Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

Manual use is cumbersome; create an example script instead. Us...

Exploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms Pluck

CVE-2023-50564 CVE-2023-50564 is an RCE vulnerability in Pluc...

Exploit for Code Injection in Craftcms Craft_Cms

Before you run script again do fuser -k 6666/tcp...

Exploit for CVE-2024-27292

Docassemblepoc Docassemble任意文件读取漏洞CVE-2024-27292 python D...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

Check-Pointpoc Check-Point安全网关任意文件读取漏洞CVE-2024-24919 pytho...

Exploit for Path Traversal in Ghost

CVE-2023-4002 Ghost-Arbitrary-File-Read : The username/email...

Exploit for Path Traversal in Bazarr

Bazaarpoc Bazaar v1.4.3 任意文件读取漏洞CVE-2024-40348 python Baza...

Exploit for Command Injection in Totolink A6000R_Firmware

TOTOLINKpoc TOTOLINK A6000R 命令执行漏洞（CVE-2024-41319） pytho...

ssl fails to validate incorrect extened key usage

...

Exploit for SQL Injection in Valvepress Automatic

🛑CVE-2024-27956-for-fscan Thanks for the PoC by diego-tella...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

更多PoC见 https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X...

Malicious code in piepunk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 40c9660a52e99412daf32818f5263ad562bf43281984b9676aa93874912132be This is a clone of "pymunk" package. In the space.py file there is a code that attempts to exfiltrate data from the Discord client during initialization...

CVE-2024-56200 Uncontrolled Recursion and Asymmetric Resource Consumption in Altair media/file proxy

Altair is a fork of Misskey v12. Affected versions lack of request validation and lack of authentication in the image proxy for compressing and resizing remote files could allow attacks that could affect availability, such as by abnormally increasing the CPU usage of the server on which this...

PT-2025-3649

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to v6.6 Description The issue is related to the encoding of file handles in the Linux kernel. The encode fh method may fail for various reasons, and some users of exportfs encode fh,fid have a WARN ON assertion when...

GHSA-P7C9-8XX8-H74F Apache Kafka's SCRAM implementation Incorrectly Implements Authentication Algorithm

Incorrect Implementation of Authentication Algorithm in Apache Kafka's SCRAM implementation. Issue Summary: Apache Kafka's implementation of the Salted Challenge Response Authentication Mechanism SCRAM did not fully adhere to the requirements of RFC 5802 1. Specifically, as per RFC 5802, the serv...

After upgrading from 1912 to 2402, unable to view license usage in Studio

After upgrading Delivery controllers from 1912 to 2402, unable to view license usage in Studio. Studio show error : An error has occurred with the Citrix License Server. Check the license server to make sure it is running, then try again...

Attackers Exploit Microsoft Teams and AnyDesk to Deploy DarkGate Malware

A new social engineering campaign has leveraged Microsoft Teams as a way to facilitate the deployment of a known malware called DarkGate. "An attacker used social engineering via a Microsoft Teams call to impersonate a user's client and gain remote access to their system," Trend Micro researchers...

This Week in Spring - December 17th, 2024

This Week in Spring - December 17th, 2024 Hi, Spring fans! Welcome to another installment of a Bootiful Podcast! It's the 17th of December, 2024! And you know what means? The end of the year is nearly upon us! I can't believe it. It's been a very long year indeed, but I'm happy to get on board a...

Apache Tomcat 安全漏洞

Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server . Used to implement the Servlet and JavaServer Page JSP support. Apache Tomcat has a resource management issue vulnerability that stems from the presence of uncontrolled resource consumption, which...

BIT-NODE-MIN-2021-22883

Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unabl...