20183 matches found
CVE-2024-32880
creationtimestamp| type| source ---|---|--- 2024-04-24 20:42:50+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-3f7w-p8vr-4v5f...
OpenMetadata vulnerable to a SpEL Injection in `GET /api/v1/policies/validation/condition/<expr>` (`GHSL-2023-236`)
SpEL Injection in GET /api/v1/policies/validation/condition/ GHSL-2023-236 Please note, only authenticated users have access to PUT / POST APIS for /api/v1/policies. Non authenticated users will not be able to access these APIs to exploit the vulnerability. A user must exist in OpenMetadata and...
Exploit for Unrestricted Upload of File with Dangerous Type in Cubecart
Arbitrary File Upload Leads to RCE CVE-2024-33438 CubeCart &...
CVE-2024-32866
creationtimestamp| type| source ---|---|--- 2024-04-23 20:31:27+00:00| published-proof-of-concept| https://github.com/edmundhung/conform/security/advisories/GHSA-624g-8qjg-8qxf...
CVE-2024-32869
creationtimestamp| type| source ---|---|--- 2024-04-23 08:21:55+00:00| published-proof-of-concept| https://github.com/honojs/hono/security/advisories/GHSA-3mpf-rcc7-5347...
CVE-2024-34347
creationtimestamp| type| source ---|---|--- 2024-04-22 16:08:41+00:00| published-proof-of-concept| https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-qmmm-73r2-f8xr...
Laravel Framework 11 Credential Disclosure
Exploit Title: Laravel Framework 11 - Credential Leakage Google Dork: N/A Date: 2024-04-19 Exploit Author: Huseein Amer Vendor Homepage: https://laravel.com/ Software Link: N/A Version: 8. - 11. REQUIRED Tested on: N/A CVE : CVE-2024-29291 Proof of concept: Go to any Laravel-based website and...
Exploit for CVE-2024-24576
CVE-2024-24576-PoC-BatBadBut PoC for CVE-2024-24576 vulnerabi...
Laravel Framework 11 - Credential Leakage Vulnerability
Exploit Title: Laravel Framework 11 - Credential Leakage Exploit Author: Huseein Amer Vendor Homepage: https://laravel.com/ Software Link: N/A Version: 8. - 11. REQUIRED Tested on: N/A CVE : CVE-2024-29291 Proof of concept: Go to any Laravel-based website and navigate to storage/logs/laravel.log...
CVE-2024-32479
creationtimestamp| type| source ---|---|--- 2024-04-20 15:29:36+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-72m9-7c8x-pmmw...
CVE-2024-32480
creationtimestamp| type| source ---|---|--- 2024-04-20 15:29:15+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-jh57-j3vq-h438...
CVE-2024-31869
creationtimestamp| type| source ---|---|--- 2024-04-19 16:41:11+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10357 2024-04-20 13:07:57+00:00| published-proof-of-concept| https://t.me/Teamx1945x/3623...
CVE-2024-32644
Summary: CVE-2024-32644 affects Evmos pre-17.0.0. A state synchronization bug in stateDB.Commit() compares dirtyStorage to originStorage and only writes when they differ, which can allow non-atomic transactions and potentially mint arbitrary tokens or drain funds through creative smart-contract i...
CVE-2024-32644 Evmos' transaction execution not accounting for all state transition after interaction with precompiles
Evmos is a scalable, high-throughput Proof-of-Stake EVM blockchain that is fully compatible and interoperable with Ethereum. Prior to 17.0.0, there is a way to mint arbitrary tokens due to the possibility to have two different states not in sync during the execution of a transaction. The exploit ...
CVE-2023-45158
creationtimestamp| type| source ---|---|--- 2024-04-19 11:38:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9327 2024-08-16 08:43:29+00:00| published-proof-of-concept| https://t.me/Rootsec2/1635...
CVE-2014-1303
creationtimestamp| type| source ---|---|--- 2024-04-19 05:31:25+00:00| published-proof-of-concept| Telegram/GGU4Zjcy9RRRzCj87pkQSgeBh3KoSL3WZk3hlgAXEsZ2B0X...
CVE-2024-20295
creationtimestamp| type| source ---|---|--- 2024-04-18 11:08:28+00:00| published-proof-of-concept| https://t.me/truesecator/5651 2026-07-06 11:00:07+00:00| seen| https://t.me/ZerodayAlert/219 2026-07-07 00:00:19+00:00| seen| https://t.me/ZerodayAlert/219 2026-07-12 00:00:17+00:00| seen|...
CVE-2024-3149
creationtimestamp| type| source ---|---|--- 2024-04-18 01:31:51+00:00| published-proof-of-concept| https://t.me/cKure/12750...
Amazon Linux 2 : dnsmasq (ALASDNSMASQ-2024-002)
The version of dnsmasq installed on the remote host is prior to 2.90-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DNSMASQ-2024-002 advisory. Certain DNSSEC aspects of the DNS protocol in RFC 4035 and related RFCs allow remote attackers to cause a denial of...