Exploit for Improper Input Validation in Adobe Commerce

CVE-2022-24682 PoC How does this detection method work?...

Oracle Linux 9 : dnsmasq (ELSA-2024-1334)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1334 advisory. 2.85-14.1 - Fix CVE 2023-50387 and CVE 2023-50868 - Resolves: RHEL-25674 - Resolves: RHEL-25638 Tenable has extracted the preceding description block...

Financials By Coda Authorization Bypass

Vulnerability type: Incorrect Access Control Vendor: https://www.unit4.com/ Product: Financials by Coda Product site: https://www.unit4.com/fr/products/financial-management-software Affected version: "user" : "", "password" : "", "company" : "", "newPassword" : "newpasswordfortargeteduser",...

GHSA-8R3F-844C-MC37

creationtimestamp| type| source ---|---|--- 2024-03-14 20:25:39+00:00| published-proof-of-concept| https://t.me/arpsyndicate/4211...

CVE-2024-20048

creationtimestamp| type| source ---|---|--- 2024-03-14 10:47:24+00:00| published-proof-of-concept| https://t.me/CNArsenal/2124...

CVE-2023-46263

creationtimestamp| type| source ---|---|--- 2024-03-14 03:09:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10130...

Important: dnsmasq security update

The dnsmasq packages contain Dnsmasq, a lightweight DNS Domain Name Server forwarder and DHCP Dynamic Host Configuration Protocol server. Security Fixes: dnsmasq: bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387 dnsmasq: bind9: Preparing an NSEC3 closest encloser proof...

Ruijie Switch PSG-5124 26293 - Remote Code Execution (RCE)

Exploit Title: Ruijie Switch PSG-5124 26293 - Remote Code Execution RCE - Shodan Dork: http.htmlhash:-1402735717 - Fofa Dork: body="img/freeloginge.gif" && body="./img/loginbg.gif" - Exploit Author: ByteHunter - Email: [email protected] - Version: PSG-5124LINK SOFTWARE RELEASE:26293 - Tested...

Ruijie Switch PSG-5124 26293 - Remote Code Execution Exploit

Exploit Title: Ruijie Switch PSG-5124 26293 - Remote Code Execution RCE - Shodan Dork: http.htmlhash:-1402735717 - Fofa Dork: body="img/freeloginge.gif" && body="./img/loginbg.gif" - Exploit Author: ByteHunter - Email: email protected - Version: PSG-5124LINK SOFTWARE RELEASE:26293 - Tested on:...

GitLab CE/EE Password Reset

Exploit Title: GitLab CE/EE 16.7.2 - Password Reset Exploit Author: Sebastian Kriesten 0xB455 Twitter: https://twitter.com/0xB455 Date: 2024-01-12 Vendor Homepage: gitlab.com Vulnerability disclosure: https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/...

RHEL 9 : dnsmasq (RHSA-2024:1334)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1334 advisory. The dnsmasq packages contain Dnsmasq, a lightweight DNS Domain Name Server forwarder and DHCP Dynamic Host Configuration Protocol server...

CentOS 8 : dnsmasq (CESA-2024:1335)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2024:1335 advisory. - Certain DNSSEC aspects of the DNS protocol in RFC 4033, 4034, 4035, 6840, and related RFCs allow remote attackers to cause a denial of service CPU...

PoC

PoC...

CVE-2024-26164

creationtimestamp| type| source ---|---|--- 2024-03-12 19:52:11+00:00| published-proof-of-concept| https://t.me/ctinow/206052...

Exploit for External Control of Assumed-Immutable Web Parameter in Fortra Filecatalyst_Workflow

CVE-2024-25153 This is a proof of concept for CVE-2024-25153,...

Client Details System 1.0 - SQL Injection

Exploit Title: CVE-2023-7137ClientDetailsSystem-SQLInjection1 + Date: 2023-26-12 + Exploit Author: Hamdi Sevben + Vendor Homepage: https://code-projects.org/client-details-system-in-php-with-source-code/ + Software Link:...

proof-inc.com Cross Site Scripting vulnerability OBB-3869455

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cve

It is an offensive tool for vulnerability research. This reposit...

CVE-2024-23780

creationtimestamp| type| source ---|---|--- 2024-03-08 11:34:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6757...

CVE-2023-3047

creationtimestamp| type| source ---|---|--- 2024-03-07 16:49:13+00:00| published-proof-of-concept| https://t.me/anonymoussecures/612 2024-03-07 16:49:13+00:00| published-proof-of-concept| https://t.me/anonymoussecures/1664 2024-03-07 16:50:16+00:00| published-proof-of-concept|...