20315 matches found
Exploit for Weak Password Recovery Mechanism for Forgotten Password in Gitlab
CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This co...
Exploit for Cross-site Scripting in Remyandrade Online_Food_Menu
CVE-2024-24134 : Online Food Menu - Cross-Site...
Exploit for Files or Directories Accessible to External Parties in Apache Struts
CVE-2023-50164 Apache Struts path traversal to RCE vulnerabil...
CVE-2023-36003
creationtimestamp| type| source ---|---|--- 2024-01-12 06:34:42+00:00| published-proof-of-concept| https://t.me/RalfHackerChannel/1435 2024-01-12 07:52:16+00:00| published-proof-of-concept| Telegram/1674BjUB8N4Vh5UgM4C683OiwC85nxwmrNkvE4vdI1bn-w 2024-01-12 11:17:11+00:00|...
Exploit for CVE-2024-22890
CVE-2024-22890: My e-Diary App - Cross-Site-Scr...
Authenticated (user role) arbitrary command execution by modifying `start_cmd` setting (GHSL-2023-268)
Summary Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to arbitrary command execution by abusing the configuration settings. Details The Home Preference page exposes a list of system settings such as Run Mode, Jwt Secret, Node Secret and Terminal Start Command. The...
Authenticated (user role) remote command execution by modifying `nginx` settings (GHSL-2023-269)
Summary The Home Preference page exposes a small list of nginx settings such as Nginx Access Log Path and Nginx Error Log Path. However, the API also exposes testconfigcmd, reloadcmd and restartcmd. While the UI doesn't allow users to modify any of these settings, it is possible to do so by sendi...
pocsuite3
This is a Python-based framework for remote vulnerability testing and proof-of-concept development, called pocsuite3. It is developed by the Knownsec 404 Team and is designed for penetration testers and security researchers. The framework comes with a powerful proof-of-concept engine and various...
PT-2024-1082 · Microsoft · Visual Studio
Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Microsoft Visual Studio, which could allow an attacker to gain elevated privileges on affected systems. The...
CVE-2022-1461
creationtimestamp| type| source ---|---|--- 2024-01-08 23:05:01+00:00| published-proof-of-concept| https://t.me/arpsyndicate/2692...
CVE-2022-1459
creationtimestamp| type| source ---|---|--- 2024-01-08 22:39:37+00:00| published-proof-of-concept| https://t.me/arpsyndicate/2690...
Mars: Datadog api keys exposed can be used to do all the read and write access to the instance
A vulnerability was identified where Datadog API keys were exposed in a JavaScript file, which could have enabled unauthorized access to Datadog services. The issue was responsibly disclosed along with a proof-of-concept demonstration...
NO access control in decreaseAllowance and increaseAllowance
Lines of code Vulnerability details Impact Detailed description of the impact of this finding. NO access control in decreaseAllowance and increaseAllowance.Anyone can call this function and increase or decrease the allowlance. Proof of Concept Provide direct links to all referenced code in GitHub...
Permanent DOS in liquidity_lockbox for under $10
Lines of code Vulnerability details Impact The liquiditylockbox contract in the lockbox-solana project is vulnerable to permanent DOS due to its storage limitations. The contract uses a Program Derived Address PDA as a data account, which is created with a maximum size limit of 10 KB. Every time...
L1 TO L2 ERC20 TOKEN TRANSFER CAN BE DoS IN THE FxERC20ChildTunnel CONTRACT SINCE A MALICIOUS USER CAN SET THE fxRootTunnel ADDRESS TO AN INVALID ADDRESS
Lines of code Vulnerability details Impact The FxERC20ChildTunnel is a smart contract which is used for the L2 token management. The FxERC20ChildTunnel contract inherits from the FxBaseChildTunnel contract. The FxBaseChildTunnel contract has the validateSender modifier which requires the sender o...
PT-2024-14052 · D Link · D-Link Dir-605L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L router affected versions not specified Description: A serious issue has been discovered in the D-Link DIR-605L router. The vendor has confirmed the finding but has tagged it as 'won't fix'. A proof-of-concept PoC video has bee...
CVE-2023-48983
creationtimestamp| type| source ---|---|--- 2024-01-01 13:25:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6352...
CVE-2023-48981
creationtimestamp| type| source ---|---|--- 2024-01-01 13:14:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6351...