CVE-2024-23995

creationtimestamp| type| source ---|---|--- 2024-09-06 06:16:30+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8464...

Exploit for Cross-site Scripting in Martinbarker Rendertune

RenderTune RCE A Proof-Of-Concept for CVE-2024-25292 vulnerab...

Exploit for CVE-2024-23995

Beekeeper-Studio PoC A Proof-Of-Concept for CVE-2024-23995 vul...

Exploit for Open Redirect in Nteract

Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerabilit...

Exploit for Cross-site Scripting in Lukasbach Yana

YANA Notebook PoC A Proof-Of-Concept for CVE-2024-23997 vulner...

PT-2024-39069

Name of the Vulnerable Software and Affected Versions: SPIP versions prior to 4.3.2, 4.2.16, and 4.1.18 Description: SPIP is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HT...

PT-2024-12772 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided input. Description: A proof of concept POC is available, but details about the issue are not explicitly mentioned. No information is provided about potentially affected devices or...

Exploit for OS Command Injection in Progress Loadmaster

CVE-2024-1212 Command Injection Exploit for Kemp LoadMaster 🛡️...

CVE-2024-45307

creationtimestamp| type| source ---|---|--- 2024-09-03 21:39:25+00:00| published-proof-of-concept| https://t.me/cvedetector/4709...

Vulnerabilities fixed in Progress WhatsUp Gold

Progress has fixed vulnerabilities in WhatsUp Gold. A malicious party can exploit the vulnerabilities to retrieve or change the password of the application user in a Single User installation, or in a Multi User installation to change the password of a user with elevated privileges through an...

CVE-2023-41111

creationtimestamp| type| source ---|---|--- 2024-09-02 09:10:13+00:00| published-proof-of-concept| https://t.me/HackerArsenal/248 2024-09-02 17:43:31+00:00| published-proof-of-concept| https://t.me/CNArsenal/3100 2024-09-06 18:12:05+00:00| published-proof-of-concept|...

PT-2024-30250 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins affected versions not specified Description: A proof of concept PoC exploit has been released for a bug in Jenkins. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...

Fortinet SSL VPN Bruteforce Login Utility

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Fortinet SSL VPN Bruteforce Login Utility', 'Description' = % This module scans for Fortinet SSL VPN web login portals and performs login brute...

Memcached Stats Amplification Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Memcached Stats Amplification Scanner', 'Description' = %q This module can be used to discover Memcached servers which expose the unrestricted UD...

SNMP Community Login Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/communitystringcollection' require 'metasploit/framework/loginscanner/snmp' class MetasploitModule 'SNMP Community Login Scanner',...

CVE-2024-1543

creationtimestamp| type| source ---|---|--- 2024-08-30 02:16:07+00:00| published-proof-of-concept| https://t.me/cvedetector/4484...

CVE-2024-45302

creationtimestamp| type| source ---|---|--- 2024-08-29 19:09:56+00:00| published-proof-of-concept| https://github.com/restsharp/RestSharp/security/advisories/GHSA-4rr6-2v9v-wcpc 2024-08-30 01:25:55+00:00| published-proof-of-concept| https://t.me/cvedetector/4478...

Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet Attacks

A years-old high-severity flaw impacting AVTECH IP cameras has been weaponized by malicious actors as a zero-day to rope them into a botnet. CVE-2024-7029 CVSS score: 8.7, the vulnerability in question, is a "command injection vulnerability found in the brightness function of AVTECH closed-circui...

Exploit for Improper Input Validation in Cacti

CVE-2024-25641 - Cacti 1.2.26 - Arbitrary file write to RCE 🌵...

CVE-2021-27090

creationtimestamp| type| source ---|---|--- 2024-08-28 19:30:05+00:00| published-proof-of-concept| https://t.me/truesecator/6144 2024-08-29 19:16:11+00:00| published-proof-of-concept| https://t.me/SEReborn/5065...