13302 matches found
Exploit for Path Traversal in Jenkins
poc-cve-2024-23897 this code is my attempt to...
Metasploit Weekly Wrap-Up 01/26/24
Direct Syscalls Support for Windows Meterpreter Direct system calls are a well-known technique that is often used to bypass EDR/AV detection. This technique is particularly useful when dynamic analysis is performed, where the security software monitors every process on the system to detect any...
Exploit for Path Traversal in Jenkins
CVE-2024-23897 Jenkins CVE-2024-23897: Arbitrary File Read Vul...
CVE-2023-6159
An issue has been discovered in GitLab CE/EE affecting all versions from 12.7 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 It was possible for an attacker to trigger a Regular Expression Denial of Service via a Cargo.toml containing maliciously crafted input...
Atlassian Confluence 8.0 < 8.5.4 (CONFSERVER-93833) (Direct Check)
Binary data confluencecve202322527.nbin...
AlmaLinux 9 : php:8.1 (ALSA-2024:0387)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0387 advisory. php: 1-byte array overrun in common path resolve code CVE-2023-0568 php: DoS vulnerability when parsing multipart request body CVE-2023-0662 php: Missing...
Atlassian Confluence SSTI Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Confluence SSTI Injection', 'Description' = %q This module exploits an SSTI injection in Atlassian Confluence servers. A specially...
CVE-2024-22638
liveSite v2019.1 was discovered to contain a remote code execution RCE vulenrabiity via the component /livesite/editdesignerregion.php or /livesite/addemailcampaign.php...
CVE-2023-40547 Shim: rce in http boot support may lead to secure boot bypass
A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete...
Exploit for Improper Authentication in Ivanti Connect_Secure
PoC exploit for CVE-2023-46805, an RCE vulnerability in Ivanti...
Internet Bug Bounty: Pickle deserialization vulnerability in XComs
CVE-2023-50943: Apache Airflow: Potential pickle deserialization vulnerability in XComs Severity: low Affected versions: - Apache Airflow before 2.8.1 Description: Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the...
Critical Jenkins Vulnerability Exposes Servers to RCE Attacks - Patch ASAP!
The maintainers of the open-source continuous integration/continuous delivery and deployment CI/CD automation software Jenkins have resolved nine security flaws, including a critical bug that, if successfully exploited, could result in remote code execution RCE. The issue, assigned the CVE...
Exploit for Injection in Atlassian Confluence_Data_Center
CVE-2023-22527 CVE-2023-22527 - RCE Remote Code Execution...
CVE-2024-22636
PluXml Blog v5.8.9 contains a remote code execution (RCE) vulnerability in the Static Pages feature, exploitable by injecting a crafted payload into the Content field. Affected product: PluXml Blog 5.8.9. Root cause details are not fully defined across the supplied sources, but multiple feeds ran...
CVE-2024-22638
CVE-2024-22638 affects liveSite v2019.1 and describes a remote code execution (RCE) vulnerability exploitable via the web components "/livesite/edit_designer_region.php" and "/livesite/add_email_campaign.php". The CVSS 3.1 base metrics indicate a critical impact (C:H, I:H, A:H) with network acces...
CVE-2024-22636
Removed by vendor...
Lexmark Printer RCE Vulnerability (CVE-2023-50734)
Multiple Lexmark printer devices are prone to remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFI...
Cisco Unified Communications Manager RCE (cisco-sa-cucm-rce-bWNzQcUm)
According to its self-reported version, Cisco Unified Communications Manager running on the report host is affected by a remote code execution RCE vulnerability. Due to improper processing of user-provided data that is being read into memory, an unauthenticated, remote, attacker can execute...
Cisco Unity Connection RCE (cisco-sa-cucm-rce-bWNzQcUm)
According to its self-reported version, Cisco Unity Connection running on the report host is affected by a remote code execution RCE vulnerability. Due to improper processing of user-provided data that is being read into memory, an unauthenticated, remote, attacker can execute arbitrary code with...