20177 matches found
CVE-2020-11679
creationtimestamp| type| source ---|---|--- 2024-10-28 14:39:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1227...
Denial of service cause by unhandled exception
Description In javascript express, if async router handler throw an exception, the whole server will crash. In librechat, middleware checkBan is not surrounded by try catch block. This middleware, under some crafted payload, will throw exception and cause server crash. This poc can be exploited b...
PT-2024-33666 · Duende · Duende Identityserver
Name of the Vulnerable Software and Affected Versions: Duende IdentityServer versions 7.0.0 through 7.0.7 Description: The local API authentication handler in Duende IdentityServer performs insufficient validation of the cnf claim in DPoP access tokens. This allows an attacker to use leaked DPoP...
Duende IdentityServer 授权问题漏洞
Duende IdentityServer is a Duende open source, standards-compliant OpenID Connect and OAuth 2.x framework for ASP.NET Core. An authorization issue vulnerability exists in Duende IdentityServer version 7.0.0 and earlier, which stems from insufficient validation performed by the local API...
CVE-2022-25477
creationtimestamp| type| source ---|---|--- 2024-10-27 16:49:25+00:00| published-proof-of-concept| https://t.me/Rootsec2/4876 2024-10-28 13:32:54+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11344 2024-11-21 04:19:04+00:00| published-proof-of-concept|...
Exploit for CVE-2024-52940
AnyDesk IP Leak Vulnerability CVE-2024-52940 🎤 README Tra...
GHSA-MGFV-M47X-4WQP useragent Regular Expression Denial of Service vulnerability
Useragent is a user agent parser for Node.js. All versions as of time of publication contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. PoC js async function exploit const useragent = require"useragent"; // Create a malicious user-agent that...
CVE-2020-10747
creationtimestamp| type| source ---|---|--- 2024-10-26 04:55:15+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1209 2026-07-18 15:00:05+00:00| seen| https://t.me/reverseame/187 2026-07-19 00:00:11+00:00| published-proof-of-concept| https://t.me/reverseame/187...
CVE-2020-15498
creationtimestamp| type| source ---|---|--- 2024-10-26 01:48:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1471 2026-07-12 22:00:17+00:00| seen| https://t.me/pleyadesit/7081 2026-07-13 00:00:41+00:00| seen| https://t.me/pleyadesit/7081 2026-07-14 00:00:49+00:00| see...
Researchers Discover Command Injection Flaw in Wi-Fi Alliance's Test Suite
A security flaw impacting the Wi-Fi Test Suite could enable unauthenticated local attackers to execute arbitrary code with elevated privileges. The CERT Coordination Center CERT/CC said the susceptible code from the Wi-Fi Alliance has been found deployed on Arcadyan FMIMG51AX000J routers. The...
CVE-2020-8871
creationtimestamp| type| source ---|---|--- 2024-10-24 17:28:58+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1163 2026-07-18 15:00:05+00:00| seen| https://t.me/reverseame/114 2026-07-19 00:00:11+00:00| published-proof-of-concept| https://t.me/reverseame/114...
CVE-2020-6096
creationtimestamp| type| source ---|---|--- 2024-10-24 17:24:17+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1159...
CVE-2023-0448
creationtimestamp| type| source ---|---|--- 2024-10-24 04:50:29+00:00| published-proof-of-concept| https://t.me/codeb0ss/974...
CVE-2020-13118
creationtimestamp| type| source ---|---|--- 2024-10-24 04:32:14+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1137...
Exploit for Cross-site Scripting in Roundcube Webmail
CVE-2024-37383-POC Proof of concept for CVE-2024-37383 Int...
Exploit for Command Injection in Netgate Pfsense
pfSense 2.7.0 Command Injection Exploit CVE-2023-42326 This...
Exploit for Command Injection in Netgate Pfsense
pfSense 2.7.0 Command Injection Exploit CVE-2023-42326 This...
CVE-2020-9951
creationtimestamp| type| source ---|---|--- 2024-10-23 23:15:30+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1766...
CVE-2024-41819
creationtimestamp| type| source ---|---|--- 2024-10-23 19:29:44+00:00| published-proof-of-concept| https://t.me/HackerArsenal/608 2024-10-24 12:41:42+00:00| published-proof-of-concept| Telegram/qH6wx2SCvd6-Z7e5KctLJVx-gtH-x7J2L6wQtvPEeNko7RFN 2024-10-25 12:04:30+00:00| published-proof-of-concept|...