CVE-2024-26331

creationtimestamp| type| source ---|---|--- 2024-12-07 14:21:09+00:00| published-proof-of-concept| https://t.me/codeb0ss/1651 2024-12-07 14:30:03+00:00| published-proof-of-concept| Telegram/qs12czNmT1IJozUYCe3e2c9qESe1NUPZq2Ag6J7pLuyULmi 2024-12-07 14:30:05+00:00| published-proof-of-concept|...

CVE-2023-29931

creationtimestamp| type| source ---|---|--- 2024-12-06 23:52:55+00:00| published-proof-of-concept| https://t.me/LeakDBMS/1528...

Qualys TotalAI: The Journey from LLM Scanner to Comprehensive AI Security Solution

Embarking on the AI/ML Journey The launch of Qualys TotalAI marks a significant milestone in our journey with AI/ML. It all began in March 2024 when we ventured into the rapidly evolving AI/ML landscape and the emerging LLM ecosystem. Recognizing the potential of these technologies to revolutioni...

GHSA-JP26-88MW-89QR sigstore-java has a vulnerability with bundle verification

Summary sigstore-java has insufficient verification for a situation where a bundle provides a invalid signature for a checkpoint. Impact This bug impacts clients using any variation of KeylessVerifier.verify Currently checkpoints are only used to ensure the root hash of an inclusion proof was...

CVE-2024-54140

sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient verification for a situation where a bundle provides a invalid signature for a checkpoint. This bug impacts clients using any variation of KeylessVerifier.verify. Currently...

CVE-2024-54140

CVE-2024-54140 : sigstore-java has insufficient verification in KeylessVerifier.verify(), allowing a bundle to provide an invalid signature for a checkpoint and potentially an inclusion proof that doesn’t match the intended log. Impact is described as low for non-monitor/witness clients; fixes ar...

CVE-2024-54140 sigstore-java has a vulnerability with bundle verification

sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient verification for a situation where a bundle provides a invalid signature for a checkpoint. This bug impacts clients using any variation of KeylessVerifier.verify. Currently...

Critical Mitel MiCollab Flaw Exposes Systems to Unauthorized File and Admin Access

Cybersecurity researchers have released a proof-of-concept PoC exploit that strings together a now-patched critical security flaw impacting Mitel MiCollab with an arbitrary file read zero-day, granting an attacker the ability to access files from susceptible instances. The critical vulnerability ...

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

CVE-2023-38831 Exploit Proof-of-Concept Overview This rep...

CVE-2024-5124

creationtimestamp| type| source ---|---|--- 2024-12-03 03:55:45+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9294...

CVE-2023-23336

creationtimestamp| type| source ---|---|--- 2024-12-02 01:56:50+00:00| published-proof-of-concept| https://t.me/DEVILLaRSx/1630...

CVE-2024-52800

creationtimestamp| type| source ---|---|--- 2024-11-30 06:58:11+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9255...

GHSA-4CX5-89VM-833X

creationtimestamp| type| source ---|---|--- 2024-11-30 06:58:11+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9255...

CVE-Research

It is an offensive tool for web application security research. T...

CVE-2019-16332

creationtimestamp| type| source ---|---|--- 2024-11-28 14:32:24+00:00| published-proof-of-concept| https://t.me/jj8tl/118...

Researchers Discover "Bootkitty" – First UEFI Bootkit Targeting Linux Kernels

Cybersecurity researchers have shed light on what has been described as the first Unified Extensible Firmware Interface UEFI bootkit designed for Linux systems. Dubbed Bootkitty by its creators who go by the name BlackCat, the bootkit is assessed to be a proof-of-concept PoC and there is no...

CVE-2024-11234

creationtimestamp| type| source ---|---|--- 2024-11-26 21:49:35+00:00| published-proof-of-concept| https://t.me/LeakDBMS/1523...

GHSA-C5F2-JWM7-MMQ2

creationtimestamp| type| source ---|---|--- 2024-11-26 21:49:35+00:00| published-proof-of-concept| https://t.me/LeakDBMS/1523...

Exploit for CVE-2023-38646

CVE-2023-38646-PoC-Metabase Proof-of-Concept script for exploi...

GHSA-7F6P-PHW2-8253 Taurus multi-party-sig has OT-based ECDSA protocol implementation flaws

Coinbase researchers reported 2 security issues in our implementation of the oblivious transfer OT based protocol DKLS: 1. Secret share recovery attack If the base OT setup of the protocol is reused for another execution of the OT extension, then a malicious participant can extract a bit of the...