Lucene search
+L

8944 matches found

Kitploit
Kitploit
•added 2023/07/15 12:30 p.m.•56 views

Hidden - Windows Driver With Usermode Interface Which Can Hide Processes, File-System And Registry Objects, Protect Processes And Etc

Hidden has been developed like a solution for reverse engineering and researching tasks. This is a windows driver with a usermode interface which is used for hiding specific environment on your windows machine, like installed RCE programs ex. procmon, wireshark, vm infrastructure ex. vmware tools...

7.3AI score
SaveExploits0References1
zdt
zdt
•added 2023/07/15 12:00 a.m.•281 views

XAMPP 8.2.4 - Unquoted Path Vulnerability

Exploit Title: XAMPP 8.2.4 - Unquoted Path Exploit Author: Andrey Stoykov Version: 8.2.4 Software Link: https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/8.2.4/xampp-windows-x64-8.2.4-0-VS16-installer.exe Tested on: Windows Server 2022 Blog: http://msecureltd.blogspot.com/ Steps to...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2023/07/13 12:00 a.m.•21 views

Fedora: Security Advisory for rizin (FEDORA-2023-3dc1f9ba12)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00315EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/07/13 12:00 a.m.•20 views

Fedora: Security Advisory for cutter-re (FEDORA-2023-3dc1f9ba12)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00315EPSS
SaveExploits0References2
Fedora
Fedora
•added 2023/07/12 1:26 a.m.•33 views

[SECURITY] Fedora 38 Update: rizin-0.5.2-1.fc38.2

Rizin is a free and open-source Reverse Engineering framework, providing a complete binary analysis experience with features like Disassembler, Hexadecimal editor, Emulation, Binary inspection, Debugger, and more. Rizin is a fork of radare2 with a focus on usability, working features and co de...

7.8CVSS7.7AI score0.00315EPSS
SaveExploits0
Fedora
Fedora
•added 2023/07/12 1:26 a.m.•38 views

[SECURITY] Fedora 38 Update: cutter-re-2.2.1-1.fc38

Cutter is a Qt and C++ GUI for Rizin. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. Cutter is created by reverse engineers for reverse engineers...

7.8CVSS7.6AI score0.00315EPSS
SaveExploits0
CNNVD
CNNVD
•added 2023/07/11 12:00 a.m.•11 views

SAP Web Dispatcher 缓冲区错误漏洞

SAP Web Dispatcher is the core component of Load Balancing from SAP, which supports load balancing and provides reverse proxy functionality so that external users can access internal applications. A buffer overflow vulnerability exists in SAP Web Dispatcher, which is caused by a logical error in...

9.4CVSS6.6AI score0.00603EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2023/07/10 9:53 p.m.•41 views

XWiki Platform vulnerable to cross-site request forgery (CSRF) via the REST API

Impact The REST API allows executing all actions via POST requests and accepts text/plain, multipart/form-data or application/www-form-urlencoded as content types which can be sent via regular HTML forms, thus allowing cross-site request forgery. With the interaction of a user with programming...

9.6CVSS7.7AI score0.00669EPSS
SaveExploits0References5Affected Software3
OSV
OSV
•added 2023/07/10 9:53 p.m.•50 views

GHSA-6XXR-648M-GCH6 XWiki Platform vulnerable to cross-site request forgery (CSRF) via the REST API

Impact The REST API allows executing all actions via POST requests and accepts text/plain, multipart/form-data or application/www-form-urlencoded as content types which can be sent via regular HTML forms, thus allowing cross-site request forgery. With the interaction of a user with programming...

9.6CVSS9.5AI score0.00669EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2023/07/10 7:58 p.m.•553 views

Exploit for Classic Buffer Overflow in Extremenetworks Iq_Engine

CVE-2023-35803 - Unauthenticated RCE in Extreme Networks/Aer...

9.8CVSS9.6AI score0.01583EPSS
SaveExploits1
RedHat Linux
RedHat Linux
•added 2023/07/10 9:56 a.m.•29 views

golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters

A flaw was found in the golang package, where requests forwarded by reverse proxy include the raw query parameters from the inbound request, including unparseable parameters rejected by net/http. This issue could permit query parameter smuggling when a Go proxy forwards a parameter with an...

7.5CVSS6.6AI score0.0117EPSS
SaveExploits1References6
GithubExploit
GithubExploit
•added 2023/07/09 10:48 p.m.•422 views

Exploit for Improper Initialization in Linux Linux_Kernel

CVE-2022-0847-Exploit-Implementation This is a POC showing ho...

7.8CVSS7.9AI score0.92795EPSS
SaveExploits102
GithubExploit
GithubExploit
•added 2023/07/08 11:22 p.m.•461 views

Exploit for Path Traversal in Icinga Icinga_Web_2

Icinga Web 2 - Authenticated Remote Code Execution 2.8.6, 2.9...

8.8CVSS9.3AI score0.1467EPSS
SaveExploits5
Github Security Blog
Github Security Blog
•added 2023/07/06 8:53 p.m.•2501 views

Graylog server has partial path traversal vulnerability in Support Bundle feature

A partial path traversal vulnerability exists in Graylog's Support Bundle feature. The vulnerability is caused by incorrect user input validation in an HTTP API resource. Thanks to weiweiwei9811 for reporting this vulnerability and providing detailed information. Impact Graylog's Support Bundle...

3.8CVSS6.5AI score0.00698EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2023/07/06 8:53 p.m.•108 views

GHSA-2Q4P-F6GF-MQR5 Graylog server has partial path traversal vulnerability in Support Bundle feature

A partial path traversal vulnerability exists in Graylog's Support Bundle feature. The vulnerability is caused by incorrect user input validation in an HTTP API resource. Thanks to weiweiwei9811 for reporting this vulnerability and providing detailed information. Impact Graylog's Support Bundle...

3.3CVSS5.9AI score0.00698EPSS
SaveExploits1References5
OSV
OSV
•added 2023/07/06 8:40 p.m.•37 views

GHSA-R25M-CR6V-P9HQ ethyca-fides Webserver API Path Traversal vulnerability

Impact A path traversal directory traversal vulnerability affects fides versions lower than 2.15.1, allowing remote attackers to access arbitrary files on the fides webserver container's filesystem. Patches The vulnerability is patched in fides 2.15.1. Users should upgrade to this version...

7.5CVSS7.5AI score0.01491EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2023/07/06 8:40 p.m.•38 views

ethyca-fides Webserver API Path Traversal vulnerability

Impact A path traversal directory traversal vulnerability affects fides versions lower than 2.15.1, allowing remote attackers to access arbitrary files on the fides webserver container's filesystem. Patches The vulnerability is patched in fides 2.15.1. Users should upgrade to this version...

7.5CVSS7AI score0.01491EPSS
SaveExploits0References6Affected Software1
CVE
CVE
•added 2023/07/06 6:24 p.m.•66 views

CVE-2023-36456

authentik is affected prior to versions 2023.4.3 and 2023.5.5 because it does not verify the origin of the X-Forwarded-For and X-Real-IP headers in both Python and Go code. This can allow spoofing of IPs in logs and in downstream flows that rely on IP checks, and may enable bypassing IP-based pol...

8.3CVSS7.7AI score0.00794EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2023/07/05 10:15 p.m.•71 views

CVE-2023-36827

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. A path traversal directory traversal vulnerability affects fides versions lower than version 2.15.1, allowing...

7.5CVSS7.6AI score0.01491EPSS
SaveExploits0References3
OSV
OSV
•added 2023/07/05 10:15 p.m.•60 views

PYSEC-2023-107

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. A path traversal directory traversal vulnerability affects fides versions lower than version 2.15.1, allowing...

7.5CVSS7AI score0.01491EPSS
SaveExploits0References3
Rows per page
Query Builder