Proof of Concept (PoC) packetstormsecurity.com

WordPress Profilepro 1.3 Cross Site Scripting

WordPress Profilepro plugin versions 1.3 and below suffer from a persistent cross site scripting vulnerability.

Proof of Concept (PoC) packetstormsecurity.com

WordPress PVN Auth Popup 1.0.0 Cross Site Scripting

WordPress PVN Auth Popup plugin version 1.0.0 suffers from a persistent cross site scripting vulnerability.

Proof of Concept (PoC) packetstormsecurity.com

Giftora 1.0 Cross Site Request Forgery

Giftora version 1.0 suffers from a cross site request forgery vulnerability.

Proof of Concept (PoC) packetstormsecurity.com

Gas Agency Management 2022 Shell Upload

Gas Agency Management version 2022 suffers from a remote shell upload vulnerability.

Proof of Concept (PoC) packetstormsecurity.com

Farmacia Gama 1.0 Farmacia Gama 1.0 Cross Site Request Forgery

Farmacia Gama version 1.0 Farmacia Gama version 1.0 suffers from a cross site request forgery vulnerability.

Proof of Concept (PoC) packetstormsecurity.com

Employees Pay Slip PDF Generator System 1.0 Cross Site Request Forgery

Employees Pay Slip PDF Generator System version 1.0 suffers from a cross site request forgery vulnerability.

Proof of Concept (PoC) packetstormsecurity.com

Bakery Shop Management System 1.0 Cross Site Request Forgery

Bakery Shop Management System version 1.0 suffers from a cross site request forgery vulnerability.

Proof of Concept (PoC) packetstormsecurity.com

Computer And Mobile Repair Shop Management System 1.0 Cross Site Request Forgery

Computer and Mobile Repair Shop Management System version 1.0 suffers from a cross site request forgery vulnerability.

Proof of Concept (PoC) packetstormsecurity.com

Bhojon Restaurant Management System 2.8 Insecure Direct Object Reference

Bhojon Restaurant Management System version 2.9 suffers from an insecure direct object reference vulnerability.

Proof of Concept (PoC) packetstormsecurity.com

Xain-Hotel Management System 2.5 Insecure Settings

Xain-Hotel Management System version 2.5 suffers from an ignored default credential vulnerability.

Proof of Concept (PoC) packetstormsecurity.com

Yoga Class Registration System 1.0 Cross Site Request Forgery

Yoga Class Registration System version 1.0 suffers from a cross site request forgery vulnerability.

Proof of Concept (PoC) packetstormsecurity.com

Exam Form Submission 1.0 Arbitrary File Upload

Exam Form Submission version 1.0 suffers from an arbitrary file upload vulnerability.

Proof of Concept (PoC) packetstormsecurity.com

AccPack Khanepani 1.0 Arbitrary File Upload

AccPack Khanepani version 1.0 suffers from an arbitrary file upload vulnerability.

Proof of Concept (PoC) packetstormsecurity.com

AccPack Cop 1.0 Arbitrary File Upload

AccPack Cop version 1.0 suffers from an arbitrary file upload vulnerability.

Proof of Concept (PoC) 0day.today

#0daytoday #Open WebUI 0.1.105 File Upload / Path Traversal Vulnerabilities [webapps #exploits #Vulnerabilities #0day #Exploit]

Proof of Concept (PoC) 0day.today

#0daytoday #Calibre 7.15.0 Python Code Injection Exploit CVE-2024-6782 [remote #exploits #0day #Exploit]

Proof of Concept (PoC) 0day.today

#0daytoday #Windows Firewall Control 6.11.0 Unquoted Service Path Vulnerability [remote #exploits #Vulnerability #0day #Exploit]

Proof of Concept (PoC) 0day.today

#0daytoday #Open WebUI 0.1.105 Persistent Cross Site Scripting Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

Proof of Concept (PoC) 0day.today

#0daytoday #Journyx 11.5.4 Authenticated Remote Code Execution Vulnerability [webapps #exploits #Vulnerability #0day #Exploit]

Proof of Concept (PoC) 0day.today

#0daytoday #Journyx 11.5.4 Unauthenticated Password Reset Bruteforce Vulnerability [#0day #Exploit]

Proof of Concept (PoC) 0day.today

#0daytoday #Journyx 11.5.4 Cross Site Scripting Vulnerability CVE-2024-6892 [webapps #exploits #Vulnerability #0day #Exploit]

Proof of Concept (PoC) 0day.today

#0daytoday #Journyx 11.5.4 XML Injection Vulnerability CVE-2024-6893 [webapps #exploits #Vulnerability #0day #Exploit]

Proof of Concept (PoC) packetstormsecurity.com

Calibre 7.15.0 Python Code Injection

This Metasploit module exploits a Python code injection vulnerability in the Content Server component of Calibre version 6.9.0 through 7.15.0.

Proof of Concept (PoC) packetstormsecurity.com

Journyx 11.5.4 XML Injection

Journyx version 11.5.4 has an issue where the soap_cgi.pyc API handler allows the XML body of SOAP requests to contain references to external…

Proof of Concept (PoC) packetstormsecurity.com

Journyx 11.5.4 Cross Site Scripting

Journyx version 11.5.4 suffers from a cross site scripting vulnerability due to mishandling of the error_description during an active directory login…

Proof of Concept (PoC) packetstormsecurity.com

Journyx 11.5.4 Authenticated Remote Code Execution

Journyx version 11.5.4 has an issue where attackers with a valid username and password can exploit a python code injection vulnerability during the…

Proof of Concept (PoC) packetstormsecurity.com

Journyx 11.5.4 Unauthenticated Password Reset Bruteforce

Journyx version 11.5.4 suffers from an issue where password reset tokens are generated using an insecure source of randomness.

Proof of Concept (PoC) packetstormsecurity.com

Open WebUI 0.1.105 Persistent Cross Site Scripting

Open WebUI version 0.1.105 suffers from a persistent cross site scripting vulnerability.

Proof of Concept (PoC) packetstormsecurity.com

Oracle VM VirtualBox 7.0.10 r158379 Escape

A guest inside a VirtualBox VM using the virtio-net network adapter can trigger an intra-object out-of-bounds write in…

Proof of Concept (PoC) packetstormsecurity.com

Linux eBPF Path Pruning Gone Wrong

A bug in the eBPF Verifier branch pruning logic can lead to unsafe code paths being incorrectly marked as safe.

Proof of Concept (PoC) packetstormsecurity.com

XGETBV Is Non-Deterministic On Intel CPUs

The XGETBV instruction reads the contents of an internal control register. It is not a privileged instruction and is usually available to userspace.

Proof of Concept (PoC) packetstormsecurity.com

XSAVES Instruction May Fail To Save XMM Registers

AMD Errata 1386 1 is a flaw that affects the AMD Zen 2 family of processors.

Proof of Concept (PoC) packetstormsecurity.com

RET2ASLR - Leaking ASLR From Return Instructions

This is a proof of concept code from Google called RET2ASLR - Leaking ASLR from return instructions.

Proof of Concept (PoC) packetstormsecurity.com

Microsoft CBC Padding Oracle In Azure Blob Storage Encryption Library

The Azure Storage Encryption library in Java and other languages is vulnerable to a CBC Padding Oracle attack, similar to CVE-2020-8911.

Proof of Concept (PoC) packetstormsecurity.com

Apache log4j2 Code Execution

Log4j 2.15.0 was released to address the widely reported JNDI Remote Code Execution (RCE) (CVE-2021-44228) vulnerability in Log4j.

Proof of Concept (PoC) packetstormsecurity.com

Surface Pro 3 BIOS False Health Attestation / TPM Carte Blanche

On Surface Pro 3 with the SHA1 and SHA256 PCRs enabled on the TPM, BIOS version 3.11.