2182 matches found
The Fake Browser Update Scam Gets a Makeover
One of the oldest malware tricks in the book -- hacked websites claiming visitors need to update their Web browser before they can view any content -- has roared back to life in the past few months. New research shows the attackers behind one such scheme have developed an ingenious way of keeping...
Exploit for CVE-2023-38646
CVE-2023-38646 - Metabase Pre-Auth RCE ⚠️ For educatio...
CVE-2023-43641
creationtimestamp| type| source ---|---|--- 2023-10-09 21:49:13+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/7856 2023-10-10 02:16:12+00:00| seen| https://t.me/cibsecurity/71879 2023-10-10 08:52:14+00:00| seen| https://t.me/thehackernews/3985 2023-10-10 09:49:29+00:00| seen|...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831 - RARLAB WinRAR Code Execution Vulnerability...
Exploit for Use of a Broken or Risky Cryptographic Algorithm in Vmware Aria_Operations_For_Networks
CVE-2023-34039 POC for CVE-2023-34039 VMWare Aria Operations f...
CISA’s VDP Platform 2022 Annual Report Showcases Success
Today, the Cybersecurity and Infrastructure Security Agency CISA released its inaugural Vulnerability Disclosure Policy VDP Platform 2022 Annual Report, highlighting the service’s progress supporting vulnerability awareness and remediation across the Federal Civilian Executive Branch FCEB. This...
Exploit for Improper Input Validation in Ivanti Avalanche
CVE-2023-32560 Ivanti Avala...
CVE-2023-35386
creationtimestamp| type| source ---|---|--- 2023-08-08 22:14:26+00:00| seen| https://t.me/cibsecurity/68028 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen|...
Conference Management Software 3.5.1 SQL Injection
==================================================================================================================================== | Title : Conference Management Software V3.5.1 Sql injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla...
A Data Exfiltration Attack Scenario: The Porsche Experience
As part of Checkmarx's mission to help organizations develop and deploy secure software, the Security Research team started looking at the security posture of major car manufacturers. Porsche has a well-established Vulnerability Reporting Policy Disclosure Policy1, it was considered in scope for...
Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller
cve-2023-3519-citrix-scanner This script is a basic Citrix Sc...
Webile v1.0.1 - Multiple Cross Site Scripting
Exploit Title: Webile v1.0.1 - Multiple Cross Site Scripting References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2321 Release Date: ============= 2023-07-03 Vulnerability Laboratory ID VL-ID: ==================================== 2321 Common Vulnerability...
Exploit for CVE-2020-14882
CVE-2020-14882 This script enables remote code execution RCE...
Exploit for Out-of-bounds Write in Microsoft
Windows Privilege Escalation Exploit for CVE-2021-1732 Win32k...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
Exploit for CVE-2021-4034 Pkexec - Local Privilege Escalatio...
Security and Human Behavior (SHB) 2023
Im just back from the sixteenth Workshop on Security and Human Behavior, hosted by Alessandro Acquisti at Carnegie Mellon University in Pittsburgh. SHB is a small, annual, invitational workshop of people studying various aspects of the human side of security, organized each year by Alessandro...
Malicious Package
Overview libponenunber-js is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...
Malicious Package
Overview nf-cl-logger is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
Announcing The BlueHat Podcast: Listen and Subscribe Now!
Available today on all major podcast platforms is The BlueHat Podcast, a new series of security research focused conversations, continuing the themes from the BlueHat 2023 conference session recordings available to watch here. Since 2005, BlueHat has been where the security research community, an...