7768 matches found
CVE-2024-47606
creationtimestamp| type| source ---|---|--- 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/ 2025-04-19 00:59:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12556 2025-06-21 22:02:40+00:00| seen|...
Exploit for CVE-2024-38819
CVE-2024-38819: Proof of Concept PoC This is a proof of con...
IBM: POST based Cross-Site Scripting on IBM research endpoint
The POST-based Cross-Site Scripting vulnerability on the IBM research endpoint was reported, analyzed, and remediated. The vulnerability was discovered by an external researcher...
Wordfence Intelligence Weekly WordPress Vulnerability Report (December 2, 2024 to December 8, 2024)
Time to wrap up this year and kick-off the new year with a bang! We’re wrapping up the year with ourEnd of Year Holiday Extravaganza , High-Risk Bonus Blitz Challenge , and Superhero Challenge for the Wordfence Bug Bounty Program. Through January 6th, 2025: All in-scope vulnerability types for...
CVE-2024-44131
creationtimestamp| type| source ---|---|--- 2024-12-12 11:35:00+00:00| seen| https://thehackernews.com/2024/12/researchers-uncover-symlink-exploit.html 2024-12-12 13:40:46+00:00| seen| https://t.me/thehackernews/6033 2024-12-12 14:54:31+00:00| seen|...
CVE-2024-47542
creationtimestamp| type| source ---|---|--- 2024-12-11 19:32:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113635854706009967 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/...
AuthQuake Flaw Allowed MFA Bypass Across Azure, Office 365 Accounts
SUMMARY Cybersecurity researchers at Oasis Security have identified a vulnerability in Microsoft's Multi-Factor Authentication MFA, known as AuthQuake,…...
Hackers Target Job Seekers with AppLite Trojan Using Fake Job Emails
SUMMARY Zimperium's zLabs has shared its latest research with Hackread.com, ahead of its publishing on December 10. According…...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2022-32250 This is my exploit for CVE-2022-32250, written...
Wordfence Intelligence Weekly WordPress Vulnerability Report (November 25, 2024 to December 1, 2024)
Time to wrap up this year and kick-off the new year with a bang! We’re wrapping up the year with ourEnd of Year Holiday Extravaganza , High-Risk Bonus Blitz Challenge , and Superhero Challenge for the Wordfence Bug Bounty Program. Through January 6th, 2025: All in-scope vulnerability types for...
Proactively Managing High-Risk Vulnerabilities with TruRisk Mitigate™
In late 2024, organizations faced over 65 million detections from three critical vulnerabilities—CVE-2013-2900, CVE-2024-38122, and CVE-2024-30078—underscoring the urgent need for proactive vulnerability management. Adding to these challenges, the Qualys Threat Research Unit TRU uncovered five...
The Road to Agentic AI: Exposed Foundations
Our research into Retrieval Augmented Generation RAG systems uncovered at least 80 unprotected servers. We highlight this problem, which can lead to potential data loss and unauthorized access...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831 Exploit Proof-of-Concept Overview This rep...
GHSA-PX8V-PP82-RCVR quic-go affected by an ICMP Packet Too Large Injection Attack on Linux
Impact An off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used IPPMTUDISCDO, the kernel would then return a "message too large" error on sendmsg, i.e. when quic-go attempts to send a packet that exceeds the MTU claimed in that ICMP packet. By setting...
quic-go affected by an ICMP Packet Too Large Injection Attack on Linux
Impact An off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used IPPMTUDISCDO, the kernel would then return a "message too large" error on sendmsg, i.e. when quic-go attempts to send a packet that exceeds the MTU claimed in that ICMP packet. By setting...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Amcsgroup Trux_Waste_Management
CVE-2024-22734 Exploit PoC for CVE-2024-22734 !imageh...
Exploit for Cross-site Scripting in Heateor Sassy_Social_Share
CVE-2023-XXXX: Sassy Social Share Plugin XSS Vulnerability...
Friday Squid Blogging: Squid-Inspired Needle Technology
Interesting research: Using jet propulsion inspired by squid, researchers demonstrate a microjet system that delivers medications directly into tissues, matching the effectiveness of traditional needles. Blog moderation policy...