CVE-2024-25108 Insufficient authorization allowing elevated access to resources in pixelfed

Pixelfed is an open source photo sharing platform. When processing requests authorization was improperly and insufficiently checked, allowing attackers to access far more functionality than users intended, including to the administrative and moderator functionality of the Pixelfed server. This...

CVE-2024-25108 Insufficient authorization allowing elevated access to resources in pixelfed

Pixelfed is an open source photo sharing platform. When processing requests authorization was improperly and insufficiently checked, allowing attackers to access far more functionality than users intended, including to the administrative and moderator functionality of the Pixelfed server. This...

CVE-2023-35080

creationtimestamp| type| source ---|---|--- 2024-02-12 00:32:41+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9952 2024-07-27 20:28:47+00:00| published-proof-of-concept| https://t.me/HackerArsenal/36 2024-07-27 20:30:55+00:00| published-proof-of-concept|...

CVE-2010-3440

creationtimestamp| type| source ---|---|--- 2024-02-11 12:31:31+00:00| published-proof-of-concept| https://t.me/ctinow/182764...

Online Nurse Hiring System 1.0 - Time-Based SQL Injection Vulnerability

Exploit Title: Online Nurse Hiring System 1.0 - 'bookid' Time-Based SQL Injection Exploit Author: Alperen Yozgat Vendor Homepage: https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql Software Link: https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826 Version: 1.0 Tested...

CVE-2024-0654

creationtimestamp| type| source ---|---|--- 2024-02-10 19:47:02+00:00| published-proof-of-concept| https://t.me/ctinow/182634...

CVE-2023-38863

creationtimestamp| type| source ---|---|--- 2024-02-10 14:19:12+00:00| published-proof-of-concept| https://t.me/MrVGunz/1014...

CVE-2023-38862

creationtimestamp| type| source ---|---|--- 2024-02-10 14:19:12+00:00| published-proof-of-concept| https://t.me/MrVGunz/1014...

Online Nurse Hiring System 1.0 SQL Injection

Exploit Title: Online Nurse Hiring System 1.0 - 'bookid' Time-Based SQL Injection Date: 03/10/2023 Exploit Author: Alperen Yozgat Vendor Homepage: https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql Software Link: https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826...

Rail Pass Management System 1.0 SQL Injection

Exploit Title: Rail Pass Management System - 'searchdata' Time-Based SQL Injection Date: 02/10/2023 Exploit Author: Alperen Yozgat Vendor Homepage: https://phpgurukul.com/rail-pass-management-system-using-php-and-mysql/ Software Link: https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17479...

CVE-2023-34551

creationtimestamp| type| source ---|---|--- 2024-02-08 12:46:20+00:00| published-proof-of-concept| Telegram/2xp2HKwG4k-i-985uD9q3QFLiHE0U-cNCXCN5jcjj1A 2024-02-08 13:13:15+00:00| published-proof-of-concept| https://t.me/ETHICALHACKERSCOMMUNITY2/3672 2026-09-01 20:00:40+00:00| seen|...

CVE-2023-34552

creationtimestamp| type| source ---|---|--- 2024-02-08 12:46:20+00:00| published-proof-of-concept| Telegram/2xp2HKwG4k-i-985uD9q3QFLiHE0U-cNCXCN5jcjj1A 2024-02-08 13:13:15+00:00| published-proof-of-concept| https://t.me/ETHICALHACKERSCOMMUNITY2/3672 2026-09-01 20:00:40+00:00| seen|...

CVE-2020-8273

creationtimestamp| type| source ---|---|--- 2024-02-06 22:44:15+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2111...

CVE-2020-8271

creationtimestamp| type| source ---|---|--- 2024-02-06 22:44:15+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2111...

CVE-2020-8272

creationtimestamp| type| source ---|---|--- 2024-02-06 22:44:15+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2111...

Incorrect permission assignment vulnerability in Trend Micro uiAirSupport

Overview Trend Micro Incorporated has released a security update for Trend Micro uiAirSupport. Proof-of-concept code PoC for this vulnerability is available on the Internet. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact The...

CVE-2023-35759

creationtimestamp| type| source ---|---|--- 2024-02-06 03:29:49+00:00| published-proof-of-concept| https://t.me/hackingbra/89 2024-02-06 11:00:57+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9920 2024-08-16 09:13:20+00:00| published-proof-of-concept|...

Juniper SRX Firewalls&EX switches - PreAuth Remote Code Execution Exploit

Exploit Title: juniper-SRX-Firewalls&EX-switches PreAuth-RCE PoC Description: This code serves as both a vulnerability detector and a proof of concept for CVE-2023-36845. It executes the phpinfo function on the login page of the target device, allowing to inspect the PHP configuration. also this...

mooSocial 3.1.8 - Cross-Site Scripting (XSS) on User Login Page Vulnerability

Exploit Title: mooSocial 3.1.8 - Cross-Site Scripting XSS on User Login Page Exploit Author: Astik Rawat ahrixia Vendor Homepage: https://moosocial.com Software Link: https://travel.moosocial.com/ Version: 3.1.8 Tested on: Windows 11 CVE : CVE-2023-43325 Description: A Cross Site Scripting XSS...

CVE-2021-21870

creationtimestamp| type| source ---|---|--- 2024-02-03 18:24:47+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3935 2026-09-01 17:00:45+00:00| seen| https://t.me/cissp/3912 2026-09-02 01:04:32+00:00| seen| https://t.me/cissp/3912 2026-09-11 00:00:08+00:00| seen|...