Exploits & CVE's

Authored by Shubham Pandey Employee Management System version 1.0 suffers from a remote SQL injection vulnerability. Original discovery of this finding is attributed to Ozlem Balci in January of 2024. advisories...

Authored by kai6u Lektor Static CMS version 3.3.10 suffers from an arbitrary file upload vulnerability that can be leveraged to achieve remote code execution. Change Mirror Download # Exploit Title: Lektor static...

Authored by Filip Dragovic Proof of concept exploit for an arbitrary folder move issue in the GamingService component of Xbox. advisories | CVE-2024-2891

Authored by Erik Wynter | Site metasploit.com This Metasploit module exploits built-in functionality in OpenNMS Horizon in order to execute arbitrary commands as the opennms user. For versions 32.0.2 and...

Authored by Scott White Tramyardg Autoexpress version 1.3.0 allows for authentication bypass via unauthenticated API access to admin functionality. This could allow a remote anonymous attacker to delete or update...

Authored by Scott White Tramyardg Autoexpress version 1.3.0 suffers from a persistent cross site scripting vulnerability. advisories | CVE-2023-48903 Change Mirror Download # Exploit Title: tramyardg autoexpress - Stored Cross-Site Scripting (XSS)# Google...

Authored by Michael Baer | Site sec-consult.com Checkmk Agent versions 2.0.0, 2.1.0, and 2.2.0 suffer from a local privilege escalation vulnerability. advisories | CVE-2024-06070 Change Mirror Download SEC Consult Vulnerability Lab Security Advisory...

Authored by SoSPiro Membership Management System version 1.0 suffers from remote shell upload and remote SQL injection vulnerabilities. Change Mirror Download from requests_toolbelt.multipart.encoder import MultipartEncoderimport requestsimport stringimport randomimport os# ========================================================================================================# Application: Membership...

Authored by nu11secur1ty HALO version 2.13.1 has an insecure cross-origin resource sharing setting that allows an arbitrary origin. Change Mirror Download ## Title: HALO-2.13.1 Cross-origin resource sharing: arbitrary origin trusted## Author: nu11secur1ty##...

Authored by Leo Draghi Financials by Coda versions prior to 2023Q4 suffer from a cross site scripting vulnerability. advisories | CVE-2024-28734 Change Mirror Download # Vulnerability type: Cross-site Scripting# Vendor: https://www.unit4.com/# Product: Financials...