Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

CVE-2024-38063 PoC | DKob & N3TCR4SH Overview This scr...

CVE-2024-49758

creationtimestamp| type| source ---|---|--- 2024-11-15 00:01:52+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-c86q-rj37-8f85...

CVE-2024-50352

creationtimestamp| type| source ---|---|--- 2024-11-15 00:00:21+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-qr8f-5qqg-j3wg...

CVE-2020-25291

creationtimestamp| type| source ---|---|--- 2024-11-13 08:04:21+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1860...

CVE-2024-8985

The Social Proof Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's spslider-block shortcode in all versions up to, and including, 2.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibl...

WordPress plugin Social Proof (Testimonial) Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

WordPress Social Proof (Testimonials) Slider plugin <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Social Proof Testimonial Slider versions = 2.2.4...

Exploit for CVE-2024-50251

CVE-2024-...

PT-2024-8082 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a Windows Registry Elevation of Privilege vulnerability, which is caused by errors in synchronization when using a shared resource. This vulnerability can be exploit...

WordPress Social Proof (Testimonial) Slider Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)

Software Social Proof Testimonial Slider Type Plugin Vulnerable versions = 2.2.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8985 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f9e80ae8f878 Credits Peter...

Citrix-Virtual-Apps-XEN-Exploit

CVE-2024-xxxx Citrix Virtual Apps and Desktops XEN Unauthen...

PT-2024-40198 · Sp1 · Sp1

Name of the Vulnerable Software and Affected Versions: SP1 versions prior to 3.0.0 Description: The issue arises during proof generation, where the prover must observe all values sent to the verifier to generate valid Fiat-Shamir challenges. In versions prior to 3.0.0, the cumulative sum of the...

CVE-2024-44258

creationtimestamp| type| source ---|---|--- 2024-11-07 17:03:43+00:00| published-proof-of-concept| https://t.me/CNArsenal/3423 2024-11-07 18:35:05+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11404 2026-05-13 09:00:04+00:00| seen|...

Announcing The Wordfence Audit Log: Off-Site Real-Time Security Event Logging for WordPress

Today the Wordfence team is proud to announce an exciting new feature: The Wordfence Audit Log, included in the Wordfence 8.0 release. The audit log captures and stores security-related events on your website as they happen, and sends them securely to an off-site location to protect them from...

CVE-2024-51501

creationtimestamp| type| source ---|---|--- 2024-11-05 01:19:12+00:00| published-proof-of-concept| https://t.me/cvedetector/9800...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to insufficient filtering of data. Note: This is exploitable only if the code is executed outside of Drupal; the function is intended to be shared between Drupal and Pattern Lab. The package...

Exploit for CVE-2024-48326

CVE-2024-48326 Description: Portabilis i-Educar v2.8.0...

CVE-2020-11519

creationtimestamp| type| source ---|---|--- 2024-11-02 15:33:17+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1407 2026-07-18 15:00:04+00:00| seen| https://t.me/reverseame/274 2026-07-19 00:00:12+00:00| published-proof-of-concept| https://t.me/reverseame/274 2026-09-01...

CVE-2020-3957

creationtimestamp| type| source ---|---|--- 2024-11-02 15:24:59+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1372...

CSRF ON SIGNUP PAGE

CSRF ON CREATING A NEW USER in mlflow/mlflow Reported on Oct 31st 2024 The Signup feature of Mlflow is vulnerable to CSRF attack that allow attacker to create a new account. This may be used to perform unauthorised actions on behalf of the malcious user . Proof of Concept : An attacker can use CS...