LimeSurvey Community 5.3.32 - Stored XSS Vulnerability

Exploit Title: Stored Cross-Site Scripting XSS in LimeSurvey Community Edition Version 5.3.32+220817 Exploit Author: Subhankar Singh Vendor: LimeSurvey Software Link: https://community.limesurvey.org/releases/ Version: LimeSurvey Community Edition Version 5.3.32+220817 Tested on: Windows Client...

Rocky Linux 8 : dnsmasq (RLSA-2024:1335)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:1335 advisory. - Certain DNSSEC aspects of the DNS protocol in RFC 4033, 4034, 4035, 6840, and related RFCs allow remote attackers to cause a denial of service CPU...

CVE-2024-2865

creationtimestamp| type| source ---|---|--- 2024-03-26 09:32:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6857 2024-03-26 09:32:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6858...

CVE-2023-36407

creationtimestamp| type| source ---|---|--- 2024-03-26 02:03:18+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10110 2026-07-17 12:00:07+00:00| published-proof-of-concept| https://t.me/cyberwarehouse/346 2026-07-18 00:00:32+00:00| published-proof-of-concept|...

CVE-2024-36407

creationtimestamp| type| source ---|---|--- 2024-03-26 02:03:18+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10110 2026-07-17 11:00:05+00:00| published-proof-of-concept| https://t.me/cyberwarehouse/346 2026-07-18 00:00:32+00:00| published-proof-of-concept|...

CVE-2023-46453

creationtimestamp| type| source ---|---|--- 2024-03-26 02:03:18+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10110 2026-05-08 08:48:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlddvozljq2n...

LimeSurvey Community 5.3.32 Cross Site Scripting

Exploit Title: Stored Cross-Site Scripting XSS in LimeSurvey Community Edition Version 5.3.32+220817 Exploit Author: Subhankar Singh Date: 2024-02-03 Vendor: LimeSurvey Software Link: https://community.limesurvey.org/releases/ Version: LimeSurvey Community Edition Version 5.3.32+220817 Tested on:...

RHEL 9 : dnsmasq (RHSA-2024:1522)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1522 advisory. The dnsmasq packages contain Dnsmasq, a lightweight DNS Domain Name Server forwarder and DHCP Dynamic Host Configuration Protocol server...

Exploit for Unrestricted Upload of File with Dangerous Type in Vvveb Vvvebjs

CVE-2024-29272 This is a Proof-of-Concept fo...

CVE-2024-27300

creationtimestamp| type| source ---|---|--- 2024-03-25 16:47:08+00:00| published-proof-of-concept| https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-q7g6-xfh2-vhpx...

CVE-2024-29197

creationtimestamp| type| source ---|---|--- 2024-03-25 11:55:39+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6849...

CVE-2024-2891

creationtimestamp| type| source ---|---|--- 2024-03-24 17:54:38+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10206...

CVE-2024-28116

creationtimestamp| type| source ---|---|--- 2024-03-24 13:18:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6844 2024-03-24 14:33:18+00:00| published-proof-of-concept| https://t.me/CNArsenal/2168 2024-03-24 15:18:04+00:00| published-proof-of-concept| https://t.me/proxybar/1954...

GHSA-27XQ-W3JC-436C

creationtimestamp| type| source ---|---|--- 2024-03-23 14:42:30+00:00| published-proof-of-concept| Telegram/fsM6hZYYYnpbOLEJwsGnDg-QbbXkPAbnymzEekIhPXwf-kc 2026-07-12 22:00:12+00:00| seen| https://t.me/securixykz/827 2026-07-13 00:00:36+00:00| seen| https://t.me/securixykz/827 2026-07-14...

CVE-2024-28119

creationtimestamp| type| source ---|---|--- 2024-03-21 21:05:39+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-2m7x-c7px-hp58...

CVE-2024-28118

creationtimestamp| type| source ---|---|--- 2024-03-21 21:05:30+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-r6vw-8v8r-pmp4...

CVE-2024-28117

creationtimestamp| type| source ---|---|--- 2024-03-21 21:05:21+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-qfv4-q44r-g7rv...

Over 800 npm Packages Found with Discrepancies, 18 Exploit 'Manifest Confusion'

New research has discovered over 800 packages in the npm registry which have discrepancies from their registry entries, out of which 18 have been found to exploit a technique called manifest confusion. The findings come from cybersecurity firm JFrog, which said the issue could be exploited by...

Tramyardg Autoexpress 1.3.0 Cross Site Scripting Vulnerability

Exploit Title: tramyardg autoexpress - Stored Cross-Site Scripting XSS Exploit Author: Scott White Vendor Homepage: https://github.com/tramyardg/autoexpress Version: v1.3.0 Tested on: Ubuntu 22.04.3 LTS + Apache/2.4.52 CVE : CVE-2023-48903 References:...

Simple Task List 1.0 SQL Injection

Exploit Title: Simple Task List 1.0 - 'status' SQLi Date: 2023-11-15 Exploit Author: Ersin Erenler Vendor Homepage: https://code-projects.org/simple-task-list-in-php-with-source-code Software Link: https://download-media.code-projects.org/2020/12/SimpleTaskListInPHPWithSourceCode.zip Version: 1.0...