18540 matches found
CVE-2025-48355
CVE-2025-48355 affects the WordPress plugin ProveSource Social Proof (versions n/a–3.0.5). The vulnerability is described as Exposure of Sensitive System Information to an Unauthorized Control Sphere, enabling retrieval of embedded sensitive data. Public details note a CVSS v3.1 base score of 5.3...
CVE-2025-48355 WordPress ProveSource Social Proof plugin <= 3.0.5 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ProveSource LTD ProveSource Social Proof allows Retrieve Embedded Sensitive Data.This issue affects ProveSource Social Proof: from n/a through 3.0.5...
WordPress ProveSource Social Proof plugin <= 3.1.2 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Bao BlueRock in WordPress Plugin ProveSource Social Proof versions = 3.1.2...
WordPress plugin ProveSource Social Proof 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
PT-2025-34185 · WordPress · Provesource Social Proof
Name of the Vulnerable Software and Affected Versions: ProveSource Social Proof versions n/a through 3.0.5 Description: ProveSource Social Proof contains a flaw that allows the retrieval of embedded sensitive data, leading to the exposure of confidential system information to an unauthorized...
Mermaid improperly sanitizes sequence diagram labels leading to XSS
Summary In the default configuration of mermaid 11.9.0, user supplied input for sequence diagram labels is passed to innerHTML during calculation of element size, causing XSS. Details Sequence diagram node labels with KaTeX delimiters are passed through calculateMathMLDimensions. This method pass...
Exploit for CVE-2024-53900
CVE-2024-53900 - Mongoose populate.match $where RCE This r...
M-Files 25.6.14925.0 Path Traversal
This repository contains a proof-of-concept exploit in C for a suspected path traversal vulnerability in M‑Files version 25.6.14925.0. It attempts to read sensitive files e.g. /etc/passwd by injecting traversal payloads into REST API endpoints...
GHSA-MP56-7VRW-QXVF
creationtimestamp| type| source ---|---|--- 2025-08-18 21:12:49+00:00| published-proof-of-concept| https://t.me/cKure/15266 2026-07-21 13:00:07+00:00| published-proof-of-concept| https://t.me/ckuRED/643 2026-07-22 00:00:24+00:00| published-proof-of-concept| https://t.me/ckuRED/643...
Exploit for CVE-2025-49132
CVE-2025-49132 PoC Improved This is an improved version of...
Elastic Response to Blog ‘EDR 0-Day Vulnerability’
Updated: August 29, 2025 Elastic has been directly engaging with the independent researcher. After evaluating additional information provided by the researcher, our original assessment still stands. To confirm we are responsibly assessing this report and providing an unbiased perspective, we are...
Modified Security Analysis of Device-Independent Quantum Key Distribution with Random Key Basis
Security analysis is a critical part in any cryptographic protocol, may it be classical or quantum. Without security analysis, one cannot ensure the secrecy of the distributed keys. To perform a conclusive security analysis, it is very often necessary to frame the problem as an optimization...
Exploit for Path Traversal in Citrix Application_Delivery_Controller_Firmware
This is a PoC exploit for CVE-2019-19781, a vulnerability in Citrix ADC NetScaler that allows for unauthenticated remote code execution. The tool, called Citrixmash, was published by TrustedSec due to other researchers releasing their code first. The exploit exploits a directory traversal bug in...
Exploit for CVE-2023-1234
It is an offensive tool for SSH exploitation. The repository contains a proof of concept PoC exploit for CVE-2023-1234, which targets vulnerable proxycommand configurations on SSH clients. The target product/service is OpenBSD's SSH, and the vulnerability class/vector is remote command execution...
Exploit for CVE-2025-6934
CVE-2025-6934 – WordPress Opal Estate Pro Exploit 📖 Desc...
Exploit for Double Free in Microsoft
CVE-2025-49667 — Win32k Privilege Escalation Exploit !Explo...
0day-buffer-overflow-in-exiv2
PoC and patch for heap-buffer-overflow in PngChunk::readRawProf...
Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver
The SUPERGROUP known as Scattered Lapsus$ Hunters - A combin...
CVE-2025-50461
creationtimestamp| type| source ---|---|--- 2025-08-15 06:38:27+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/47775 2025-08-15 08:13:12+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/47783 2025-08-15 09:00:04+00:00| published-proof-of-concept|...