CVE-2024-45307

creationtimestamp| type| source ---|---|--- 2024-09-03 21:39:25+00:00| published-proof-of-concept| https://t.me/cvedetector/4709...

Vulnerabilities fixed in Progress WhatsUp Gold

Progress has fixed vulnerabilities in WhatsUp Gold. A malicious party can exploit the vulnerabilities to retrieve or change the password of the application user in a Single User installation, or in a Multi User installation to change the password of a user with elevated privileges through an...

CVE-2023-41111

creationtimestamp| type| source ---|---|--- 2024-09-02 09:10:13+00:00| published-proof-of-concept| https://t.me/HackerArsenal/248 2024-09-02 17:43:31+00:00| published-proof-of-concept| https://t.me/CNArsenal/3100 2024-09-06 18:12:05+00:00| published-proof-of-concept|...

PT-2024-30250 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins affected versions not specified Description: A proof of concept PoC exploit has been released for a bug in Jenkins. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...

Fortinet SSL VPN Bruteforce Login Utility

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Fortinet SSL VPN Bruteforce Login Utility', 'Description' = % This module scans for Fortinet SSL VPN web login portals and performs login brute...

SNMP Community Login Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/communitystringcollection' require 'metasploit/framework/loginscanner/snmp' class MetasploitModule 'SNMP Community Login Scanner',...

Memcached Stats Amplification Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Memcached Stats Amplification Scanner', 'Description' = %q This module can be used to discover Memcached servers which expose the unrestricted UD...

CVE-2024-1543

creationtimestamp| type| source ---|---|--- 2024-08-30 02:16:07+00:00| published-proof-of-concept| https://t.me/cvedetector/4484...

CVE-2024-45302

creationtimestamp| type| source ---|---|--- 2024-08-29 19:09:56+00:00| published-proof-of-concept| https://github.com/restsharp/RestSharp/security/advisories/GHSA-4rr6-2v9v-wcpc 2024-08-30 01:25:55+00:00| published-proof-of-concept| https://t.me/cvedetector/4478...

Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet Attacks

A years-old high-severity flaw impacting AVTECH IP cameras has been weaponized by malicious actors as a zero-day to rope them into a botnet. CVE-2024-7029 CVSS score: 8.7, the vulnerability in question, is a "command injection vulnerability found in the brightness function of AVTECH closed-circui...

Exploit for Improper Input Validation in Cacti

CVE-2024-25641 - Cacti 1.2.26 - Arbitrary file write to RCE 🌵...

CVE-2021-27090

creationtimestamp| type| source ---|---|--- 2024-08-28 19:30:05+00:00| published-proof-of-concept| https://t.me/truesecator/6144 2024-08-29 19:16:11+00:00| published-proof-of-concept| https://t.me/SEReborn/5065...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick

CVE-2022-44268-automated CVE-2022-44268 ImageMagick Arbitrary...

CVE-2021-26418

creationtimestamp| type| source ---|---|--- 2024-08-28 07:50:25+00:00| published-proof-of-concept| Telegram/7XG3Qhyveq0sd-sorvBusAou1bYnK4tFO-cr4qbsp7Vd2w0...

CISA Flags Critical Apache OFBiz Flaw Amid Active Exploitation Reports

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a critical security flaw affecting the Apache OFBiz open-source enterprise resource planning ERP system to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The...

Critical Flaws in Traccar GPS System Expose Users to Remote Attacks

Two security vulnerabilities have been disclosed in the open-source Traccar GPS tracking system that could be potentially exploited by unauthenticated attackers to achieve remote code execution under certain circumstances. Both the vulnerabilities are path traversal flaws and could be weaponized ...

MTN Group: Social media account takeover

The social media account for https://simfy.africa was taken over, allowing the attacker to redirect visitors to their own Instagram account. This vulnerability was demonstrated through a proof of concept video...

CVE-2024-43035

creationtimestamp| type| source ---|---|--- 2024-08-23 21:49:23+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8347...

PT-2024-30265

Name of the Vulnerable Software and Affected Versions Fonoster affected versions not specified Description A Local File Inclusion issue has been identified in Fonoster. A Proof of Concept PoC script is available, demonstrating the vulnerability. This issue allows for the inclusion of local files,...

DiCal-RED 4009 Cryptography Failure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-038 Product: DiCal-RED Manufacturer: Swissphone Wireless AG Affected Versions: Unknown Tested Versions: 4009 Vulnerability Type: Use of Password Hash Instead of Password for Authentication CWE-836 Risk Level: Medium Solution...