Exploit for Server-Side Request Forgery in Naviwebs Navigate_Cms

It is an exploit module targeting Apache HTTP Server. The targe...

Exploit for Cross-site Scripting in Modcluster Mod_Proxy_Cluster

CVE-2023-6710 Exploit POC Explore the depths of CVE-2023-6710...

Exploit for Cross-site Scripting in Modcluster Mod_Proxy_Cluster

CVE-2023-6710 Exploit POC Explore the depths of CVE-2023-6710...

Exploit for Heap-based Buffer Overflow in Gnu Glibc

CVE-2023-4911 - Looney Tunables This is a atm very rough pr...

CVE-2023-51449

creationtimestamp| type| source ---|---|--- 2023-12-22 22:22:12+00:00| seen| https://t.me/ctinow/158638 2024-01-18 08:11:50+00:00| seen| https://t.me/ctinow/169610 2024-04-01 13:07:17+00:00| published-proof-of-concept|...

CVE-2023-42681

creationtimestamp| type| source ---|---|--- 2023-12-22 16:19:16+00:00| published-proof-of-concept| https://t.me/ctinow/158456...

CVE-2023-42684

creationtimestamp| type| source ---|---|--- 2023-12-22 16:19:09+00:00| published-proof-of-concept| https://t.me/ctinow/158455...

Hospital Management System 4.0 XSS / Shell Upload / SQL Injection Vulnerabilities

Hospital Management System versions 4.0 and below suffer from cross site scripting, remote shell upload, and remote SQL injection vulnerabilities. Description: Mutiple vulnerabilties were discovered in Hospital Management System Affected CMS: Hospital Management System Affected Version: unread...

CVE-2023-4233

creationtimestamp| type| source ---|---|--- 2023-12-21 09:54:36+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/4191...

CVE-2023-4234

creationtimestamp| type| source ---|---|--- 2023-12-21 09:54:36+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/4191...

Validate Creators Array

Lines of code Vulnerability details Potential Risk: The validateCreatorsArray function in the CreatorUtils contract performs input validation for the creatorArray parameter, which is an array of CreatorBps structs. While the function checks the individual elements of the array for valid addresses...

setPosMode function doesn't check if wLp is whitelisted

Lines of code Vulnerability details Proof of Concept Using setPosMode function owner of position can change it's mode. When the function is called, then there are a lot of checks, like if current mode allows to decollateralize and if new mode allows to collateralize. Also it's checked, that all...

wrong implementation of maxHeap.extractMax();

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. wrong implementation of maxHeap.extractMax; as it should return values but here its not assigned to anything. Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, log...

changing LOAN_TERM changes terms for existing loans

Lines of code Vulnerability details Impact If the protocol updates the loan terms, this will affect existing loans taken under different terms. Proof of Concept LOANTERM is a guarantee for the lender liquidity provider to eventually get their liquidity back. After loan term has passed the lender...

CVE-2022-29063

creationtimestamp| type| source ---|---|--- 2023-12-20 15:45:48+00:00| published-proof-of-concept| https://t.me/arpsyndicate/2050...

Lack of input validation for ClosePositionParams.amountSwap results in theft of fund (premium + protocol fee))

Lines of code Vulnerability details Impact Lack of input validation for ClosePositionParams.amountSwap results in theft of fund Proof of Concept ParticlePositionManager.sol hold two part of fund 1. the contract hold premium added by borrower 2. the contract hold protocol fee before protocol...

CVE-2022-0320

creationtimestamp| type| source ---|---|--- 2023-12-18 10:58:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9608 2024-08-16 08:57:34+00:00| published-proof-of-concept| https://t.me/Rootsec2/2289...

PT-2023-31620 · Unknown · Yii2-Authclient

Name of the Vulnerable Software and Affected Versions: yii2-authclient versions prior to 2.2.15 Description: The Oauth2 PKCE implementation in yii2-authclient is vulnerable in two ways. First, the authCodeVerifier should be removed after usage, similar to authState. Second, there is a risk for a...

CVE-2023-46998

creationtimestamp| type| source ---|---|--- 2023-12-17 12:43:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9604 2024-08-16 08:57:34+00:00| published-proof-of-concept| https://t.me/Rootsec2/2285...

osCommerce 4.13-60075 Shell Upload

Title: osCommerce 4.13-60075 File-Upload-RCE Author: nu11secur1ty Date: 12/14/2023 Vendor: https://www.oscommerce.com/ Software: https://www.oscommerce.com/download-file Reference: https://portswigger.net/web-security/file-upload Description: The parameter "icon-pencil" in the upload-file...