20164 matches found
Malicious ML Models on Hugging Face Leverage Broken Pickle Format to Evade Detection
Cybersecurity researchers have uncovered two malicious machine learning ML models on Hugging Face that leveraged an unusual technique of "broken" pickle files to evade detection. "The pickle files extracted from the mentioned PyTorch archives revealed the malicious Python content at the beginning...
CVE-2023-27775
creationtimestamp| type| source ---|---|--- 2025-02-08 06:03:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3870...
CVE-2023-29571
creationtimestamp| type| source ---|---|--- 2025-02-08 06:03:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3866...
GHSA-VR5F-PHP7-RG24
creationtimestamp| type| source ---|---|--- 2025-02-07 22:02:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3835...
GHSA-2237-5R9W-VM8J
creationtimestamp| type| source ---|---|--- 2025-02-07 21:03:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3829...
GHSA-5RJC-JC28-CWGG
creationtimestamp| type| source ---|---|--- 2025-02-07 21:03:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3830...
RHSA-2016:0070
creationtimestamp| type| source ---|---|--- 2025-02-07 21:03:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3828...
CISCO-SA-20170907-STRUTS2
creationtimestamp| type| source ---|---|--- 2025-02-07 18:02:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3799...
GHSA-C5J8-JXJ3-HH36
creationtimestamp| type| source ---|---|--- 2025-02-07 16:16:05+00:00| published-proof-of-concept| https://t.me/haj3imad/779...
Exploit for Server-Side Request Forgery in Rocket.Chat
CVE-2024-39713: Rocket.Chat SSRF PoC Description A Server...
CVE-2020-15253
Versions of Grocy = 2.7.1 are vulnerable to Cross-Site Scripting via the Create Shopping List module, that is rendered upon deleting that Shopping List. The issue was also found in users, batteries, chores, equipment, locations, quantity units, shopping locations, tasks, taskcategories, product...
CVE-2024-35235
creationtimestamp| type| source ---|---|--- 2025-02-05 10:00:06+00:00| published-proof-of-concept| Telegram/tROXu-VoDvIGOcLcpszl-EBZ8Ot5WUMl6WIZHqWkyLe8WA0 2025-02-06 20:00:07+00:00| published-proof-of-concept| Telegram/Emfos1Bry778nZeLXZUQDUE4A45ZiVElYgXfAdoaC3h9SE 2025-02-21 17:18:30+00:00|...
CVE-2024-32644
Evmos is a scalable, high-throughput Proof-of-Stake EVM blockchain that is fully compatible and interoperable with Ethereum. Prior to 17.0.0, there is a way to mint arbitrary tokens due to the possibility to have two different states not in sync during the execution of a transaction. The exploit ...
CVE-2024-42450
The Versa Director uses PostgreSQL Postgres to store operational and configuration data. It is also needed for High Availability function of the Versa Director. The default configuration has a common password across all instances of Versa Director. By default, Versa Director configures Postgres t...
PHPJabbers Cinema Booking System 2.0 SQL Injection Vulnerability
CVE-2024-57430 An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database...
Exploit for CVE-2024-2961
Buddyforms 2.7.7 CNEXT RCE Abusing CVE-2024-2961 and CVE-2023...
Malicious code in poc-creation (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-859 Malicious code in poc-creation (npm)
--- -= Per source details. Do not edit below this line.=-...