Online Fire Reporting System OFRS - SQL Injection Authentication Bypass

Exploit Title: Online Fire Reporting System SQL Injection Authentication Bypass Date: 02/10/2024 Exploit Author: Diyar Saadi Vendor Homepage: https://phpgurukul.com/online-fire-reporting-system-using-php-and-mysql/ Software Link:...

Exploit for CVE-2024-20356

CVE-2024-20356 This is a proof of concept for CVE-2024-20356,...

CVE-2024-31239

Cross-Site Request Forgery CSRF vulnerability in Nudgify Nudgify Social Proof, Sales Popup & FOMO.This issue affects Nudgify Social Proof, Sales Popup & FOMO: from n/a through 1.3.3...

CVE-2024-31239

CVE-2024-31239 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Nudgify Nudgify Social Proof, Sales Popup & FOMO, affecting versions up to 1.3.3. The available data specifies a CVSS v3.1 base score of 4.3 (Medium) with network attack vector, low attack complexity, no c...

CVE-2024-3098

creationtimestamp| type| source ---|---|--- 2024-04-12 10:24:02+00:00| published-proof-of-concept| https://t.me/arpsyndicate/4589 2026-07-26 07:01:48+00:00| seen| https://t.me/zhatez/1070 2026-07-27 00:01:32+00:00| seen| https://t.me/zhatez/1070 2026-07-29 00:00:09+00:00| seen|...

CVE-2024-31777

creationtimestamp| type| source ---|---|--- 2024-04-12 08:37:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7027 2024-04-17 15:52:52+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7028...

Exploit for CVE-2023-45288

PoC for CVE-2023-45288 This is a proof-of-concept code for th...

CVE-2024-1728

creationtimestamp| type| source ---|---|--- 2024-04-12 06:48:58+00:00| seen| https://t.me/arpsyndicate/4544 2024-10-09 22:49:03+00:00| published-proof-of-concept| https://t.me/codeb0ss/1613 2025-02-05 16:00:09+00:00| published-proof-of-concept| Telegram/DvuDNxzeYZP63w5nmwzbWYZFvCKfCkB4qbONMONwQIS...

CVE-2024-2029

creationtimestamp| type| source ---|---|--- 2024-04-12 05:26:43+00:00| seen| https://t.me/arpsyndicate/4526 2025-07-21 18:57:10+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/localaicve20242029...

Exploit for HTTP Request Smuggling in Apache Http_Server

CVE-2022-26377 A Proof of Concept developed by @watchTowr to...

AlmaLinux 9 : bind (ALSA-2024:1789)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:1789 advisory. - The DNS message parsing code in named includes a section whose computational complexity is overly high. It does not cause problems for typical DNS...

Wordpress Plugin Playlist for Youtube 1.32 - Stored Cross-Site Scripting (XSS)

Exploit Title: Wordpress Plugin Playlist for Youtube - Stored Cross-Site Scripting XSS Date: 22 March 2024 Exploit Author: Erdemstar Vendor: https://wordpress.com/ Version: 1.32 Proof Of Concept: 1. Click Add a new playlist and enter the XSS payload as below into the properties named "Name" or...

Important: bind and dhcp security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. The Dynamic Hos...

WordPress Plugin Nudgify Social Proof, Sales Popup & FOMO 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Nudgify Social Proof, Sale...

WordPress Playlist For Youtube 1.32 Cross Site Scripting

Exploit Title: Wordpress Plugin Playlist for Youtube - Stored Cross-Site Scripting XSS Date: 22 March 2024 Exploit Author: Erdemstar Vendor: https://wordpress.com/ Version: 1.32 Proof Of Concept: 1. Click Add a new playlist and enter the XSS payload as below into the properties named "Name" or...

CVE-2024-29800

creationtimestamp| type| source ---|---|--- 2024-04-11 20:29:44+00:00| published-proof-of-concept| https://github.com/timber/timber/security/advisories/GHSA-6363-v5m4-fvq3...

Exploit for Unrestricted Upload of File with Dangerous Type in Openeclass

CVE-2024-31777 | GUnet OpenEclass E-learning platform Unrestri...

CVE-2024-29278

creationtimestamp| type| source ---|---|--- 2024-04-11 12:08:59+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6877...

Nudgify Social Proof, Sales Popup & FOMO < 1.3.4 - Cross-Site Request Forgery via sync_orders_manually()

Description The Nudgify Social Proof, Sales Popup & FOMO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.3. This is due to missing or incorrect nonce validation on the syncordersmanually function. This makes it possible for unauthenticated...

RHEL 9 : bind (RHSA-2024:1789)

"The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1789 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...