Exploits & CVE's

Exploits Database – Exploits, Shellcode, 0days, Remote Exploits, Local Exploits, Web Apps, Vulnerability Reports, CVEs and more.

Palo Alto Networks PAN-OS Unauthenticated Remote Code Execution

0
Authored by sfewer-r7, remmons-r7 | Site metasploit.com This Metasploit module exploits two vulnerabilities in Palo Alto Networks PAN-OS that allow an unauthenticated attacker to create arbitrarily named files and execute...

Elber ESE DVB-S/S2 Satellite Receiver 1.5.x Insecure Direct Object Reference

0
Authored by LiquidWorm | Site zeroscience.mk Elber ESE DVB-S/S2 Satellite Receiver version 1.5.x suffers from an unauthenticated device configuration and client-side hidden functionality disclosure vulnerability. Change Mirror Download Elber ESE DVB-S/S2 Satellite...

Kemp LoadMaster Unauthenticated Command Injection

Authored by Dave Yesland | Site metasploit.com This Metasploit module exploits an unauthenticated command injection vulnerability in Progress Kemp LoadMaster in the authorization header after version 7.2.48.1. The following versions...

undefinedExploiting The NT Kernel In 24H2undefined

Authored by gabe_k This is the full Windows privilege escalation exploit produced from the blog Exploiting the NT Kernel in 24H2: New Bugs in Old Code and Side Channels Against...

Windows NtQueryInformationThread Double-Fetch / Arbitrary Write

Authored by gabe_k Proof of concept code that demonstrates how the Windows kernel suffers from a privilege escalation vulnerability due to a double-fetch in NtQueryInformationThread that leads to an arbitrary...

Elber Wayber Analog/Digital Audio STL 4.00 Authentication Bypass

0
Authored by LiquidWorm | Site zeroscience.mk Elber Wayber Analog/Digital Audio STL version 4.00 suffers from an authentication bypass vulnerability through a direct and unauthorized access to the password management functionality....

Elber ESE DVB-S/S2 Satellite Receiver 1.5.x Authentication Bypass

0
Authored by LiquidWorm | Site zeroscience.mk Elber ESE DVB-S/S2 Satellite Receiver version 1.5.x suffers from an authentication bypass vulnerability through a direct and unauthorized access to the password management functionality....

Packet Storm New Exploits For April, 2024

Authored by Todd J. | Site packetstormsecurity.com This archive contains all of the 132 exploits added to Packet Storm in April, 2024.

Windows PspBuildCreateProcessContext Double-Fetch / Buffer Overflow

Authored by gabe_k Proof of concept code that demonstrates how the Windows kernel suffers from a privilege escalation vulnerability due to a double-fetch in PspBuildCreateProcessContext that leads to a stack...

Online Tours And Travels Management System 1.0 SQL Injection

Authored by nu11secur1ty Online Tours and Travels Management System version 1.0 suffers from a remote SQL injection vulnerability. Change Mirror Download ## Titles: Travel-Manager-OTMSP-1.0 Multiple SQLi## Author: nu11secur1ty## Date: 05/01/2024## Vendor: https://mayurik.com/##...
Error decoding the Instagram API json