CVE-2024-47606

creationtimestamp| type| source ---|---|--- 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/ 2025-04-19 00:59:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12556 2025-06-21 22:02:40+00:00| seen|...

CVE-2024-47777

creationtimestamp| type| source ---|---|--- 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/...

Exploit for CVE-2024-38819

CVE-2024-38819: Proof of Concept PoC This is a proof of con...

CVE-2024-47542

creationtimestamp| type| source ---|---|--- 2024-12-11 19:32:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113635854706009967 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/...

AuthQuake Flaw Allowed MFA Bypass Across Azure, Office 365 Accounts

SUMMARY Cybersecurity researchers at Oasis Security have identified a vulnerability in Microsoft's Multi-Factor Authentication MFA, known as AuthQuake,…...

Wordfence Intelligence Weekly WordPress Vulnerability Report (November 25, 2024 to December 1, 2024)

Time to wrap up this year and kick-off the new year with a bang! We’re wrapping up the year with ourEnd of Year Holiday Extravaganza , High-Risk Bonus Blitz Challenge , and Superhero Challenge for the Wordfence Bug Bounty Program. Through January 6th, 2025: All in-scope vulnerability types for...

Exploit for Cross-site Scripting in Heateor Sassy_Social_Share

CVE-2023-XXXX: Sassy Social Share Plugin XSS Vulnerability...

Exploit for Missing Authentication for Critical Function in Fortinet Fortimanager

CVE-2024-47575 Fortinet FortiManager Unauthenticated Remote Co...

Exploit for Improper Restriction of XML External Entity Reference in Python

CVE-2022-48565 PoC Introduction This is a Proof of Concep...

Exploit for Missing Release of Memory after Effective Lifetime in Linux Linux_Kernel

CVE-2022-48565 PoC Introduction This is a Proof of Concep...

Exploit for OS Command Injection in Paloaltonetworks Expedition

CVE-2024-9464: Palo Alto Expedition Authenticated Command Inje...

Exploit for SQL Injection in Paloaltonetworks Expedition

CVE-2024-9465: Palo Alto Expedition Unauthenticated SQL Inject...

Agnai vulnerable to Relative Path Traversal in Image Upload

Summary A vulnerability has been discovered in Agnai that permits attackers to upload image files at attacker-chosen location on the server. This issue can lead to image file uploads to unauthorized or unintended directories, including overwriting of existing images which may be used for...

Exploit for OS Command Injection in Ivanti Cloud_Services_Appliance

CVE-2024-8190: Ivanti Cloud Service Appliance Authenticated Co...

Exploit for Deserialization of Untrusted Data in Ivanti Endpoint_Manager

CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM...

Exploit for Improper Input Validation in Ivanti Endpoint_Manager

CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM...

Exploit for CVE-2024-7954

CVE-2024-7954 This exploit will attempt to execute system comm...

MAL-2024-12219 Malicious code in bitcommit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d0e954ac7acd6af73d285edea41177ee09be01a2e14a1b4e6b195ba7e07b9515 Packages exfiltrate the diff of the current repository. The code in "main.py" suggests it's not a real attempt to provide AI-generated commit message, but a...

Malicious code in bitcommit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d0e954ac7acd6af73d285edea41177ee09be01a2e14a1b4e6b195ba7e07b9515 Packages exfiltrate the diff of the current repository. The code in "main.py" suggests it's not a real attempt to provide AI-generated commit message, but a...

Malicious code in c2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5bf8fb109bddeaac7b9818f893783456619c44562c50fe26abea906cbc1ef06a Packages exfiltrate the diff of the current repository. The code in "main.py" suggests it's not a real attempt to provide AI-generated commit message, but a...