CVE-2024-32649

creationtimestamp| type| source ---|---|--- 2024-04-25 13:00:55+00:00| published-proof-of-concept| https://github.com/vyperlang/vyper/security/advisories/GHSA-5jrj-52x8-m64h...

CVE-2024-32647

creationtimestamp| type| source ---|---|--- 2024-04-25 13:00:49+00:00| published-proof-of-concept| https://github.com/vyperlang/vyper/security/advisories/GHSA-3whq-64q2-qfj6...

CVE-2024-32648

creationtimestamp| type| source ---|---|--- 2024-04-25 12:46:04+00:00| published-proof-of-concept| https://github.com/vyperlang/vyper/security/advisories/GHSA-m2v9-w374-5hj9...

CVE-2024-32645

creationtimestamp| type| source ---|---|--- 2024-04-25 12:36:44+00:00| published-proof-of-concept| https://github.com/vyperlang/vyper/security/advisories/GHSA-xchq-w5r3-4wg3...

CVE-2024-32481

creationtimestamp| type| source ---|---|--- 2024-04-25 12:34:00+00:00| published-proof-of-concept| https://github.com/vyperlang/vyper/security/advisories/GHSA-ppx5-q359-pvwj...

CVE-2021-22897

creationtimestamp| type| source ---|---|--- 2024-04-25 05:46:52+00:00| seen| https://t.me/criticalbug/1064 2024-08-27 17:01:09+00:00| published-proof-of-concept| https://t.me/criticalbug/1476...

CVE-2023-2949

creationtimestamp| type| source ---|---|--- 2024-04-24 21:56:20+00:00| published-proof-of-concept| https://t.me/arpsyndicate/4828...

CVE-2024-32880

creationtimestamp| type| source ---|---|--- 2024-04-24 20:42:50+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-3f7w-p8vr-4v5f...

OpenMetadata vulnerable to a SpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` (`GHSL-2023-236`)

SpEL Injection in GET /api/v1/policies/validation/condition/ GHSL-2023-236 Please note, only authenticated users have access to PUT / POST APIS for /api/v1/policies. Non authenticated users will not be able to access these APIs to exploit the vulnerability. A user must exist in OpenMetadata and...

Exploit for Unrestricted Upload of File with Dangerous Type in Cubecart

Arbitrary File Upload Leads to RCE CVE-2024-33438 CubeCart &...

CVE-2024-32866

creationtimestamp| type| source ---|---|--- 2024-04-23 20:31:27+00:00| published-proof-of-concept| https://github.com/edmundhung/conform/security/advisories/GHSA-624g-8qjg-8qxf...

CVE-2024-32869

creationtimestamp| type| source ---|---|--- 2024-04-23 08:21:55+00:00| published-proof-of-concept| https://github.com/honojs/hono/security/advisories/GHSA-3mpf-rcc7-5347...

CVE-2024-34347

creationtimestamp| type| source ---|---|--- 2024-04-22 16:08:41+00:00| published-proof-of-concept| https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-qmmm-73r2-f8xr...

Laravel Framework 11 Credential Disclosure

Exploit Title: Laravel Framework 11 - Credential Leakage Google Dork: N/A Date: 2024-04-19 Exploit Author: Huseein Amer Vendor Homepage: https://laravel.com/ Software Link: N/A Version: 8. - 11. REQUIRED Tested on: N/A CVE : CVE-2024-29291 Proof of concept: Go to any Laravel-based website and...

Exploit for CVE-2024-24576

CVE-2024-24576-PoC-BatBadBut PoC for CVE-2024-24576 vulnerabi...

Laravel Framework 11 - Credential Leakage Vulnerability

Exploit Title: Laravel Framework 11 - Credential Leakage Exploit Author: Huseein Amer Vendor Homepage: https://laravel.com/ Software Link: N/A Version: 8. - 11. REQUIRED Tested on: N/A CVE : CVE-2024-29291 Proof of concept: Go to any Laravel-based website and navigate to storage/logs/laravel.log...

CVE-2024-32479

creationtimestamp| type| source ---|---|--- 2024-04-20 15:29:36+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-72m9-7c8x-pmmw...

CVE-2024-32480

creationtimestamp| type| source ---|---|--- 2024-04-20 15:29:15+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-jh57-j3vq-h438...

CVE-2024-31869

creationtimestamp| type| source ---|---|--- 2024-04-19 16:41:11+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10357 2024-04-20 13:07:57+00:00| published-proof-of-concept| https://t.me/Teamx1945x/3623...

CVE-2024-32644

Summary: CVE-2024-32644 affects Evmos pre-17.0.0. A state synchronization bug in stateDB.Commit() compares dirtyStorage to originStorage and only writes when they differ, which can allow non-atomic transactions and potentially mint arbitrary tokens or drain funds through creative smart-contract i...