CVE-2024-32136

creationtimestamp| type| source ---|---|--- 2024-08-16 11:16:31+00:00| published-proof-of-concept| https://t.me/Rootsec2/3435 2024-11-19 17:49:20+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10849...

CVE-2023-4208

creationtimestamp| type| source ---|---|--- 2024-08-16 09:00:19+00:00| published-proof-of-concept| https://t.me/HackerArsenal/171 2024-08-16 09:01:34+00:00| published-proof-of-concept| https://t.me/Kelvinseccommunity/738 2024-08-16 11:03:01+00:00| published-proof-of-concept|...

CVE-2023-43212

creationtimestamp| type| source ---|---|--- 2024-08-16 08:52:58+00:00| published-proof-of-concept| https://t.me/Rootsec2/2099...

CVE-2023-46729

creationtimestamp| type| source ---|---|--- 2024-08-16 08:45:56+00:00| published-proof-of-concept| https://t.me/Rootsec2/1741 2026-07-26 07:00:42+00:00| seen| https://t.me/EchelonEyes/2145 2026-07-27 00:00:56+00:00| seen| https://t.me/EchelonEyes/2145 2026-07-28 00:00:31+00:00|...

CVE-2024-7868

creationtimestamp| type| source ---|---|--- 2024-08-16 00:20:20+00:00| published-proof-of-concept| https://t.me/cvedetector/3287...

AZL-47857 CVE-2024-7868 affecting package cppcheck 2.7-2

In Xpdf 4.05 and earlier, invalid header info in a DCT JPEG stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read from an invalid address...

CVE-2024-7868

CVE-2024-7868 affects Xpdf 4.05 and earlier, where invalid header info in a DCT (JPEG) stream can trigger an uninitialized variable in the DCT decoder, with a proof-of-concept PDF causing a segfault. Fedora/Slackware advisories indicate the issue is addressed by upgrading to Xpdf 4.06; multiple a...

PT-2024-38645

Name of the Vulnerable Software and Affected Versions Xpdf versions 4.05 and earlier Description The issue arises from invalid header information in a DCT JPEG stream, leading to an uninitialized variable in the DCT decoder. This can cause a segfault when attempting to read from an invalid addres...

CVE-2024-3104

creationtimestamp| type| source ---|---|--- 2024-08-14 16:35:18+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/anythingllmcve20243104...

CVE-2024-40800

creationtimestamp| type| source ---|---|--- 2024-08-14 03:55:57+00:00| published-proof-of-concept| Telegram/ToCf6YsGId5JUWGMj9DuepDPCX4Mci4i8uh8beEPrs42uuDN 2024-12-13 19:00:23+00:00| published-proof-of-concept| https://t.me/cyberhsecurity/1614...

WordPress Profilepro 1.3 Cross Site Scripting Vulnerability

Exploit Title: profilepro if !response.ok throw new Error'Network response was not ok'; return response.text; .thendata = console.logdata .catcherror = console.error'Error:', error; - As an admin, go to http://example.com/wp-admin/edit.php?posttype=profileproform - Choose the default profile, cli...

WordPress MapFig Studio 0.2.1 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: MapFig Studio alert1" / alert1" / history.pushState'', '', '/'; document.forms0.submit; Reference: https://wpscan.com/vulnerability/0346b62c-a856-4554-a24a-ef2c2943bda9/...

CVE-2024-5651

creationtimestamp| type| source ---|---|--- 2024-08-12 17:17:25+00:00| published-proof-of-concept| https://t.me/HackingInsights/9581...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the rpctensor structure. An attacker can cause memory data leakage by exploiting the unsafe type member. PoC from pwn import ALLOCBUFFER = 0 GETALIGNMENT = 1 GETMAXSIZE = 2 BUFFERGETBASE = 3 FREEBUFFER = 4...

Vulnerability fixed in Asterisk

A vulnerability has been fixed in Asterisk. A malicious person could exploit the vulnerability to grant themselves elevated privileges and execute arbitrary code with application privileges. For successful abuse, the malicious party must have prior authentication. The researcher who discovered th...

CVE-2024-7649

creationtimestamp| type| source ---|---|--- 2024-08-11 23:22:15+00:00| published-proof-of-concept| Telegram/f8fTTUkTuukLjmCpX7YyAiy3JqkWCMGtmGcAmWUnQdwS9Jic 2024-08-30 06:52:02+00:00| published-proof-of-concept| https://t.me/codeb0ss/1553...

Exploit for Incorrect Authorization in Nexxtsolutions Nebula1200-Ac_Firmware

EN This project provides a proof-of-concept exploit for a remo...

CVE-2023-50809

creationtimestamp| type| source ---|---|--- 2024-08-09 16:50:05+00:00| published-proof-of-concept| https://t.me/truesecator/6078...

Open WebUI 0.1.105 File Upload / Path Traversal Vulnerabilities

Title: Open WebUI Arbitrary File Upload + Path Traversal Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2024-006.txt 1. Vulnerability Details Affected Vendor: Open WebUI Affected Product: Open WebUI Affected Version: 0.1.105 Platform: Debian 12 CWE Classification: CWE-22:...

Journyx 11.5.4 XML Injection Vulnerability

Journyx version 11.5.4 has an issue where the soapcgi.pyc API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources. Title:...