20174 matches found
CLSA-2024-1734368297 gnutls: Fix of 3 CVEs
Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use gnutlsswitchlibstate for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side...
Exploit for CVE-2024-38819
CVE-2024-38819: Proof of Concept PoC This is a proof of con...
CVE-2024-38348
creationtimestamp| type| source ---|---|--- 2024-12-13 19:00:22+00:00| published-proof-of-concept| https://t.me/cyberhsecurity/1609...
CVE-2023-41690 WordPress WiserNotify Social Proof plugin <= 2.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Wisernotify team WiserNotify wiser-notify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WiserNotify: from n/a through = 2.5...
WordPress plugin WiserNotify Social Proof 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-36120 · Unknown · Elite Notification – Sales Popup
Name of the Vulnerable Software and Affected Versions: Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification versions 1.5 through n/a Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation due to incorrectly configured acces...
bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources
A flaw was found in bind9. By flooding a DNSSEC resolver with responses coming from a DNSEC-signed zone using NSEC3, an attacker can lead the targeted resolver to a CPU exhaustion, further leading to a Denial of Service on the targeted host. This vulnerability applies only for systems where DNSSE...
Exploit for SQL Injection in Iqonic Kivicare
CVE-2024-11728 KiviCare – Clinic & Patient Management Syst...
Vulnerabilities fixed in Mitel MiCollab
Mitel has fixed vulnerabilities in Mitel MiCollab Specifically the Unified Messaging and Conferencing components. The vulnerabilities are in the way Mitel MiCollab components handle user input. An attacker can exploit these vulnerabilities to gain unauthorized access to user data and system...
Exploit for Path Traversal in Aiohttp
CVE-2024-23334-PoC This repository is a proof of concept POC...
CVE-2024-26331
creationtimestamp| type| source ---|---|--- 2024-12-07 14:21:09+00:00| published-proof-of-concept| https://t.me/codeb0ss/1651 2024-12-07 14:30:03+00:00| published-proof-of-concept| Telegram/qs12czNmT1IJozUYCe3e2c9qESe1NUPZq2Ag6J7pLuyULmi 2024-12-07 14:30:05+00:00| published-proof-of-concept|...
CVE-2023-29931
creationtimestamp| type| source ---|---|--- 2024-12-06 23:52:55+00:00| published-proof-of-concept| https://t.me/LeakDBMS/1528...
Qualys TotalAI: The Journey from LLM Scanner to Comprehensive AI Security Solution
Embarking on the AI/ML Journey The launch of Qualys TotalAI marks a significant milestone in our journey with AI/ML. It all began in March 2024 when we ventured into the rapidly evolving AI/ML landscape and the emerging LLM ecosystem. Recognizing the potential of these technologies to revolutioni...
GHSA-JP26-88MW-89QR sigstore-java has a vulnerability with bundle verification
Summary sigstore-java has insufficient verification for a situation where a bundle provides a invalid signature for a checkpoint. Impact This bug impacts clients using any variation of KeylessVerifier.verify Currently checkpoints are only used to ensure the root hash of an inclusion proof was...
CVE-2024-54140
sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient verification for a situation where a bundle provides a invalid signature for a checkpoint. This bug impacts clients using any variation of KeylessVerifier.verify. Currently...
CVE-2024-54140
CVE-2024-54140 : sigstore-java has insufficient verification in KeylessVerifier.verify(), allowing a bundle to provide an invalid signature for a checkpoint and potentially an inclusion proof that doesn’t match the intended log. Impact is described as low for non-monitor/witness clients; fixes ar...
CVE-2024-54140 sigstore-java has a vulnerability with bundle verification
sigstore-java is a sigstore java client for interacting with sigstore infrastructure. sigstore-java has insufficient verification for a situation where a bundle provides a invalid signature for a checkpoint. This bug impacts clients using any variation of KeylessVerifier.verify. Currently...
Critical Mitel MiCollab Flaw Exposes Systems to Unauthorized File and Admin Access
Cybersecurity researchers have released a proof-of-concept PoC exploit that strings together a now-patched critical security flaw impacting Mitel MiCollab with an arbitrary file read zero-day, granting an attacker the ability to access files from susceptible instances. The critical vulnerability ...