CVE-2023-41171

creationtimestamp| type| source ---|---|--- 2023-12-31 09:46:24+00:00| published-proof-of-concept| https://t.me/ctinow/161033...

CVE-2023-50226

creationtimestamp| type| source ---|---|--- 2023-12-31 08:51:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6346...

Exploit for Files or Directories Accessible to External Parties in Apache Struts

This is a Proof of Concept PoC for CVE-2023-50164https://nv...

Exploit for Out-of-bounds Write in Hutool

json.org CVE-2022-45688 false positive The project contains...

Exploit for Out-of-bounds Write in Hutool

json.org CVE-2022-45688 false positive The project contains...

Apache OFBiz 18.12.09 Remote Code Execution

From: Jacques Le Roux Date: Mon, 04 Dec 2023 21:04:50 +0000 Severity: moderate Affected versions: - Apache OFBiz before 18.12.10 Description: Pre-auth RCE in Apache Ofbiz 18.12.09. It's due to XML-RPC no longer maintained still present. This issue affects Apache OFBiz: before 18.12.10. Users are...

Exploit for OS Command Injection in Openbsd Openssh

CVE-2023-51385 poc OpenSSH ProxyCommand RCE poc OpenSSH...

Exploit for Server-Side Request Forgery in Naviwebs Navigate_Cms

It is an exploit module targeting Apache HTTP Server. The targe...

Exploit for Cross-site Scripting in Modcluster Mod_Proxy_Cluster

CVE-2023-6710 Exploit POC Explore the depths of CVE-2023-6710...

Exploit for Cross-site Scripting in Modcluster Mod_Proxy_Cluster

CVE-2023-6710 Exploit POC Explore the depths of CVE-2023-6710...

Exploit for Heap-based Buffer Overflow in Gnu Glibc

CVE-2023-4911 - Looney Tunables This is a atm very rough pr...

CVE-2023-51449

creationtimestamp| type| source ---|---|--- 2023-12-22 22:22:12+00:00| seen| https://t.me/ctinow/158638 2024-01-18 08:11:50+00:00| seen| https://t.me/ctinow/169610 2024-04-01 13:07:17+00:00| published-proof-of-concept|...

CVE-2023-42681

creationtimestamp| type| source ---|---|--- 2023-12-22 16:19:16+00:00| published-proof-of-concept| https://t.me/ctinow/158456...

CVE-2023-42684

creationtimestamp| type| source ---|---|--- 2023-12-22 16:19:09+00:00| published-proof-of-concept| https://t.me/ctinow/158455...

Hospital Management System 4.0 XSS / Shell Upload / SQL Injection Vulnerabilities

Hospital Management System versions 4.0 and below suffer from cross site scripting, remote shell upload, and remote SQL injection vulnerabilities. Description: Mutiple vulnerabilties were discovered in Hospital Management System Affected CMS: Hospital Management System Affected Version: unread...

CVE-2023-4233

creationtimestamp| type| source ---|---|--- 2023-12-21 09:54:36+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/4191...

CVE-2023-4234

creationtimestamp| type| source ---|---|--- 2023-12-21 09:54:36+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/4191...

Validate Creators Array

Lines of code Vulnerability details Potential Risk: The validateCreatorsArray function in the CreatorUtils contract performs input validation for the creatorArray parameter, which is an array of CreatorBps structs. While the function checks the individual elements of the array for valid addresses...

setPosMode function doesn't check if wLp is whitelisted

Lines of code Vulnerability details Proof of Concept Using setPosMode function owner of position can change it's mode. When the function is called, then there are a lot of checks, like if current mode allows to decollateralize and if new mode allows to collateralize. Also it's checked, that all...

wrong implementation of maxHeap.extractMax();

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. wrong implementation of maxHeap.extractMax; as it should return values but here its not assigned to anything. Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, log...