WordPress MapFig Studio 0.2.1 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: MapFig Studio alert1" / alert1" / history.pushState'', '', '/'; document.forms0.submit; Reference: https://wpscan.com/vulnerability/0346b62c-a856-4554-a24a-ef2c2943bda9/...

CVE-2024-5651

creationtimestamp| type| source ---|---|--- 2024-08-12 17:17:25+00:00| published-proof-of-concept| https://t.me/HackingInsights/9581...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the rpctensor structure. An attacker can cause memory data leakage by exploiting the unsafe type member. PoC from pwn import ALLOCBUFFER = 0 GETALIGNMENT = 1 GETMAXSIZE = 2 BUFFERGETBASE = 3 FREEBUFFER = 4...

Vulnerability fixed in Asterisk

A vulnerability has been fixed in Asterisk. A malicious person could exploit the vulnerability to grant themselves elevated privileges and execute arbitrary code with application privileges. For successful abuse, the malicious party must have prior authentication. The researcher who discovered th...

CVE-2024-7649

creationtimestamp| type| source ---|---|--- 2024-08-11 23:22:15+00:00| published-proof-of-concept| Telegram/f8fTTUkTuukLjmCpX7YyAiy3JqkWCMGtmGcAmWUnQdwS9Jic 2024-08-30 06:52:02+00:00| published-proof-of-concept| https://t.me/codeb0ss/1553...

Exploit for Incorrect Authorization in Nexxtsolutions Nebula1200-Ac_Firmware

EN This project provides a proof-of-concept exploit for a remo...

CVE-2023-50809

creationtimestamp| type| source ---|---|--- 2024-08-09 16:50:05+00:00| published-proof-of-concept| https://t.me/truesecator/6078...

Open WebUI 0.1.105 File Upload / Path Traversal Vulnerabilities

Title: Open WebUI Arbitrary File Upload + Path Traversal Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2024-006.txt 1. Vulnerability Details Affected Vendor: Open WebUI Affected Product: Open WebUI Affected Version: 0.1.105 Platform: Debian 12 CWE Classification: CWE-22:...

Journyx 11.5.4 XML Injection Vulnerability

Journyx version 11.5.4 has an issue where the soapcgi.pyc API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources. Title:...

CVE-2024-42243

creationtimestamp| type| source ---|---|--- 2024-08-07 18:38:41+00:00| published-proof-of-concept| https://t.me/cvedetector/2704...

Exploit for CVE-2023-6444

CVE-202306444-POC Proof of concept...

Sony: 明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）

The WH-1000XM5 headphones were found to have an authentication vulnerability that allowed an attacker to connect to the device without going through the proper pairing process. This vulnerability could be combined with existing Bluetooth attacks to enable man-in-the-middle attacks...

CVE-2021-37915

creationtimestamp| type| source ---|---|--- 2024-08-05 18:55:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4614 2026-07-29 12:02:51+00:00| seen| https://t.me/reverseame/1794 2026-07-30 00:02:41+00:00| seen| https://t.me/reverseame/1794 2026-08-03 04:06:25+00:00|...

zzz

It is an offensive tool for Linux. The repository appears to be...

CVE-2024-27878

creationtimestamp| type| source ---|---|--- 2024-08-05 05:02:14+00:00| published-proof-of-concept| https://t.me/HackerArsenal/116 2024-08-05 05:02:29+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/700 2024-08-05 11:03:34+00:00| published-proof-of-concept|...

CVE-2024-2997

creationtimestamp| type| source ---|---|--- 2024-08-05 00:05:59+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/2112 2026-04-21 15:00:06+00:00| published-proof-of-concept| Telegram/OSwk74LPyb-SoCOGGq7g6dJYTwStVpGs5Vg25MlO305tzc...

ReadyMade Unilevel Ecommerce MLM Blind SQL Injection / Cross Site Scripting

x========================================================================================================================================x | Title : Readymade Unilevel Ecommerce MLM Blind SQL & XSS Vulnerabilities | Software : Readymade Unilevel Ecommerce | Last Update : 15/03/24 TESTED VERSION...

PT-2025-17686 · Cloudera · Cloudera Hue

Name of the Vulnerable Software and Affected Versions: Cloudera Hue affected versions not specified Description: The issue is related to a directory traversal information disclosure problem. It is described as having a high severity. There is a proof-of-concept exploit available. Recommendations:...

Fixed in ClickHouse v24.5, 2024-08-01​

It is possible to redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request to the ClickHouse server native interface. This redirection is limited to what is available within a 256-byte range of memory at the time of...

CVE-2024-22064

creationtimestamp| type| source ---|---|--- 2024-07-31 12:00:34+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/665 2024-07-31 23:46:54+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10911...