Exploit for Improper Privilege Management in Oracle Vm_Virtualbox

cve-2023-21987-poc Oracle VirtualBox VGA OOB-Read Vulnerab...

EulerOS 2.0 SP8 : dnsmasq (EulerOS-SA-2024-2461)

According to the versions of the dnsmasq packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certain DNSSEC aspects of the DNS protocol in RFC 4033, 4034, 4035, 6840, and related RFCs allow remote attackers to cause a denial of service CP...

EulerOS 2.0 SP8 : bind (EulerOS-SA-2024-2456)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certain DNSSEC aspects of the DNS protocol in RFC 4033, 4034, 4035, 6840, and related RFCs allow remote attackers to cause a denial of service CPU...

Duplicate Advisory: Camaleon CMS vulnerable to remote code execution through code injection (GHSL-2024-185)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7x4w-cj9r-h4v9. This link is maintained to preserve external references. Original Description The actions defined inside of the MediaController class do not check whether a given path is inside a certain path e....

CVE-2024-27394

creationtimestamp| type| source ---|---|--- 2024-09-23 17:58:32+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11175...

PT-2024-40048 · Unknown · Camaleon Cms

Name of the Vulnerable Software and Affected Versions: Camaleon CMS affected versions not specified Description: The issue concerns a path traversal vulnerability in the MediaController class. An attacker who has taken over an administrator account could delete arbitrary files or folders on the...

BlackNET 3.7.0.0 Missing Authentication / File Deletion / Traversal Exploit

BlackNET version 3.7.0.0 appears to allow unauthenticated access to modify data and suffers from arbitrary file deletion and directory traversal vulnerabilities while authenticated. Exploit Title: BlackNET - Multiple Vulnerabilities Exploit Author: bRpsd Date: 20/09/2024 Vendor Homepage:...

CVE-2024-36683

creationtimestamp| type| source ---|---|--- 2024-09-22 23:29:49+00:00| published-proof-of-concept| https://t.me/codeb0ss/1606 2024-09-30 06:28:15+00:00| published-proof-of-concept| https://t.me/LYNXBLACKHHATS/8327 2024-09-30 06:28:15+00:00| published-proof-of-concept|...

GHSA-58VJ-CV5W-V4V6 Navidrome has Multiple SQL Injections and ORM Leak

Security Advisory: Multiple Vulnerabilities in Navidrome Summary Navidrome automatically adds parameters in the URL to SQL queries. This can be exploited to access information by adding parameters like password=... in the URL ORM Leak. Furthermore, the names of the parameters are not properly...

CVEs

It is an offensive tool for web exploitation. This repository co...

Exploit for Cross-Site Request Forgery (CSRF) in Creativeitem Academy_Lms

CVE-2022-47132 Academy LMS = 5.10 CSRF Description Acad...

CVE-2022-46723

creationtimestamp| type| source ---|---|--- 2024-09-19 10:18:53+00:00| published-proof-of-concept| https://t.me/ton618cyber/3863 2024-09-19 10:18:53+00:00| published-proof-of-concept| https://t.me/ton618cyber/933 2024-09-19 13:11:55+00:00| published-proof-of-concept| https://t.me/HackerArsenal/39...

CVE-2024-46785

creationtimestamp| type| source ---|---|--- 2024-09-18 10:53:25+00:00| published-proof-of-concept| https://t.me/cvedetector/5947...

CVE-2024-44346

creationtimestamp| type| source ---|---|--- 2024-09-17 18:25:44+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8545...

GHSA-R49H-6QXQ-624F

creationtimestamp| type| source ---|---|--- 2024-09-17 09:09:01+00:00| published-proof-of-concept| https://t.me/G18Division/34 2024-09-17 20:40:45+00:00| published-proof-of-concept| https://t.me/whoisAlixan/2908 2024-10-15 01:39:58+00:00| published-proof-of-concept| https://t.me/BhinnekaSec/2642...

CVE-2022-25479

creationtimestamp| type| source ---|---|--- 2024-09-17 06:30:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8544...

CVE-2022-21969

creationtimestamp| type| source ---|---|--- 2024-09-17 04:21:56+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5200 2026-07-29 12:02:46+00:00| seen| https://t.me/reverseame/2011 2026-07-30 00:02:40+00:00| seen| https://t.me/reverseame/2011 2026-08-03 03:04:24+00:00|...

Microsoft SQL Server Masked Data Exposure

Title: SQL Server Masked Data Exposure Through Brute Force Attack Product: Database Manufacturer: Microsoft Affected Versions: SQL Server 2014, 2016,2017,2019,2022 Tested Versions: SQL Server 2014, 2016,2017,2019,2022 Risk Level: Low Security Feature: Dynamic Data Masking Author of Advisory: Emad...

CVE-2024-38041

creationtimestamp| type| source ---|---|--- 2024-09-16 17:39:22+00:00| published-proof-of-concept| https://t.me/cKure/13618 2025-01-19 02:36:04+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11698 2026-07-29 12:02:10+00:00| seen| https://t.me/reverseame/4738 2026-07-30...

CVE-2020-5144

creationtimestamp| type| source ---|---|--- 2024-09-16 16:13:19+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2525 2026-09-01 17:01:05+00:00| seen| https://t.me/cissp/2173 2026-09-02 01:04:55+00:00| seen| https://t.me/cissp/2173 2026-09-11 20:00:06+00:00| seen|...