CVE-2024-9935

The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.5 via the rtw_pgaepb_dwnld_pdf() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.

Github link:
https://github.com/verylazytech/CVE-2024-9935

CVE-2019-15107

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.

Github link:
https://github.com/MasterCode112/CVE-2019-15107

CVE-2024-54262

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-54262

CVE-2024-12025

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-12025

CVE-2024-53476

None

Github link:
https://github.com/AbdullahAlmutawa/CVE-2024-53476

CVE-2024-50944

None

Github link:
https://github.com/AbdullahAlmutawa/CVE-2024-50944

CVE-2022-32981

None

Github link:
https://github.com/SpiralBL0CK/CVE-2022-32981

CVE-2024-35176

None

Github link:
https://github.com/SpiralBL0CK/CVE-2024-35176

CVE-2024-39908

None

Github link:
https://github.com/SpiralBL0CK/CVE-2024-39908

CVE-2024-50379

None

Github link:
https://github.com/iSee857/CVE-2024-50379-PoC

CVE-2024-50379

None

Github link:
https://github.com/JFOZ1010/Nuclei-Template-CVE-2024-50379

CVE-2024-56145

None

Github link:
https://github.com/Chocapikk/CVE-2024-56145

CVE-2024-50945

None

Github link:
https://github.com/AbdullahAlmutawa/CVE-2024-50945

CVE-2024-40348

An issue in the component /api/swaggerui/static of Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal.

Github link:
https://github.com/NingXin2002/Bazaar_poc

CVE-2024-41319

None

Github link:
https://github.com/NingXin2002/TOTOLINK_poc

CVE-2024-27956

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0.



Github link:
https://github.com/7aRanchi/CVE-2024-27956-for-fscan

CVE-2023-45866

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

Github link:
https://github.com/xG3nesis/RustyInjector

CVE-2024-7954

The porte_plume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request.

Github link:
https://github.com/zxj-hub/CVE-2024-7954POC

CVE-2024-50379

None

Github link:
https://github.com/Alchemist3dot14/CVE-2024-50379

CVE-2024-27292

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the master branch.

Github link:
https://github.com/NingXin2002/Docassemble_poc