20181 matches found
CVE-2011-2856
creationtimestamp| type| source ---|---|--- 2024-09-10 16:00:52+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1009...
CVE-2020-10673
creationtimestamp| type| source ---|---|--- 2024-09-10 16:00:52+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1009...
Exploit for Race Condition within a Thread in Google Chrome
CVE-2024-5836 / CVE-2024-6778 This repository contains proo...
GHSA-4JCV-VP96-94XR
creationtimestamp| type| source ---|---|--- 2024-09-09 14:48:44+00:00| published-proof-of-concept| https://t.me/HackerArsenal/305 2024-09-09 14:49:02+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/791 2024-09-10 17:44:13+00:00| published-proof-of-concept|...
CVE-2024-6159
creationtimestamp| type| source ---|---|--- 2024-09-09 14:03:54+00:00| published-proof-of-concept| https://t.me/codeb0ss/1597...
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.2024)
The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.2024 advisory. - This flaw allows a malicious HTTP server to set super cookies in curl that are then passed back to more origi...
gnark's Groth16 commitment extension unsound for more than one commitment
Description The summary is that the proof of knowledge associated to a commitment is crucial to bind the commitment to the actual circuit variables that were supposed to be committed. However, the same σ is used for all proofs of knowledge for the commitments, which allows mixing between them,...
GHSA-Q3HW-3GM4-W5CR gnark's Groth16 commitment extension unsound for more than one commitment
Description The summary is that the proof of knowledge associated to a commitment is crucial to bind the commitment to the actual circuit variables that were supposed to be committed. However, the same σ is used for all proofs of knowledge for the commitments, which allows mixing between them,...
GHSA-9XCG-3Q8V-7FQ6 gnark commitments to private witnesses in Groth16 as implemented break zero-knowledge property
This report concerns the Groth16 prover when used with commitments as in frontend.Committer. To simplify exposition of the issue, I will focus on the case of a single commitment, to only private witnesses. But the issue should be present whenever commitments are used that include private witnesse...
CVE-2024-30896
creationtimestamp| type| source ---|---|--- 2024-09-06 15:55:56+00:00| published-proof-of-concept| https://t.me/HackerArsenal/284 2024-09-06 15:56:15+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/786 2024-09-06 15:56:53+00:00| published-proof-of-concept|...
CVE-2024-25503
creationtimestamp| type| source ---|---|--- 2024-09-06 06:24:41+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8465...
CVE-2024-23995
creationtimestamp| type| source ---|---|--- 2024-09-06 06:16:30+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8464...
Exploit for Cross-site Scripting in Martinbarker Rendertune
RenderTune RCE A Proof-Of-Concept for CVE-2024-25292 vulnerab...
Exploit for CVE-2024-23995
Beekeeper-Studio PoC A Proof-Of-Concept for CVE-2024-23995 vul...
Exploit for Open Redirect in Nteract
Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerabilit...
Exploit for Cross-site Scripting in Lukasbach Yana
YANA Notebook PoC A Proof-Of-Concept for CVE-2024-23997 vulner...
PT-2024-39069
Name of the Vulnerable Software and Affected Versions: SPIP versions prior to 4.3.2, 4.2.16, and 4.1.18 Description: SPIP is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HT...
PT-2024-12772 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided input. Description: A proof of concept POC is available, but details about the issue are not explicitly mentioned. No information is provided about potentially affected devices or...