Exploit for CVE-2023-52709

Proof of Concept for CVE 2023-52709 "TI Bluetooth stack can fa...

Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms

Chamilo LMS Unauthenticated Big Upload File RCE PoC This is a...

Exploit for Race Condition in Openbsd Openssh

CVE-2024-6387-Checker This tool scans your network for hosts...

Exploit for Race Condition in Openbsd Openssh

SSH Vulnerability Scanner The SSH Vulnerability Scanner is a...

Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce

CVE-2024-34102 Usage bash python3 CVE-2024-34102.py...

Exploit for OS Command Injection in Dolibarr Dolibarr_Erp\/Crm

PoC exploit for CVE-2023-30253, an authenticated remote command...

Exploit for Deserialization of Untrusted Data in Clear Clearml

CVE-2024-24590 Deserialization of untrusted data can occur in...

Exploit for Path Traversal in Hsclabs Mailinspector

CVE-2024-34470 PoC and Bulk Scanner Overview This is a pr...

Malvertising Campaign Leads to Execution of Oyster Backdoor

The following analysts contributed to this blog: Thomas Elkins, Daniel Thiede, Josh Lockwood, Tyler McGraw, and Sasha Kovalev. Executive Summary Rapid7 has observed a recent malvertising campaign that lures users into downloading malicious installers for popular software such as Google Chrome and...

Remote Code Execution

langflow is vulnerable to Remote Code Execution. The vulnerability is due to untrusted users being able to reach the POST /api/v1/customcomponent endpoint and provide a Python script, allowing an attacker to execute arbitrary code...

GHSA-QG33-X2C5-6P44 Langflow remote code execution vulnerability

Langflow allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...

Langflow remote code execution vulnerability

Langflow allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...

CVE-2024-37014

Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...

CVE-2024-37014

CVE-2024-37014 affects Langflow up to version 0.6.19. The vulnerability allows remote code execution when an untrusted user can access the endpoint POST /api/v1/custom_component and provide a Python script. The cited sources describe this vector and the resulting arbitrary code execution, with im...

CVE-2024-37014

Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...

CVE-2024-37014

Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919-Sniper !CVE-2024-24919 Sniper Screenshotsni...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919 Bulk Scanner CVE-2024-24919 Check Point Securi...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

Mass Auto Scanner for CVE-2024-24919 This script is designed to...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

Intro Simple POC Python script that check & leverage Check Poi...