CVE-2024-3330

creationtimestamp| type| source ---|---|--- 2024-07-02 11:12:42+00:00| published-proof-of-concept| https://t.me/HackingInsights/4454...

GHSA-3669-72X9-R9P3 Potential memory exhaustion attack due to sparse slice deserialization

Details Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. For instance, in the Proof of Concept written below, someone can specify to set a field of the...

Potential memory exhaustion attack due to sparse slice deserialization

Details Running schema.Decoder.Decode on a struct that has a field of type struct... opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. For instance, in the Proof of Concept written below, someone can specify to set a field of the...

CVE-2024-27292

creationtimestamp| type| source ---|---|--- 2024-07-01 11:07:29+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/8887 2024-07-06 17:27:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10791 2024-07-09 10:22:28+00:00| published-proof-of-concept|...

Vulnerabilities fixed in Adobe Commerce

Adobe has fixed vulnerabilities in Commerce and Magento. A malicious party could exploit the vulnerabilities to bypass security measures and execute arbitrary code, possibly with administrator privileges. Proof-of-Concept code PoC has been published for the vulnerability with reference...

CVE-2024-36072

creationtimestamp| type| source ---|---|--- 2024-06-29 12:10:43+00:00| published-proof-of-concept| https://t.me/HackingInsights/4120...

CVE-2024-38533 ZKsync Era invalid stack addressing conversion

ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. There is possible invalid stack access due to the addresses used to access the stack not properly being converted to cells. This issue has been patched in version 1.5.0...

EulerOS 2.0 SP12 : bind (EulerOS-SA-2024-1850)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certain DNSSEC aspects of the DNS protocol in RFC 4033, 4034, 4035, 6840, and related RFCs allow remote attackers to cause a denial of service CPU...

Critical SQLi Vulnerability Found in Fortra FileCatalyst Workflow Application

A critical security flaw has been disclosed in Fortra FileCatalyst Workflow that, if left unpatched, could allow an attacker to tamper with the application database. Tracked as CVE-2024-5276, the vulnerability carries a CVSS score of 9.8. It impacts FileCatalyst Workflow versions 5.1.6 Build 135...

CVE-2024-29868

creationtimestamp| type| source ---|---|--- 2024-06-27 04:28:10+00:00| published-proof-of-concept| https://t.me/HackingInsights/3715...

CVE-2024-33883

creationtimestamp| type| source ---|---|--- 2024-06-25 19:14:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7758...

CVE-2023-24871

creationtimestamp| type| source ---|---|--- 2024-06-25 17:51:22+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10738 2024-07-12 11:48:14+00:00| published-proof-of-concept| Telegram/OAVvJXDLYDbtnu6ygnhsfg3fPAQr88Byduh8Pw9Nxx7R9JFz...

CVE-2024-6028

creationtimestamp| type| source ---|---|--- 2024-06-25 14:25:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7755 2024-06-25 16:40:04+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/1390 2026-09-02 01:00:06+00:00| seen|...

CVE-2024-33113

creationtimestamp| type| source ---|---|--- 2024-06-25 03:12:09+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/1384 2026-08-04 13:00:17+00:00| seen| https://t.me/pentestnotes/46 2026-08-05 00:00:32+00:00| seen| https://t.me/pentestnotes/46 2026-08-06 00:01:01+00:00| seen|...

CVE-2024-27815

creationtimestamp| type| source ---|---|--- 2024-06-24 19:09:43+00:00| published-proof-of-concept| https://t.me/HackingInsights/3470 2024-06-25 12:43:29+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10736 2024-06-27 09:02:09+00:00| published-proof-of-concept|...

CVE-2024-32030

creationtimestamp| type| source ---|---|--- 2024-06-24 15:07:04+00:00| published-proof-of-concept| https://t.me/CNArsenal/2704 2024-07-24 12:51:30+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10876 2024-08-01 00:41:31+00:00| published-proof-of-concept|...

CVE-2024-38374

creationtimestamp| type| source ---|---|--- 2024-06-24 09:20:38+00:00| published-proof-of-concept| https://github.com/CycloneDX/cyclonedx-core-java/security/advisories/GHSA-683x-4444-jxh8...

CVE-2024-6267

creationtimestamp| type| source ---|---|--- 2024-06-24 06:03:31+00:00| published-proof-of-concept| https://t.me/ZeroEthicalCourse/655 2024-06-24 16:49:28+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10731...

Paradox IP150 Internet Module 1.40.00 Cross Site Request Forgery

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Paradox IP150 Internet Module Cross-Site Request Forgery Link: https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20240321-01ParadoxCrossSiteRequestForgery Vulnerability Overview The Paradox IP150 Internet Module in version 1.40.00 i...

CVE-2024-0088

creationtimestamp| type| source ---|---|--- 2024-06-23 23:31:11+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10727 2026-07-26 02:00:22+00:00| seen| https://t.me/cyberwarehouse/455 2026-07-27 00:00:21+00:00| published-proof-of-concept| https://t.me/cyberwarehouse/455...