Dorks List7d
SmartAgent 1.1.0 Server-Side Request Forgery
# Exploit Title: SmartAgent v1.1.0 - Server-Side Request Forgery (SSRF) # Date: 01-10-2024 # Exploit Author: Alter Prime # Vendor Homepage: https://smarts-srlcom.com ...
Dorks List7d
Xlibre Xnest 24.1.0 / 24.2.0 Buffer Overflow
XLibre project security advisory ----- As Xlibre Xnest is based on Xorg, it is affected by some security issues which recently became known in Xorg: CVE-2024-9632: can be triggered by providing a ...
Dorks List7d
SmartAgent 1.1.0 Remote Code Execution
# Exploit Title: SmartAgent v1.1.0 - Unauthenticated Remote Code Execution # Date: 01-10-2024 # Exploit Author: Alter Prime # Vendor Homepage: https://smarts-srlcom ...
Dorks List11d
Booked Scheduler 2.8.5 Cross Site Scripting / Open Redirection
# Exploit Title: Open Redirect / Reflected XSS - booked-schedulerv2.8.5 # Date: 10/2024 # Exploit Author: Andrey Stoykov # Version: 2.8.5 # Tested on: Ubuntu 22.04 ...
Dorks List7d
SmartAgent 1.1.0 SQL Injection
# Exploit Title: SmartAgent v1.1.0 - Unauthenticated SQL Injection (SQLi) # Date: 01-10-2024 # Exploit Author: Alter Prime # Vendor Homepage: https://smarts-srlcom ...
Dorks List24d
Vulnerability CVE-2024-9263
The WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin plugin for WordPress is vulnerable to Account Takeover/Privilege Escalation via Insecure Direct Object Reference ...
Dorks List29d
Vulnerability CVE-2024-45397
h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. When an HTTP request using TLS/1.3 early data on top of TCP Fast Open or QUIC 0-RTT packets is received and the IP-address-based ...
Dorks List25d
Vulnerability CVE-2024-9977
A vulnerability, which was classified as critical, was found in MitraStar GPT-2541GNAC BR_g5.6_1.11(WVK.0)b26. Affected is an unknown function of the file /cgi-bin/settings-firewall.cgi of the ...
Dorks List25d
Vulnerability CVE-2024-9521
https://www.wordfence.com/threat-intel/vulnerabilities/id/17457ff2-917d-4cc4-8c5e-c80cd320cc90?source=cve https://plugins.trac.wordpress.org/browser/seo-manager/trunk ...
Dorks List22d
Vulnerability CVE-2024-10080
The WP Easy Post Types plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post meta in versions up to, and including, 1.4.4 due to insufficient input sanitization and output ...
Dorks List22d
Vulnerability CVE-2024-10131
The `add_llm` function in `llm_app.py` in infiniflow/ragflow version 0.11.0 contains a remote code execution (RCE) vulnerability. The function uses user-supplied input `req['llm_factory']` and ...