mirror of
https://github.com/trickest/cve.git
synced 2026-11-07 12:38:17 -10:00
Update Tue Sep 1 12:04:02 UTC 2026
This commit is contained in:
1 parent
25fa75b24f
commit
bfcf023d9a
140 files changed
+1394
-16
No files matched your search
@@ -10,6 +10,7 @@ The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2009-February/005556.html
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2009-February/005563.html
|
||||
- http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Marlinspike
|
||||
- http://www.vupen.com/english/advisories/2009/1125
|
||||
|
||||
@@ -10,6 +10,7 @@ twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as comman
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
|
||||
- https://issues.jboss.org/browse/JBPAPP-3391?_sscc=t
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ SQL injection vulnerability in the JoomlaBamboo (JB) Simpla Admin template for J
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.org/1001-exploits/joomlabamboo-sql.txt
|
||||
- http://www.exploit-db.com/exploits/10971
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-0317](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0317)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumption, ABEND, and crash) via a large number of malformed or AFP requests that are not properly handled by (1) the CIFS functionality in CIFS.nlm Semantic Agent (Build 163 MP) 3.27 or (2) the AFP functionality in AFPTCP.nlm Build 163 SP 3.27. NOTE: some of these details are obtained from third party information.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/11009
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,7 @@ pam_motd (aka the MOTD module) in libpam-modules before 1.1.0-2ubuntu1.1 in PAM
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/14273
|
||||
- http://www.h-online.com/security/news/item/Ubuntu-closes-root-hole-1034618.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ Cross-site scripting (XSS) vulnerability in guestbook.php in Simple PHP Guestboo
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.org/1001-exploits/simplephpgb-xss.txt
|
||||
- http://www.exploit-db.com/exploits/11077
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ SQL injection vulnerability in index.php in OneCMS 2.5, when magic_quotes_gpc is
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.org/1003-exploits/onecmsv25-sql.txt
|
||||
- http://www.exploit-db.com/exploits/11635
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ SQL injection vulnerability in start.php in Eros Webkatalog allows remote attack
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.org/1003-exploits/eroserotikwebkat-sql.txt
|
||||
- http://www.exploit-db.com/exploits/11689
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ AR Web Content Manager (AWCM) 2.1 stores sensitive information under the web roo
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.org/1001-exploits/awcm-backup.txt
|
||||
- http://www.exploit-db.com/exploits/11025
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Directory traversal vulnerability in index.php in justVisual CMS 2.0, when magic
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.org/1003-exploits/justvisual-lfi.txt
|
||||
- http://www.exploit-db.com/exploits/11876
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-1712](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1712)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and possibly (2) message parameters. NOTE: some of these details are obtained from third party information.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/12323
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ SQL injection vulnerability in auktion.php in Pay Per Watch & Bid Auktions Syste
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.org/1003-exploits/ppwb-sql.txt
|
||||
- http://www.exploit-db.com/exploits/11816
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ SQL injection vulnerability in makale.php in tekno.Portal 0.1b allows remote att
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.org/1005-exploits/teknoportal-sql.txt
|
||||
- http://www.exploit-db.com/exploits/12552
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,7 +10,7 @@ UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 th
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- http://www.exploit-db.com/exploits/13853
|
||||
|
||||
#### Github
|
||||
- https://github.com/0bfxgh0st/cve-2010-2075
|
||||
|
||||
@@ -10,7 +10,7 @@ Directory traversal vulnerability in the JE Quotation Form (com_jequoteform) com
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- http://www.exploit-db.com/exploits/12607
|
||||
|
||||
#### Github
|
||||
- https://github.com/20142995/nuclei-templates
|
||||
|
||||
@@ -11,6 +11,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.org/1001-exploits/ppmvcs-sqlxss.txt
|
||||
- http://www.exploit-db.com/exploits/10983
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ SQL injection vulnerability in index_ie.php in Pay Per Minute Video Chat Script
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.org/1001-exploits/ppmvcs-sqlxss.txt
|
||||
- http://www.exploit-db.com/exploits/10983
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-2312](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2312)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SQL injection vulnerability in index.php in HauntmAx Haunted House Directory Listing CMS allows remote attackers to execute arbitrary SQL commands via the state parameter in a listings action.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/13784
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Buffer overflow in Rosoft Audio Converter 4.4.4 allows remote attackers to execu
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.org/1006-exploits/rosoft444-overflow.txt
|
||||
- http://www.exploit-db.com/exploits/13895
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-2623](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2623)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute arbitrary SQL commands via the pp_id parameter.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/14144
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-2719](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2719)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SQL injection vulnerability in show.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/14199
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ SQL injection vulnerability in the Golf Course Guide (com_golfcourseguide) compo
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.org/1007-exploits/joomlagolfcourseguide-sql.txt
|
||||
- http://www.exploit-db.com/exploits/14448
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ SQL injection vulnerability in index.php in Tycoon Baseball Script 1.0.9 allows
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.org/1008-exploits/tycoonrecord-sql.txt
|
||||
- http://www.exploit-db.com/exploits/14572
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-3126](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3126)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
Untrusted search path vulnerability in avast! Free Antivirus version 5.0.594 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc90loc.dll that is located in the same folder as an avast license (.avastlic) file.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/14743
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microso
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/14765
|
||||
- http://www.exploit-db.com/exploits/14788
|
||||
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4956.php
|
||||
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-014
|
||||
|
||||
|
||||
@@ -10,7 +10,7 @@ Untrusted search path vulnerability in Microsoft Windows Internet Communication
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- http://www.exploit-db.com/exploits/14780
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cve-scores
|
||||
|
||||
@@ -11,6 +11,7 @@ Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple D
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.org/1009-exploits/essimpledownload-lfi.txt
|
||||
- http://www.exploit-db.com/exploits/14960
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,7 +10,9 @@ Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/15341
|
||||
- http://www.exploit-db.com/exploits/15342
|
||||
- http://www.exploit-db.com/exploits/15352
|
||||
- http://www.ubuntu.com/usn/USN-1011-2
|
||||
- https://bugzilla.mozilla.org/show_bug.cgi?id=607222
|
||||
- https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53
|
||||
|
||||
@@ -10,7 +10,7 @@ The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- http://www.exploit-db.com/exploits/15774/
|
||||
|
||||
#### Github
|
||||
- https://github.com/0xTo/linux-kernel-exploits
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-4366](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4366)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
Multiple cross-site scripting (XSS) vulnerabilities in forum_new_topic.php in Chameleon Social Networking allow remote attackers to inject arbitrary web script or HTML via the (1) thread_title and (2) thread_description parameters in a message.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/15543
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-4598](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4598)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file_name parameter in an open request.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/15802
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-4876](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4876)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute arbitrary SQL commands via the postID parameter.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/14849
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote at
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.org/1009-exploits/ablog-sql.txt
|
||||
- http://www.exploit-db.com/exploits/14894
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-4929](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4929)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SQL injection vulnerability in the Joostina (com_ezautos) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the firstCode parameter in a helpers action to index.php.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/15085
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-4944](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4944)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/15100
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 a
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.org/1007-exploits/reservelogic-sql.txt
|
||||
- http://www.exploit-db.com/exploits/14163
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2010-5239](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5239)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users to gain privileges via a Trojan horse mfc80loc.dll file in the current working directory, as demonstrated by a directory that contains a .mds file. NOTE: some of these details are obtained from third party information.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/14791/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to exec
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/125723/MicroP-0.1.1.1600-Buffer-Overflow.html
|
||||
- http://www.exploit-db.com/exploits/14720
|
||||
- http://www.exploit-db.com/exploits/17502
|
||||
- http://www.exploit-db.com/exploits/32261
|
||||
|
||||
|
||||
@@ -10,7 +10,7 @@ Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute ar
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- http://www.exploit-db.com/exploits/15834
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cvemon
|
||||
|
||||
@@ -10,6 +10,7 @@ The W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) com
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
|
||||
- http://rhn.redhat.com/errata/RHSA-2013-1437.html
|
||||
- http://www.csoonline.com/article/692366/widely-used-encryption-standard-is-insecure-say-experts
|
||||
|
||||
|
||||
@@ -12,7 +12,7 @@ The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/Live-Hack-CVE/CVE-2011-2487
|
||||
|
||||
@@ -10,6 +10,7 @@ VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x be
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
|
||||
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-2908](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2908)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that perform operations on MBeans and possibly execute arbitrary code via unspecified vectors.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2011-4575](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4575)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
Cross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,7 @@ The NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
|
||||
- https://issues.jboss.org/browse/JBCACHE-1612
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBos
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
|
||||
- http://www.exploit-db.com/exploits/30211
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2012-2377](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2377)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,7 +10,7 @@ Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/n0-traces/cve_monitor
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2012-3369](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3369)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to gain privileges of the previous user via a null password, which causes the previous user's password to be used.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2012-3370](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3370)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
The SecurityAssociation.getCredential method in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 returns the credentials of the previous user when a security context is not provided, which allows remote attackers to gain privileges as other users.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,7 +10,7 @@ org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cve-scores
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2012-5478](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5478)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and perform arbitrary JMX operations via unspecified vectors.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,7 @@ The default configuration in Elasticsearch before 1.2 enables dynamic scripting,
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/33370
|
||||
- https://www.elastic.co/blog/logstash-1-4-3-released
|
||||
- https://www.elastic.co/community/security/
|
||||
|
||||
|
||||
@@ -11,6 +11,7 @@ The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows
|
||||
|
||||
#### Reference
|
||||
- https://devicereversing.wordpress.com/2016/11/07/eirs-d1000-modem-is-wide-open-to-being-hacked/
|
||||
- https://ghostbin.com/paste/q2vq2
|
||||
- https://isc.sans.edu/forums/diary/TR069+NewNTPServer+Exploits+What+we+know+so+far/21763/
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ MVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contai
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://blog.netlab.360.com/iot_reaper-a-rappid-spreading-new-iot-botnet-en/
|
||||
- https://www.exploit-db.com/exploits/41471
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,7 +10,7 @@ An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Serie
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://ghostbin.com/paste/q2vq2
|
||||
|
||||
#### Github
|
||||
- https://github.com/1f3lse/taiE
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2017-7923](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7923)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The password in configuration file vulnerability could allow a malicious user to escalate privileges or assume the identity of another user and access sensitive information.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://ghostbin.com/paste/q2vq2
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,7 @@ PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows loca
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.uvnc.eu/download/pchw2/PCHelpWareV2.msi
|
||||
- https://www.exploit-db.com/exploits/46708
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows loca
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.uvnc.eu/download/pchw2/PCHelpWareV2.msi
|
||||
- https://www.exploit-db.com/exploits/46709
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2023-42179](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42179)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, password validation process.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/johndoe31415/doorbird-kdf-vulnerability
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -6,6 +6,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -18,6 +18,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -9,6 +9,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -7,6 +7,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -14,6 +14,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -18,6 +18,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -21,6 +21,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -20,6 +20,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -21,6 +21,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -14,6 +14,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -1,11 +1,11 @@
|
||||
### [CVE-2025-53811](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53811)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Mosh-Pro TCC (Transparency, Consent, and Control) permissions. Acquired resource access is limited to previously granted permissions by the user. Accessing other resources beyond previously granted TCC permissions will prompt the user for approval in the name of Mosh-Pro, potentially disguising attacker's malicious intent. This issue was detected in 1.3.2 version of Mosh-Pro. Since authors did not respond to messages from CNA, patching status is unknown.
|
||||
The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Mosh-Pro TCC (Transparency, Consent, and Control) permissions. Acquired resource access is limited to previously granted permissions by the user. Accessing other resources beyond previously granted TCC permissions will prompt the user for approval in the name of Mosh-Pro, potentially disguising attacker's malicious intent. This issue was fixed in 1.3.7 version of Mosh-Pro.
|
||||
|
||||
### POC
|
||||
|
||||
|
||||
@@ -20,6 +20,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -8,6 +8,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -19,6 +19,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -21,6 +21,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -14,6 +14,7 @@ In TOTOLINK X15 1.0.0-B20230714.1105 wurde eine kritische Schwachstelle gefunden
|
||||
#### Reference
|
||||
- https://github.com/panda666-888/vuls/blob/main/totolink/x15/formFilter_ip6addr.md
|
||||
- https://github.com/panda666-888/vuls/blob/main/totolink/x15/formFilter_url.md
|
||||
- https://vuldb.com/?ctiid.317830
|
||||
- https://vuldb.com/?submit.622665
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -5,7 +5,7 @@
|
||||
|
||||
### Description
|
||||
|
||||
The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database.
|
||||
The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database.
|
||||
|
||||
### POC
|
||||
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-13214](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13214)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp_j.c contains a stack buffer overflow in parse_getconfig_msg(). When handling a GetConfiguration request from the central system, the handler copied the attacker-controlled JSON "key" string into the caller's fixed 50-byte stack buffer (skey[CISTR50], declared in subsys/net/lib/ocpp/ocpp.c) using an unbounded strcpy(). The parsed key value points directly into the receive buffer, so its length is bounded only by the message size (CONFIG_OCPP_RECV_BUFFER_SIZE, default 2048).The GetConfiguration message is delivered over the WebSocket connection that the charge point opens to its configured central system. The reader thread ocpp_wsreader() reads the message into ui->recv_buf and dispatches it to parse_getconfig_msg() via the PDU function table. An attacker who controls the central system endpoint, or a man-in-the-middle on an unencrypted connection, can send a GetConfiguration request whose "key" field exceeds 50 bytes and overflow the reader thread's stack with attacker-chosen bytes.The consequence is a remotely triggerable stack smash on the OCPP reader thread: at minimum a denial of service, and plausibly remote code execution depending on build-time hardening such as stack canaries and MPU configuration. The fix replaces the strcpy() with a bounded strncpy(key, payload.key[0], CISTR50 - 1) followed by explicit NUL termination, matching the bounded copies already used by the sibling handlers.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fqhf-6v24-4px2
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ A vulnerability was identified in seladb PcapPlusPlus 25.05. This affects the fu
|
||||
|
||||
#### Reference
|
||||
- https://github.com/seladb/PcapPlusPlus/issues/2152
|
||||
- https://github.com/user-attachments/files/28214571/poc.zip
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-13611](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13611)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
The KiviCare WordPress plugin before 4.5.5 does not perform authorization checks on some of its REST endpoints, allowing unauthenticated attackers to disclose the patient roster and, when a payment gateway is configured, the payment gateway secret key.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/b3f986c8-fa7f-4115-9f33-7e74180256f1/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
### [CVE-2026-14380](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14380)
|
||||

|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
@@ -18,6 +18,7 @@ A security flaw has been discovered in radareorg radare2 up to 6.1.6. This impac
|
||||
|
||||
#### Reference
|
||||
- https://github.com/radareorg/radare2/issues/26047
|
||||
- https://vuldb.com/submit/850386
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -20,6 +20,8 @@ A vulnerability has been found in Leantime up to 3.8.0. This impacts the functio
|
||||
|
||||
#### Reference
|
||||
- https://bytium.com/insights/leantime-priv-escalation-vulnerability-low-priv-to-owner
|
||||
- https://vuldb.com/vuln/377838
|
||||
- https://vuldb.com/vuln/377838/cti
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
|
||||
@@ -5,7 +5,7 @@
|
||||
|
||||
### Description
|
||||
|
||||
OpenMetadata is a unified metadata platform. Versions prior to 1.11.4 are vulnerable to remote code execution via Server-Side Template Injection (SSTI) in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerability. Version 1.11.4 contains a patch.
|
||||
OpenMetadata is a unified metadata platform. Versions 1.5.0 through 1.11.3 are vulnerable to remote code execution via Server-Side Template Injection (SSTI) in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerability. Version 1.11.4 contains a patch.
|
||||
|
||||
### POC
|
||||
|
||||
|
||||
@@ -14,6 +14,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -23,6 +23,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -7,7 +7,7 @@
|
||||
|
||||
### Description
|
||||
|
||||
LMDeploy is a toolkit for compressing, deploying, and serving large language models. In versions 0.12.3 and prior, hardcoded "trust_remote_code=True" enables HF supply-chain RCE without user opt-in. At time of publication, there are no publicly available patches.
|
||||
LMDeploy is a toolkit for compressing, deploying, and serving large language models. In versions 0.12.3 and prior, hardcoded "trust_remote_code=True" enables HF supply-chain RCE without user opt-in. Version 0.13.0 patches the issue.
|
||||
|
||||
### POC
|
||||
|
||||
|
||||
@@ -22,6 +22,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -1,4 +1,5 @@
|
||||
### [CVE-2026-56211](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56211)
|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
@@ -0,0 +1,28 @@
|
||||
### [CVE-2026-5680](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5680)
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer() method using exponential doubling, resulting in a Denial of Service (DoS) for the affected application.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://bugzilla.redhat.com/show_bug.cgi?id=2455350
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -1,11 +1,12 @@
|
||||
### [CVE-2026-5704](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5704)
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
@@ -4,6 +4,7 @@
|
||||

|
||||

|
||||

|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
|
||||
|
||||
@@ -12,6 +12,7 @@ PasswordPusher versions v1.45.11 through v2.9.5 contain an improper authorizatio
|
||||
|
||||
#### Reference
|
||||
- https://github.com/pglombardo/PasswordPusher/security/advisories/GHSA-jf2m-hpj9-4qx2
|
||||
- https://tpaidakis.com/writeups/passwordpusher-nil-authorization/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of c
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/PHPCSStandards/PHP_CodeSniffer/commit/7a3a6bbf153a03fa3a9413afc60bded6b764e76b
|
||||
- https://github.com/PHPCSStandards/PHP_CodeSniffer/pull/1473
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-74916](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74916)
|
||||

|
||||

|
||||

|
||||
|
||||
### Description
|
||||
|
||||
The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from, the clean URL's cache entry to every subsequent visitor.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/b6f8be96-13d9-497a-8e57-5a65b519958b/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-75132](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-75132)
|
||||

|
||||

|
||||

|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the `columns` parameter of the GET `/api/v3/hosts` endpoint. A remote authenticated user with read-only privileges can inject arbitrary PostgreSQL expressions into the SQL query constructed by WAPT. By exploiting the injection point, an attacker can inject additional PostgreSQL statements, bypass the host scope restrictions applied to the account, and read information from other rows or tables within the database.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.wapt.fr/en/doc/wapt-changelog.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
Loaded 100 of 140 files, more files were not shown because too many files have changed in this diff.
Show more
Reference in new issue
Block a user