Live-Hack-CVE/CVE-2019-12181 A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux. CVE project by @Sn0wAlice Create: 2023-01-31 01:30:45 +0000 UTC Push: 2023-01-31 01:30:48 +0000 UTC |

Live-Hack-CVE/CVE-2017-1107 IBM Marketing Platform 9.1.0, 9.1.2, 10.0, and 10.1 exposes sensitive information in the headers that could be used by an authenticated attacker in further attacks against the system. IBM X-Force ID: 120906. CVE project by @Sn0wAlice Create: 2023-01-31 01:30:41 +0000 UTC Push: 2023-01-31 01:30:44 +0000 UTC |

Live-Hack-CVE/CVE-2019-4364 IBM Maximo Asset Management 7.6 is vulnerable to CSV injection, which could allow a remote authenticated attacker to execute arbirary commands on the system. IBM X-Force ID: 161680. CVE project by @Sn0wAlice Create: 2023-01-31 01:30:38 +0000 UTC Push: 2023-01-31 01:30:40 +0000 UTC |

Live-Hack-CVE/CVE-2019-4385 IBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect Plus Joblog. This can result in an attacker gaining access to sensitive information as well as vSnap. IBM X-Force ID: 162173. CVE project by @Sn0wAlice Create: 2023-01-31 01:30:33 +0000 UTC Push: 2023-01-31 01:30:36 +0000 UTC |

Live-Hack-CVE/CVE-2019-4384 IBM Campaign 9.1.2 and 10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162172. CVE project by @Sn0wAlice Create: 2023-01-31 01:30:30 +0000 UTC Push: 2023-01-31 01:30:32 +0000 UTC |

Live-Hack-CVE/CVE-2018-3731 public node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any file with known path. CVE project by @Sn0wAlice Create: 2023-01-31 01:30:26 +0000 UTC Push: 2023-01-31 01:30:28 +0000 UTC |

Live-Hack-CVE/CVE-2018-3725 hekto node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any file with known path. CVE project by @Sn0wAlice Create: 2023-01-31 01:30:22 +0000 UTC Push: 2023-01-31 01:30:25 +0000 UTC |

Live-Hack-CVE/CVE-2018-20469 An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A parameter in the web reports module is vulnerable to h2 SQL injection. This can be exploited to inject SQL queries and run standard h2 system functions. CVE project by @Sn0wAlice Create: 2023-01-31 01:30:18 +0000 UTC Push: 2023-01-31 01:30:21 +0000 UTC |

Live-Hack-CVE/CVE-2018-1845 IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150905. CVE project by @Sn0wAlice Create: 2023-01-31 01:30:14 +0000 UTC Push: 2023-01-31 01:30:17 +0000 UTC |

Live-Hack-CVE/CVE-2018-20470 An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal (arbitrary file access) vulnerability exists in the web reports module. This allows an outside attacker to view contents of sensitive files. CVE project by @Sn0wAlice Create: 2023-01-31 01:30:11 +0000 UTC Push: 2023-01-31 01:30:13 +0000 UTC |

Live-Hack-CVE/CVE-2023-0266 A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c CVE project by @Sn0wAlice Create: 2023-01-30 23:20:07 +0000 UTC Push: 2023-01-30 23:20:09 +0000 UTC |

Live-Hack-CVE/CVE-2023-0240 There is a logic error in io_uring's implementation which can be used to trigger a use-after-free vulnerability leading to privilege escalation. In the io_prep_async_work function the assumption that the last io_grab_identity call cannot return false is not true, and in this case the function will use the init_cred or CVE project by @Sn0wAlice Create: 2023-01-30 23:20:03 +0000 UTC Push: 2023-01-30 23:20:05 +0000 UTC |

Live-Hack-CVE/CVE-2022-45788 A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure™ Control Expert (All Versions), EcoStruxur CVE project by @Sn0wAlice Create: 2023-01-30 23:19:58 +0000 UTC Push: 2023-01-30 23:20:01 +0000 UTC |

Live-Hack-CVE/CVE-2023-20007 A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code or cause the web-based management process on the device to restart unexpectedly, resulting in a denial of se CVE project by @Sn0wAlice Create: 2023-01-30 23:19:54 +0000 UTC Push: 2023-01-30 23:19:57 +0000 UTC |

Live-Hack-CVE/CVE-2022-42484 An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability. CVE project by @Sn0wAlice Create: 2023-01-30 22:14:50 +0000 UTC Push: 2023-01-30 22:14:53 +0000 UTC |

Live-Hack-CVE/CVE-2022-38451 A directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability. CVE project by @Sn0wAlice Create: 2023-01-30 22:14:46 +0000 UTC Push: 2023-01-30 22:14:49 +0000 UTC |

Live-Hack-CVE/CVE-2022-2988 A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from the commissioning software. Affected Products: SoMachine HVAC(V2.1.0 and prior), EcoStruxure Machine Expert – HVAC(V1.4.0 and prior). CVE project by @Sn0wAlice Create: 2023-01-30 22:14:41 +0000 UTC Push: 2023-01-30 22:14:45 +0000 UTC |

ATTACKnDEFEND/CVE-2023-24055-POC PowerShell POC for CVE-2023-24055 Create: 2023-01-30 21:22:22 +0000 UTC Push: 2023-02-05 03:42:34 +0000 UTC |

ATTACKnDEFEND/CVE-2023-24055 PowerShell POC for CVE-2023-24055 Create: 2023-01-30 21:22:22 +0000 UTC Push: 2023-02-02 22:59:55 +0000 UTC |

hacksysteam/CVE-2023-21608 Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit Create: 2023-01-30 20:57:48 +0000 UTC Push: 2023-02-02 20:37:35 +0000 UTC |