20203 matches found
CVE-2023-36728
creationtimestamp| type| source ---|---|--- 2023-10-19 09:31:44+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9218 2024-08-16 08:34:05+00:00| published-proof-of-concept| https://t.me/Rootsec2/1407 2026-09-01 17:00:16+00:00| seen| https://t.me/cissp/7273 2026-09-02...
CVE-2023-2729
creationtimestamp| type| source ---|---|--- 2023-10-19 03:53:43+00:00| published-proof-of-concept| https://t.me/hackingbra/47 2023-10-19 11:01:11+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9224 2024-08-16 08:34:06+00:00| published-proof-of-concept|...
CVE-2023-44227
creationtimestamp| type| source ---|---|--- 2023-10-19 03:32:04+00:00| published-proof-of-concept| https://t.me/codeb0ss/1255 2023-10-24 19:46:01+00:00| published-proof-of-concept| Telegram/nb72YFQ5QLvYkRPL8hdha5XlSlobcBsOGjh68W-TKZhJg...
PT-2023-6318
Name of the Vulnerable Software and Affected Versions VMware Aria Operations for Logs affected versions not specified Description The issue is related to an authentication bypass vulnerability in VMware Aria Operations for Logs. This vulnerability can be exploited by an unauthenticated, malicious...
Synchrony deobfuscator prototype pollution vulnerability leading to arbitrary code execution
Impact A proto pollution vulnerability exists in synchrony versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. Summary A proto pollution vulnerability exists in the LiteralMap transformer allowing crafted input to modify properties in the Object prototype. When...
GHSA-7P92-X423-VWJ6 Plonk verifier KZG multi point verification
Impact The vulnerability allows a third party to derive a valid proof from a valid initial tuple proof, publicinputs, corresponding to the same public inputs as the initial proof. It is due to a randomness being generated using a small part of the scratch memory describing the state, allowing for...
Exploit for Out-of-bounds Write in Haxx Libcurl
CVE-2023-38545: Curl Vulnerability Proof of Concept This repos...
CVE-2023-43666
creationtimestamp| type| source ---|---|--- 2023-10-16 12:36:35+00:00| published-proof-of-concept| https://t.me/cibsecurity/72304...
GHSA-J87X-J6MH-MV8V
creationtimestamp| type| source ---|---|--- 2023-10-16 12:20:37+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9208 2023-10-18 05:13:30+00:00| published-proof-of-concept| https://t.me/apsecurity/196 2023-10-18 05:13:30+00:00| published-proof-of-concept|...
CVE-2021-44909
creationtimestamp| type| source ---|---|--- 2023-10-16 04:05:41+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5435...
ChurchCRM 4.5.4 SQL Injection Exploit
Exploit Title: ChurchCRM 4.5.4 - Authenticated Blind SQL Injection via the ENtyid Date: 03-05-2023 Exploit Author: Arvandy Blog Post: https://github.com/arvandy/CVE/blob/main/CVE-2023-29842/CVE-2023-29842.md Software Link: https://github.com/ChurchCRM/CRM/releases Vendor Homepage:...
CVE-2023-5578
creationtimestamp| type| source ---|---|--- 2023-10-14 14:29:47+00:00| published-proof-of-concept| https://t.me/cibsecurity/72281...
Restricted vim sandbox escape
Description Restricted vim doesn't allow executing shell commands but it's possible to bypass this by setting GCONVPATH environment variable. I'm not sure if this can be consider a vulnerability but I decided to report it anyway found this while playing TeamItaly CTF . Proof of Concept Save this...
Cross-Site Request Forgery Vulnerability in Logout Functionality
Description Logout CSRF is a security vulnerability where an attacker forces a user to unknowingly log out of their session by tricking them into triggering a logout request through a malicious website or link. GET http://localhost:8080/logout Proof of Concept history.pushState'', '', '/'...
Store XSS when Add Reviewer
Description Store XSS when Add Reviewer Proof of Concept Payload: TESTalertdocument.domain Video Poc https://drive.google.com/file/d/16o4w6V-uCpkshFXYBb-pZRflpl7N3Sy4/view?usp=sharing...
RecycledInjector - Native Syscalls Shellcode Injector
Currently Fully Undetected same-process native/.NET assembly shellcode injector based on RecycledGate by thefLink, which is also based on HellsGate + HalosGate + TartarusGate to ensure undetectable native syscalls even if one technique fails. To remain stealthy and keep entropy on the final...
Exploit for Out-of-bounds Write in Fortinet Fortiproxy
CVE-2023-27997 FortiGate VM64 7.2.0 is exploitable by this co...
CVE-2023-45048
Cross-Site Request Forgery CSRF vulnerability in Repuso Social proof testimonials and reviews by Repuso plugin = 5.00 versions...
CVE-2023-45048 WordPress Social proof testimonials and reviews by Repuso Plugin <= 5.00 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Repuso Social proof testimonials and reviews by Repuso plugin = 5.00 versions...
