20291 matches found
Computer Laboratory Management System 1.0 Insecure Direct Object Reference
Vulnerability Details: Application Name: Computer Laboratory Management System Software Link: https://www.sourcecodester.com/php/17268/computer-laboratory-management-system-using-php-and-mysql.html Vendor Homepage: https://www.sourcecodester.com/users/tips23 BuG: Insecure Direct Object References...
Daily Habit Tracker 1.0 - Stored Cross-Site Scripting (XSS)
Exploit Title: Daily Habit Tracker 1.0 - Stored Cross-Site Scripting XSS Date: 2 Feb 2024 Exploit Author: Yevhenii Butenko Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/17118/daily-habit-tracker-using-php-and-mysql-source-code.html Version: 1.0...
Daily Habit Tracker 1.0 Cross Site Scripting
Exploit Title: Daily Habit Tracker 1.0 - Stored Cross-Site Scripting XSS Date: 2 Feb 2024 Exploit Author: Yevhenii Butenko Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/17118/daily-habit-tracker-using-php-and-mysql-source-code.html Version: 1.0...
ARIS: Business Process Management 10.0.21.0 Cross Site Scripting
Exploit Title: Stored Cross-Site Scripting XSS in ARIS: Business Process Management Edition Version 10.0.21.0 Exploit Author: Seid Yassin Date: 2024-03-28 Vendor: Software AG Software Link: https://aris.com/ Version: ARIS: Business Process Management Description: Discovered a file upload feature...
CVE-2024-28247
creationtimestamp| type| source ---|---|--- 2024-03-31 15:50:38+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6898...
CVE-2024-31033
creationtimestamp| type| source ---|---|--- 2024-03-31 01:56:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6876...
CVE-2024-30248
creationtimestamp| type| source ---|---|--- 2024-03-30 13:58:13+00:00| published-proof-of-concept| https://github.com/piccolo-orm/piccoloadmin/security/advisories/GHSA-pmww-v6c9-7p83...
CVE-2018-20252
creationtimestamp| type| source ---|---|--- 2024-03-30 06:03:17+00:00| published-proof-of-concept| https://t.me/CybNux/6061...
CVE-2018-20251
creationtimestamp| type| source ---|---|--- 2024-03-30 06:03:17+00:00| published-proof-of-concept| https://t.me/CybNux/6061...
CVE-2021-40323
creationtimestamp| type| source ---|---|--- 2024-03-30 04:41:47+00:00| published-proof-of-concept| https://t.me/CNArsenal/2211 2024-03-30 17:24:51+00:00| published-proof-of-concept| Telegram/ItPDduTLbMT2jbtn7BVeLfLCNl2-6OkHN5zhMr8NUm-tiKI 2024-03-30 17:29:46+00:00| published-proof-of-concept|...
Exploit for Improper Input Validation in Kubernetes Ingress-Nginx
CVE-2023-5044 Poc for CVE 2023 5044 Prerequisites Kind: v0...
CVE-2024-27619
creationtimestamp| type| source ---|---|--- 2024-03-29 17:03:46+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6880 2024-03-30 04:17:56+00:00| published-proof-of-concept| https://t.me/CNArsenal/2209 2024-03-30 17:23:45+00:00| published-proof-of-concept|...
Exploit for SQL Injection in Wpdeveloper Notificationx
CVE-2024-1698 Exploit Script - Wordpress NotificationX = 2.8...
CVE-2024-25354
creationtimestamp| type| source ---|---|--- 2024-03-28 00:31:40+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cqfh-c4c5-c2hg...
Asterisk AMI - Partial File Content & Path Disclosure (Authenticated)
Exploit Title: Asterisk AMI - Partial File Content & Path Disclosure Authenticated Date: 2023-03-26 Exploit Author: Sean Pesce Vendor Homepage: https://asterisk.org/ Software Link: https://downloads.asterisk.org/pub/telephony/asterisk/old-releases/ Version: 18.20.0 Tested on: Debian Linux CVE:...
CVE-2024-29200
creationtimestamp| type| source ---|---|--- 2024-03-27 21:58:18+00:00| published-proof-of-concept| https://github.com/kimai/kimai/security/advisories/GHSA-cj3c-5xpm-cx94...
CVE-2023-6014
creationtimestamp| type| source ---|---|--- 2024-03-27 16:42:02+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/mlflowcve20236014...
bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources
A flaw was found in bind9. By flooding a DNSSEC resolver with responses coming from a DNSEC-signed zone using NSEC3, an attacker can lead the targeted resolver to a CPU exhaustion, further leading to a Denial of Service on the targeted host. This vulnerability applies only for systems where DNSSE...
dnsmasq security update
An update is available for dnsmasq. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The dnsmasq packages contain Dnsmasq, a lightweight DNS Domain Name Server...