20174 matches found
GHSA-5JH2-6V7C-86VJ
creationtimestamp| type| source ---|---|--- 2025-01-05 01:30:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/35 2025-01-05 01:32:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/50 2025-01-05 01:34:55+00:00| published-proof-of-concept|...
GHSA-VJ39-GWG7-6872
creationtimestamp| type| source ---|---|--- 2025-01-05 01:30:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/34 2025-01-05 01:34:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/71 2025-01-05 01:37:56+00:00| published-proof-of-concept|...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper input sanitization passed through the quantity parameter. PoC html history.pushState'', '', '/'; document.forms0.submit; Remediation There is no fixed version for phpoffice/phpexcel. References -...
CVE-2023-46196
Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social proof testimonials and reviews by Repuso: from n/a through = 4.97...
WordPress plugin Social proof testimonials and reviews by Repuso 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Social proof...
PT-2025-41627
Name of the Vulnerable Software and Affected Versions nvidia-graphics-drivers affected versions not specified nvidia-graphics-drivers-legacy-390xx affected versions not specified nvidia-graphics-drivers-tesla-418 affected versions not specified nvidia-graphics-drivers-tesla-470 affected versions...
LGSL has a reflected XSS at /lgsl_files/lgsl_list.php
Reflected XSS at /lgslfiles/lgsllist.php Description: Vulnerability: A reflected XSS vulnerability exists in the Referer HTTP header of LGSL v6.2.1. The vulnerability allows attackers to inject arbitrary JavaScript code, which is reflected in the HTML response without proper sanitization. When...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831 WinRAR Exploit PoC This repository contains a...
GHSA-XX95-62H6-H7V3 lgsl Stored Cross-Site Scripting vulnerability
Summary A stored cross-site scripting XSS vulnerability was identified in lgsl. The issue arises from improper sanitation of user input. Everyone who accesses this page will be affected by this attack. Details The function lgslquery40 in lgslprotocol.php has implemented an HTTP crawler. This...
Exploit for Path Traversal in Aiohttp
CVE-2024-23334-PoC A proof of concept of the path travers...
PT-2025-14719
Name of the Vulnerable Software and Affected Versions Yelp versions prior to 42.2 Yelp versions prior to 3.38.3-1+deb11u1 Yelp versions prior to 3.36.2-0ubuntu1.1 Yelp-xsl versions prior to 42.1-2+deb12u1 Yelp-xsl versions prior to 3.36.0-1ubuntu0.1 Description A flaw in the Gnome user help...
Exploit for Classic Buffer Overflow in Linux Linux_Kernel
CVE-2022-32981 poc for...
Exploit for CVE-2024-35176
CVE-20...
Unsound usages of `u8` type casting
The library provides a safe public API unpack to cast u8 array to arbitrary types, which can cause to undefined behaviors. The length check of array can only prevent out-of-bound access on the return type. However, it can't prevent misaligned pointer when casting u8 pointer to a type aligned to...
CLSA-2024-1734532058 unbound: Fix of 2 CVEs
CVE-2023-50387: Evaluate DNSSEC responses to prevent KeyTrap denial of service issue. - CVE-2023-50868: Fix Closest Encloser Proof aspect to prevent CPU consumption for SHA-1 computations in random subdomain attacks...
Patch Alert: Critical Apache Struts Flaw Found, Exploitation Attempts Detected
Threat actors are attempting to exploit a recently disclosed security flaw impacting Apache Struts that could pave the way for remote code execution. The issue, tracked as CVE-2024-53677, carries a CVSS score of 9.5 out of 10.0, indicating critical severity. The vulnerability shares similarities...
CVE-2023-4698
creationtimestamp| type| source ---|---|--- 2024-12-18 12:00:21+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8971...
Exploit for CVE-2024-45337
CVE-2024-45337-POC Proof of concept POC for CVE-2024-45337...
Improper Input Validation
dev.sigstore, sigstore-java is vulnerable to Improper Input Validation. The vulnerability is due to insufficient verification in the KeylessVerifier.verify method, which fails to properly validate whether the inclusion proof provided by a bundle corresponds to the correct log, allows an attacker ...