20290 matches found
CVE-2024-32644 Evmos' transaction execution not accounting for all state transition after interaction with precompiles
Evmos is a scalable, high-throughput Proof-of-Stake EVM blockchain that is fully compatible and interoperable with Ethereum. Prior to 17.0.0, there is a way to mint arbitrary tokens due to the possibility to have two different states not in sync during the execution of a transaction. The exploit ...
CVE-2023-45158
creationtimestamp| type| source ---|---|--- 2024-04-19 11:38:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9327 2024-08-16 08:43:29+00:00| published-proof-of-concept| https://t.me/Rootsec2/1635...
CVE-2014-1303
creationtimestamp| type| source ---|---|--- 2024-04-19 05:31:25+00:00| published-proof-of-concept| Telegram/GGU4Zjcy9RRRzCj87pkQSgeBh3KoSL3WZk3hlgAXEsZ2B0X...
CVE-2024-20295
creationtimestamp| type| source ---|---|--- 2024-04-18 11:08:28+00:00| published-proof-of-concept| https://t.me/truesecator/5651 2026-07-06 11:00:07+00:00| seen| https://t.me/ZerodayAlert/219 2026-07-07 00:00:19+00:00| seen| https://t.me/ZerodayAlert/219 2026-07-12 00:00:17+00:00| seen|...
CVE-2024-3149
creationtimestamp| type| source ---|---|--- 2024-04-18 01:31:51+00:00| published-proof-of-concept| https://t.me/cKure/12750...
Amazon Linux 2 : dnsmasq (ALASDNSMASQ-2024-002)
The version of dnsmasq installed on the remote host is prior to 2.90-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DNSMASQ-2024-002 advisory. Certain DNSSEC aspects of the DNS protocol in RFC 4035 and related RFCs allow remote attackers to cause a denial of...
CVE-2024-32472
creationtimestamp| type| source ---|---|--- 2024-04-17 21:15:16+00:00| published-proof-of-concept| https://github.com/excalidraw/excalidraw/security/advisories/GHSA-m64q-4jqh-f72f...
CVE-2024-4340
creationtimestamp| type| source ---|---|--- 2024-04-15 20:21:25+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2m57-hf25-phgg...
Exploit for CVE-2024-1642470
Windows USB Generic Parent Driver Remote Code Execution Vulner...
CVE-2024-1642470
creationtimestamp| type| source ---|---|--- 2024-04-15 17:32:48+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7064...
CVE-2024-31734
creationtimestamp| type| source ---|---|--- 2024-04-15 07:24:39+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7058...
Important: Red Hat Security Advisory: bind and bind-dyndb-ldap security updates
Updates for bind and bind-dyndb-ldap are now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources
A flaw was found in bind9. By flooding a DNSSEC resolver with responses coming from a DNSEC-signed zone using NSEC3, an attacker can lead the targeted resolver to a CPU exhaustion, further leading to a Denial of Service on the targeted host. This vulnerability applies only for systems where DNSSE...
Online Fire Reporting System 1.2 SQL Injection
Exploit Title: Online Fire Reporting System SQL Injection Authentication Bypass Date: 02/10/2024 Exploit Author: Diyar Saadi Vendor Homepage: https://phpgurukul.com/online-fire-reporting-system-using-php-and-mysql/ Software Link:...
Savsoft Quiz v6.0 Enterprise - Stored XSS Vulnerability
Exploit Title: Savsoft Quiz v6.0 Enterprise - Persistent Cross-Site Scripting Exploit Author: Eren Sen Vendor: SAVSOFT QUIZ Vendor Homepage: https://savsoftquiz.com Software Link: https://savsoftquiz.com/web/index.php/online-demo/ Version: 6.0 CVE-ID: N/A Tested on: Kali Linux / Windows 10...
OpenClinic GA 5.247.01 - Path Traversal (Authenticated)
Exploit Title: OpenClinic GA 5.247.01 - Path Traversal Authenticated Date: 2023-08-14 Exploit Author: V. B. Vendor Homepage: https://sourceforge.net/projects/open-clinic/ Software Link: https://sourceforge.net/projects/open-clinic/ Version: OpenClinic GA 5.247.01 Tested on: Windows 10, Windows 11...
WordPress WP Video Playlist 1.1.1 Cross Site Scripting
Exploit Title: Wordpress Plugin WP Video Playlist 1.1.1 - Stored Cross-Site Scripting XSS Date: 12 April 2024 Exploit Author: Erdemstar Vendor: https://wordpress.com/ Version: 1.1.1 Proof Of Concept: 1. Click Add Video part and enter the XSS payload as below into the first input of form or Reques...
CVE-2024-32884
creationtimestamp| type| source ---|---|--- 2024-04-13 13:04:03+00:00| published-proof-of-concept| https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-98p4-xjmm-8mfh...