Store XSS when Add Reviewer

Description Store XSS when Add Reviewer Proof of Concept Payload: TESTalertdocument.domain Video Poc https://drive.google.com/file/d/16o4w6V-uCpkshFXYBb-pZRflpl7N3Sy4/view?usp=sharing...

RecycledInjector - Native Syscalls Shellcode Injector

Currently Fully Undetected same-process native/.NET assembly shellcode injector based on RecycledGate by thefLink, which is also based on HellsGate + HalosGate + TartarusGate to ensure undetectable native syscalls even if one technique fails. To remain stealthy and keep entropy on the final...

Exploit for Out-of-bounds Write in Fortinet Fortiproxy

CVE-2023-27997 FortiGate VM64 7.2.0 is exploitable by this co...

CVE-2023-45048

Cross-Site Request Forgery CSRF vulnerability in Repuso Social proof testimonials and reviews by Repuso plugin = 5.00 versions...

CVE-2023-45048 WordPress Social proof testimonials and reviews by Repuso Plugin <= 5.00 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Repuso Social proof testimonials and reviews by Repuso plugin = 5.00 versions...

CVE-2023-45048

CVE-2023-45048 is a CSRF vulnerability in the Repuso Social proof testimonials and reviews by Repuso plugin, affected in versions

CVE-2023-42819

creationtimestamp| type| source ---|---|--- 2023-10-12 08:59:17+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5382 2024-02-07 20:22:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9902 2024-08-16 09:13:13+00:00| published-proof-of-concept|...

Social Proof Testimonials and Reviews by Repuso < 5.02 - CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress plugin Social proof testimonials and reviews by Repuso Cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Social proof...

Microsoft patches 12 critical vulnerabilities, nine of which are in Layer 2 Tunneling Protocol

Microsoft disclosed 104 vulnerabilities in its extensive range of software and services, the most in a single Patch Tuesday since July. What is most notable is that this batch of vulnerabilities includes 12 that are considered "critical," nine of which are remote code execution vulnerabilities in...

heap-buffer-overflow in ac3dmx_process

Description Heap-buffer-overflow in ac3dmxprocess at filters/reframeac3.c:489. version git log commit 5692dc729491805e0e5f55c21d50ba1e6b19e88e HEAD - master, origin/master, origin/HEAD Author: Aurelien David Date: Wed Oct 11 13:24:46 2023 +0200 ac3dmx: add remain size check fixes 2627 ./MP4Box...

This code is not wroking amounts[:sourcesLength]

Lines of code Vulnerability details Impact it is not going to work the whole protocol Proof of Concept I tried that in Remix and it isn't compiling Tools Used manual Recommended Mitigation Steps remove the code and write to manual slice the amounts array Assessed type Other --- The text was updat...

Delegation transfer might become temporarily unavailable due to input format in _delegateMulti

Lines of code Vulnerability details Impact A user might mint a valid delegation token to a target delegate which cannot be transferred to another target delegate through processDelegation due to delegateMulti's extension of address type of data into the space of uint256. Proof of Concept As...

amount could still have some dust left

Lines of code Vulnerability details Impact Amount can still remain after transfer process that can lead unbalancing of length between sources, targets and amount that can lead to unexpected behavior. Proof of Concept There is no means to check inside delegateMulti function that either all amount ...

Missing validation lets users delegate more than they own.

Lines of code Vulnerability details Impact The amounts array is not checked to ensure the sum is less than or equal to the user's overall token balance. This could allow someone to delegate more tokens than they own. Proof of Concept This is another validation issue in the delegateMulti function...

Same multiple values in source result in wrong withdrawl

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. If by mistake same delegate value is given multiple times to sources array then withdrawal is affected Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, logs, or a...

CVE-2023-4166

creationtimestamp| type| source ---|---|--- 2023-10-10 15:06:55+00:00| published-proof-of-concept| https://t.me/CNArsenal/857...

CVE-2023-44400

creationtimestamp| type| source ---|---|--- 2023-10-09 12:49:48+00:00| published-proof-of-concept| https://github.com/louislam/uptime-kuma/security/advisories/GHSA-g9v2-wqcj-j99g...

Online ID Generator 1.0 - Remote Code Execution Vulnerability

Title: Online ID Generator 1.0 - Remote Code Execution RCE Author: nu11secur1ty Vendor: https://www.youtube.com/watch?v=JdB9po5DTc Software: https://www.sourcecodester.com/sites/default/files/download/oretnom23/idgenerator0.zip Reference: https://portswigger.net/web-security/sql-injection...

Online ID Generator 1.0 - Remote Code Execution (RCE)

Title: Online ID Generator 1.0 - Remote Code Execution RCE Author: nu11secur1ty Date: 08/31/2023 Vendor: https://www.youtube.com/watch?v=JdB9po5DTc Software: https://www.sourcecodester.com/sites/default/files/download/oretnom23/idgenerator0.zip Reference:...