20242 matches found
Exploit for CVE-2024-35176
CVE-20...
Unsound usages of `u8` type casting
The library provides a safe public API unpack to cast u8 array to arbitrary types, which can cause to undefined behaviors. The length check of array can only prevent out-of-bound access on the return type. However, it can't prevent misaligned pointer when casting u8 pointer to a type aligned to...
CLSA-2024-1734532058 unbound: Fix of 2 CVEs
CVE-2023-50387: Evaluate DNSSEC responses to prevent KeyTrap denial of service issue. - CVE-2023-50868: Fix Closest Encloser Proof aspect to prevent CPU consumption for SHA-1 computations in random subdomain attacks...
Patch Alert: Critical Apache Struts Flaw Found, Exploitation Attempts Detected
Threat actors are attempting to exploit a recently disclosed security flaw impacting Apache Struts that could pave the way for remote code execution. The issue, tracked as CVE-2024-53677, carries a CVSS score of 9.5 out of 10.0, indicating critical severity. The vulnerability shares similarities...
CVE-2023-4698
creationtimestamp| type| source ---|---|--- 2024-12-18 12:00:21+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8971...
Exploit for CVE-2024-45337
CVE-2024-45337-POC Proof of concept POC for CVE-2024-45337...
Improper Input Validation
dev.sigstore, sigstore-java is vulnerable to Improper Input Validation. The vulnerability is due to insufficient verification in the KeylessVerifier.verify method, which fails to properly validate whether the inclusion proof provided by a bundle corresponds to the correct log, allows an attacker ...
Exploit for Unrestricted Upload of File with Dangerous Type in Apache Struts
Source of POC https://y4tacker.github.io/2024/12/16/year/2024/...
CLSA-2024-1734368297 gnutls: Fix of 3 CVEs
Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use gnutlsswitchlibstate for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side...
Exploit for CVE-2024-38819
CVE-2024-38819: Proof of Concept PoC This is a proof of con...
CVE-2024-38348
creationtimestamp| type| source ---|---|--- 2024-12-13 19:00:22+00:00| published-proof-of-concept| https://t.me/cyberhsecurity/1609...
CVE-2023-41690 WordPress WiserNotify Social Proof plugin <= 2.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Wisernotify team WiserNotify wiser-notify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WiserNotify: from n/a through = 2.5...
WordPress plugin WiserNotify Social Proof 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-36120 · Unknown · Elite Notification – Sales Popup
Name of the Vulnerable Software and Affected Versions: Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification versions 1.5 through n/a Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation due to incorrectly configured acces...
bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources
A flaw was found in bind9. By flooding a DNSSEC resolver with responses coming from a DNSEC-signed zone using NSEC3, an attacker can lead the targeted resolver to a CPU exhaustion, further leading to a Denial of Service on the targeted host. This vulnerability applies only for systems where DNSSE...
Exploit for SQL Injection in Iqonic Kivicare
CVE-2024-11728 KiviCare – Clinic & Patient Management Syst...
Vulnerabilities fixed in Mitel MiCollab
Mitel has fixed vulnerabilities in Mitel MiCollab Specifically the Unified Messaging and Conferencing components. The vulnerabilities are in the way Mitel MiCollab components handle user input. An attacker can exploit these vulnerabilities to gain unauthorized access to user data and system...
Exploit for Path Traversal in Aiohttp
CVE-2024-23334-PoC This repository is a proof of concept POC...
CVE-2024-26331
creationtimestamp| type| source ---|---|--- 2024-12-07 14:21:09+00:00| published-proof-of-concept| https://t.me/codeb0ss/1651 2024-12-07 14:30:03+00:00| published-proof-of-concept| Telegram/qs12czNmT1IJozUYCe3e2c9qESe1NUPZq2Ag6J7pLuyULmi 2024-12-07 14:30:05+00:00| published-proof-of-concept|...