CVE-2024-38077 Description: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability Link: Visit the GitHub Repository Language: C++ Owner: Accord96 Stars: 0 Forks: 0
CVE-2024-41570 Description: An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server. Link: Visit the GitHub Repository Language: Python Owner: thisisveryfunny Stars: 1 Forks: 0
CVE-2021-40438 Description: A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. Link: Visit the GitHub Repository Language: Python Owner: element-security Stars: 1 Forks: 0
CVE-2024-41570 Description: An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server. Link: Visit the GitHub Repository Language: Python Owner: kit4py Stars: 1 Forks: 0
CVE-2022-0847 Description: A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this
CVE-2024-41570 Description: An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server. Link: Visit the GitHub Repository Language: Python Owner: sebr-dev Stars: 0 Forks: 0
CVE-2024-43998 Description: Missing Authorization vulnerability in WebsiteinWP Blogpoet allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blogpoet: from n/a through 1.0.3. Link: Visit the GitHub Repository Language: Python Owner: Nxploited Stars: 0 Forks: 0
CVE-2024-9796 Description: The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and escape the t parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks Link: Visit the GitHub Repository Language: PHP Owner: viniciuslazzari Stars: 0 Forks: 0
CVE-2024-41570 Description: An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server. Link: Visit the GitHub Repository Language: Python Owner: HimmeL-Byte Stars: 4 Forks: 1
CVE-2024-6387 Description: A signal handler race condition was found in OpenSSH's server (sshd), where a client does not authenticate within LoginGraceTime seconds (120 by default, 600 in old OpenSSH versions), then sshd's SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not