FileBrowser application's share deletion functionality. This vulnerability allows any authenticated user with share permissions to delete other users' shared links without authorization checks. The impact is...
CVE-2025-63830
creationtimestamp| type| source ---|---|--- 2025-11-12 15:00:09+00:00| published-proof-of-concept| Telegram/TnTlInxxzNpt0OgbsDLOj6rIodSNCMGeXkGWTk3FIFq8dbI...
CVE-2024-4890
creationtimestamp| type| source ---|---|--- 2025-11-12 15:00:09+00:00| published-proof-of-concept| Telegram/TnTlInxxzNpt0OgbsDLOj6rIodSNCMGeXkGWTk3FIFq8dbI...
CVE-2025-31931
creationtimestamp| type| source ---|---|--- 2025-11-11 23:12:13+00:00| published-proof-of-concept| Telegram/qk0xbo4HJ4SgyIuAy9GGDmkgHDhpw2mchBX-MgrEMQAw...
CVE-2025-55449
creationtimestamp| type| source ---|---|--- 2025-11-11 13:12:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/59265 2025-11-11 21:00:05+00:00| published-proof-of-concept| Telegram/shWj4yVZfYZ8SMMOaybmV9yApMn3mNDIaTU298AMpVdB8 2025-12-10 05:34:39+00:00| published-proof-of-concept|...
Exploit for Reachable Assertion in Open5Gs
Open5GS-CVE-2025-41067-CVE-2025-41068-PoC This repository cont...
42_Boot2Root
It is an offensive tool for Linux. This repository contains a Pr...
Cryptographic Binding Should Not Be Optional: A Formal-Methods Analysis of FIDO UAF Channel Binding
As a case study in cryptographic binding, we present a formal-methods analysis of the cryptographic channel binding mechanisms in the Fast IDentity Online FIDO Universal Authentication Framework UAF authentication protocol, which seeks to reduce the use of traditional passwords in favor of...
Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor
CVE-2023-45612 PoC This repository contains a proof of concep...
CVE-2025-61299
creationtimestamp| type| source ---|---|--- 2025-11-07 05:43:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/58649 2025-11-07 09:00:04+00:00| published-proof-of-concept| Telegram/rxBXc7mJGGU5sBhvwkQkmojEU4Xu3I8--yJupvnllAH1D4...
CVE-2025-64435
creationtimestamp| type| source ---|---|--- 2025-11-06 19:28:50+00:00| published-proof-of-concept| https://github.com/kubevirt/kubevirt/security/advisories/GHSA-9m94-w2vq-hcf9...
CVE-2025-64433
creationtimestamp| type| source ---|---|--- 2025-11-06 19:24:43+00:00| published-proof-of-concept| https://github.com/kubevirt/kubevirt/security/advisories/GHSA-qw6q-3pgr-5cwq...
CVE-2025-56643
creationtimestamp| type| source ---|---|--- 2025-11-06 18:54:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/58593 2025-11-07 03:00:06+00:00| published-proof-of-concept| Telegram/Z22ddpILY-yeUUVWiXwyxi9IfQjGUAfHXsS4qd56wYck-To...
Exploit for Improper Input Validation in Microsoft
CVE-2024-214...